build(deps): bump actions/checkout from 4.1.7 to 4.2.0 #285

	name: Automate Dependabot changeset
	on:
	pull_request_target:
	paths:
	- ".github/workflows/automate_dependabot_changeset.yml"
	- "**/yarn.lock"

	jobs:
	generate-changeset:
	runs-on: ubuntu-latest
	if: github.actor == 'dependabot[bot]' && github.repository == 'philips-software/philips-backstage-plugins'
	steps:
	- name: Harden Runner
	uses: step-security/harden-runner@5c7944e73c4c2a096b17a9cb74d65b6c2bbafbde # v2.9.1
	with:
	egress-policy: audit

	- uses: actions/create-github-app-token@v1
	id: app-token
	with:
	app-id: ${{ secrets.BACKSTAGE_BOT_APPLICATION_ID }}
	private-key: ${{ secrets.BACKSTAGE_BOT_PRIVATE_KEY }}

	- name: Checkout
	uses: actions/checkout@d632683dd7b4114ad314bca15554477dd762a938 # v4.2.0
	with:
	fetch-depth: 2
	ref: ${{ github.head_ref }}
	token: ${{ steps.app-token.outputs.token }}

	- name: Configure Git
	run: \|
	git config --global user.email [email protected]
	git config --global user.name 'Github changeset workflow'

	- name: Generate feedback
	uses: philips-software/backstage-actions/renovate-changesets@main
	with:
	multiple-workspaces: true
	dependency-manager: dependabot

Provide feedback