I committed the project I maintain to GitHub Actions when Actions first came out, and I'm really starting to regret it.

The main problem, which this article touches, is that GHA adds a whole new dimension of dependency treadmill. You now have a new set of upstreams that you have to keep up to date along with your actual deployment upstreams.

renovatebot and dependabot can take care of that. Setting up CI is progress, nothing to regret.