Create dependabot.yml

[forgodtosave]

I noticed that you don't use a dependabot or the like. I simply created a dependabot.yml that checks for updates weekly.

[kunzef]

I think it would also make sense to add github-actions to be also checked for dependency updates by dependabot when one is already adding it.

To do this simply add the code below to the dependabot.yml file.

- package-ecosystem: "github-actions"
    directory: "/" # checks for workflow files in .github/workflows
    schedule:
      interval: "weekly"

[Technius]

I'm skeptical that this would be useful for this specific repository. The dependencies are pinned because not every version of mkdocs is compatible with mkdocs publishing action, and updates to mkdocs would also require potential changes to the macros and page templates that we've written.