Update ci and dependabot config

[cpanato]

What this PR does / why we need it:

• update dependabot config
• apply best practices and update actions

cc @richardcase

Which issue(s) this PR fixes (optional, in fixes #<issue number>(, fixes #<issue_number>, ...) format, will close the issue(s) when PR gets merged):
Fixes #866

Special notes for your reviewer:

Checklist:

• squashed commits into logical changes
• includes documentation
• adds unit tests
• adds or updates e2e tests

[richardcase]

Thanks @cpanato , this is great

[cpanato]

@richardcase rebased PTAL

[richardcase]

LGTM....very much appreciated.

[cpanato]

LGTM....very much appreciated.

i will check other things in this repo and move to the others :)

[richardcase]

i will check other things in this repo and move to the others :)

Thanks @cpanato . I'm going to re-open a bunch of issues as well because the stale bot workflow closed them.