Add dependabot

[NobodyXu]

Signed-off-by: Jiahao XU Jiahao_XU@outlook.com

[Nemo157]

In my experience dependabot is not useful for libraries, and results in a lot of overhead as it creates PR after PR (I see far too many repos on github with dozens of open dependabot PRs).

There is one thing I think could be useful in this space, being notified on new major versions of dependencies; but that doesn't appear to be something dependabot supports.

[NobodyXu]

I've used dependabot on other library crates such as openssh and it only generates a PR on new major ver of dependencies.

[Nemo157]

Interesting, maybe they changed that behavior since merging into github.

Could you add rebase-strategy: "disabled" as the unnecessary rebasing it does doesn't work well with bors; then I'll give it a test.

[NobodyXu]

Interesting, maybe they changed that behavior since merging into github.

Could you add rebase-strategy: "disabled" as the unnecessary rebasing it does doesn't work well with bors; then I'll give it a test.

@Nemo157 Done!

[Nemo157]

bors r+

[bors]

Build succeeded:

• cargo clippy
• cargo deny bans licenses sources
• cargo doc --cfg docsrs
• cargo fmt --check
• cargo hack check --all-targets --feature-powerset
• cargo hack check --feature-powerset
• cargo test
• cargo test --shallow-minimal-versions
• cargo test (stable, i686-pc-windows-msvc, windows-latest)
• cargo test (stable, i686-unknown-linux-gnu, ubuntu-latest)
• cargo test (stable, x86_64-apple-darwin, macos-latest)
• cargo test (stable, x86_64-pc-windows-msvc, windows-latest)
• cargo test (stable, x86_64-unknown-linux-gnu, ubuntu-latest)