Dependabot only tracks the pip ecosystem, not GitHub Actions

[yakew7]

.github/dependabot.yml has a single package-ecosystem: pip entry. Action versions pinned across .github/workflows/*.yml (actions/checkout, actions/setup-python, peter-evans/create-pull-request, etc.) never get automated update PRs the way Python dependencies do.

Request: add a second entry:

  - package-ecosystem: github-actions
    directory: /
    schedule:
      interval: weekly
    labels:
      - dependencies

[github-actions]

Hey @yakew7, thanks for raising this. I really appreciate it.

Fair Code exists because bias in AI has real consequences for real people, so every issue matters here, whether it's a bug, a dataset question, or something that just didn't feel right. We'll take a look and get back to you.

In the meantime, feel free to explore the live audits or check the contributing guide if you want to dig deeper.