dependabot: monthly updates of github actions

Author: consideRatio

.github/dependabot.yml

@@ -1,11 +1,17 @@
-# To get started with Dependabot version updates, you'll need to specify which
-# package ecosystems to update and where the package manifests are located.
-# Please see the documentation for all configuration options:
-# https://docs.github.com/en/code-security/supply-chain-security/keeping-your-dependencies-updated-automatically/configuration-options-for-dependency-updates
-
+# dependabot.yaml reference: https://docs.github.com/en/code-security/dependabot/dependabot-version-updates/configuration-options-for-the-dependabot.yml-file
+#
+# Notes:
+# - Status and logs from dependabot are provided at
+#   https://github.com/jupyterhub/jupyterhub-deploy-docker/network/updates.
+# - YAML anchors are not supported here or in GitHub Workflows.
+#
 version: 2
 updates:
+  # Maintain dependencies in our GitHub Workflows
   - package-ecosystem: github-actions
     directory: /
+    labels: [ci]
     schedule:
-      interval: weekly
+      interval: monthly
+      time: "05:00"
+      timezone: Etc/UTC