chore: update CI actions and add Dependabot (#142)

* chore: updated actions to the latest version

* chore: added dependabot.yml

* ci: only test minimum and maximum python versions

---------

Co-authored-by: Jim Pivarski <[email protected]>

.github/dependabot.yml

@@ -0,0 +1,10 @@
+version: 2
+updates:
+  - package-ecosystem: "github-actions"
+    directory: "/"
+    schedule:
+      interval: "weekly"
+    groups:
+      actions:
+        patterns:
+          - "*"

.github/workflows/ci.yml

@@ -14,16 +14,14 @@ jobs:
       fail-fast: false
       matrix:
         python-version:
-        - '3.7'
         - '3.8'
-        - '3.9'
-        - '3.10'
+        - '3.12'
     name: Check Python ${{ matrix.python-version }}
     steps:
-    - uses: actions/checkout@v2
+    - uses: actions/checkout@v4
       with:
         fetch-depth: 0
-    - uses: actions/setup-python@v2
+    - uses: actions/setup-python@v5
       with:
         python-version: ${{ matrix.python-version }}
 
@@ -46,16 +44,15 @@ jobs:
       run: python -m pytest ./tests --cov=src/skhep_testdata --cov-report=xml
 
     - name: Test coverage with Codecov
-      if: matrix.python-version != 3.7
-      uses: codecov/codecov-action@v3
+      uses: codecov/codecov-action@v4
 
   dist:
     runs-on: ubuntu-latest
     steps:
-    - uses: actions/checkout@v2
+    - uses: actions/checkout@v4
       with:
         fetch-depth: 0
-    - uses: actions/setup-python@v2
+    - uses: actions/setup-python@v5
       with:
         python-version: '3.10'
 
@@ -65,12 +62,12 @@ jobs:
     - name: Show sizes
       run: ls -lh dist
 
-    - uses: actions/upload-artifact@v1
+    - uses: actions/upload-artifact@v4
       with:
         name: DistPackage
         path: dist
 
-    - uses: pypa/gh-action-pypi-publish@v1.4.2
+    - uses: pypa/gh-action-pypi-publish@release/v1
       with:
         user: __token__
         password: ${{ secrets.pypi_password }}