From ab88adeabe385931ee5b61d2d1d90b7dbf199566 Mon Sep 17 00:00:00 2001
From: William Theaker <williamtheaker@users.noreply.github.com>
Date: Mon, 6 Feb 2023 23:24:28 -0500
Subject: [PATCH] Enable Dependabot version updating. (#857)

---
 .github/dependabot.yml       | 13 +++++++++++++
 .github/workflows/CI.yml     | 16 ++++++++--------
 .github/workflows/docker.yml |  6 ++----
 3 files changed, 23 insertions(+), 12 deletions(-)
 create mode 100644 .github/dependabot.yml

diff --git a/.github/dependabot.yml b/.github/dependabot.yml
new file mode 100644
index 00000000..cc3185a1
--- /dev/null
+++ b/.github/dependabot.yml
@@ -0,0 +1,13 @@
+version: 2
+updates:
+  - package-ecosystem: "github-actions"
+    directory: "/" # Don't change this despite the path being .github/workflows
+    schedule:
+      # Check for updates to GitHub Actions on the first day of the month
+      interval: "monthly"
+
+  - package-ecosystem: "gomod"
+    directory: "/"
+    schedule:
+      # Check for updates to Go modules on the first day of the month
+      interval: "monthly"
diff --git a/.github/workflows/CI.yml b/.github/workflows/CI.yml
index 00e627ee..11699509 100644
--- a/.github/workflows/CI.yml
+++ b/.github/workflows/CI.yml
@@ -8,26 +8,26 @@ on:
 
 jobs:
   build-test:
-    name: Build, test & format
+    name: Build, test, and format
     strategy:
       matrix:
         go-version: [1.16.x, 1.17.x]
         platform: [ubuntu-latest, macos-latest, windows-latest]
     runs-on: ${{ matrix.platform }}
     steps:
-    - uses: actions/checkout@v2
+    - uses: actions/checkout@ac593985615ec2ede58e132d2e21d2b1cbd6127c # v3.3.0
 
-    - name: setup go
-      uses: actions/setup-go@v2
+    - name: Setup Go
+      uses: actions/setup-go@6edd4406fa81c3da01a34fa6f6343087c207a568 # v3.5.0
       with:
         go-version: ${{ matrix.go-version }}
 
+    - name: Format
+      if: matrix.platform == 'ubuntu-latest'
+      run: if [ "$(gofmt -s -l . | wc -l)" -gt 0 ]; then exit 1; fi
+
     - name: Build
       run: go build -v ./...
 
     - name: Test
       run: go test -v ./...
-
-    - name: Format
-      if: matrix.platform == 'ubuntu-latest'
-      run: if [ "$(gofmt -s -l . | wc -l)" -gt 0 ]; then exit 1; fi
diff --git a/.github/workflows/docker.yml b/.github/workflows/docker.yml
index 58a1b5a2..09600af3 100644
--- a/.github/workflows/docker.yml
+++ b/.github/workflows/docker.yml
@@ -9,15 +9,13 @@ jobs:
     timeout-minutes: 30
     steps:
       - name: Set up QEMU for multi-architecture builds
-        uses: docker/setup-qemu-action@c308fdd69d26ed66f4506ebd74b180abe5362145 #v1.1.0
+        uses: docker/setup-qemu-action@e81a89b1732b9c48d79cd809d8d81d79c4647a18 #v2.1.0
         with:
           image: tonistiigi/binfmt:latest
           platforms: all
 
       - name: Check out this repo
-        uses: actions/checkout@5a4ac9002d0be2fb38bd78e4b4dbde5606d7042f # v2.3.4
-        with:
-          fetch-depth: 1 # Checkout only latest commit
+        uses: actions/checkout@755da8c3cf115ac066823e79a1e1788f8940201b # v3.2.0
 
       - name: Login to Github Packages Container registry with ephemeral token
         run: docker login ghcr.io --username ${{ github.actor }} --password ${{ secrets.GITHUB_TOKEN }}