chore(deps): configure Dependabot for GitHub Actions updates

[vitaliyf]

Reinstate Dependabot to update GitHub workflow dependencies, consistent with what we use elsewhere.

[github-actions]

Chrome DevTools Protocol Tracing (Script: 107.83ms, Heap: 13.93MB)

	Number of Requests	Size of Requests	Script Duration	Task Duration	Heap Used Size
Requests	+3 requests	+29.77 KB
Page Loaded			+15.33 ms	+8.88 ms	+0.94 MB
Generate 100 fetch requests			+16.54 ms	+63.30 ms	+2.05 MB
Generate 100 XHR requests			+39.52 ms	+109.13 ms	+2.35 MB
Click 100 buttons and generate 100 logs			+28.35 ms	+36.08 ms	+2.97 MB
Throw a 100 exceptions			+0.71 ms	+13.99 ms	+2.47 MB
End Session			+7.37 ms	+15.56 ms	+3.14 MB
Total	+3 requests	+29.77 KB	+107.83 ms	+246.94 ms	+13.93 MB

Lighthouse (Script Eval: 51.20ms)

	Difference	Description
Total Blocking Time	0 ms	Difference in Total Blocking Time: Sum of all time periods between FCP and Time to Interactive, when task length exceeded 50ms, expressed in milliseconds. Learn more about the Total Blocking Time metric.
Main Thread Time	+62.04 ms	Difference in Main Thread Time: Consider reducing the time spent parsing, compiling and executing JS. You may find delivering smaller JS payloads helps with this. Learn how to minimize main-thread work
Script Evaluation Time	+51.20 ms	Difference in Script Evaluation Time: Consider reducing the time spent parsing, compiling, and executing JS. You may find delivering smaller JS payloads helps with this. Learn how to reduce Javascript execution time.

Platform Tests (vite-7 gzip: 47.99KB)

vite-7 Platform Tests

	Total Uncompressed Size	Total Gzip Size
vite-7 - esnext	+164.67 KB	+47.99 KB
vite-7 - es2015	+171.51 KB	+49.67 KB

vite-otel-latest Platform Tests

	Total Uncompressed Size	Total Gzip Size
vite-otel-latest - esnext	+163.74 KB	+49.69 KB
vite-otel-latest - es2015	+170.50 KB	+51.32 KB

webpack-5 Platform Tests

	Total Uncompressed Size	Total Gzip Size
webpack-5 - esnext	+121.11 KB	+43.17 KB
webpack-5 - es2015	+122.22 KB	+44.65 KB

[pablomatiasgomez]

I think @overbalance changed it on purpose to use renovate here #964

[overbalance]

We have a loose policy to match OTel repos. Is renovate not doing enough @vitaliyf ?

[vitaliyf]

You didn't configure Renovate to update GHA, and I really don't want to learn another tool to figure out how to do that and keep an eye on it myself. Also, I am building a uniform job to make sure infrastructure updates are applied in all repos, and I'd rather not build two versions of it.

You can use it for web deps if you prefer, but I want consistent tooling for CI dependencies.

[overbalance]

@vitaliyf I see GHA updates on line 60 but I'll remove ASAP. https://github.com/embrace-io/embrace-web-sdk/blob/main/.github/renovate.json

[vitaliyf]

@vitaliyf I see GHA updates on line 60
oh, i guess my eyes were still not fully open...

but it looked like it definitely didn't keep GHA up to date, because this repo still has actions/checkout@v5 and zizmorcore/zizmor-action v0.2.0

[overbalance]

@vitaliyf major update was off 🫠

remove from renovate: #1043