diff --git a/.dependabot/config.yml b/.dependabot/config.yml
index cac8df71..27439734 100644
--- a/.dependabot/config.yml
+++ b/.dependabot/config.yml
@@ -14,6 +14,19 @@ update_configs:
     default_labels:
       - ':recycle: Chore'
 
+  - package_manager: github_actions
+    directory: /
+    update_schedule: daily
+    commit_message:
+      prefix: chore
+      include_scope: true
+    automerged_updates:
+      - match:
+          dependency_type: all
+          update_type: 'semver:minor'
+    default_labels:
+      - ':recycle: Chore'
+
   - package_manager: javascript
     directory: /
     update_schedule: daily
diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
index db36a8f3..1c9b3b55 100644
--- a/.github/workflows/ci.yml
+++ b/.github/workflows/ci.yml
@@ -17,7 +17,7 @@ jobs:
     runs-on: ubuntu-latest
 
     steps:
-      - uses: actions/checkout@v1
+      - uses: actions/checkout@v1.2.0
         with:
           submodules: true
 
@@ -35,13 +35,13 @@ jobs:
           gzip docker-image-dev/article-store.tar
 
       - name: Upload prod Docker image
-        uses: actions/upload-artifact@v1
+        uses: actions/upload-artifact@v1.0.0
         with:
           name: docker-image-prod
           path: docker-image-prod
 
       - name: Upload dev Docker image
-        uses: actions/upload-artifact@v1
+        uses: actions/upload-artifact@v1.0.0
         with:
           name: docker-image-dev
           path: docker-image-dev
@@ -70,12 +70,12 @@ jobs:
             test: TARGET=prod make api-test
 
     steps:
-      - uses: actions/checkout@v1
+      - uses: actions/checkout@v1.2.0
         with:
           submodules: true
 
       - name: Download Docker image artifact
-        uses: actions/download-artifact@v1
+        uses: actions/download-artifact@v1.0.0
         with:
           name: docker-image-${{ matrix.target || 'dev' }}
 
@@ -94,12 +94,12 @@ jobs:
     if: github.ref == 'refs/heads/master'
 
     steps:
-      - uses: actions/checkout@v1
+      - uses: actions/checkout@v1.2.0
         with:
           submodules: true
 
       - name: Download Docker image artifact
-        uses: actions/download-artifact@v1
+        uses: actions/download-artifact@v1.0.0
         with:
           name: docker-image-prod