deps(actions): bump imjasonh/setup-crane from 0.5 to 0.6

[dependabot]

Bumps imjasonh/setup-crane from 0.5 to 0.6.

Release notes

Sourced from imjasonh/setup-crane's releases.

v0.6

What's Changed

• Pass action inputs via env to prevent script injection by @​amouat in imjasonh/setup-crane#18

New Contributors

• @​amouat made their first contribution in imjasonh/setup-crane#18

Full Changelog: imjasonh/setup-crane@v0.5...v0.6

Commits

• 59c71e9 Merge pull request #18 from amouat/harden-action-env
• 67f282d Update use-action.yaml
• 9feaf12 Pass action inputs via env to prevent script injection
• See full diff in compare view

[dependabot]

Labels

The following labels could not be found: dependencies, github-actions. Please create them before Dependabot can add them to a pull request.

Please fix the above issues or remove invalid values from dependabot.yml.

[0xmanhnv]

@dependabot rebase

[dependabot]

Looks like this PR is already up-to-date with main! If you'd still like to recreate it from scratch, overwriting any edits, you can request @dependabot recreate.

[0xmanhnv]

@dependabot rebase

[0xmanhnv]

Closing: dependabot now targets develop (#169), and this PR is based on main. Merging dep bumps to main directly would diverge main from develop (the root cause of the recent CI breakage). Dependabot will recreate the needed updates against develop, where they flow to main the normal way.

[dependabot]

OK, I won't notify you again about this release, but will get in touch when a new version is available. If you'd rather skip all updates until the next major or minor version, let me know by commenting @dependabot ignore this major version or @dependabot ignore this minor version. You can also ignore all major, minor, or patch releases for a dependency by adding an ignore condition with the desired update_types to your config file.

If you change your mind, just re-open this PR and I'll resolve any conflicts on it.