Fix Dependabot timing out

[romaricpascal]

What

Restore Dependabot's ability to update our dependencies, as our dependabot builds have been timing out lately.

We're in touch with GitHub support which suggested looking into Dependabot's option, especially its allow and ignore parameters, to limit the packages being updated.

Before we look into it, we've asked more details about the 39min gap at the end of Dependabot's log, which make it look like something is stuck rather than us having too many things to update.

Why

Dependabot not running means we're no longer keeping up to date with our dependencies. As the library we ship is dependency free and our tooling is OK for now, this doesn't stop us from working or releasing but the longer Dependabot remains stuck, the more work we'll have to get back up to date once it's unblocked.

Who needs to work on this

Developers

Who needs to review this

Developers

Done when

• Our dependencies are updated again by Dependabot

[romaricpascal]

Further discussions with GitHub support got us pointed to running Dependabot on Actions

[patrickpatrickpatrick]

It seems like #4999 fixed the issue. I suppose that Dependabot shouldn't just hang forever if it encounters an error like this, so it might still be worth talking to Github Support about that. That's probably a separate task though since this immediate problem has been resolved, so it is safe to close this issue @romaricpascal ?

[romaricpascal]

I think it's fine to close given we have #4853 to nudge us to upgrade to the new syntax for ESLint plugins. I'll add a note on that one to remember to re-enable updates of ESLint once we've done that 😊