Update CI dependencies

- Add dependabot CI with monthly interval

Author: kaitj

.github/dependabot.yaml

@@ -0,0 +1,18 @@
+# Please see the documentation for all configuration options:
+# https://docs.github.com/github/administering-a-repository/configuration-options-for-dependency-updates
+
+version: 2
+updates:
+- package-ecosystem: pip
+  directory: /
+  schedule:
+    interval: monthly
+  groups:
+    production-dependencies:
+      dependency-type: production
+    development-dependencies:
+      dependency-type: development
+- package-ecosystem: github-actions
+  directory: /
+  schedule:
+    interval: monthly

.github/workflows/docs.yaml

@@ -1,12 +1,12 @@
-name: docs 
+name: docs
 
 on:
   workflow_run:
     workflows: [CI]
     types:
-    - completed
+      - completed
     branches:
-    - main
+      - main
 
 env:
   UV_FROZEN: true
@@ -17,16 +17,14 @@ jobs:
     if: ${{ github.event.workflow_run.conclusion == 'success' }}
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v6
       - name: Install uv
-        uses: astral-sh/setup-uv@v5
-        with:
-          pyproject-file: pyproject.toml
+        uses: astral-sh/setup-uv@v8.1.0
       - name: Install the project
         run: uv sync --all-extras
       - name: Build docs
         run: uv run pdoc -o docs/ -d google bids2table
-      - uses: actions/upload-pages-artifact@v3
+      - uses: actions/upload-pages-artifact@v5
         with:
           path: docs/
 
@@ -43,4 +41,4 @@ jobs:
       url: ${{ steps.deployment.outputs.page_url }}
     steps:
       - id: deployment
-        uses: actions/deploy-pages@v4
+        uses: actions/deploy-pages@v5

.github/workflows/release.yaml

@@ -18,11 +18,9 @@ jobs:
       # IMPORTANT: this permission is mandatory for Trusted Publishing
       id-token: write
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v6
       - name: Install uv
-        uses: astral-sh/setup-uv@v5
-        with:
-          pyproject-file: pyproject.toml
+        uses: astral-sh/setup-uv@v8.1.0
       - name: Build project
         run: |
           uv sync --no-dev --no-install-project