Use dependabot to update workflow actions to the latest versions

Once has been merged, dependabot should submit a number of PRs for updating the workflow actions. This issue will be used to keep track of those PRs.

No testing required – as long as dependabot’s updates pass the automated tests, this should be good to go.