Setup depfu to keep dependencies up to date about joule-extension

[wbobeirne]

Hey @bumi thanks for this and the PR. My attitude about dependencies is to try and only upgrade them for security vulnerabilities (Which I had Snyk setup to monitor, but it looks like I've fallen behind on a few) or if there's a particular bugfix or feature from a new version I find I need.

Were there any particular packages you felt would be worth upgrading for new features (e.g. antd) or were you hoping to just keep all of them up to date?

[bumi]

ah I see. I was just trying to keep them up to date as I feel it gets harder to update the more out of date they are. And at some point older versions also don't get security updates anymore.

[wbobeirne]

We're all up to date now and I'm gonna keep dependabot going for important updates.