chore: dependabot config and dependencies bumping

[Uaitt]

In this PR I have updated the versions of all the current dependencies and added the dependabot config

Description

In this PR:

• bump of all the current deps
• new file .github/dependabot.yml

Motivation and Context

How has this been tested?

Screenshots (if appropriate):

Types of changes

• Bug fix (non-breaking change which fixes an issue)
• New feature (non-breaking change which adds functionality)
• Breaking change (fix or feature that would cause existing functionality to not work as expected)

Checklist:

• My code follows the code style of this project.
• My change requires a change to the documentation.
• I have updated the documentation accordingly.