Merge pull request #13 from philips-software/feature/add-dependabot

chore: add dependabot and pin actions on sha

Author: edwardvandevorst-philips

.github/dependabot.yml

@@ -0,0 +1,15 @@
+---
+version: 2
+
+updates:
+  - package-ecosystem: github-actions
+    directory: /
+    schedule:
+      interval: weekly
+    groups:
+      github-actions:
+        update-types:
+          - minor
+          - patch
+    commit-message:
+      prefix: "ci(deps)"

.github/workflows/test.yml

@@ -29,10 +29,7 @@ jobs:
         docker_container: ["mcr.microsoft.com/windows/servercore:ltsc2019"]
 
     steps:
-      - name: Checkout
-        uses: actions/checkout@v3
-        with:
-          fetch-depth: 0
+      - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
       - name: Test_Run_Default
         uses: ./
         with:
@@ -113,10 +110,7 @@ jobs:
     container: mcr.microsoft.com/powershell:7.5-ubuntu-24.04
 
     steps:
-      - name: Checkout
-        uses: actions/checkout@v3
-        with:
-          fetch-depth: 0
+      - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
       - name: Install
         shell: pwsh
         run: >-

.github/workflows/update-readme.yml

@@ -1,4 +1,5 @@
 name: Update README
+
 on:
   push:
     branches: [ main ]
@@ -9,26 +10,26 @@ jobs:
     runs-on: ubuntu-latest
 
     steps:
-      - uses: actions/checkout@v3
+      - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
 
       - name: Update README
-        uses: npalm/action-docs-action@v1.2.0
+        uses: npalm/action-docs-action@b1dd20339140224c1ffef389467e4fece8dc416b # v3.1.2
         with:
           readme: ./README.md
           actionFile: ./action.yml
           tocLevel: 2
           lineBreaks: LF
 
       - name: commit and push
-        uses: stefanzweifel/git-auto-commit-action@v4.15.0
+        uses: stefanzweifel/git-auto-commit-action@b863ae1933cb653a53c021fe36dbb774e1fb9403 # v5.2.0
         with:
           commit_message: "Auto-update README.md"
           branch: "update-readme"
           push_options: '--force'
           create_branch: true
 
       - name: Create pull request
-        uses: devops-infra/action-pull-request@master
+        uses: devops-infra/action-pull-request@ff118b4a7c24bac5a3c95acef59e9edd1fc37890 # v0.6.0
         with:
           github_token: ${{ secrets.GITHUB_TOKEN }}
           source_branch: update-readme