chore: let Dependabot keep GitHub Actions up to date

[erwan-joly]

Replaces the saadmk11/github-actions-version-updater approach with Dependabot's native github-actions ecosystem.

Dependabot now does this natively: it updates action versions, maintains SHA pins and their trailing version comments (which matters since every action in this estate is pinned to a SHA), and — unlike the action — it closes its own PRs when they stop being relevant, so stale update PRs do not accumulate.

It also needs no token: the action required a PAT with workflow scope to push workflow changes, which was one more long-lived credential to hold.

Matches the ecosystem block already present in NosCoreIO/NosCore.

[coderabbitai]

Warning

Review limit reached

Next included review available in 28 minutes.

Check out review usage here.

View limit details

Limit details: You’ve used the included review currently available.

You've used all free OSS reviews for now. Wait for the free limit to reset to keep reviewing this public repository.

Learn how review limits work.

Review configuration:

⚙️ Run configuration

Configuration used: defaults

Review profile: CHILL

Plan: Advanced

Run ID: 6373df4a-e970-4de0-adec-4cae300520f7

📥 Commits

Reviewing files that changed from the base of the PR and between 267726f and 1c7e107.

📒 Files selected for processing (1)

• .github/dependabot.yml

---

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

• X
• Mastodon
• Reddit
• LinkedIn

_{Comment @coderabbitai help to get the list of available commands.}