chore(deps): bump crazy-max/ghaction-import-gpg from 4 to 5

[dependabot[bot]]

Bumps crazy-max/ghaction-import-gpg from 4 to 5.

Release notes

Sourced from crazy-max/ghaction-import-gpg's releases.

v5.0.0

• Node 16 as default runtime (#136)
  • This requires a minimum Actions Runner version of v2.285.0, which is by default available in GHES 3.4 or later.

v4.4.0

• Use eslint prettier plugin (#132)
• Bump openpgp from 5.2.0 to 5.2.1 (#131)
• Bump minimist from 1.2.5 to 1.2.6 (#134)
• Bump @​actions/exec from 1.1.0 to 1.1.1 (#133)

v4.3.0

• Update dev dependencies and workflow (#130)
• Fix error deleting keys with short key id (#129)
• Bump openpgp from 5.1.0 to 5.2.0 (#128)

v4.2.0

• Align default ttl with GitHub job run timeout (#126)
• Delete key using primary key ID not subkey ID (#125)
• Set passphrase only for the fingerprint being used (#123)
• Bump openpgp from 5.0.0 to 5.1.0 (#116 #120)
• Bump actions/github-script from 4 to 6 (#115 #121)

v4.1.0

• Handle signing-only subkeys (#112)
• Bump @​actions/core from 1.5.0 to 1.6.0 (#114)
• Bump actions/github-script from 4 to 5 (#113)
• Bump ansi-regex from 5.0.0 to 5.0.1 (#111)
• Bump tmpl from 1.0.4 to 1.0.5 (#110)

Changelog

Sourced from crazy-max/ghaction-import-gpg's changelog.

5.0.0 (2022/05/26)

• Node 16 as default runtime (#136)
  • This requires a minimum Actions Runner version of v2.285.0, which is by default available in GHES 3.4 or later.

Commits

• 34ea557 Node 16 as default runtime (#136)
• 50e5abb cleanup workflow
• 6796c00 Bump Docker actions to latest major
• See full diff in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

[codecov[bot]]

Codecov Report

Merging #360 (f1f800a) into master (188063d) will not change coverage. The diff coverage is n/a.

@@           Coverage Diff           @@
##           master     #360   +/-   ##
=======================================
  Coverage   66.92%   66.92%           
=======================================
  Files           4        4           
  Lines         130      130           
  Branches       23       23           
=======================================
  Hits           87       87           
  Misses         25       25           
  Partials       18       18           

---

Continue to review full report at Codecov.

Legend - Click here to learn more Δ = absolute <relative> (impact), ø = not affected, ? = missing data Powered by Codecov. Last update 188063d...f1f800a. Read the comment docs.