Add a dependabot.yml file so that workflows will be checked daily and Pull Requests automatically raised when newer Actions are available.
Chris Swan