[Security] Enable Dependabot support, update to most recent versions

.github/dependabot.yml

@@ -0,0 +1,17 @@
+# Basic dependabot.yml file for Dockerfile dependency updates
+
+version: 2
+updates:
+  # Enable version updates for Docker
+  - package-ecosystem: "docker"
+    # Look for a `Dockerfile` in the `root` directory
+    directory: "/"
+    # Check for updates daily
+    schedule:
+      interval: "daily"
+
+  # Enable version updates for Python pip
+  - package-ecosystem: "pip"
+    directory: "/"
+    schedule:
+      interval: "daily"

Dockerfile

@@ -1,4 +1,4 @@
-FROM python:3.8-alpine
+FROM python:3.10.3-alpine
 
 LABEL "com.github.actions.name"="S3 Sync"
 LABEL "com.github.actions.description"="Sync a directory to an AWS S3 repository"
@@ -10,10 +10,9 @@ LABEL repository="https://github.com/jakejarvis/s3-sync-action"
 LABEL homepage="https://jarv.is/"
 LABEL maintainer="Jake Jarvis <[email protected]>"
 
-# https://github.com/aws/aws-cli/blob/master/CHANGELOG.rst
-ENV AWSCLI_VERSION='1.18.14'
+COPY requirements.txt /data/requirements.txt
 
-RUN pip install --quiet --no-cache-dir awscli==${AWSCLI_VERSION}
+RUN pip install --quiet --no-cache-dir -r /data/requirements.txt
 
 ADD entrypoint.sh /entrypoint.sh
 ENTRYPOINT ["/entrypoint.sh"]

requirements.txt

@@ -0,0 +1 @@
+awscli==1.22.76