Update Dependabot configuration and GitHub Actions to use v4 of upload-artifact (#34)

Author: zoola969

.github/dependabot.yml

@@ -17,11 +17,23 @@ updates:
       major:
         update-types:
           - "major"
-    open-pull-requests-limit: 5
     assignees:
       - "zoola969"
     reviewers:
       - "zoola969"
     commit-message:
       prefix: "deps"
       include: "scope"
+
+  - package-ecosystem: "github-actions"
+    directory: "/"
+    schedule:
+      interval: "weekly"
+    groups:
+      minor-and-patch:
+        update-types:
+          - "patch"
+          - "minor"
+      major:
+        update-types:
+          - "major"

.github/workflows/publish.yml

@@ -21,7 +21,7 @@ jobs:
         run: uv build
 
       - name: Store package distributions
-        uses: actions/upload-artifact@v3
+        uses: actions/upload-artifact@v4
         with:
           name: python-package-distributions
           path: dist/

.github/workflows/tests.yml

@@ -7,6 +7,9 @@ on:
   pull_request:
     branches: ["master"]
 
+permissions:
+    contents: read
+
 jobs:
   tests:
     name: "Python ${{ matrix.python-version }}"