chore(deps): bump test/demo from 5dfac2e to c6bd3b3 (#2505)

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

.all-contributorsrc

@@ -254,6 +254,24 @@
       "contributions": [
         "code"
       ]
+    },
+    {
+      "login": "RajendraP",
+      "name": "Rajendra Pandey",
+      "avatar_url": "https://avatars.githubusercontent.com/u/8928165?v=4",
+      "profile": "https://github.com/RajendraP",
+      "contributions": [
+        "doc"
+      ]
+    },
+    {
+      "login": "undefined-moe",
+      "name": "undefined",
+      "avatar_url": "https://avatars.githubusercontent.com/u/29992205?v=4",
+      "profile": "https://undefined.moe/",
+      "contributions": [
+        "doc"
+      ]
     }
   ],
   "contributorsPerLine": 7,

.github/workflows/codacy-analysis.yml

@@ -29,12 +29,12 @@ jobs:
     steps:
       # Checkout the repository to the GitHub Actions runner
       - name: Checkout code
-        uses: actions/checkout@v4
+        uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
 
       # Execute Codacy Analysis CLI and generate a SARIF output with the security issues identified during the analysis
       - name: Run Codacy Analysis CLI
         continue-on-error: true
-        uses: codacy/codacy-analysis-cli-action@v4.4.5
+        uses: codacy/codacy-analysis-cli-action@97bf5df3c09e75f5bcd72695998f96ebd701846e # v4.4.5
         with:
           # Check https://github.com/codacy/codacy-analysis-cli#project-token to get your project token from your Codacy repository
           # You can also omit the token and run the tools that support default configurations
@@ -51,6 +51,6 @@ jobs:
       # Upload the SARIF file generated in the previous step
       - name: Upload SARIF results file
         continue-on-error: true
-        uses: github/codeql-action/upload-sarif@v3
+        uses: github/codeql-action/upload-sarif@5f8171a638ada777af81d42b55959a643bb29017 # v3.28.12
         with:
           sarif_file: results.sarif

.github/workflows/codeql.yml

@@ -43,11 +43,11 @@ jobs:
 
     steps:
     - name: Checkout repository
-      uses: actions/checkout@v4
+      uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
 
     # Initializes the CodeQL tools for scanning.
     - name: Initialize CodeQL
-      uses: github/codeql-action/init@v3
+      uses: github/codeql-action/init@5f8171a638ada777af81d42b55959a643bb29017 # v3.28.12
       with:
         languages: ${{ matrix.language }}
         # If you wish to specify custom queries, you can do so here or in a config file.
@@ -61,7 +61,7 @@ jobs:
     # Autobuild attempts to build any compiled languages  (C/C++, C#, or Java).
     # If this step fails, then you should remove it and run the build manually (see below)
     - name: Autobuild
-      uses: github/codeql-action/autobuild@v3
+      uses: github/codeql-action/autobuild@5f8171a638ada777af81d42b55959a643bb29017 # v3.28.12
 
     # ℹ️ Command-line programs to run using the OS shell.
     # 📚 See https://docs.github.com/en/actions/using-workflows/workflow-syntax-for-github-actions#jobsjob_idstepsrun
@@ -74,6 +74,6 @@ jobs:
     #   ./location_of_script_within_repo/buildscript.sh
 
     - name: Perform CodeQL Analysis
-      uses: github/codeql-action/analyze@v3
+      uses: github/codeql-action/analyze@5f8171a638ada777af81d42b55959a643bb29017 # v3.28.12
       with:
         category: "/language:${{matrix.language}}"

.github/workflows/greetings.yml

@@ -1,18 +0,0 @@
-name: Greetings
-
-on: [pull_request_target, issues]
-
-permissions:
-  pull-requests: write
-  issues: write
-
-jobs:
-  greeting:
-    runs-on: ubuntu-latest
-    steps:
-      - uses: actions/first-interaction@v1
-        continue-on-error: true
-        with:
-          repo-token: ${{ secrets.PAT_TOKEN }}
-          issue-message: "Thanks for reporting this issue, don't forget to star this project if you haven't already to help us reach a wider audience."
-          pr-message: "Thanks for implementing a fix, could you ensure that the test covers your changes if applicable."

