MNT: Update GHA workflows (#72)

* Update GHA workflows

* add dependabot

Author: jaimergp

.github/dependabot.yml

@@ -0,0 +1,22 @@
+version: 2
+updates:
+  - package-ecosystem: pip
+    directory: /docs/
+    schedule:
+      interval: monthly
+    allow:
+      # Allow only production updates for Sphinx
+      - dependency-name: sphinx
+        dependency-type: production
+    groups:
+      docs:
+        patterns:
+          - '*'
+  - package-ecosystem: github-actions
+    directory: /.github/workflows
+    schedule:
+      interval: monthly
+    groups:
+      workflows:
+        patterns:
+          - '*'

.github/workflows/build-vm-images.yml

@@ -14,23 +14,23 @@ jobs:
     runs-on: "cirun-runner--${{ github.run_id }}"
 
     steps:
-      - uses: actions/checkout@v3
+      - uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5.0.0
       - id: 'auth'
         name: 'Authenticate to Google Cloud'
-        uses: 'google-github-actions/auth@v0'
+        uses: google-github-actions/auth@7c6bc770dae815cd3e89ee6cdf493a5fab2cc093 # v3.0.0
         with:
           credentials_json: '${{ secrets.GOOGLE_CREDENTIALS }}'
 
       - name: Setup Node.js environment
-        uses: actions/setup-node@v3.5.1
+        uses: actions/setup-node@2028fbc5c25fe9cf00d9f06a71cc4710d4507903 # v6.0.0
         with:
           node-version: 16
 
       - name: Check NVIDIA SMI
         run: nvidia-smi || true
 
       - name: Setup Miniconda
-        uses: conda-incubator/setup-miniconda@v2.2.0
+        uses: conda-incubator/setup-miniconda@835234971496cad1653abb28a638a281cf32541f # v3.2.0
         with:
           python-version: "3.10"
           miniconda-version: "latest"
@@ -67,7 +67,7 @@ jobs:
 
       - id: 'upload-file'
         name: Upload built disk image to GCS
-        uses: 'google-github-actions/upload-cloud-storage@v1'
+        uses: google-github-actions/upload-cloud-storage@6397bd7208e18d13ba2619ee21b9873edc94427a # v3.0.0
         with:
           path: '/tmp/output-image/${{ steps.output-image.outputs.OUTPUT_IMAGE_NAME}}.qcow2'
           destination: 'cirun/images/'

.github/workflows/openstack.yml

@@ -32,10 +32,10 @@ jobs:
       run:
         shell: bash -el {0}
     steps:
-      - uses: actions/checkout@v3
+      - uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5.0.0
 
       - name: Setup Miniconda
-        uses: conda-incubator/setup-miniconda@v2.2.0
+        uses: conda-incubator/setup-miniconda@835234971496cad1653abb28a638a281cf32541f # v3.2.0
         with:
           python-version: "3.10"
           miniconda-version: "latest"
@@ -52,10 +52,10 @@ jobs:
         run: |
           echo '${{ secrets.GOOGLE_CREDENTIALS }}' > /tmp/gcp.json
 
-      - uses: actions/checkout@v3
+      - uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5.0.0
       - id: 'auth'
         name: 'Authenticate to Google Cloud'
-        uses: 'google-github-actions/auth@v0'
+        uses: 'google-github-actions/auth@7c6bc770dae815cd3e89ee6cdf493a5fab2cc093' # v3.0.0
         with:
           credentials_json: ${{ secrets.GOOGLE_CREDENTIALS }}
 

.github/workflows/usernames.yml

@@ -11,8 +11,8 @@ jobs:
     name: Validate usernames
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v4
-      - uses: actions/setup-python@v4
+      - uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5.0.0
+      - uses: actions/setup-python@e797f83bcb11b83ae66e0230d6156d7c80228e7c # v6.0.0
         with:
           python-version: 3.x
       - name: Install requests