Pin GHA versions and add dependabot

.github/dependabot.yml

@@ -0,0 +1,6 @@
+version: 2
+updates:
+  - package-ecosystem: github-actions
+    directory: '/'
+    schedule:
+      interval: daily

.github/workflows/calc.yml

@@ -6,14 +6,14 @@ on:
   pull_request:
     branches: [ master ]
 
-jobs: 
+jobs:
   build:
     name: Cargo test
     runs-on: ubuntu-latest
 
     steps:
       - name: Checkout sources
-        uses: actions/checkout@v2.4.0
+        uses: actions/checkout@v3
 
       - name: Install Rust stable toolchain
         uses: actions-rs/toolchain@v1.0.7
@@ -22,7 +22,7 @@ jobs:
           toolchain: stable
 
       - name: Rust Cache
-        uses: Swatinem/rust-cache@v1.3.0
+        uses: Swatinem/rust-cache@6720f05bc48b77f96918929a9019fb2203ff71f8 # v2.0.0
 
       - name: Cargo test
         uses: actions-rs/cargo@v1.0.3

.github/workflows/nodejs.yml

@@ -20,17 +20,17 @@ jobs:
 
     steps:
     - name: Install wasm-pack
-      uses: jetli/wasm-pack-action@v0.3.0
+      uses: jetli/wasm-pack-action@f98777369a49686b132a9e8f0fdd59837bf3c3fd # v0.3.0
       with:
         version: v0.10.0
-    - uses: actions/checkout@v2
+    - uses: actions/checkout@v3
     - name: Use Node.js ${{ matrix.node-version }}
-      uses: actions/setup-node@v1
+      uses: actions/setup-node@v3
       with:
         node-version: ${{ matrix.node-version }}
     - run: yarn
     - run: yarn build
-  
+
   build-docs:
 
     runs-on: ubuntu-latest
@@ -40,33 +40,32 @@ jobs:
         node-version: [14.x]
 
     steps:
-    - uses: actions/checkout@v2
+    - uses: actions/checkout@v3
     - name: Use Node.js ${{ matrix.node-version }}
-      uses: actions/setup-node@v1
+      uses: actions/setup-node@v3
       with:
         node-version: ${{ matrix.node-version }}
     - run: yarn
     - run: yarn build:docs
 
   build-npm-release:
       # This test is to make sure sidecar can release a binary without any errors.
-      # This script does not publish a release, but instead uses yarn to create a tarball and 
-      # install it locally. Once installed a binary is attached to sidecars node_modules, and that 
-      # binary is then tested against. For more in depth information reference the docs at 
+      # This script does not publish a release, but instead uses yarn to create a tarball and
+      # install it locally. Once installed a binary is attached to sidecars node_modules, and that
+      # binary is then tested against. For more in depth information reference the docs at
       # `../../scripts/README.md`.
 
     runs-on: ubuntu-latest
 
-    strategy: 
+    strategy:
       matrix:
         node-version: [14.x]
-    
+
     steps:
-    - uses: actions/checkout@v2
+    - uses: actions/checkout@v3
     - name: Use Node.js ${{ matrix.node-version }}
-      uses: actions/setup-node@v1
+      uses: actions/setup-node@v3
       with:
         node-version: ${{ matrix.node-version }}
     - run: yarn
     - run: yarn test:test-release
-

.github/workflows/pr.yml

@@ -16,30 +16,30 @@ jobs:
     # Steps represent a sequence of tasks that will be executed as part of the job
     steps:
       - name: Checkout files
-        uses: actions/checkout@v2
+        uses: actions/checkout@v3
 
       - name: Install Node v16
-        uses: actions/setup-node@v2
+        uses: actions/setup-node@v3
         with:
           node-version: '16.13'
 
       - name: Get yarn cache directory path
         id: yarn-cache-dir-path
         run: echo "::set-output name=dir::$(yarn config get cacheFolder)"
 
-      - uses: actions/cache@v2
+      - uses: actions/cache@v3
         id: yarn-cache # use this to check for `cache-hit` (`steps.yarn-cache.outputs.cache-hit != 'true'`)
         with:
           path: ${{ steps.yarn-cache-dir-path.outputs.dir }}
           key: ${{ runner.os }}-yarn-${{ hashFiles('**/yarn.lock') }}
           restore-keys: |
             ${{ runner.os }}-yarn-
-      
+
       - name: Install JS dependencies
         run: yarn install
-        
+
       - name: Linter.
         run: yarn lint:ci
-        
+
       - name: Unit tests.
         run: yarn test