Update GitHub actions and add dependabot.yml

[abhro]

No description provided.

[codecov]

Codecov Report

✅ All modified and coverable lines are covered by tests.
✅ Project coverage is 91.35%. Comparing base (e060416) to head (7c60eba).
⚠️ Report is 13 commits behind head on dev.

Additional details and impacted files

@@            Coverage Diff             @@
##              dev      #42      +/-   ##
==========================================
- Coverage   91.91%   91.35%   -0.56%     
==========================================
  Files          14       14              
  Lines         717      717              
==========================================
- Hits          659      655       -4     
- Misses         58       62       +4     

☔ View full report in Codecov by Sentry.
📢 Have feedback on the report? Share it here.

🚀 New features to boost your workflow:

• ❄️ Test Analytics: Detect flaky tests, report on failures, and find test suite problems.

[ablaom]

Thanks @abhro for these CI updates. Any idea how to make codecov less nit-picky? Why do we get a red cross? There's no indication in the above report. You've not touched the code base and yet it still complains.

[abhro]

It might be a syncing issue? On https://app.codecov.io/gh/JuliaAI/StatisticalMeasures.jl/commits, the newest commit that's evaluated seems to be e060416, so it could also be talking about the intermediate commits between then and the PR (<- don't know enough about Codecov to say it with full confidence, however)