Bump the github-actions group with 2 updates

[dependabot[bot]]

Bumps the github-actions group with 2 updates: actions/checkout and actions/create-github-app-token.

Updates actions/checkout from 4.1.6 to 4.1.7

Release notes

Sourced from actions/checkout's releases.

v4.1.7

What's Changed

• Bump the minor-npm-dependencies group across 1 directory with 4 updates by @​dependabot in actions/checkout#1739
• Bump actions/checkout from 3 to 4 by @​dependabot in actions/checkout#1697
• Check out other refs/* by commit by @​orhantoy in actions/checkout#1774
• Pin actions/checkout's own workflows to a known, good, stable version. by @​jww3 in actions/checkout#1776

New Contributors

• @​orhantoy made their first contribution in actions/checkout#1774

Full Changelog: https://github.com/actions/checkout/compare/v4.1.6...v4.1.7

Changelog

Sourced from actions/checkout's changelog.

Changelog

v4.1.7

• Bump the minor-npm-dependencies group across 1 directory with 4 updates by @​dependabot in actions/checkout#1739
• Bump actions/checkout from 3 to 4 by @​dependabot in actions/checkout#1697
• Check out other refs/* by commit by @​orhantoy in actions/checkout#1774
• Pin actions/checkout's own workflows to a known, good, stable version. by @​jww3 in actions/checkout#1776

v4.1.6

• Check platform to set archive extension appropriately by @​cory-miller in actions/checkout#1732

v4.1.5

• Update NPM dependencies by @​cory-miller in actions/checkout#1703
• Bump github/codeql-action from 2 to 3 by @​dependabot in actions/checkout#1694
• Bump actions/setup-node from 1 to 4 by @​dependabot in actions/checkout#1696
• Bump actions/upload-artifact from 2 to 4 by @​dependabot in actions/checkout#1695
• README: Suggest user.email to be 41898282+github-actions[bot]@users.noreply.github.com by @​cory-miller in actions/checkout#1707

v4.1.4

• Disable extensions.worktreeConfig when disabling sparse-checkout by @​jww3 in actions/checkout#1692
• Add dependabot config by @​cory-miller in actions/checkout#1688
• Bump the minor-actions-dependencies group with 2 updates by @​dependabot in actions/checkout#1693
• Bump word-wrap from 1.2.3 to 1.2.5 by @​dependabot in actions/checkout#1643

v4.1.3

• Check git version before attempting to disable sparse-checkout by @​jww3 in actions/checkout#1656
• Add SSH user parameter by @​cory-miller in actions/checkout#1685
• Update actions/checkout version in update-main-version.yml by @​jww3 in actions/checkout#1650

v4.1.2

• Fix: Disable sparse checkout whenever sparse-checkout option is not present @​dscho in actions/checkout#1598

v4.1.1

• Correct link to GitHub Docs by @​peterbe in actions/checkout#1511
• Link to release page from what's new section by @​cory-miller in actions/checkout#1514

v4.1.0

• Add support for partial checkout filters

v4.0.0

• Support fetching without the --progress option
• Update to node20

v3.6.0

• Fix: Mark test scripts with Bash'isms to be run via Bash
• Add option to fetch tags even if fetch-depth > 0

v3.5.3

• Fix: Checkout fail in self-hosted runners when faulty submodule are checked-in
• Fix typos found by codespell

... (truncated)

Commits

• 692973e Prepare 4.1.7 release (#1775)
• 6ccd57f Pin actions/checkout's own workflows to a known, good, stable version. (#1776)
• b17fe1e Handle hidden refs (#1774)
• b80ff79 Bump actions/checkout from 3 to 4 (#1697)
• b1ec302 Bump the minor-npm-dependencies group across 1 directory with 4 updates (#1739)
• See full diff in compare view

Updates actions/create-github-app-token from 1.10.0 to 1.10.3

Release notes

Sourced from actions/create-github-app-token's releases.

v1.10.3

1.10.3 (2024-07-01)

Bug Fixes

• deps: bump undici from 6.18.2 to 6.19.2 in the production-dependencies group (#149) (cc82279), closes #3337 nodejs/undici#3338 nodejs/undici#3340 nodejs/undici#3332 nodejs/undici#3335 nodejs/undici#3305 nodejs/undici#3303 nodejs/undici#3304 nodejs/undici#3306 nodejs/undici#3309 nodejs/undici#3313 nodejs/undici#3311 nodejs/undici#3107 nodejs/undici#3302 nodejs/undici#3320 nodejs/undici#3321 nodejs/undici#3316 nodejs/undici#3318 nodejs/undici#3326 nodejs/undici#3324 nodejs/undici#3325 nodejs/undici#3316 nodejs/undici#3318 #3342 #3332 #3340 #3337 #3338 #3336 #3335 #3325 #3324 #3326

v1.10.2

1.10.2 (2024-06-26)

Bug Fixes

• do not revoke token if already expired (#147) (66a7045), closes #140 #95

v1.10.1

1.10.1 (2024-06-03)

Bug Fixes

• deps: bump the production-dependencies group with 2 updates (#138) (8d81a59), closes #606 #606 #605 #604 nodejs/undici#3295 nodejs/undici#3298 nodejs/undici#3294 nodejs/undici#3281 nodejs/undici#3286 nodejs/undici#3284 nodejs/undici#3291 nodejs/undici#3290 nodejs/undici#3283 nodejs/undici#3281 nodejs/undici#3263 nodejs/undici#3279 nodejs/undici#3227 nodejs/undici#3234 nodejs/undici#3240 nodejs/undici#3245 nodejs/undici#3241 nodejs/undici#3247 nodejs/undici#3248 nodejs/undici#3219 nodejs/undici#3251 nodejs/undici#3254 nodejs/undici#3258 nodejs/undici#3257 nodejs/undici#3259 nodejs/undici#3262 nodejs/undici#3264 nodejs/undici#3118 nodejs/undici#3269 #3301 #3294 #3298 #3295 #3293 #3283 #3290 #3291 #3284 #3286

Commits

• 31c86eb build(release): 1.10.3 [skip ci]
• cc82279 fix(deps): bump undici from 6.18.2 to 6.19.2 in the production-dependencies g...
• 74cd7f6 docs(README): fix committer string example and add git config example (#145)
• ad38cff build(release): 1.10.2 [skip ci]
• 66a7045 fix: do not revoke token if already expired (#147)
• d2eeb38 build(deps-dev): bump braces from 3.0.2 to 3.0.3 (#146)
• 0fd3817 docs(README): add note about expiration (#141)
• b3be847 docs(README): Create a git committer string for an app installation (#142)
• c8f55ef build(release): 1.10.1 [skip ci]
• 2aec84e build(deps-dev): bump the development-dependencies group with 3 updates (#139)
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot show ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore major version` will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself) - `@dependabot ignore minor version` will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself) - `@dependabot ignore ` will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself) - `@dependabot unignore ` will remove all of the ignore conditions of the specified dependency - `@dependabot unignore ` will remove the ignore condition of the specified dependency and ignore conditions

[dependabot[bot]]

Looks like these dependencies are updatable in another way, so this is no longer needed.