github/dependabot-action@main is not allowed to be used in libjxl/libjxl. Actions in this workflow must be: within a repository owned by libjxl or matching the following: AButler/upload-release-assets@*, actions/*, ad-m/github-push-action@*, codecov/codecov-action@*, github/codeql-action/*, google/oss-fuzz/*, msys2/setup-msys2@*, mymindstorm/setup-emsdk@*, ossf/scorecard-action@*, step-security/harden-runner@*.