Upgrade to GitHub-native Dependabot

[dependabot-preview]

Dependabot Preview will be shut down on August 3rd, 2021. In order to keep getting Dependabot updates, please merge this PR and migrate to GitHub-native Dependabot before then.

Dependabot has been fully integrated into GitHub, so you no longer have to install and manage a separate app. This pull request updates your config file to the new syntax. When merged, we'll swap out dependabot-preview (me) for a new dependabot app, and you'll be all set!

With this change, you'll now use the Dependabot page in GitHub, rather than the Dependabot dashboard, to monitor your version updates, and you'll configure Dependabot through the new config file rather than a UI.

Your account is using config variables to access private registries. Relevant registries have been included in the new config file but additional steps may be necessary to complete the setup.
Ensure that each secret below has been configured in the organization Dependabot secrets or the repository Dependabot secrets by an admin.

• PYTHON_INDEX_WORKIVAEAST_JFROG_IO_WORKIVAEAST_API_PYPI_PYPI_PROD_USERNAME
• PYTHON_INDEX_WORKIVAEAST_JFROG_IO_WORKIVAEAST_API_PYPI_PYPI_PROD_PASSWORD

If an included registry is not required by this repository you can remove it from the config file.

If you've got any questions or feedback for us, please let us know by creating an issue in the dependabot/dependabot-core repository.

Learn more about migrating to GitHub-native Dependabot

Please note that regular @dependabot commands do not work on this pull request.

[aviary-wf]

Security Insights

(1) Vulnerable direct dependencies were detected

1 vulns in pyyaml < 5.4 via requirements.txt

Action Items

• Review dependencies for available updates
• See this Splunk dashboard for more CVE details
• Review PR for security impact; comment "security review required" if needed or unsure
• Verify aviary.yaml coverage of security relevant code

---

Questions or Comments? Reach out on Slack: #support-infosec.

[dependabot-preview]

As a reminder, Dependabot Preview will be shut down on August 3rd, 2021. You can merge this pull request to migrate to GitHub-native Dependabot. You can read the docs to learn more about what's changing, as well as find out how to get support if you need help migrating.