.github/workflows/issue-comment-job-example.yml

@@ -19,7 +19,7 @@ jobs:
           NUMBER: ${{ github.event.issue.number }}
 
       - name: Checkout
-        uses: actions/checkout@v4
+        uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
         with:
           submodules: true
           fetch-depth: 0
@@ -104,7 +104,7 @@ jobs:
           NUMBER: ${{ github.event.issue.number }}
 
       - name: Checkout
-        uses: actions/checkout@v4
+        uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
         with:
           submodules: true
           fetch-depth: 0

.github/workflows/manual-triggered-job-example.yml

@@ -18,7 +18,7 @@ jobs:
 
     steps:
       - name: Checkout
-        uses: actions/checkout@v4
+        uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
         with:
           submodules: true
           fetch-depth: 0

.github/workflows/matrix-example.yml

@@ -17,7 +17,7 @@ jobs:
       matrix: ${{ steps.changed-files.outputs.all_changed_files }}
     steps:
       - name: Checkout
-        uses: actions/checkout@v4
+        uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
         with:
           fetch-depth: 0
       - name: Get changed files
@@ -39,7 +39,7 @@ jobs:
       fail-fast: false
     steps:
       - name: Checkout
-        uses: actions/checkout@v4
+        uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
       - name: Test
         run: |
           echo ${{ matrix.files }}

.github/workflows/multi-job-example.yml

@@ -19,7 +19,7 @@ jobs:
       all_changed_files: ${{ steps.changed-files.outputs.all_changed_files }}
     steps:
       - name: Checkout
-        uses: actions/checkout@v4
+        uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
         with:
           fetch-depth: 0
       - name: Get changed files
@@ -45,7 +45,7 @@ jobs:
       all_changed_files: ${{ steps.changed-files.outputs.all_changed_files }}
     steps:
       - name: Checkout
-        uses: actions/checkout@v4
+        uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
         with:
           fetch-depth: 0
       - name: Get changed files

.github/workflows/sync-release-version.yml

@@ -13,21 +13,22 @@ jobs:
   update-version:
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
         with:
           fetch-depth: 0
       - name: Run release-tagger
-        uses: tj-actions/release-tagger@v4
+        uses: tj-actions/release-tagger@1a9264b0fd99a1ef92c4fd2f077f292900cc79b6 # v4.0.0
       - name: Sync release version.
-        uses: tj-actions/sync-release-version@v13
+        uses: tj-actions/sync-release-version@2c909a7cf69905388d998101c40edb26d0882ea2 # v13.12
         id: sync-release-version
         with:
           pattern: '${{ github.repository }}@'
           only_major: true
+          use_tag_commit_hash: true
           paths: |
             README.md
       - name: Sync release package version.
-        uses: tj-actions/sync-release-version@v13
+        uses: tj-actions/sync-release-version@2c909a7cf69905388d998101c40edb26d0882ea2 # v13.12
         id: sync-release-package-version
         with:
           pattern: '"version": "'
@@ -35,14 +36,15 @@ jobs:
           paths: |
             package.json
       - name: Run git-cliff
-        uses: tj-actions/git-cliff@v1
+        uses: tj-actions/git-cliff@75599f745633e29f99bd9e14a30865b7d2fcbe84 # v1.5.0
       - name: Create Pull Request
-        uses: peter-evans/create-pull-request@v7.0.8
+        uses: peter-evans/create-pull-request@271a8d0340265f705b14b6d32b9829c1cb33d45e # v7.0.8
         with:
           base: "main"
           labels: "merge when passing"
+          sign-commits: true
           title: "Upgraded to ${{ steps.sync-release-version.outputs.new_version }}"
           branch: "upgrade-to-${{ steps.sync-release-version.outputs.new_version }}"
           commit-message: "Upgraded from ${{ steps.sync-release-version.outputs.old_version }} -> ${{ steps.sync-release-version.outputs.new_version }}"
           body: "View [CHANGES](https://github.com/${{ github.repository }}/compare/${{ steps.sync-release-version.outputs.old_version }}...${{ steps.sync-release-version.outputs.new_version }})"
-          token: ${{ secrets.PAT_TOKEN }}
+          token: ${{ secrets.GITHUB_TOKEN }}

.github/workflows/test.yml

@@ -35,17 +35,17 @@ jobs:
     outputs:
       files_changed: ${{ steps.changed_files.outputs.files_changed }}
     permissions:
-      contents: read
-      pull-requests: write
+      contents: write
+      pull-requests: read
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
         with:
           persist-credentials: false
           fetch-depth: 0
           repository: ${{ github.event.pull_request.head.repo.full_name }}
 
