chore: pin GH actions; use Go stable and oldstable

Signed-off-by: thediveo <[email protected]>

Author: thediveo

Diff for: .devcontainer/devcontainer.json

@@ -17,7 +17,8 @@
             "race": true,
             "verbose": true,
             "html": true
-        }
+        },
+        "ghcr.io/thediveo/devcontainer-features/pin-github-action:0": {}
     },
     "remoteEnv": {
         "GOPATH": "/home/vscode/go",

Diff for: .github/workflows/buildandtest.yaml

@@ -14,17 +14,17 @@ jobs:
     runs-on: ubuntu-latest
     strategy:
       matrix:
-        go: [ '1.19', '1.20' ]
+        go: [ 'stable', 'oldstable' ]
     steps:
 
       - name: Set up Go ${{matrix.go}}
-        uses: actions/setup-go@6edd4406fa81c3da01a34fa6f6343087c207a568 # pin@v3
+        uses: actions/setup-go@6edd4406fa81c3da01a34fa6f6343087c207a568 # pin@v4
         with:
           go-version: ${{matrix.go}}
         id: go
 
       - name: Check out code into the Go module directory
-        uses: actions/checkout@ac593985615ec2ede58e132d2e21d2b1cbd6127c # pin@v3
+        uses: actions/checkout@f43a0e5ff2bd294095638e18286ca9a3d1956744 # pin@v3
 
       - name: Test
         run: go test -v -p=1 -race ./...