update workflow actions (#701)

* update workflow actions

* update workflow actions

Author: markuspoerschke

.github/workflows/auto-merge.yml

@@ -6,7 +6,7 @@ jobs:
   auto-merge:
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v6
       - uses: ahmadnassri/action-dependabot-auto-merge@v2.6
         with:
           target: minor

.github/workflows/code-style.yml

@@ -17,7 +17,7 @@ jobs:
         with:
           args: --write .
 
-      - uses: stefanzweifel/git-auto-commit-action@v5.1.0
+      - uses: stefanzweifel/git-auto-commit-action@v7.1.0
         with:
           commit_user_name: Markus Poerschke (Bot)
           commit_user_email: markus+githubbot@poerschke.nrw

.github/workflows/danger.yml

@@ -6,7 +6,7 @@ jobs:
     name: Danger JS
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v6
       - name: Danger
         uses: docker://ghcr.io/danger/danger-js:10.6.6
         env:

.github/workflows/draft-new-release.yml

@@ -22,7 +22,7 @@ jobs:
           token: ${{ secrets.PAT }}
 
       - name: Update changelog
-        uses: thomaseizinger/keep-a-changelog-new-release@1.3.0
+        uses: thomaseizinger/keep-a-changelog-new-release@3.1.0
         with:
           version: ${{ github.event.inputs.version }}
 
@@ -33,7 +33,7 @@ jobs:
 
       - run: git checkout -b release/${{ github.event.inputs.version }}
 
-      - uses: stefanzweifel/git-auto-commit-action@v5.1.0
+      - uses: stefanzweifel/git-auto-commit-action@v7.1.0
         with:
           branch: release/${{ github.event.inputs.version }}
           commit_user_name: Markus Poerschke (Bot)
@@ -43,8 +43,6 @@ jobs:
 
       - name: Create pull request
         uses: thomaseizinger/create-pull-request@1.4.0
-        env:
-          GITHUB_TOKEN: ${{ secrets.PAT }}
         with:
           head: release/${{ github.event.inputs.version }}
           base: ${{ github.event.inputs.target_branch }}
@@ -56,3 +54,4 @@ jobs:
             This PR was created in response to a manual trigger of the release workflow here: https://github.com/${{ github.repository }}/actions/runs/${{ github.run_id }}.
             I've updated the changelog: ${{ steps.make-commit.outputs.commit }}.
             Merging this PR will create a GitHub release.
+          github_token: ${{ secrets.PAT }}

.github/workflows/publish-new-release.yml

@@ -13,8 +13,7 @@ jobs:
     runs-on: ubuntu-latest
     if: github.event.pull_request.merged == true && startsWith(github.event.pull_request.head.ref, 'release/')
     steps:
-      - name: Checkout
-        uses: actions/checkout@v4
+      - uses: actions/checkout@v6
 
       - name: Extract version from branch name (for release branches)
         run: |
@@ -30,13 +29,12 @@ jobs:
           version: ${{ env.RELEASE_VERSION }}
 
       - name: Create Release
-        uses: thomaseizinger/create-release@1.0.0
-        env:
-          GITHUB_TOKEN: ${{ secrets.PAT }}
+        uses: thomaseizinger/create-release@2.0.0
         with:
           target_commitish: ${{ github.event.pull_request.merge_commit_sha }}
           tag_name: ${{ env.RELEASE_VERSION }}
           name: ${{ env.RELEASE_VERSION }}
           body: ${{ steps.changelog.outputs.description }}
           draft: false
           prerelease: false
+          github_token: ${{ secrets.PAT }}

.github/workflows/reviewdog.yml

@@ -7,7 +7,7 @@ jobs:
     name: Spell check
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v6
       - uses: reviewdog/action-languagetool@v1
         with:
           github_token: ${{ secrets.PAT }}