Update GH action dependencies and add dependabot auto-update

.github/actions/presubmit-variant/action.yml

@@ -8,7 +8,7 @@ runs:
   using: composite
   steps:
     - name: Setup QEMU
-      uses: docker/setup-qemu-action@v1.2.0
+      uses: docker/setup-qemu-action@53851d14592bedcffcf25ea515637cff71ef929a # v3.3.0
 
     - name: Populate workspace with variant source only
       shell: bash
@@ -20,8 +20,8 @@ runs:
           echo ".github/" >> .melangeignore && tree -a . && \
           sudo rm -rf /work && sudo mkdir /work
 
-    # Confirmed up-to-date on 2024-07-30
-    - uses: chainguard-images/actions/apko-build@70ef33423618955be903186c527e677a8bc4689b
+    # Confirmed up-to-date on: 2025-01-08
+    - uses: chainguard-images/actions/apko-build@df628db44fb3cf4ee72636f4443df37af6d1e3e5
       with:
         config: apko.yaml
         tag: quay.io/jetstack/${{ inputs.variant }}

.github/actions/release-variant/action.yml

@@ -9,7 +9,7 @@ inputs:
 runs:
   using: composite
   steps:
-    - uses: imjasonh/setup-crane@v0.3
+    - uses: imjasonh/setup-crane@31b88efe9de28ae0ffa220711af4b60be9435f6e # v0.4
 
     - name: Populate workspace with variant source only
       shell: bash
@@ -21,8 +21,8 @@ runs:
           echo ".github/" >> .melangeignore && tree -a . && \
           sudo rm -rf /work && sudo mkdir /work
 
-    # Confirmed up-to-date on: 2024-07-30
-    - uses: chainguard-images/actions/apko-snapshot@70ef33423618955be903186c527e677a8bc4689b
+    # Confirmed up-to-date on: 2025-01-08
+    - uses: chainguard-images/actions/apko-snapshot@df628db44fb3cf4ee72636f4443df37af6d1e3e5
       with:
         config: apko.yaml
         archs: aarch64,armv7,ppc64le,x86_64,s390x

.github/dependabot.yaml

@@ -0,0 +1,10 @@
+# Update GitHub Actions dependencies daily.
+version: 2
+updates:
+- package-ecosystem: github-actions
+  directory: /
+  schedule:
+    interval: daily
+  groups:
+    all:
+      patterns: ["*"]