       - name: Use Node.js 20.x
-        uses: actions/setup-node@v4.2.0
+        uses: actions/setup-node@cdca7365b2dadb8aad0a33bc7601856ffabcc48e # v4.3.0
         with:
           cache: 'yarn'
           node-version: '20.x'
@@ -60,7 +60,7 @@ jobs:
           yarn install
 
       - name: Run eslint on changed files
-        uses: tj-actions/eslint-changed-files@v25
+        uses: tj-actions/eslint-changed-files@0cfcd35949a961d13e964a7c2a4971c0e89b68fc # v25.3.1
         if: github.event_name == 'pull_request'
         with:
           token: ${{ secrets.PAT_TOKEN }}
@@ -74,7 +74,7 @@ jobs:
           GITHUB_EVENT_PULL_REQUEST_HEAD_REPO_FORK: ${{ github.event.pull_request.head.repo.fork }}
 
       - name: Verify Changed files
-        uses: tj-actions/verify-changed-files@v20
+        uses: tj-actions/verify-changed-files@6ed7632824d235029086612d4330d659005af687 # v20.0.1
         if: github.actor != 'dependabot[bot]'
         id: changed_files
         with:
@@ -92,20 +92,19 @@ jobs:
 
       - name: Push changes
         if: steps.changed_files.outputs.files_changed == 'true' && github.event_name == 'pull_request'
-        continue-on-error: true
         uses: ad-m/github-push-action@master
         with:
-          github_token: ${{ secrets.PAT_TOKEN }}
+          github_token: ${{ secrets.GITHUB_TOKEN }}
           branch: ${{ github.head_ref }}
 
       - name: Upload build assets
-        uses: actions/upload-artifact@v4
+        uses: actions/upload-artifact@ea165f8d65b6e75b540449e92b4886f43607fa02 # v4.6.2
         with:
           name: build-assets
           path: dist
 
       - name: Run codacy-coverage-reporter
-        uses: codacy/codacy-coverage-reporter-action@v1
+        uses: codacy/codacy-coverage-reporter-action@89d6c85cfafaec52c72b6c5e8b2878d33104c699 # v1.3.0
         continue-on-error: true
         with:
           project-token: ${{ secrets.CODACY_PROJECT_TOKEN }}
@@ -120,7 +119,7 @@ jobs:
       contents: read
     steps:
       - name: Checkout into dir1
-        uses: actions/checkout@v4
+        uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
         with:
           repository: ${{ github.event.pull_request.head.repo.full_name }}
           submodules: true
@@ -128,7 +127,7 @@ jobs:
           path: dir1
 
       - name: Download build assets
-        uses: actions/download-artifact@v4
+        uses: actions/download-artifact@95815c38cf2ff2164869cbab79da8d1f422bc89e # v4.2.1
         with:
           name: build-assets
           path: dir1/dist
@@ -154,13 +153,13 @@ jobs:
           bash
 
       - name: Download build assets
-        uses: actions/download-artifact@v4
+        uses: actions/download-artifact@95815c38cf2ff2164869cbab79da8d1f422bc89e # v4.2.1
         with:
           name: build-assets
           path: dir2/dist
 
       - name: Checkout into dir2
-        uses: actions/checkout@v4
+        uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
         with:
           repository: ${{ github.event.pull_request.head.repo.full_name }}
           submodules: true
@@ -196,13 +195,13 @@ jobs:
       contents: read
     steps:
       - name: Checkout branch
-        uses: actions/checkout@v4
+        uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
         with:
           repository: ${{ github.event.pull_request.head.repo.full_name }}
           fetch-depth: 0
 
       - name: Download build assets
-        uses: actions/download-artifact@v4
+        uses: actions/download-artifact@95815c38cf2ff2164869cbab79da8d1f422bc89e # v4.2.1
         with:
           name: build-assets
 
@@ -256,13 +255,13 @@ jobs:
 
     steps:
       - name: Checkout branch
-        uses: actions/checkout@v4
+        uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
         with:
           repository: ${{ github.event.pull_request.head.repo.full_name }}
           fetch-depth: 0
 
       - name: Download build assets
-        uses: actions/download-artifact@v4
+        uses: actions/download-artifact@95815c38cf2ff2164869cbab79da8d1f422bc89e # v4.2.1
         with:
           name: build-assets
 
