Bumping GitHub action versions

[AnHeuermann]

While investigating #406 I noticed that most actions are not on the latest release version. It's not important to update them but I did it anyway.

It's also possible to automate this with dependabot:
https://docs.github.com/en/code-security/dependabot/working-with-dependabot/keeping-your-actions-up-to-date-with-dependabot

But it can become annoying to get pull requests from dependabot all the time.

[Datseris]

do you mind patching the patch version in Project.toml so I tag a release after merging this, so that there aren't any warnings?

Feel free to do another PR that adds the dependabot.yml file.

[codecov]

Codecov Report

All modified and coverable lines are covered by tests ✅

Comparison is base (2ab860b) 89.96% compared to head (9daae0e) 89.96%.

❗ Current head 9daae0e differs from pull request most recent head 76006ea. Consider uploading reports for the commit 76006ea to get more accurate results

Additional details and impacted files

@@           Coverage Diff           @@
##             main     #407   +/-   ##
=======================================
  Coverage   89.96%   89.96%           
=======================================
  Files           8        8           
  Lines         787      787           
=======================================
  Hits          708      708           
  Misses         79       79           

☔ View full report in Codecov by Sentry.
📢 Have feedback on the report? Share it here.