More CI and dependabot (#352)

* Add dependabot config

* Only specify major versions of actions.

* Add changelog fragment

.github/dependabot.yml

@@ -0,0 +1,11 @@
+# Copyright 2022, Collabora, Ltd.
+# SPDX-License-Identifier: CC0-1.0
+
+version: 2
+
+updates:
+  # for actions, define the paths relative to .github/workflows
+  - directory: /
+    package-ecosystem: github-actions
+    schedule:
+      interval: weekly

.github/workflows/android-helloxr-ci.yml

@@ -13,7 +13,7 @@ jobs:
       - name: Install ninja-build tool
         uses: seanmiddleditch/gha-setup-ninja@v3
       - name: Set up JDK 11
-        uses: actions/setup-java@v3.6.0
+        uses: actions/setup-java@v3
         with:
           java-version: "11"
           distribution: "temurin"

.github/workflows/android-release.yml

@@ -17,7 +17,7 @@ jobs:
         uses: seanmiddleditch/gha-setup-ninja@v3
 
       - name: set up JDK 11
-        uses: actions/setup-java@v3.6.0
+        uses: actions/setup-java@v3
         with:
           java-version: "11"
           distribution: "temurin"
@@ -55,7 +55,7 @@ jobs:
       - name: Install ninja-build tool
         uses: seanmiddleditch/gha-setup-ninja@v3
       - name: set up JDK 11
-        uses: actions/setup-java@v3.6.0
+        uses: actions/setup-java@v3
         with:
           java-version: "11"
           distribution: "temurin"

.github/workflows/android-snapshot.yml

@@ -14,7 +14,7 @@ jobs:
         uses: seanmiddleditch/gha-setup-ninja@v3
 
       - name: set up JDK 11
-        uses: actions/setup-java@v3.6.0
+        uses: actions/setup-java@v3
         with:
           java-version: "11"
           distribution: "temurin"

changes/sdk/pr.351.gh.OpenXR-SDK-Source.md

@@ -0,0 +1,5 @@
+---
+- pr.352.gh.OpenXR-SDK-Source
+---
+- Improve GitHub CI for OpenXR-SDK-Source.
+- Enable dependabot for GitHub Actions.