@@ -300,13 +299,13 @@ jobs:
 
     steps:
       - name: Checkout branch
-        uses: actions/checkout@v4
+        uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
         with:
           repository: ${{ github.event.pull_request.head.repo.full_name }}
           fetch-depth: 0
 
       - name: Download build assets
-        uses: actions/download-artifact@v4
+        uses: actions/download-artifact@95815c38cf2ff2164869cbab79da8d1f422bc89e # v4.2.1
         with:
           name: build-assets
 
@@ -339,13 +338,13 @@ jobs:
 
     steps:
       - name: Checkout branch
-        uses: actions/checkout@v4
+        uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
         with:
           repository: ${{ github.event.pull_request.head.repo.full_name }}
           fetch-depth: ${{ matrix.fetch-depth }}
 
       - name: Download build assets
-        uses: actions/download-artifact@v4
+        uses: actions/download-artifact@95815c38cf2ff2164869cbab79da8d1f422bc89e # v4.2.1
         with:
           name: build-assets
 
@@ -373,12 +372,12 @@ jobs:
 
     steps:
       - name: Checkout branch
-        uses: actions/checkout@v4
+        uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
         with:
           ref: ${{ github.event.pull_request.head.sha }}
 
       - name: Download build assets
-        uses: actions/download-artifact@v4
+        uses: actions/download-artifact@95815c38cf2ff2164869cbab79da8d1f422bc89e # v4.2.1
         with:
           name: build-assets
 
@@ -407,14 +406,14 @@ jobs:
 
     steps:
       - name: Checkout branch
-        uses: actions/checkout@v4
+        uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
         with:
           fetch-depth: ${{ matrix.fetch-depth }}
           persist-credentials: false
           repository: ${{ github.event.pull_request.head.repo.full_name }}
 
       - name: Download build assets
-        uses: actions/download-artifact@v4
+        uses: actions/download-artifact@95815c38cf2ff2164869cbab79da8d1f422bc89e # v4.2.1
         with:
           name: build-assets
 
@@ -437,10 +436,10 @@ jobs:
       contents: read
     steps:
       - name: Checkout branch
-        uses: actions/checkout@v4
+        uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
 
       - name: Download build assets
-        uses: actions/download-artifact@v4
+        uses: actions/download-artifact@95815c38cf2ff2164869cbab79da8d1f422bc89e # v4.2.1
         with:
           name: build-assets
 
@@ -492,10 +491,10 @@ jobs:
       contents: read
     steps:
       - name: Checkout branch
-        uses: actions/checkout@v4
+        uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
 
       - name: Download build assets
-        uses: actions/download-artifact@v4
+        uses: actions/download-artifact@95815c38cf2ff2164869cbab79da8d1f422bc89e # v4.2.1
         with:
           name: build-assets
 
@@ -547,7 +546,7 @@ jobs:
       pull-requests: read
     steps:
       - name: Checkout into dir1
-        uses: actions/checkout@v4
+        uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
         with:
           repository: ${{ github.event.pull_request.head.repo.full_name }}
           submodules: true
@@ -555,7 +554,7 @@ jobs:
           path: dir1
 
       - name: Download build assets
-        uses: actions/download-artifact@v4
+        uses: actions/download-artifact@95815c38cf2ff2164869cbab79da8d1f422bc89e # v4.2.1
         with:
           name: build-assets
           path: dir1/dist
@@ -579,14 +578,14 @@ jobs:
       contents: read
     steps:
       - name: Checkout branch
-        uses: actions/checkout@v4
+        uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
         with:
           repository: ${{ github.event.pull_request.head.repo.full_name }}
           submodules: true
           fetch-depth: 0
 
       - name: Download build assets
-        uses: actions/download-artifact@v4
+        uses: actions/download-artifact@95815c38cf2ff2164869cbab79da8d1f422bc89e # v4.2.1
         with:
           name: build-assets
           path: dist
@@ -616,7 +615,7 @@ jobs:
       contents: read
     steps:
       - name: Checkout into dir1
-        uses: actions/checkout@v4
+        uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
         with:
           repository: ${{ github.event.pull_request.head.repo.full_name }}
           submodules: true
@@ -624,7 +623,7 @@ jobs:
           path: dir1
 
