Properly upgrade github actions pinned to specific commits

[deivid-rodriguez]

If the pinned commit sha is not the tip of any repo branch, we would "update" to the commit sha of the latest version, which might be actually a parent of the current sha.

The problem is that so far we were not cloning the repository, so all we can access is sha's discoverable through http /info/refs endpoint, or through git ls-remotes.

To properly update this kind of references, we need to clone the repository.

This is not ready at all, it at least needs some tests, but I wanted to share it.

Fixes #5556.

Before (downgrades to the sha of v17)

To use retry middleware with Faraday v2.0+, install `faraday-retry` gem
=> fetching dependency files
=> dumping fetched dependency files: ./dry-run/sigprof/nur-packages/
=> parsing dependency files
🌍 https//github.com:443/cachix/install-nix-action.git/info/refs
=> updating 1 dependencies: cachix/install-nix-action

=== cachix/install-nix-action ()
 => checking for updates 1/1
🌍 https//github.com:443/cachix/install-nix-action.git/info/refs
 => latest available version is 17
 => latest allowed version is 17
 => requirements to unlock: own
 => requirements update strategy: 
 => updating cachix/install-nix-action to 17

    ± .github/workflows/auto-update-flake.yml
    ~~~
    23c23
    <         uses: cachix/install-nix-action@92d36226ca2887d9bfe391bf2d00894d88be3b64
    ---
    >         uses: cachix/install-nix-action@d64e0553100205688c0fb2fa16edb0fc8663c590
    47c47
    <         uses: cachix/install-nix-action@92d36226ca2887d9bfe391bf2d00894d88be3b64
    ---
    >         uses: cachix/install-nix-action@d64e0553100205688c0fb2fa16edb0fc8663c590
    ~~~

    ± .github/workflows/auto-update.yml
    ~~~
    28c28
    <         uses: cachix/install-nix-action@92d36226ca2887d9bfe391bf2d00894d88be3b64
    ---
    >         uses: cachix/install-nix-action@d64e0553100205688c0fb2fa16edb0fc8663c590
    ~~~

    ± .github/workflows/ci.yml
    ~~~
    58c58
    <         uses: cachix/install-nix-action@92d36226ca2887d9bfe391bf2d00894d88be3b64
    ---
    >         uses: cachix/install-nix-action@d64e0553100205688c0fb2fa16edb0fc8663c590
    123c123
    <         uses: cachix/install-nix-action@92d36226ca2887d9bfe391bf2d00894d88be3b64
    ---
    >         uses: cachix/install-nix-action@d64e0553100205688c0fb2fa16edb0fc8663c590
    ~~~
🌍 Total requests made: '2'

After (upgrades to the latest commit in master)

bin/dry-run.rb github_actions sigprof/nur-packages --dep cachix/install-nix-action 
To use retry middleware with Faraday v2.0+, install `faraday-retry` gem
=> cloning into /home/dependabot/dependabot-core/tmp/sigprof/nur-packages
=> parsing dependency files
🌍 https//github.com:443/cachix/install-nix-action.git/info/refs
=> updating 1 dependencies: cachix/install-nix-action

=== cachix/install-nix-action ()
 => checking for updates 1/1
🌍 https//github.com:443/cachix/install-nix-action.git/info/refs
🌍 https//github.com:443/cachix/install-nix-action.git/info/refs
 => latest available version is e17a164a729f3f908f3997516f02ecaba2b9c201
 => latest allowed version is e17a164a729f3f908f3997516f02ecaba2b9c201
 => requirements to unlock: own
 => requirements update strategy: 
 => updating cachix/install-nix-action to e17a164a729f3f908f3997516f02ecaba2b9c201

    ± .github/workflows/auto-update-flake.yml
    ~~~
    23c23
    <         uses: cachix/install-nix-action@92d36226ca2887d9bfe391bf2d00894d88be3b64
    ---
    >         uses: cachix/install-nix-action@e17a164a729f3f908f3997516f02ecaba2b9c201
    47c47
    <         uses: cachix/install-nix-action@92d36226ca2887d9bfe391bf2d00894d88be3b64
    ---
    >         uses: cachix/install-nix-action@e17a164a729f3f908f3997516f02ecaba2b9c201
    ~~~

    ± .github/workflows/auto-update.yml
    ~~~
    28c28
    <         uses: cachix/install-nix-action@92d36226ca2887d9bfe391bf2d00894d88be3b64
    ---
    >         uses: cachix/install-nix-action@e17a164a729f3f908f3997516f02ecaba2b9c201
    ~~~

    ± .github/workflows/ci.yml
    ~~~
    58c58
    <         uses: cachix/install-nix-action@92d36226ca2887d9bfe391bf2d00894d88be3b64
    ---
    >         uses: cachix/install-nix-action@e17a164a729f3f908f3997516f02ecaba2b9c201
    123c123
    <         uses: cachix/install-nix-action@92d36226ca2887d9bfe391bf2d00894d88be3b64
    ---
    >         uses: cachix/install-nix-action@e17a164a729f3f908f3997516f02ecaba2b9c201
    ~~~
🌍 Total requests made: '3'

[deivid-rodriguez]

Added some specs here, so this is now ready from my side!

[pavera]

This looks good, I left a comment on #5017 regarding some work I'd looked at in this area as well.

[deivid-rodriguez]

Thank you for your reviews, let's do this!