Add dependabot checks for v3-0-test branch

[potiuk]

https://lists.apache.org/thread/d5lx8s5972r69o34zsg9rmjb2mcoyqdc

---

^ Add meaningful description above
Read the Pull Request Guidelines for more information.
In case of fundamental code changes, an Airflow Improvement Proposal (AIP) is needed.
In case of a new dependency, check compliance with the ASF 3rd Party License Policy.
In case of backwards incompatible changes please leave a note in a newsfragment file, named {pr_number}.significant.rst or {issue_number}.significant.rst, in airflow-core/newsfragments.

[kaxil]

Worth adding a link to private discussion as PR description so we know the context when if/when we look back at this PR and wonder why we added this!

[potiuk]

Worth adding a link to private discussion as PR description so we know the context when if/when we look back at this PR and wonder why we added this!

The discussion is private for now :). I'd hate to link a link that will be unreachable for most ... But I will add a link to the devlist announcement / follow-up after we agree in PMC/Security team about more proactive security process.

[kaxil]

Worth adding a link to private discussion as PR description so we know the context when if/when we look back at this PR and wonder why we added this!

The discussion is private for now :). I'd hate to link a link that will be unreachable for most ... But I will add a link to the devlist announcement / follow-up after we agree in PMC/Security team about more proactive security process.

I know but still worth adding. More for future us than anyone else. Private link is still better than empty description :)

You can replace it with the public one when it is added to public devlist

[potiuk]

Sure: here it is - https://lists.apache.org/thread/hwzhbn3tsdz51b4yfcdv3zzy2wkwotdk

[github-actions]

Backport successfully created: v3-0-test

Status	Branch	Result
✅	v3-0-test

[gopidesupavan]

Nice :) thanks for adding.

[gopidesupavan]

One main advantage with dependaboat i see always is it checks selected package against any security vulnerabilities in security advisory :)

[potiuk]

One main advantage with dependaboat i see always is it checks selected package against any security vulnerabilities in security advisory :)

Yep.