       - name: Download build assets
-        uses: actions/download-artifact@v4
+        uses: actions/download-artifact@95815c38cf2ff2164869cbab79da8d1f422bc89e # v4.2.1
         with:
           name: build-assets
           path: dir1/dist
@@ -655,14 +654,14 @@ jobs:
 
     steps:
       - name: Checkout branch
-        uses: actions/checkout@v4
+        uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
         with:
           ref: ${{ github.event.pull_request.head.sha || github.sha }}
           submodules: recursive
           fetch-depth: ${{ matrix.fetch-depth }}
 
       - name: Download build assets
-        uses: actions/download-artifact@v4
+        uses: actions/download-artifact@95815c38cf2ff2164869cbab79da8d1f422bc89e # v4.2.1
         with:
           name: build-assets
 
@@ -721,14 +720,14 @@ jobs:
 
     steps:
       - name: Checkout branch
-        uses: actions/checkout@v4
+        uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
         with:
           ref: ${{ github.event.pull_request.head.sha || github.sha }}
           submodules: recursive
           fetch-depth: ${{ matrix.fetch-depth }}
 
       - name: Download build assets
-        uses: actions/download-artifact@v4
+        uses: actions/download-artifact@95815c38cf2ff2164869cbab79da8d1f422bc89e # v4.2.1
         with:
           name: build-assets
 
@@ -816,14 +815,14 @@ jobs:
 
     steps:
       - name: Checkout branch
-        uses: actions/checkout@v4
+        uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
         with:
           ref: ${{ github.event.pull_request.head.sha || github.sha }}
           submodules: recursive
           fetch-depth: ${{ matrix.fetch-depth }}
 
       - name: Download build assets
-        uses: actions/download-artifact@v4
+        uses: actions/download-artifact@95815c38cf2ff2164869cbab79da8d1f422bc89e # v4.2.1
         with:
           name: build-assets
 
@@ -1002,7 +1001,7 @@ jobs:
       contents: read
     steps:
       - name: Checkout branch
-        uses: actions/checkout@v4
+        uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
         with:
           ref: a52f8621d26d5d9f54b80f74bda2d9eedff94693
           repository: ${{ github.event.pull_request.head.repo.full_name }}
@@ -1040,7 +1039,7 @@ jobs:
       contents: read
     steps:
       - name: Checkout branch
-        uses: actions/checkout@v4
+        uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
         with:
           ref: ${{ github.event.pull_request.head.sha }}
           repository: ${{ github.event.pull_request.head.repo.full_name }}
@@ -1119,7 +1118,7 @@ jobs:
         
     steps:
       - name: Checkout branch
-        uses: actions/checkout@v4
+        uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
         with:
           ref: ${{ github.event.pull_request.head.sha }}
           repository: ${{ github.event.pull_request.head.repo.full_name }}
@@ -1127,7 +1126,7 @@ jobs:
           fetch-depth: ${{ matrix.fetch-depth }}
   
       - name: Download build assets
-        uses: actions/download-artifact@v4
+        uses: actions/download-artifact@95815c38cf2ff2164869cbab79da8d1f422bc89e # v4.2.1
         with:
           name: build-assets
 
@@ -1172,13 +1171,13 @@ jobs:
 
     steps:
       - name: Checkout
-        uses: actions/checkout@v4
+        uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
         with:
           submodules: true
           repository: ${{ github.event.pull_request.head.repo.full_name }}
           fetch-depth: ${{ matrix.fetch-depth }}
       - name: Download build assets
-        uses: actions/download-artifact@v4
+        uses: actions/download-artifact@95815c38cf2ff2164869cbab79da8d1f422bc89e # v4.2.1
         with:
           name: build-assets
       - name: Dump GitHub context
@@ -2163,9 +2162,9 @@ jobs:
           bash
       - name: Get branch name
         id: branch-name
-        uses: tj-actions/branch-names@v8
+        uses: tj-actions/branch-names@6871f53176ad61624f978536bbf089c574dc19a2 # v8.0.1
         if: github.event_name == 'pull_request' && matrix.fetch-depth == 0
-      - uses: nrwl/nx-set-shas@v4
+      - uses: nrwl/nx-set-shas@dbe0650947e5f2c81f59190a38512cf49126fe6b # v4.3.0
         id: last_successful_commit
         if: github.event_name == 'pull_request' && github.event.action != 'closed' && matrix.fetch-depth == 0
         with:

