···2727 steps:
2828 # Use a GitHub App to create the PR so that CI gets triggered
2929 # The App is scoped to Repository > Contents and Pull Requests: write for Nixpkgs
3030- - uses: actions/create-github-app-token@a8d616148505b5069dccd32f177bb87d7f39123b # v2.1.1
3030+ - uses: actions/create-github-app-token@67018539274d69449ef7c02e8e71183d1719ab42 # v2.1.4
3131 id: app-token
3232 with:
3333 app-id: ${{ vars.NIXPKGS_CI_APP_ID }}
···3636 # Use a GitHub App to create the PR so that CI gets triggered
3737 # The App is scoped to Repository > Contents and Pull Requests: write for Nixpkgs
3838 # We only need Pull Requests: write here, but the app is also used for backports.
3939- - uses: actions/create-github-app-token@a8d616148505b5069dccd32f177bb87d7f39123b # v2.1.1
3939+ - uses: actions/create-github-app-token@67018539274d69449ef7c02e8e71183d1719ab42 # v2.1.4
4040 id: app-token
4141 with:
4242 app-id: ${{ vars.NIXPKGS_CI_APP_ID }}
+1-1
.github/workflows/labels.yml
···4949 run: npm install @actions/artifact bottleneck
50505151 # Use a GitHub App, because it has much higher rate limits: 12,500 instead of 5,000 req / hour.
5252- - uses: actions/create-github-app-token@a8d616148505b5069dccd32f177bb87d7f39123b # v2.1.1
5252+ - uses: actions/create-github-app-token@67018539274d69449ef7c02e8e71183d1719ab42 # v2.1.4
5353 if: github.event_name != 'pull_request' && vars.NIXPKGS_CI_APP_ID
5454 id: app-token
5555 with:
+1-1
.github/workflows/periodic-merge.yml
···2323 steps:
2424 # Use a GitHub App to create the PR so that CI gets triggered
2525 # The App is scoped to Repository > Contents and Pull Requests: write for Nixpkgs
2626- - uses: actions/create-github-app-token@a8d616148505b5069dccd32f177bb87d7f39123b # v2.1.1
2626+ - uses: actions/create-github-app-token@67018539274d69449ef7c02e8e71183d1719ab42 # v2.1.4
2727 id: app-token
2828 with:
2929 app-id: ${{ vars.NIXPKGS_CI_APP_ID }}
+1-1
.github/workflows/reviewers.yml
···4848 # - OWNER_APP_PRIVATE_KEY (secret)
4949 #
5050 # Can't use the token received from permissions above, because it can't get enough permissions.
5151- - uses: actions/create-github-app-token@a8d616148505b5069dccd32f177bb87d7f39123b # v2.1.1
5151+ - uses: actions/create-github-app-token@67018539274d69449ef7c02e8e71183d1719ab42 # v2.1.4
5252 if: github.event_name == 'pull_request_target' && vars.OWNER_APP_ID
5353 id: app-token
5454 with: