I suppose upgrading a dependency is the bit that I'm worried about. What's the recommended syntax for the github action version to remain consistent with pulumi versions, but also opt-in to security/bug fixes?