Dependabot ignores updates to Go modules that do not have semantic version tags. See: https://github.com/dependabot/dependabot-core/issues/3017. Therefore, this change replaces dependabot with a custom workflow with upgrades Go dependencies using `go get -u ./...` and creates a PR. This PR will be auto-merged using the existing logic for cadobot-generated PRs.