AFAIK (and this was new to me) Dependabot is not active by default. This enables it for all dependencies here, so it scans and suggests updates. GitHub Actions is as far as I see not yet used, but well… easy enough to do that hehe soon…
