Hi, sorry to say this but, I would love it if the github actions service did just this, because how often do we have time to realtime update the version ourselves. Dependabot does this for projects like C#, and all of the stuff and is now part of github, why not do a similar thing with that bot thing or something else that can inform us and say “Hey an action used in x workflows has been updated in the marketplace. The version up will be merged when CI passes.” sort of thing that dependabot also does. With this issue out of the way us users of the github actions service would have an easier time, both keeping it all up to date, and writing the code we want run in the actions (like building, testing, benchmarking, deploying, etc with it).
Without nothing checking our .github/workflows/\*.yml action workflow configuration files it makes our lives a sort of hell because then we got to manually check them for updates. Even if we got to explicitly in the yml files define the frequency of the update checks.