diff --git a/.github/dependabot.yml b/.github/dependabot.yml
new file mode 100644
index 000000000..659e2f8ac
--- /dev/null
+++ b/.github/dependabot.yml
@@ -0,0 +1,17 @@
+version: 2
+updates:
+
+  - package-ecosystem: "github-actions"
+    directory: "/"
+    schedule:
+      # Check for updates to GitHub Actions every weekday
+      interval: "daily"
+
+  # Maintain dependencies for Cargo
+  - package-ecosystem: "cargo"
+    directory: "/"
+    schedule:
+      interval: "daily"
+    ignore:
+      - dependency-name: "*"
+        update-types: ["version-update:semver-patch"] # ignore patch updates
diff --git a/.github/workflows/cpal.yml b/.github/workflows/cpal.yml
index 765e6f09d..7e4f7fc07 100644
--- a/.github/workflows/cpal.yml
+++ b/.github/workflows/cpal.yml
@@ -48,16 +48,9 @@ jobs:
       run: sudo apt update
     - name: Install alsa
       run: sudo apt-get install libasound2-dev
-    - name: Verify publish crate
-      uses: katyo/publish-crates@v2
-      with:
-        dry-run: true
-        ignore-unpublished-changes: true
-    - name: Publish crate
-      uses: katyo/publish-crates@v2
-      with:
-        ignore-unpublished-changes: true
-        registry-token: ${{ secrets.CRATESIO_TOKEN }}
+    - name: cargo publish
+      continue-on-error: true
+      run: cargo publish --token ${{ secrets.CRATESIO_TOKEN }}
 
   ubuntu-test:
     runs-on: ubuntu-latest