Standardize .github configuration

[glenn-jocher]

Aligns .github with the current Ultralytics repository standard.

• Add dependabot.yml for weekly GitHub Actions version updates
• Quote python-version in push.yml so it is read as a string

🛠️ PR Summary

_{Made with ❤️ by Ultralytics Actions}

🌟 Summary

Standardized GitHub configuration by adding weekly Dependabot checks for GitHub Actions and ensuring the workflow’s Python version is treated as a string.

📊 Key Changes

• Added .github/dependabot.yml to check for GitHub Actions updates weekly at 04:00.
• Limited Dependabot to five open pull requests and applied the dependencies label.
• Quoted python-version: "3.12" in .github/workflows/push.yml.

🎯 Purpose & Impact

• GitHub Actions dependency updates can now be raised automatically through Dependabot.
• The push workflow explicitly passes Python 3.12 as a string to actions/setup-python.
• No runtime application behavior changed.

[UltralyticsAssistant]

👋 Hello @glenn-jocher, thank you for submitting a ultralytics/replicate 🚀 PR! This automated message confirms your contribution was received, and an Ultralytics engineer will assist with the review. To ensure a seamless integration of your work, please review the following checklist:

• ✅ Define a Purpose: Clearly explain the purpose of your fix or feature in your PR description, and link to any relevant issues. Ensure your commit messages are clear, concise, and adhere to the project's conventions.
• ✅ Synchronize with Source: Confirm your PR is synchronized with the ultralytics/replicate main branch. If it's behind, update it by clicking the 'Update branch' button or by running git pull and git merge main locally.
• ✅ Ensure CI Checks Pass: Verify all Ultralytics Continuous Integration (CI) checks are passing. If any checks fail, please address the issues.
• ✅ Update Documentation: Update the relevant documentation for any new or modified features.
• ✅ Add Tests: If applicable, include or update tests to cover your changes, and confirm that all tests are passing.
• ✅ Sign the CLA: Please ensure you have signed our Contributor License Agreement if this is your first Ultralytics PR by writing "I have read the CLA Document and I sign the CLA" in a new message.
• ✅ Minimize Changes: Limit your changes to the minimum necessary for your bug fix or feature addition. "It is not daily increase but daily decrease, hack away the unessential. The closer to the source, the less wastage there is." — Bruce Lee

For more guidance, please refer to our Contributing Guide. Don't hesitate to leave a comment if you have any questions. Thank you for contributing to Ultralytics! 🚀

[UltralyticsAssistant]

🔍 PR Review

_{Made with ❤️ by Ultralytics Actions}

Reviewed the complete diff in .github/dependabot.yml and .github/workflows/push.yml. The Dependabot configuration is valid for weekly GitHub Actions updates, and quoting python-version preserves the intended string value. LGTM.

[UltralyticsAssistant]

🎉 This PR has been merged—thank you, @glenn-jocher!

“Great things are done by a series of small things brought together.” — Vincent van Gogh

Your focused updates standardize GitHub configuration with weekly Dependabot checks, a five-PR limit, dependencies labeling, and an explicitly quoted Python 3.12 version. These changes support consistent workflow maintenance without changing runtime application behavior.