v7.4.14
[CI] pin GitHub Actions references and add Dependabot
Bump actions/checkout from 6.0.3 to 7.0.0 in the github-actions group