Merge pull request #37 from github/workflows

Workflow Updates

Author: GrantBirki

.github/workflows/branch-deploy.yml

@@ -28,7 +28,7 @@ jobs:
     steps:
       - name: branch-deploy
         id: branch-deploy
-        uses: github/branch-deploy@v9
+        uses: github/branch-deploy@v10
         with:
           trigger: ".deploy"
           environment: "production"
@@ -41,7 +41,7 @@ jobs:
         with:
           ref: ${{ steps.branch-deploy.outputs.sha }}
 
-      - uses: ruby/setup-ruby@d4526a55538b775af234ba4af27118ed6f8f6677 # pin@v1.172.0
+      - uses: ruby/setup-ruby@28c4deda893d5a96a6b2d958c5b47fc18d65c9d3 # pin@v1.213.0
         if: ${{ steps.branch-deploy.outputs.continue == 'true' }}
         with:
           bundler-cache: true

.github/workflows/checksum.yml

@@ -18,7 +18,7 @@ jobs:
         with:
           fetch-depth: 0
 
-      - uses: ruby/setup-ruby@d4526a55538b775af234ba4af27118ed6f8f6677 # pin@v1.172.0
+      - uses: ruby/setup-ruby@28c4deda893d5a96a6b2d958c5b47fc18d65c9d3 # pin@v1.213.0
         with:
           bundler-cache: true
 

.github/workflows/deploy.yml

@@ -17,7 +17,7 @@ jobs:
     steps:
       # https://github.com/github/branch-deploy/blob/d3c24bd92505e623615b75ffdfac5ed5259adbdb/docs/merge-commit-strategy.md
       - name: deployment check
-        uses: github/branch-deploy@v9
+        uses: github/branch-deploy@v10
         id: deployment-check
         with:
           merge_deploy_mode: "true"
@@ -33,7 +33,7 @@ jobs:
       - name: checkout
         uses: actions/checkout@v4
 
-      - uses: ruby/setup-ruby@d4526a55538b775af234ba4af27118ed6f8f6677 # pin@v1.172.0
+      - uses: ruby/setup-ruby@28c4deda893d5a96a6b2d958c5b47fc18d65c9d3 # pin@v1.213.0
         with:
           bundler-cache: true
 

.github/workflows/manager.yml

@@ -18,7 +18,7 @@ jobs:
         with:
           fetch-depth: 0
 
-      - uses: ruby/setup-ruby@d4526a55538b775af234ba4af27118ed6f8f6677 # pin@v1.172.0
+      - uses: ruby/setup-ruby@28c4deda893d5a96a6b2d958c5b47fc18d65c9d3 # pin@v1.213.0
         with:
           bundler-cache: true
 

.github/workflows/new-pr.yml

@@ -17,8 +17,9 @@ jobs:
     steps:
       # Comment on new PR requests with deployment instructions
       - uses: actions/checkout@v4
+
       - name: comment
-        uses: GrantBirki/comment@v2
+        uses: GrantBirki/comment@f524ee31407667c05061bad41e1758b40298bd82 # pin@v2
         continue-on-error: true
         with:
           file: .github/new-pr-comment.md

.github/workflows/unlock-on-merge.yml

@@ -14,7 +14,7 @@ jobs:
 
     steps:
       - name: unlock on merge
-        uses: github/branch-deploy@v9
+        uses: github/branch-deploy@v10
         id: unlock-on-merge
         with:
           unlock_on_merge_mode: "true" # <-- indicates that this is the "Unlock on Merge Mode" workflow