v6.4.42
[CI] pin GitHub Actions references and add Dependabot
Bump the github-actions group across 1 directory with 2 updates