chore(deps): update github actions #580

	name: Automate changeset feedback
	on:
	pull_request_target:
	branches: ['main']

	permissions:
	pull-requests: write
	actions: none
	checks: none
	contents: none
	deployments: none
	issues: none
	packages: none
	pages: none
	repository-projects: none
	security-events: none
	statuses: none

	jobs:
	changeset-feedback:
	name: Generate Changeset Feedback
	# prevent running towards forks and version packages
	if: github.repository == 'redhat-developer/rhdh-plugins' && github.event.pull_request.user.login != 'rhdh-bot'
	runs-on: ubuntu-latest
	steps:
	- name: Harden Runner
	uses: step-security/harden-runner@0080882f6c36860b6ba35c610c98ce87d4e2f26f # v2.10.2
	with:
	egress-policy: audit

	- uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
	with:
	# Fetch the commit that's merged into the base rather than the target ref
	# This will let us diff only the contents of the PR, without fetching more history
	ref: 'refs/pull/${{ github.event.pull_request.number }}/merge'
	- name: fetch base
	run: git fetch --depth 1 origin ${{ github.base_ref }}

	- uses: backstage/actions/changeset-feedback@b3c1841fd69e1658ac631afafd0fb140a2309024 # v0.6.17
	name: Generate feedback
	with:
	diff-ref: 'origin/main'
	marker: <!-- changeset-feedback -->
	issue-number: ${{ github.event.pull_request.number }}
	app-id: ${{ secrets.RHDH_GH_APP_ID }}
	bot-username: rhdh-gh-app[bot]
	private-key: ${{ secrets.RHDH_GH_APP_PRIVATE_KEY }}
	installation-id: ${{ secrets.RHDH_GH_APP_INSTALLATION_ID }}
	multiple-workspaces: true

Provide feedback