add gha-update, remove dependabot

pyproject.toml

@@ -86,3 +86,8 @@ ignore-init-module-imports = true
 [tool.ruff.lint.isort]
 force-single-line = true
 order-by-type = false
+
+[tool.gha-update]
+tag-only = [
+    "slsa-framework/slsa-github-generator",
+]

tox.ini

@@ -31,16 +31,25 @@ commands =
 deps = -r requirements/docs.txt
 commands = sphinx-build -E -W -b dirhtml docs docs/_build/dirhtml
 
+[testenv:update-actions]
+labels = update
+deps = gha-update
+commands = gha-update
+
+[testenv:update-pre_commit]
+labels = update
+deps = pre-commit
+skip_install = true
+commands = pre-commit autoupdate -j4
+
 [testenv:update-requirements]
-deps =
-    pip-tools
-    pre-commit
+labels = update
+deps = pip-tools
 skip_install = true
 change_dir = requirements
 commands =
-    pre-commit autoupdate -j4
-    pip-compile -U build.in
-    pip-compile -U docs.in
-    pip-compile -U tests.in
-    pip-compile -U typing.in
-    pip-compile -U dev.in
+    pip-compile build.in -q {posargs:-U}
+    pip-compile docs.in -q {posargs:-U}
+    pip-compile tests.in -q {posargs:-U}
+    pip-compile typing.in -q {posargs:-U}
+    pip-compile dev.in -q {posargs:-U}