Merge pull request #1018 from DEFRA/dependabot-setup

Update Dependabot configuration

Author: brujeo

.github/dependabot.yml

@@ -5,4 +5,8 @@ updates:
   schedule:
     interval: daily
   open-pull-requests-limit: 10
-  versioning-strategy: lockfile-only
+  versioning-strategy: lockfile-only
+  # Dependabot is currently failing to pull gems hosted outside of RubyGems
+  # We need to ignore these gems for now so that dependabot does proceed with updating the other gems
+  ignore:
+  - dependency-name: "dibble"

.github/workflows/ci.yml

@@ -25,7 +25,7 @@ jobs:
 
     steps:
       - name: Checkout repository
-        uses: actions/checkout@v3
+        uses: actions/checkout@v4
 
       - name: Install Ruby
         uses: ruby/setup-ruby@v1