Update deps (#305)

Author: sethvargo

.github/workflows/compile-versions.yml

@@ -18,10 +18,10 @@ jobs:
 
     steps:
       - name: 'Checkout'
-        uses: 'actions/checkout@a5ac7e51b41094c92402da3b24376905380afc29' # ratchet:actions/checkout@v4
+        uses: 'actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683' # ratchet:actions/checkout@v4
 
       - name: 'Setup Go'
-        uses: 'actions/setup-go@cdcb36043654635271a94b9a6d1392de5bb323a7' # ratchet:actions/setup-go@v5
+        uses: 'actions/setup-go@f111f3307d8850f501ac008e886eec1fd1932a34' # ratchet:actions/setup-go@v5
         with:
           go-version-file: 'go.mod'
 
@@ -48,7 +48,7 @@ jobs:
       - name: 'Create/Update Pull Request'
         # Skip if there a no changes
         if: '${{ fromJSON(steps.updates.outputs.had_changes) }}'
-        uses: 'abcxyz/pkg/.github/actions/create-pull-request@45258f93afbaca705ef0503c37ef88451ed45b02' # ratchet:abcxyz/pkg/.github/actions/create-pull-request@main
+        uses: 'abcxyz/pkg/.github/actions/create-pull-request@2fb8f8c90a04f2ec263305efdef8a1a4e2c54a55' # ratchet:abcxyz/pkg/.github/actions/create-pull-request@main
         with:
           token: '${{ secrets.ACTIONS_BOT_TOKEN }}'
           base_branch: '${{ github.event.repository.default_branch }}'

.github/workflows/draft-release.yml

@@ -15,10 +15,9 @@ on:
 
 jobs:
   draft-release:
-    name: 'Draft release'
-    uses: 'google-github-actions/.github/.github/workflows/draft-release.yml@v0' # ratchet:exclude
+    # TODO(sethvargo): revert to a tag when ready
+    uses: 'google-github-actions/.github/.github/workflows/draft-release.yml@main' # ratchet:exclude
     with:
       version_strategy: '${{ github.event.inputs.version_strategy }}'
-    # secrets must be explicitly passed to reusable workflows https://docs.github.com/en/enterprise-cloud@latest/actions/using-workflows/reusing-workflows#using-inputs-and-secrets-in-a-reusable-workflow
     secrets:
       ACTIONS_BOT_TOKEN: '${{ secrets.ACTIONS_BOT_TOKEN }}'

.github/workflows/release.yml

@@ -8,9 +8,10 @@ on:
 
 jobs:
   release:
-    if: |-
-      ${{ startsWith(github.event.head_commit.message, 'Release: v') }}
-    uses: 'google-github-actions/.github/.github/workflows/release.yml@v0' # ratchet:exclude
+    # TODO(sethvargo): revert to a tag when ready
+    uses: 'google-github-actions/.github/.github/workflows/release.yml@main' # ratchet:exclude
+    secrets:
+      ACTIONS_BOT_TOKEN: '${{ secrets.ACTIONS_BOT_TOKEN }}'
 
   publish:
     needs:
@@ -19,11 +20,10 @@ jobs:
       contents: 'read'
       id-token: 'write'
     runs-on: 'ubuntu-latest'
-
     steps:
-      - uses: 'actions/checkout@a5ac7e51b41094c92402da3b24376905380afc29' # ratchet:actions/checkout@v4
+      - uses: 'actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683' # ratchet:actions/checkout@v4
 
-      - uses: 'actions/setup-node@60edb5dd545a775178f52524783378180af0d1f8' # ratchet:actions/setup-node@v4
+      - uses: 'actions/setup-node@1d0ff469b7ec7b3cb9d8673fde0c81c44821de2a' # ratchet:actions/setup-node@v4
         with:
           node-version: '20.x'
           registry-url: 'https://wombat-dressing-room.appspot.com/'

.github/workflows/unit.yml

@@ -27,9 +27,9 @@ jobs:
     runs-on: '${{ matrix.os }}'
 
     steps:
-      - uses: 'actions/checkout@a5ac7e51b41094c92402da3b24376905380afc29' # ratchet:actions/checkout@v4
+      - uses: 'actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683' # ratchet:actions/checkout@v4
 
-      - uses: 'actions/setup-node@60edb5dd545a775178f52524783378180af0d1f8' # ratchet:actions/setup-node@v4
+      - uses: 'actions/setup-node@1d0ff469b7ec7b3cb9d8673fde0c81c44821de2a' # ratchet:actions/setup-node@v4
         with:
           node-version: '20.12.x' # https://github.com/nodejs/node/issues/53033