diff --git a/.github/dependabot.yaml b/.github/dependabot.yaml
new file mode 100644
index 000000000..a6819e3f3
--- /dev/null
+++ b/.github/dependabot.yaml
@@ -0,0 +1,11 @@
+# To get started with Dependabot version updates, you'll need to specify which
+# package ecosystems to update and where the package manifests are located.
+# Please see the documentation for all configuration options:
+# https://docs.github.com/github/administering-a-repository/configuration-options-for-dependency-updates
+
+version: 2
+updates:
+  - package-ecosystem: github-actions
+    directory: /
+    schedule:
+      interval: monthly
diff --git a/.github/workflows/check-with-upstream.yaml b/.github/workflows/check-with-upstream.yaml
index 00fd90fb2..6ded89178 100644
--- a/.github/workflows/check-with-upstream.yaml
+++ b/.github/workflows/check-with-upstream.yaml
@@ -8,7 +8,7 @@ jobs:
     runs-on: ubuntu-latest
     name: Check if KSM selectors are present on applicable metrics.
     steps:
-    - uses: actions/checkout@v2
+    - uses: actions/checkout@v4
       with:
         persist-credentials: false
     - run: make --always-make check-selectors-ksm
diff --git a/.github/workflows/ci.yaml b/.github/workflows/ci.yaml
index bd17701af..6394dfa73 100644
--- a/.github/workflows/ci.yaml
+++ b/.github/workflows/ci.yaml
@@ -3,51 +3,32 @@ on:
   - push
   - pull_request
 jobs:
-  generate:
+  matrix:
     runs-on: ubuntu-latest
-    name: Generate yaml
+    name: ${{ matrix.name }}
+    strategy:
+      fail-fast: false
+      matrix:
+        include:
+          - name: Alerts linter
+            run: make --always-make alerts-lint
+          - name: Generate yaml
+            run: make --always-make generate && git diff --exit-code
+          - name: Grafana dashboard linter
+            run: make --always-make dashboards-lint
+          - name: Jsonnet formatter
+            run: make --always-make fmt && git diff --exit-code
+          - name: Jsonnet linter
+            run: make --always-make jsonnet-lint
+          - name: Unit tests
+            run: make --always-make test
+
     steps:
-    - uses: actions/checkout@v2
-      with:
-        persist-credentials: false
-    - run: make --always-make generate && git diff --exit-code
-  jsonnet-lint:
-    runs-on: ubuntu-latest
-    name: Jsonnet linter
-    steps:
-    - uses: actions/checkout@v2
-      with:
-        persist-credentials: false
-    - run: make --always-make jsonnet-lint
-  dashboards-lint:
-    runs-on: ubuntu-latest
-    name: Grafana dashboard linter
-    steps:
-    - uses: actions/checkout@v2
-      with:
-        persist-credentials: false
-    - run: make --always-make dashboards-lint
-  alerts-lint:
-    runs-on: ubuntu-latest
-    name: Alerts linter
-    steps:
-    - uses: actions/checkout@v2
-      with:
-        persist-credentials: false
-    - run: make --always-make alerts-lint
-  fmt:
-    runs-on: ubuntu-latest
-    name: Jsonnet formatter
-    steps:
-    - uses: actions/checkout@v2
-      with:
-        persist-credentials: false
-    - run: make --always-make fmt && git diff --exit-code
-  unit-tests:
-    runs-on: ubuntu-latest
-    name: Unit tests
-    steps:
-    - uses: actions/checkout@v2
-      with:
-        persist-credentials: false
-    - run: make --always-make test
+      - uses: actions/checkout@v4
+        with:
+          persist-credentials: false
+      - uses: actions/setup-go@v5
+        with:
+          go-version-file: scripts/go.mod
+          cache-dependency-path: scripts/go.sum
+      - run: ${{ matrix.run }}