add a dependabot.yml to checkout github actions versions (#3704)

add a dependabot.yml to checkout github actions versions (#3704) #1927