.github/workflows/update-readme.yml

@@ -1,7 +1,7 @@
 name: Format README.md
 
 permissions:
-  contents: read
+  contents: write
   pull-requests: write
 
 on:
@@ -13,21 +13,22 @@ jobs:
   sync-assets:
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
         with:
           fetch-depth: 0
 
       - name: Run auto-doc
-        uses: tj-actions/auto-doc@v3
+        uses: tj-actions/auto-doc@b10ceedffd794ec29a8fa8700529f40c1b64a951 # v3.6.0
         with:
           use_code_blocks: true
           use_major_version: true
+          use_tag_commit_hash: true
 
       - name: Run remark
-        uses: tj-actions/remark@v3
+        uses: tj-actions/remark@10fc40701928cbafcc4a2d241679579d218144ff # v3
 
       - name: Verify Changed files
-        uses: tj-actions/verify-changed-files@v20
+        uses: tj-actions/verify-changed-files@6ed7632824d235029086612d4330d659005af687 # v20.0.1
         id: verify_changed_files
         with:
           files: |
@@ -41,7 +42,7 @@ jobs:
 
       - name: Create Pull Request
         if: failure()
-        uses: peter-evans/create-pull-request@v7
+        uses: peter-evans/create-pull-request@271a8d0340265f705b14b6d32b9829c1cb33d45e # v7.0.8
         with:
           base: "main"
           labels: "merge when passing"
@@ -49,4 +50,5 @@ jobs:
           branch: "chore/update-readme"
           commit-message: "Updated README.md"
           body: "Updated README.md"
-          token: ${{ secrets.PAT_TOKEN }}
+          sign-commits: true
+          token: ${{ secrets.GITHUB_TOKEN }}

.github/workflows/workflow-run-example.yml

@@ -13,7 +13,7 @@ jobs:
     if: ${{ github.event.workflow_run.conclusion == 'success' }}
     steps:
       - name: Checkout code
-        uses: actions/checkout@v4
+        uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
 
       - name: Get changed files
         id: changed-files
@@ -29,7 +29,7 @@ jobs:
     if: ${{ github.event.workflow_run.conclusion == 'failure' }}
     steps:
       - name: Checkout code
-        uses: actions/checkout@v4
+        uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
 
