Suggestion: activate dependabot #110

Dependabot is awesome and will automatically bump versions of required dependencies, open a PR and trigger a CI loop to test that everything is still working. I use it in my open source projects. @ziatdinovmax what do you think?

Note this is dependent on #107 since we can only have dependencies in either the requirements or pyproject file.