MNT: Use hash for Action workflow versions and update, and add dependabot, if needed #454

	# GitHub Actions workflow for testing and continuous integration.
	#
	# This file performs testing using tox and tox.ini to define and configure the test environments.

	name: CI

	on:
	push:
	pull_request:

	jobs:
	# Github Actions supports ubuntu, windows, and macos virtual environments:
	# https://help.github.com/en/actions/reference/virtual-environments-for-github-hosted-runners
	ci_tests:
	name: ${{ matrix.name }}
	runs-on: ${{ matrix.os }}
	strategy:
	matrix:
	include:

	- name: Python 3.8
	os: ubuntu-latest
	python: 3.8

	- name: Python 3.9
	os: ubuntu-latest
	python: 3.9

	# - name: Python 3.10
	# os: ubuntu-latest
	# python: 3.10

	- name: Python 3.8 (mac)
	os: macos-latest
	python: 3.8

	- name: Python 3.9 (mac)
	os: macos-latest
	python: 3.9

	# - name: Python 3.10 (mac)
	# os: macos-latest
	# python: 3.10

	steps:
	- name: Checkout code
	uses: actions/checkout@d632683dd7b4114ad314bca15554477dd762a938 # v4.2.0
	with:
	fetch-depth: 0
	- name: Set up environment
	uses: conda-incubator/setup-miniconda@a4260408e20b96e80095f42ff7f1a15b27dd94ca # v3.0.4
	with:
	activate-environment: jwst_validation_notebooks
	environment-file: environment.yml
	python-version: ${{ matrix.python }}
	auto-activate-base: false
	- name: Test with nbpages
	shell: bash -l {0}
	run: \|
	cd jwst_validation_notebooks
	python -m "nbpages.check_nbs"

Provide feedback