Bump peter-evans/create-or-update-comment from 4 to 5 (#637)

* Bump peter-evans/create-or-update-comment from 4 to 5

Bumps [peter-evans/create-or-update-comment](https://github.com/peter-evans/create-or-update-comment) from 4 to 5.
- [Release notes](https://github.com/peter-evans/create-or-update-comment/releases)
- [Commits](peter-evans/create-or-update-comment@v4...v5)

---
updated-dependencies:
- dependency-name: peter-evans/create-or-update-comment
  dependency-version: '5'
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>

* Pin to peter-evans/create-or-update-comment v5.0.0 hash

Also update paths to be an array, and trim some leading whitespace.

---------

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: Wei Ji <23487320+weiji14@users.noreply.github.com>

Author: dependabot[bot]

.github/workflows/CondaLock.yml

@@ -89,7 +89,7 @@ jobs:
           git push
 
       - name: Add reaction
-        uses: peter-evans/create-or-update-comment@71345be0265236311c031f5c7866368bd1eff043 # v4.0.0
+        uses: peter-evans/create-or-update-comment@e8674b075228eee787fea43ef493e45ece1004c9 # v5.0.0
         with:
           token: ${{ secrets.GITHUB_TOKEN }}
           repository: ${{ github.event.client_payload.github.payload.repository.full_name }}

.github/workflows/PR.yml

@@ -4,7 +4,7 @@ name: PullRequest
 on:
   pull_request_target:
     types: [opened, reopened]
-    paths: "**/environment.yml"
+    paths: ["**/environment.yml"]
 
 permissions: {}
 
@@ -20,10 +20,10 @@ jobs:
           persist-credentials: false
 
       - name: Add Condalock Comment
-        uses: peter-evans/create-or-update-comment@v4
+        uses: peter-evans/create-or-update-comment@e8674b075228eee787fea43ef493e45ece1004c9 # v5.0.0
         with:
-           token: ${{ secrets.PANGEOBOT_TOKEN }}
-           issue-number: ${{github.event.number}}
-           body: |
-             /condalock
-             Automatically locking new conda environment, building, and testing images...
+          token: ${{ secrets.PANGEOBOT_TOKEN }}
+          issue-number: ${{github.event.number}}
+          body: |
+            /condalock
+            Automatically locking new conda environment, building, and testing images...