ci(dependabot): enable auto poetry updates (#463)

* ci(dependabot): enable auto poetry lock updates

* monthly sched; group minor + patch updates

Co-Authored-By: Ken Brewer <kenibrewer@users.noreply.github.com>

---------

Co-authored-by: Ken Brewer <kenibrewer@users.noreply.github.com>

.github/dependabot.yml

@@ -20,3 +20,18 @@ updates:
     schedule:
       # Check for updates to GitHub Actions every week
       interval: "weekly"
+  # Perform checks and updates for python poetry environment.
+  # See here for more information:
+  # https://docs.github.com/en/code-security/dependabot/dependabot-version-updates/configuration-options-for-the-dependabot.yml-file#pip-and-pip-compile
+  - package-ecosystem: "pip"
+    directory: "/"
+    schedule:
+      # Check for updates to poetry lockfile every week
+      interval: "monthly"
+    groups:
+      python-packages:
+        patterns:
+          - "*"
+        update-types:
+          - "minor"
+          - "patch"