Enable Dependabot version updating. (#857)

.github/workflows/CI.yml

@@ -8,26 +8,26 @@ on:
 
 jobs:
   build-test:
-    name: Build, test & format
+    name: Build, test, and format
     strategy:
       matrix:
         go-version: [1.16.x, 1.17.x]
         platform: [ubuntu-latest, macos-latest, windows-latest]
     runs-on: ${{ matrix.platform }}
     steps:
-    - uses: actions/checkout@v2
+    - uses: actions/checkout@ac593985615ec2ede58e132d2e21d2b1cbd6127c # v3.3.0
 
-    - name: setup go
-      uses: actions/setup-go@v2
+    - name: Setup Go
+      uses: actions/setup-go@6edd4406fa81c3da01a34fa6f6343087c207a568 # v3.5.0
       with:
         go-version: ${{ matrix.go-version }}
 
+    - name: Format
+      if: matrix.platform == 'ubuntu-latest'
+      run: if [ "$(gofmt -s -l . | wc -l)" -gt 0 ]; then exit 1; fi
+
     - name: Build
       run: go build -v ./...
 
     - name: Test
       run: go test -v ./...
-
-    - name: Format
-      if: matrix.platform == 'ubuntu-latest'
-      run: if [ "$(gofmt -s -l . | wc -l)" -gt 0 ]; then exit 1; fi

.github/workflows/docker.yml

@@ -9,15 +9,13 @@ jobs:
     timeout-minutes: 30
     steps:
       - name: Set up QEMU for multi-architecture builds
-        uses: docker/setup-qemu-action@c308fdd69d26ed66f4506ebd74b180abe5362145 #v1.1.0
+        uses: docker/setup-qemu-action@e81a89b1732b9c48d79cd809d8d81d79c4647a18 #v2.1.0
         with:
           image: tonistiigi/binfmt:latest
           platforms: all
 
       - name: Check out this repo
-        uses: actions/checkout@5a4ac9002d0be2fb38bd78e4b4dbde5606d7042f # v2.3.4
-        with:
-          fetch-depth: 1 # Checkout only latest commit
+        uses: actions/checkout@755da8c3cf115ac066823e79a1e1788f8940201b # v3.2.0
 
       - name: Login to Github Packages Container registry with ephemeral token
         run: docker login ghcr.io --username ${{ github.actor }} --password ${{ secrets.GITHUB_TOKEN }}