Enable dependabot for actions only. These should always be safe to update as long as CI passes and some of them are lagging behind.
silverwind