Update Go testing
- Update CI to test all latest versions.
- Bump GitHub actions and pin versions for supply chain security.
- Enable dependabot to update GitHub actions.
:eyeglasses: @dormando
I'm (personally) very conservative when bumping minimum versions for things. Can you add justifications for it in the commits/PR at least? Maybe separate it out if it's not necessary?
I've also tried to be more conservative about bumping minimum versions. But the Go upstream only supports the latest 2 releases.
So I typically recommend most libraries follow this policy.
But I'm happy to increase the support window here.
Thanks! we can tighten that later once I better understand the userbase. memcached has a lot of users with fairly static environments (from bureaucracy or lack of time) but they sometimes need to urgently get a bug fixed.