ci: pin updatecli version using .tool-versions and autobump (#4340)

Author: v1v

.github/workflows/updatecli.yml

@@ -38,18 +38,14 @@ jobs:
       - uses: elastic/oblt-actions/updatecli/run@v1
         with:
           command: --experimental compose diff
-          # TODO: update to the latest version so the policies can work as expected.
-          #       latest changes in the policies require to use the dependson feature.
-          version: "v0.88.0"
+          version-file: .tool-versions
         env:
           GITHUB_TOKEN: ${{ steps.get_token.outputs.token }}
 
       - uses: elastic/oblt-actions/updatecli/run@v1
         with:
           command: --experimental compose apply
-          # TODO: update to the latest version so the policies can work as expected.
-          #       latest changes in the policies require to use the dependson feature.
-          version: "v0.88.0"
+          version-file: .tool-versions
         env:
           GITHUB_TOKEN: ${{ steps.get_token.outputs.token }}
 

.tool-versions

@@ -0,0 +1 @@
+updatecli v0.88.0

updatecli-compose.yaml

@@ -18,3 +18,8 @@ policies:
     values:
       - .ci/updatecli/values.d/scm.yml
       - .ci/updatecli/values.d/update-compose.yml
+
+  - name: Update Updatecli version
+    policy: ghcr.io/elastic/oblt-updatecli-policies/updatecli/version:0.2.0@sha256:013a37ddcdb627c46e7cba6fb9d1d7bc144584fa9063843ae7ee0f6ef26b4bea
+    values:
+      - .ci/updatecli/values.d/scm.yml