Dependabot version updates (#340)

* yamllint for newer file

* Allow for proper, lower-level, pinning

Makes for increased reproducibility (and overall control)

test/projects/gleamgleam/.github/workflows/test.yml

@@ -11,7 +11,7 @@ jobs:
   test:
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v4.2.2
       - uses: erlef/setup-beam@v1
         with:
           otp-version: "26.0.2"