ci: pin actions to SHAs and add dependabot config (#3494) #3046

Job	Run time
typecheck / typecheck	1m 44s
units / packages / 🧪 Unit Tests: Packages (1, 1)	1m 31s
units / e2e-webapp / 🧪 E2E Tests: Webapp	1m 56s
units / internal / 🧪 Unit Tests: Internal (6, 8)	1m 56s
units / internal / 🧪 Unit Tests: Internal (7, 8)	1m 56s
units / internal / 🧪 Unit Tests: Internal (4, 8)	1m 36s
units / internal / 🧪 Unit Tests: Internal (5, 8)	1m 56s
units / internal / 🧪 Unit Tests: Internal (2, 8)	1m 34s
units / internal / 🧪 Unit Tests: Internal (3, 8)	1m 41s
units / internal / 🧪 Unit Tests: Internal (1, 8)	1m 57s
units / webapp / 🧪 Unit Tests: Webapp (7, 8)	1m 32s
units / webapp / 🧪 Unit Tests: Webapp (1, 8)	1m 26s
units / webapp / 🧪 Unit Tests: Webapp (3, 8)	1m 31s
units / webapp / 🧪 Unit Tests: Webapp (6, 8)	1m 56s
units / webapp / 🧪 Unit Tests: Webapp (2, 8)	1m 31s
units / internal / 🧪 Unit Tests: Internal (8, 8)	1m 38s
units / webapp / 🧪 Unit Tests: Webapp (8, 8)	1m 26s
units / webapp / 🧪 Unit Tests: Webapp (5, 8)	1m 56s
units / webapp / 🧪 Unit Tests: Webapp (4, 8)	1m 57s
units / packages / 📊 Merge Reports	1s
publish-worker-v4	0s
publish-worker	0s
publish-webapp	0s
units / webapp / 📊 Merge Reports	1s
units / internal / 📊 Merge Reports	1s
	32m 43s

Provide feedback