ci: Dependabot configuration to update Go modules & actions in workflows

[ScottBrenner]

Description

Noticed some actions used in the workflows here are outdated, proposing a Dependabot configuration to update - reference https://docs.github.com/en/actions/security-guides/using-githubs-security-features-to-secure-your-use-of-github-actions#keeping-the-actions-in-your-workflows-secure-and-up-to-date

Checklist

• Self-reviewed
• Added/updated tests (if needed)
• Updated CHANGELOG.md (if needed)
• Updated documentation (if needed)

Additional Notes

Suggest enabling https://docs.github.com/en/code-security/dependabot/working-with-dependabot/about-dependabot-on-github-actions-runners#enabling-or-disabling-for-your-repository as well

[enoodle]

Looks good, We should also apply this to gomod

[enoodle]

@ScottBrenner It wants you to run add a few license lines to the newly created file. you can run ./bin/addlicense -c "NVIDIA CORPORATION" -s=only -l apache . to add it or look at the failed action for the diff.

[ScottBrenner]

Done & done!