       - name: Get changed files
         id: changed-files

HISTORY.md

@@ -1,10 +1,91 @@
 # Changelog
 
-# [45.0.8](https://github.com/tj-actions/changed-files/compare/v45.0.7...v45.0.8) - (2025-03-10)
+# [46.0.2](https://github.com/tj-actions/changed-files/compare/v46.0.1...v46.0.2) - (2025-03-22)
+
+## <!-- 1 -->🐛 Bug Fixes
+
+- Update log message when attempting to locate merge base ([#2493](https://github.com/tj-actions/changed-files/issues/2493)) ([a5cad85](https://github.com/tj-actions/changed-files/commit/a5cad85977a53287a694f9509c03feb50ac58428))  - (Tonye Jack)
+
+## <!-- 16 -->➕ Add
+
+- Add hint to revoke leaked token ([#2475](https://github.com/tj-actions/changed-files/issues/2475))
+
+ ([d52b942](https://github.com/tj-actions/changed-files/commit/d52b942ee0c535798f0df9e1c05683f8e818c79b))  - (undefined)
+
+## <!-- 26 -->🔄 Update
+
+- Updated README.md ([#2496](https://github.com/tj-actions/changed-files/issues/2496))
+
+Co-authored-by: github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com> ([9cc867c](https://github.com/tj-actions/changed-files/commit/9cc867cd4a5df418b1538ffecaaef26144a0e51f))  - (github-actions[bot])
+- Updated README.md ([#2492](https://github.com/tj-actions/changed-files/issues/2492))
+
+Co-authored-by: github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com> ([f2f439b](https://github.com/tj-actions/changed-files/commit/f2f439bb2f890f0ec22e3ca95985b46003688a8f))  - (github-actions[bot])
+- Updated README.md ([#2479](https://github.com/tj-actions/changed-files/issues/2479))
+
+Co-authored-by: github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com> ([531f5f7](https://github.com/tj-actions/changed-files/commit/531f5f7d163941f0c1c04e0ff4d8bb243ac4366f))  - (github-actions[bot])
+- Updated README.md ([#2476](https://github.com/tj-actions/changed-files/issues/2476))
+
+Co-authored-by: github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com> ([9237eb7](https://github.com/tj-actions/changed-files/commit/9237eb7a0f95c801719e6224d45095d4dda0f9bd))  - (github-actions[bot])
+
+## <!-- 3 -->📚 Documentation
+
+- Add undefined-moe as a contributor for doc ([#2498](https://github.com/tj-actions/changed-files/issues/2498)) ([26a3863](https://github.com/tj-actions/changed-files/commit/26a38635fc1173cc5820336ce97be6188d0de9f5))  - (allcontributors[bot])
+- Update update-readme.yml to use commit hashes in the docs ([#2495](https://github.com/tj-actions/changed-files/issues/2495)) ([3a33fa9](https://github.com/tj-actions/changed-files/commit/3a33fa99abc9ece6c239626365fb8bead3882018))  - (Tonye Jack)
+- Add RajendraP as a contributor for doc ([#2491](https://github.com/tj-actions/changed-files/issues/2491)) ([678ecec](https://github.com/tj-actions/changed-files/commit/678ecec17288a6a0f240e421c22d5641e0d4e8d7))  - (allcontributors[bot])
+- Update versions ([#2488](https://github.com/tj-actions/changed-files/issues/2488)) ([6482371](https://github.com/tj-actions/changed-files/commit/6482371e862961013f9584015cf362c4f664b20c))  - (Tonye Jack)
+- Remove link to commit ([#2481](https://github.com/tj-actions/changed-files/issues/2481)) ([0fee5fb](https://github.com/tj-actions/changed-files/commit/0fee5fb278312d962ff465bb38dc4cae9f446de2))  - (Tonye Jack)
+- Update README.md ([#2478](https://github.com/tj-actions/changed-files/issues/2478)) ([dccd194](https://github.com/tj-actions/changed-files/commit/dccd1949addfa3d93d458019c5495581c620b00c))  - (Tonye Jack)
+
+## <!-- 7 -->⚙️ Miscellaneous Tasks
+
+- Update sync-release-version.yml to use commit hash for tags in docs ([#2497](https://github.com/tj-actions/changed-files/issues/2497)) ([a530a27](https://github.com/tj-actions/changed-files/commit/a530a27a793d93d428bac022c621a9ed52f75efd))  - (Tonye Jack)
+- **deps:** Bump actions/setup-node from 4.2.0 to 4.3.0 ([#2484](https://github.com/tj-actions/changed-files/issues/2484)) ([0b975f6](https://github.com/tj-actions/changed-files/commit/0b975f61488402a699abcebd6a1e25924cf85218))  - (dependabot[bot])
+
+## <!-- 9 -->⬆️ Upgrades
+
+- Upgraded to v46.0.1 ([#2474](https://github.com/tj-actions/changed-files/issues/2474))
+
+Co-authored-by: github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com> ([45fb12d](https://github.com/tj-actions/changed-files/commit/45fb12d7a8bedb4da42342e52fe054c6c2c3fd73))  - (github-actions[bot])
+
+# [46.0.1](https://github.com/tj-actions/changed-files/compare/v46.0.0...v46.0.1) - (2025-03-16)
+
+## <!-- 26 -->🔄 Update
+
+- Updated README.md ([#2473](https://github.com/tj-actions/changed-files/issues/2473))
+
+Co-authored-by: github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com> ([2f7c5bf](https://github.com/tj-actions/changed-files/commit/2f7c5bfce28377bc069a65ba478de0a74aa0ca32))  - (github-actions[bot])
+- Sync-release-version.yml to use signed commits ([#2472](https://github.com/tj-actions/changed-files/issues/2472)) ([4189ec6](https://github.com/tj-actions/changed-files/commit/4189ec62c445484531e9ad97157d990be96e88ee))  - (Tonye Jack)
+
+# [46.0.0](https://github.com/tj-actions/changed-files/compare/v45.0.9...v46.0.0) - (2025-03-16)
+
+## <!-- 1 -->🐛 Bug Fixes
+
+- Update update-readme.yml to sign-commits ([#2468](https://github.com/tj-actions/changed-files/issues/2468)) ([0f1ffe6](https://github.com/tj-actions/changed-files/commit/0f1ffe61855cb317d5fd66122c14dc0627eab141))  - (Tonye Jack)
+- Update permission in update-readme.yml workflow ([#2467](https://github.com/tj-actions/changed-files/issues/2467)) ([ddef03e](https://github.com/tj-actions/changed-files/commit/ddef03e37c84cfb9ee89fa055b86359aaf949c86))  - (Tonye Jack)
+- Update github workflow update-readme.yml ([#2466](https://github.com/tj-actions/changed-files/issues/2466)) ([9c2df0d](https://github.com/tj-actions/changed-files/commit/9c2df0d54a911c819d7368d7e5ed7c01c0796e0a))  - (Tonye Jack)
+
+## <!-- 17 -->➖ Remove
+
+- Deleted renovate.json ([e37e952](https://github.com/tj-actions/changed-files/commit/e37e952786556966c1fb6183c5937b3966bab099))  - (Tonye Jack)
+
+## <!-- 26 -->🔄 Update
+
+- Sync-release-version.yml ([#2471](https://github.com/tj-actions/changed-files/issues/2471)) ([4cd184a](https://github.com/tj-actions/changed-files/commit/4cd184a1dd542b79cca1d4d7938e4154a6520ca7))  - (Tonye Jack)
+- Updated README.md ([#2469](https://github.com/tj-actions/changed-files/issues/2469))
+
+Co-authored-by: github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com> ([5cbf220](https://github.com/tj-actions/changed-files/commit/5cbf22026d05fbef0c027d1b1f118fe3a1b6e435))  - (github-actions[bot])
+
+## <!-- 3 -->📚 Documentation
+
+- Update docs to highlight security issues ([#2465](https://github.com/tj-actions/changed-files/issues/2465)) ([6525332](https://github.com/tj-actions/changed-files/commit/65253327cf47481b4b1b4b9fea78e143a1353147))  - (Tonye Jack)
+
+# [45.0.9](https://github.com/tj-actions/changed-files/compare/v45.0.4...v45.0.9) - (2025-03-15)
 
