diff --git a/.github/dependabot.yml b/.github/dependabot.yml
new file mode 100644
index 0000000000..d57929b9e6
--- /dev/null
+++ b/.github/dependabot.yml
@@ -0,0 +1,10 @@
+version: 2
+updates:
+  - package-ecosystem: "github-actions"
+    directory: "/"
+    schedule:
+      interval: "monthly"
+    groups:
+      actions:
+        patterns:
+          - "*"
diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
index 7df0a4a3aa..ab28a9a354 100644
--- a/.github/workflows/ci.yml
+++ b/.github/workflows/ci.yml
@@ -12,13 +12,13 @@ jobs:
                 os: [ubuntu-latest, macos-latest, windows-latest]
         steps:
             - name: Checkout source code
-              uses: actions/checkout@v3
+              uses: actions/checkout@v5
               with:
                 fetch-depth: 10
                 persist-credentials: false
 
             - name: Set up Python
-              uses: actions/setup-python@v3
+              uses: actions/setup-python@v6
               with:
                 python-version: "3.10"
 
@@ -51,7 +51,7 @@ jobs:
                 pacman -S --noconfirm tar
 
             - name: Checkout source code
-              uses: actions/checkout@master
+              uses: actions/checkout@v5
               with:
                 fetch-depth: 10
 
diff --git a/.github/workflows/translations.yml b/.github/workflows/translations.yml
index e12d3974c5..1627ae9db5 100644
--- a/.github/workflows/translations.yml
+++ b/.github/workflows/translations.yml
@@ -21,7 +21,7 @@ jobs:
                 pacman -S --noconfirm tar
 
             - name: Checkout source code
-              uses: actions/checkout@master
+              uses: actions/checkout@v5
               with:
                 fetch-depth: 2
                 persist-credentials: false