Update github actions

[chuckwondo]

The github actions in ci.yml are a bit outdated. I propose bumping to their latest versions, which will also allow some simplification to dependency caching since the setup-python action now leverages the cache action, allowing for less boilerplate in the workflow file.

I also propose adding a .github/dependabot.yml file to check for github action updates on a monthly basis.