From 715853cc43331981bd1c36077681074b028b2ee3 Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Valentijn=20G=C3=B6tz?= <valentijn.gotz@myparcel.nl>
Date: Thu, 2 Jul 2026 09:51:44 +0200
Subject: [PATCH] feat: bump action versions

---
 get-github-token/action.yml      |  3 ++-
 pr-assign-author/action.yml      |  2 +-
 pr-label-by-review/action.yml    | 18 +++++++++---------
 setup-app-credentials/action.yml |  5 +++--
 setup-git-credentials/action.yml |  3 ++-
 5 files changed, 17 insertions(+), 14 deletions(-)

diff --git a/get-github-token/action.yml b/get-github-token/action.yml
index e1404cbe..252aa1c2 100644
--- a/get-github-token/action.yml
+++ b/get-github-token/action.yml
@@ -21,6 +21,7 @@ inputs:
 
   skip-token-revoke:
     description: 'If truthy, the token will not be revoked when the current job is complete'
+    default: 'false'
     required: false
 
   github-api-url:
@@ -48,7 +49,7 @@ runs:
 
     - id: app
       if: inputs.token == '' && (inputs.app-id != '' || inputs.private-key != '')
-      uses: myparcelnl/actions/setup-app-credentials@v4
+      uses: myparcelnl/actions/setup-app-credentials@v5
       with:
         app-id: ${{ inputs.app-id }}
         private-key: ${{ inputs.private-key }}
diff --git a/pr-assign-author/action.yml b/pr-assign-author/action.yml
index 87d964f7..d6fe740d 100644
--- a/pr-assign-author/action.yml
+++ b/pr-assign-author/action.yml
@@ -16,7 +16,7 @@ runs:
   steps:
     - uses: actions/checkout@v6
 
-    - uses: myparcelnl/actions/get-github-token@v4
+    - uses: myparcelnl/actions/get-github-token@v5
       id: token
       with:
         token: ${{ inputs.token }}
diff --git a/pr-label-by-review/action.yml b/pr-label-by-review/action.yml
index 55a62f88..c308b3c2 100644
--- a/pr-label-by-review/action.yml
+++ b/pr-label-by-review/action.yml
@@ -37,9 +37,9 @@ inputs:
 runs:
   using: composite
   steps:
-    - uses: actions/checkout@v4
+    - uses: actions/checkout@v6
 
-    - uses: myparcelnl/actions/get-github-token@v4
+    - uses: myparcelnl/actions/get-github-token@v5
       id: token
       with:
         token: ${{ inputs.token }}
@@ -49,7 +49,7 @@ runs:
     - name: 'Get required approvals from branch protection'
       id: branch-protection
       if: inputs.required-approvals == '' && inputs.protection-type == 'branch-protection'
-      uses: actions/github-script@v7
+      uses: actions/github-script@v9
       with:
         github-token: ${{ steps.token.outputs.token }}
         #language=javascript
@@ -67,7 +67,7 @@ runs:
     - name: 'Get required approvals from rule sets'
       id: rulesets
       if: inputs.required-approvals == '' && inputs.protection-type == 'rulesets'
-      uses: actions/github-script@v7
+      uses: actions/github-script@v9
       with:
         github-token: ${{ steps.token.outputs.token }}
         #language=javascript
@@ -99,7 +99,7 @@ runs:
 
     - name: 'Collect pull request reviews'
       id: check
-      uses: actions/github-script@v7
+      uses: actions/github-script@v9
       with:
         github-token: ${{ steps.token.outputs.token }}
         #language=javascript
@@ -149,7 +149,7 @@ runs:
           core.setOutput('changes-requested', changesRequested ? 'true' : 'false');
 
     - name: 'Add "approved" label'
-      uses: actions/github-script@v7
+      uses: actions/github-script@v9
       if: steps.check.outputs.approved == 'true' && !contains(github.event.pull_request.labels.*.name, inputs.label-approved)
       with:
         github-token: ${{ steps.token.outputs.token }}
@@ -163,7 +163,7 @@ runs:
           });
 
     - name: 'Add "changes requested" label'
-      uses: actions/github-script@v7
+      uses: actions/github-script@v9
       if: steps.check.outputs.changes-requested == 'true' && !contains(github.event.pull_request.labels.*.name, inputs.label-changes-requested)
       with:
         github-token: ${{ steps.token.outputs.token }}
@@ -177,7 +177,7 @@ runs:
           });
 
     - name: 'Remove "approved" label'
-      uses: actions/github-script@v7
+      uses: actions/github-script@v9
       if: contains(github.event.pull_request.labels.*.name, inputs.label-approved) && (steps.check.outputs.approved == 'false')
       with:
         github-token: ${{ steps.token.outputs.token }}
@@ -191,7 +191,7 @@ runs:
           });
 
     - name: 'Remove "changes requested" label'
-      uses: actions/github-script@v7
+      uses: actions/github-script@v9
       if: contains(github.event.pull_request.labels.*.name, inputs.label-changes-requested) && (steps.check.outputs.changes-requested == 'false')
       with:
         github-token: ${{ steps.token.outputs.token }}
diff --git a/setup-app-credentials/action.yml b/setup-app-credentials/action.yml
index 2d1889cf..7df17213 100644
--- a/setup-app-credentials/action.yml
+++ b/setup-app-credentials/action.yml
@@ -20,6 +20,7 @@ inputs:
 
   skip-token-revoke:
     description: 'If truthy, the token will not be revoked when the current job is complete'
+    default: 'false'
     required: false
 
   github-api-url:
@@ -46,10 +47,10 @@ outputs:
 runs:
   using: composite
   steps:
-    - uses: actions/create-github-app-token@v1
+    - uses: actions/create-github-app-token@v3
       id: generate-token
       with:
-        app-id: ${{ inputs.app-id }}
+        client-id: ${{ inputs.app-id }}
         private-key: ${{ inputs.private-key }}
         owner: ${{ inputs.owner }}
         repositories: ${{ inputs.repositories }}
diff --git a/setup-git-credentials/action.yml b/setup-git-credentials/action.yml
index b21b00c4..a8770f4c 100644
--- a/setup-git-credentials/action.yml
+++ b/setup-git-credentials/action.yml
@@ -20,6 +20,7 @@ inputs:
 
   skip-token-revoke:
     description: 'If truthy, the token will not be revoked when the current job is complete'
+    default: 'false'
     required: false
 
   github-api-url:
@@ -46,7 +47,7 @@ outputs:
 runs:
   using: composite
   steps:
-    - uses: myparcelnl/actions/setup-app-credentials@v4
+    - uses: myparcelnl/actions/setup-app-credentials@v5
       id: credentials
       with:
         app-id: ${{ inputs.app-id }}