Update dependabot.yml file naming information to include the .yaml extension

[DanGM96]

Clarified that the dependabot configuration file can be named dependabot.yaml in addition to dependabot.yml.

References:

• Consider allowing to use .yaml instead of .yml as file extension dependabot/feedback#874
• https://github.com/yaml/go-yaml/blob/main/.github/dependabot.yaml

Why:

In practice this has been possible for many years and the documentation does not reflect it.
Resulting in AI chats such as Copilot denying the possibility of using the .yaml extension.

What's being changed:

Just a minor part of the documentation, although it could be more explicit and added in other places, it should allow for Search Engines and AI Bots to reach the information.

Check off the following:

• A subject matter expert (SME) has reviewed the technical accuracy of the content in this PR. In most cases, the author can be the SME. Open source contributions may require an SME review from GitHub staff.
• The changes in this PR meet the docs fundamentals that are required for all content.
• All CI checks are passing and the changes look good in the review environment.

[github-actions]

How to review these changes 👓

Thank you for your contribution. To review these changes, choose one of the following options:

• Spin up a codespace
• Set up a local development environment

A Hubber will need to deploy your changes internally to review.

Table of review links

Note: Please update the URL for your staging server or codespace.

The table shows the files in the content directory that were changed in this pull request. This helps you review your changes on a staging server. Changes to the data directory are not included in this table.

Source	Review	Production	What Changed
code-security/concepts/supply-chain-security/about-the-dependabot-yml-file.md	fpt ghec ghes@ 3.20 3.19 3.18 3.17 3.16 3.15 3.14	fpt ghec ghes@ 3.20 3.19 3.18 3.17 3.16 3.15 3.14

Key: fpt: Free, Pro, Team; ghec: GitHub Enterprise Cloud; ghes: GitHub Enterprise Server

🤖 This comment is automatically generated.

[Copilot]

Pull request overview

This PR updates the Dependabot configuration documentation to explicitly note that the config file may use the .yaml extension (in addition to .yml), aligning the docs with real-world behavior.

Changes:

• Update the documented config file path to mention .github/dependabot.yaml as an accepted alternative to .github/dependabot.yml.

[Sharra-writes]

@DanGM96 I'll check and make sure there's no reason we aren't documenting this.

[Sharra-writes]

@DanGM96 Got approval on this, so I will merge it once the checks are all passing. 🎉

[github-actions]

Thanks very much for contributing! Your pull request has been merged 🎉 You should see your changes appear on the site in approximately 24 hours. If you're looking for your next contribution, check out our help wanted issues ⚡