diff --git a/.github/dependabot.yml b/.github/dependabot.yml
index b2be77e..15d997a 100644
--- a/.github/dependabot.yml
+++ b/.github/dependabot.yml
@@ -17,7 +17,6 @@ updates:
       major:
         update-types:
           - "major"
-    open-pull-requests-limit: 5
     assignees:
       - "zoola969"
     reviewers:
@@ -25,3 +24,16 @@ updates:
     commit-message:
       prefix: "deps"
       include: "scope"
+
+  - package-ecosystem: "github-actions"
+    directory: "/"
+    schedule:
+      interval: "weekly"
+    groups:
+      minor-and-patch:
+        update-types:
+          - "patch"
+          - "minor"
+      major:
+        update-types:
+          - "major"
diff --git a/.github/workflows/publish.yml b/.github/workflows/publish.yml
index 66acb01..a1a0b4c 100644
--- a/.github/workflows/publish.yml
+++ b/.github/workflows/publish.yml
@@ -21,7 +21,7 @@ jobs:
         run: uv build
 
       - name: Store package distributions
-        uses: actions/upload-artifact@v3
+        uses: actions/upload-artifact@v4
         with:
           name: python-package-distributions
           path: dist/
diff --git a/.github/workflows/tests.yml b/.github/workflows/tests.yml
index 97f8485..351267a 100644
--- a/.github/workflows/tests.yml
+++ b/.github/workflows/tests.yml
@@ -7,6 +7,9 @@ on:
   pull_request:
     branches: ["master"]
 
+permissions:
+    contents: read
+
 jobs:
   tests:
     name: "Python ${{ matrix.python-version }}"