MNT: Use hash for Action workflow versions and update, and add dependabot, if needed

[pllim]

As recommended by https://scientific-python.org/specs/spec-0008/#pin-github-actions-release-workflows-to-their-full-release-commit-shas , this PR changes your Actions workflow version pins to hashes, and updates to latest release hashes (at the time of writing) if needed. Also adds a dependabot.yml file to enable future automatic updates of GitHub Actions workflow(s) in this repository, if needed.

This is an automated update made by the batchpr tool 🤖 - feel free to close if it doesn't look good! You can report issues to @pllim.

👻

[codecov]

Codecov Report

All modified and coverable lines are covered by tests ✅

Project coverage is 0.20%. Comparing base (8e6053b) to head (52774fc).

❗ There is a different number of reports uploaded between BASE (8e6053b) and HEAD (52774fc). Click for more details.

HEAD has 1 upload less than BASE

Flag	BASE (8e6053b)	HEAD (52774fc)
	2	1

Additional details and impacted files

@@            Coverage Diff             @@
##           master     #38       +/-   ##
==========================================
- Coverage   11.21%   0.20%   -11.01%     
==========================================
  Files           7       7               
  Lines         990     987        -3     
  Branches      196     196               
==========================================
- Hits          111       2      -109     
- Misses        879     985      +106     

☔ View full report in Codecov by Sentry.
📢 Have feedback on the report? Share it here.