opensafely-core/update-dependencies-action@v1 is not allowed to be used in ebmdatalab/metrics. Actions in this workflow must be: within a repository owned by ebmdatalab, created by GitHub, or matching the following: dependabot/fetch-metadata@*, opensafely-core/.github/.github/workflows/auto-merge-dependabot-prs.yml@*, opensafely-core/setup-action@*, hadolint/hadolint-action@*, re-actors/alls-green@*.