Keeping actions up to date automatically

[tolzhabayev]

• moving to pin-by-tag instead. Most of the actions are coming from github anyway.
• adding dependabot action to keep the actions up to date