Dependabot is now running on vanilla/vanilla

I finally figured out how to properly configure dependabot and am trying it out on vanilla/vanilla for our PHP dependencies. Expect to see some pull requests like this one.

If you want to enable it for our javascript dependencies, you can make a PR to the config file @Adam Charron. I recommend doing a manual update first though.