Pedro Nacht 367c854002 Hash-pin GitHub Actions, keep them updated with dependabot (#1960) ...

Fixes #1959.

This PR hash-pins GitHub Actions used in workflows and sets up
dependabot to keep the Actions up-to-date.

I've configured dependabot to group all Actions together. So if it ever
discovers that multiple Actions have new versions, it'll only send a
single PR to bump them all together.

---------

Signed-off-by: Pedro Kaj Kjellerup Nacht <pnacht@google.com>

2023-09-11 22:02:18 +02:00

..

workflows

Hash-pin GitHub Actions, keep them updated with dependabot (#1960)

2023-09-11 22:02:18 +02:00

dependabot.yml

Hash-pin GitHub Actions, keep them updated with dependabot (#1960)

2023-09-11 22:02:18 +02:00