Merge branch 'main' into documentation-review

Author: tleonhardt

.github/workflows/gemini-dispatch.yml

@@ -74,7 +74,7 @@ jobs:
         id: "mint_identity_token"
         if: |-
           ${{ vars.APP_ID }}
-        uses: "actions/create-github-app-token@a8d616148505b5069dccd32f177bb87d7f39123b" # ratchet:actions/create-github-app-token@v2
+        uses: "actions/create-github-app-token@67018539274d69449ef7c02e8e71183d1719ab42" # ratchet:actions/create-github-app-token@v2
         with:
           app-id: "${{ vars.APP_ID }}"
           private-key: "${{ secrets.APP_PRIVATE_KEY }}"
@@ -84,7 +84,7 @@ jobs:
 
       - name: "Extract command"
         id: "extract_command"
-        uses: "actions/github-script@60a0d83039c74a4aee543508d2ffcb1c3799cdea" # ratchet:actions/github-script@v7
+        uses: "actions/github-script@ed597411d8f924073f98dfc5c65a23a2325f34cd" # ratchet:actions/github-script@v7
         env:
           EVENT_TYPE: "${{ github.event_name }}.${{ github.event.action }}"
           REQUEST:
@@ -186,7 +186,7 @@ jobs:
         id: "mint_identity_token"
         if: |-
           ${{ vars.APP_ID }}
-        uses: "actions/create-github-app-token@a8d616148505b5069dccd32f177bb87d7f39123b" # ratchet:actions/create-github-app-token@v2
+        uses: "actions/create-github-app-token@67018539274d69449ef7c02e8e71183d1719ab42" # ratchet:actions/create-github-app-token@v2
         with:
           app-id: "${{ vars.APP_ID }}"
           private-key: "${{ secrets.APP_PRIVATE_KEY }}"

.github/workflows/gemini-invoke.yml

@@ -31,7 +31,7 @@ jobs:
         id: "mint_identity_token"
         if: |-
           ${{ vars.APP_ID }}
-        uses: "actions/create-github-app-token@a8d616148505b5069dccd32f177bb87d7f39123b" # ratchet:actions/create-github-app-token@v2
+        uses: "actions/create-github-app-token@67018539274d69449ef7c02e8e71183d1719ab42" # ratchet:actions/create-github-app-token@v2
         with:
           app-id: "${{ vars.APP_ID }}"
           private-key: "${{ secrets.APP_PRIVATE_KEY }}"

.github/workflows/gemini-review.yml

@@ -32,7 +32,7 @@ jobs:
         id: "mint_identity_token"
         if: |-
           ${{ vars.APP_ID }}
-        uses: "actions/create-github-app-token@a8d616148505b5069dccd32f177bb87d7f39123b" # ratchet:actions/create-github-app-token@v2
+        uses: "actions/create-github-app-token@67018539274d69449ef7c02e8e71183d1719ab42" # ratchet:actions/create-github-app-token@v2
         with:
           app-id: "${{ vars.APP_ID }}"
           private-key: "${{ secrets.APP_PRIVATE_KEY }}"

.github/workflows/gemini-scheduled-triage.yml

@@ -40,7 +40,7 @@ jobs:
     steps:
       - name: "Get repository labels"
         id: "get_labels"
-        uses: "actions/github-script@60a0d83039c74a4aee543508d2ffcb1c3799cdea" # ratchet:actions/github-script@v7.0.1
+        uses: "actions/github-script@ed597411d8f924073f98dfc5c65a23a2325f34cd" # ratchet:actions/github-script@v8.0.0
         with:
           # NOTE: we intentionally do not use the minted token. The default
           # GITHUB_TOKEN provided by the action has enough permissions to read
@@ -240,7 +240,7 @@ jobs:
         id: "mint_identity_token"
         if: |-
           ${{ vars.APP_ID }}
-        uses: "actions/create-github-app-token@a8d616148505b5069dccd32f177bb87d7f39123b" # ratchet:actions/create-github-app-token@v2
+        uses: "actions/create-github-app-token@67018539274d69449ef7c02e8e71183d1719ab42" # ratchet:actions/create-github-app-token@v2
         with:
           app-id: "${{ vars.APP_ID }}"
           private-key: "${{ secrets.APP_PRIVATE_KEY }}"
@@ -252,7 +252,7 @@ jobs:
         env:
           AVAILABLE_LABELS: "${{ needs.triage.outputs.available_labels }}"
           TRIAGED_ISSUES: "${{ needs.triage.outputs.triaged_issues }}"
-        uses: "actions/github-script@60a0d83039c74a4aee543508d2ffcb1c3799cdea" # ratchet:actions/github-script@v7.0.1
+        uses: "actions/github-script@ed597411d8f924073f98dfc5c65a23a2325f34cd" # ratchet:actions/github-script@v8.0.0
         with:
           # Use the provided token so that the "gemini-cli" is the actor in the
           # log for what changed the labels.

.github/workflows/gemini-triage.yml

@@ -33,7 +33,7 @@ jobs:
     steps:
       - name: "Get repository labels"
         id: "get_labels"
-        uses: "actions/github-script@60a0d83039c74a4aee543508d2ffcb1c3799cdea" # ratchet:actions/github-script@v7.0.1
+        uses: "actions/github-script@ed597411d8f924073f98dfc5c65a23a2325f34cd" # ratchet:actions/github-script@v8.0.0
         with:
           # NOTE: we intentionally do not use the given token. The default
           # GITHUB_TOKEN provided by the action has enough permissions to read
@@ -142,7 +142,7 @@ jobs:
         id: "mint_identity_token"
         if: |-
           ${{ vars.APP_ID }}
-        uses: "actions/create-github-app-token@a8d616148505b5069dccd32f177bb87d7f39123b" # ratchet:actions/create-github-app-token@v2
+        uses: "actions/create-github-app-token@67018539274d69449ef7c02e8e71183d1719ab42" # ratchet:actions/create-github-app-token@v2
         with:
           app-id: "${{ vars.APP_ID }}"
           private-key: "${{ secrets.APP_PRIVATE_KEY }}"
@@ -155,7 +155,7 @@ jobs:
           ISSUE_NUMBER: "${{ github.event.issue.number }}"
           AVAILABLE_LABELS: "${{ needs.triage.outputs.available_labels }}"
           SELECTED_LABELS: "${{ needs.triage.outputs.selected_labels }}"
-        uses: "actions/github-script@60a0d83039c74a4aee543508d2ffcb1c3799cdea" # ratchet:actions/github-script@v7.0.1
+        uses: "actions/github-script@ed597411d8f924073f98dfc5c65a23a2325f34cd" # ratchet:actions/github-script@v8.0.0
         with:
           # Use the provided token so that the "gemini-cli" is the actor in the
           # log for what changed the labels.