It looks like dependabot does not support this but there are alternatives mentioned in that issue such as bazel steward and renovatebot.