Hey @ranocha , I don't know dependabot and have never used it. What kind of benefit does it provide? Which problem does it solve that has arisen (for you or others) on the repository of OSMMakie.jl? Thanks for any insights.

See for example https://discourse.julialang.org/t/psa-use-dependabot-to-update-github-actions-automatically/96001/2:

To be more specific, you can see Dependabot as an anlog of CompatHelper for GitHub actions dependencies such as actions/checkout@v2. Based on semver, you will not use actions/checkout@v2 with this setup. Dependabot will create a PR updating such a line to actions/checkout@v3. This will fix deprecation warnings such as

Node.js 12 actions are deprecated. Please update the following actions to use Node.js 16:
actions/checkout@v2, actions/cache@v2, codecov/codecov-action@v2. 
For more information see: https://github.blog/changelog/2022-09-22-github-actions-all-actions-will-begin-running-on-node16-instead-of-node12/.

That's handled by updating the GitHub actions mentioned there to there new major version - which dependabot will do for you by submitting PRs. See also JuliaArrays/TiledIteration.jl#42

Bump