diff --git a/.github/dependabot.yml b/.github/dependabot.yml
new file mode 100644
index 00000000000..485dace017b
--- /dev/null
+++ b/.github/dependabot.yml
@@ -0,0 +1,10 @@
+version: 2
+updates:
+
+  - package-ecosystem: "github-actions"
+    directory: "/"
+    schedule:
+      interval: "weekly"
+    labels:
+      - "Awaiting Review"
+      - "Scope: Tests Only"
diff --git a/.github/workflows/automated-tests.yml b/.github/workflows/automated-tests.yml
index 0867c627316..34ca2298bfd 100644
--- a/.github/workflows/automated-tests.yml
+++ b/.github/workflows/automated-tests.yml
@@ -110,7 +110,7 @@ jobs:
 
       - name: Cache wkhtmltopdf package
         if: ${{ matrix.tests.ebook }}
-        uses: actions/cache@v3.0.11
+        uses: actions/cache@v3
         with:
           path: wkhtmltopdf
           key: wkhtmltopdf-${{ hashFiles('script/gh-actions/ebook_converters.sh') }}
@@ -121,11 +121,11 @@ jobs:
 
       - name: Cache VCR cassettes
         if: ${{ matrix.tests.vcr }}
-        uses: actions/cache@v3.0.11
+        uses: actions/cache@v3
         with:
           path: features/cassette_library
 
-          # Unfortunately, the actions/cache@v3.0.11 version doesn't allow the cache
+          # Unfortunately, the actions/cache@v3 version doesn't allow the cache
           # key to be overwritten if there's an exact match. So instead we add
           # a unique identifier to the key to always force a "cache miss", and
           # restore from related keys to make sure that we still get to load a