diff --git a/.github/dependabot.yml b/.github/dependabot.yml
new file mode 100644
index 0000000..6993aed
--- /dev/null
+++ b/.github/dependabot.yml
@@ -0,0 +1,11 @@
+---
+version: 2
+updates:
+- package-ecosystem: github-actions
+  directory: /
+  schedule:
+    interval: monthly
+  groups:
+    github-actions:
+      patterns:
+      - '*'
diff --git a/.github/workflows/dists.yml b/.github/workflows/dists.yml
index bab8f02..4adefea 100644
--- a/.github/workflows/dists.yml
+++ b/.github/workflows/dists.yml
@@ -101,6 +101,6 @@ jobs:
 
     # trusted publisher in https://pypi.org/manage/project/blake3/settings/publishing/
     - name: Publish package distributions to PyPI
-      uses: pypa/gh-action-pypi-publish@v1.10.2
+      uses: pypa/gh-action-pypi-publish@v1.12.3
       with:
         skip-existing: true