ci: unpin CFLite

The idea was to catch CFLite regressions but since the action itself
pulls the latest docker images it can't be pinned properly and issues
like google/clusterfuzzlite#91 are going to
pop up anyway. Let's unpin it by analogy with CIFuzz and hope it doesn't
break very often.

Waiting for google/clusterfuzzlite#96

.clusterfuzzlite/Dockerfile

@@ -1,4 +1,4 @@
-FROM gcr.io/oss-fuzz-base/base-builder@sha256:14b332de0e18683f37386eaedbf735bc6e8d81f9c0e1138d620f2178e20cd30a
+FROM gcr.io/oss-fuzz-base/base-builder:latest
 ENV MERGE_WITH_OSS_FUZZ_CORPORA=yes
 COPY . $SRC/systemd
 WORKDIR $SRC/systemd

.github/dependabot.yml

@@ -12,8 +12,3 @@ updates:
     schedule:
       interval: "monthly"
     open-pull-requests-limit: 2
-  - package-ecosystem: "docker"
-    directory: "/.clusterfuzzlite"
-    schedule:
-      interval: "monthly"
-    open-pull-requests-limit: 2

.github/workflows/cflite_pr.yml

@@ -25,13 +25,13 @@ jobs:
     steps:
     - name: Build Fuzzers (${{ matrix.sanitizer }})
       id: build
-      uses: google/clusterfuzzlite/actions/build_fuzzers@41dccd0566905e2a7d1724e7883edbfa66d78877
+      uses: google/clusterfuzzlite/actions/build_fuzzers@main
       with:
         sanitizer: ${{ matrix.sanitizer }}
         github-token: ${{ secrets.GITHUB_TOKEN }}
     - name: Run Fuzzers (${{ matrix.sanitizer }})
       id: run
-      uses: google/clusterfuzzlite/actions/run_fuzzers@41dccd0566905e2a7d1724e7883edbfa66d78877
+      uses: google/clusterfuzzlite/actions/run_fuzzers@main
       with:
         github-token: ${{ secrets.GITHUB_TOKEN }}
         fuzz-seconds: 1200