Dependabot

Also written: dependabot.yml

A GitHub feature that checks for new versions of actions and packages and opens a pull request for each, so your CI can test the update before you merge.