ci(dependencies): update setup python action dependencies and dependa…

…bot settings (#457)

* ci(dependencies): update setup python action deps

* add dependabot update

.github/actions/setup-env/action.yaml

@@ -27,7 +27,7 @@ runs:
  using: "composite"
  steps:
  - name: Set up Python ${{ inputs.python-version }}
- uses: actions/setup-python@v4
+ uses: actions/setup-python@v5
  with:
  python-version: ${{ inputs.python-version }}
  - name: Generate Cache Key PY (Linux)
@@ -46,7 +46,7 @@ runs:
  # This allows for caching the pre-commit hook installation across
  # jobs and workflows.
  if: ${{ inputs.cache-pre-commit == 'true' }}
- uses: actions/cache@v3
+ uses: actions/cache@v4
  with:
  path: |
  .cache
@@ -58,7 +58,7 @@ runs:
  # the poetry.lock file. This allows for caching the virtual
  # environment with all the dependencies.
  if: ${{ inputs.cache-venv == 'true' }}
- uses: actions/cache@v3
+ uses: actions/cache@v4
  with:
  path: |
  .cache

.github/dependabot.yml

@@ -9,7 +9,14 @@ updates:
  # See here for more information:
  # https://docs.github.com/en/code-security/dependabot/dependabot-version-updates/configuring-dependabot-version-updates
  - package-ecosystem: "github-actions"
+ # checks for updates by default under `/.github/workflows`
  directory: "/"
  schedule:
  # Check for updates to GitHub Actions every week
  interval: "weekly"
+ - package-ecosystem: "github-actions"
+ # checks for updates under custom action setup-env
+ directory: "/.github/actions/setup-env"
+ schedule:
+ # Check for updates to GitHub Actions every week
+ interval: "weekly"