https://docs.github.com/en/code-security/dependabot/dependabot-version-updates/about-dependabot-version-updates#supported-repositories-and-ecosystems In future this will keep the Gemfile.lock up to date
Set for GitHub Actions to check for update everyday. When you add or update the dependabot.yml file, this triggers an immediate check for version updates. Any options that also affect security updates are used the next time a security alert triggers a pull request for a security update. https://docs.github.com/en/github/administering-a-repository/configuration-options-for-dependency-updates