Document manually updated dependencies (#31)

Author: johnboyes

.devcontainer/Dockerfile

@@ -7,7 +7,7 @@ FROM mcr.microsoft.com/vscode/devcontainers/base:${VARIANT}
 
 
 ARG GIT_EDITOR_SCRIPT_SOURCE="https://raw.githubusercontent.com/microsoft/vscode-dev-containers/master/containers/codespaces-linux/.devcontainer/git-ed.sh"
-ARG SHELLCHECK_VERSION="v0.7.1"
+ARG SHELLCHECK_VERSION="v0.7.0"
 SHELL ["/bin/bash", "-o", "pipefail", "-c"]
 # hadolint ignore=DL3008
 RUN apt-get update \

.github/workflows/dependabot_hack.yml

@@ -11,7 +11,19 @@ jobs:
     name: Ensure dependabot version checks
     runs-on: ubuntu-latest
     steps:
+
+      # update the version manually in these places, too:
+      #   - the default version in `action.yml`
+      #   - the example version in the README
+      #   - the latest version in the 'tests.yml'
+      - uses: SpectoLabs/[email protected]
+
+      # update the version in `check_semver_labels.yml` manually, too
+      # (eventually Dependabot will do this automatically and I won't need this hack)
       - uses: agilepathway/[email protected]
+
+      # update the version in the devcontainer `Dockerfile` manually, too
       - uses: koalaman/[email protected]
+
+      # update the version in `github_tag_and_release.yml` manually, too
       - uses: golang/[email protected]
-      - uses: SpectoLabs/[email protected]

.github/workflows/github_tag_and_release.yml

@@ -34,7 +34,7 @@ jobs:
         name: Set up Go
         uses: actions/[email protected]
         with:
-          go-version: 1.14
+          go-version: 1.14.6
       -
         name: Run GoReleaser
         uses: goreleaser/[email protected]