chore: update action versions

.changeset/new-icons-sleep.md

@@ -0,0 +1,7 @@
+---
+'davinci-github-actions': major
+---
+
+---
+
+- update dependencies (`actions/checkout`, `docker/metadata-action`, `xt0rted/pull-request-comment-branch`, `actions/upload-artifact`, `actions/github-script`)

.github/workflows/pr-checks.yml

@@ -15,7 +15,7 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Checkout code
-        uses: actions/checkout@v3.3.0
+        uses: actions/checkout@v3.4.0
         with:
           ref: ${{ github.event.pull_request.head.sha }}
 
@@ -36,7 +36,7 @@ jobs:
     if: ${{ github.event.pull_request.head.ref != 'changeset-release/master' }}
     steps:
       - name: Checkout Repo
-        uses: actions/checkout@v3.3.0
+        uses: actions/checkout@v3.4.0
         with:
           ref: ${{ github.event.pull_request.head.sha }}
 
@@ -53,7 +53,7 @@ jobs:
     name: Trufflehog Scan
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v3.3.0
+      - uses: actions/checkout@v3.4.0
         with:
           fetch-depth: 0
           ref: ${{ github.head_ref }}

.github/workflows/release.yml

@@ -15,7 +15,7 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Checkout Repo
-        uses: actions/checkout@v3.3.0
+        uses: actions/checkout@v3.4.0
         with:
           # This makes Actions fetch all Git history so that Changesets can generate changelogs with the correct commits
           fetch-depth: 0

build-push-image/action.yml

@@ -55,7 +55,7 @@ runs:
 
     - name: Docker meta
       id: meta
-      uses: docker/metadata-action@v4.1.1
+      uses: docker/metadata-action@v4.3.0
       with:
         images: |
           gcr.io/toptal-hub/${{ inputs.image-name }}

generate-gql-types/action.yml

@@ -19,7 +19,7 @@ runs:
         create_credentials_file: true
 
     - name: Setup Google cloud toolchain
-      uses: google-github-actions/setup-gcloud@v1.0.1
+      uses: google-github-actions/setup-gcloud@v1.1.0
 
     - name: Check types cache
       uses: actions/cache@v3

get-workflow-sha/action.yml

@@ -16,7 +16,7 @@ runs:
   steps:
     - id: branch
       if: github.event_name == 'issue_comment'
-      uses: xt0rted/pull-request-comment-branch@v1.3.0
+      uses: xt0rted/pull-request-comment-branch@0cb1cc92a57e44274e9d862202f0d40df70f4478
 
     - id: specify-sha
       name: Specify SHA

integration-tests/action.yml

@@ -36,7 +36,7 @@ runs:
       run: yarn $COMMAND
 
     - name: Store Cypress Screenshots Artifact
-      uses: actions/upload-artifact@v2
+      uses: actions/upload-artifact@v3
       if: failure()
       with:
         name: cypress-screenshots

is-team-member/action.yml

@@ -28,7 +28,7 @@ runs:
       env:
         GITHUB_TOKEN: ${{ inputs.github-token }}
 
-    - uses: actions/github-script@v5
+    - uses: actions/github-script@v6
       id: check-team-member
       with:
         github-token: ${{ inputs.github-token }}

notify-jira-about-contribution/action.yml

@@ -74,7 +74,7 @@ runs:
 
     - name: Greet author
       if: ${{ fromJson(steps.is-pr-eligible.outputs.result) == true && fromJson(steps.jira-issue-can-be-created.outputs.result) == true }}
-      uses: actions/github-script@v5
+      uses: actions/github-script@v6
       with:
         github-token: ${{ inputs.github-token }}
         script: |

status-check/action.yml

@@ -13,7 +13,7 @@ runs:
   using: composite
   steps:
     - name: Set status check
-      uses: actions/github-script@v4
+      uses: actions/github-script@v6
       env:
         STATUS_TARGET_URL: https://github.com/${{ github.repository }}/actions/runs/${{ github.run_id }}
         STATUS_STATE: ${{ inputs.state }}