 ## <!-- 1 -->🐛 Bug Fixes
 
 - **deps:** Update dependency @octokit/rest to v21.1.1 ([#2435](https://github.com/tj-actions/changed-files/issues/2435)) ([fb8dcda](https://github.com/tj-actions/changed-files/commit/fb8dcda5fb8954cec37773d2b275a8579c86c781))  - (renovate[bot])
+- **deps:** Update dependency @octokit/rest to v21.1.0 ([#2394](https://github.com/tj-actions/changed-files/issues/2394)) ([7b72c97](https://github.com/tj-actions/changed-files/commit/7b72c97d739f955f5cadca0d59799d826ae9f6c9))  - (renovate[bot])
+- **deps:** Update dependency yaml to v2.7.0 ([#2383](https://github.com/tj-actions/changed-files/issues/2383)) ([5f974c2](https://github.com/tj-actions/changed-files/commit/5f974c28f5044c411f0c9e7becf3f172029cf9cf))  - (renovate[bot])
 
 ## <!-- 7 -->⚙️ Miscellaneous Tasks
 
@@ -34,21 +115,6 @@
 - **deps:** Update dependency prettier to v3.5.0 ([#2428](https://github.com/tj-actions/changed-files/issues/2428)) ([045c541](https://github.com/tj-actions/changed-files/commit/045c5414a33ccf6ca33c27a799f6571f8ef74114))  - (renovate[bot])
 - **deps:** Lock file maintenance ([#2426](https://github.com/tj-actions/changed-files/issues/2426)) ([563041e](https://github.com/tj-actions/changed-files/commit/563041e49cdb9d8729f08b4c2d3129dbb25cf2f6))  - (renovate[bot])
 - **config:** Migrate renovate config ([#2427](https://github.com/tj-actions/changed-files/issues/2427)) ([809f04b](https://github.com/tj-actions/changed-files/commit/809f04b20ab5525fb99637d624b6c721d55e01db))  - (renovate[bot])
-
-## <!-- 9 -->⬆️ Upgrades
-
-- Upgraded to v45.0.7 ([#2425](https://github.com/tj-actions/changed-files/issues/2425))
-
-Co-authored-by: jackton1 <17484350+jackton1@users.noreply.github.com> ([b1ba699](https://github.com/tj-actions/changed-files/commit/b1ba699b304f2083b602164e06a89b868c84f076))  - (tj-actions[bot])
-
-# [45.0.7](https://github.com/tj-actions/changed-files/compare/v45.0.6...v45.0.7) - (2025-02-04)
-
-## <!-- 1 -->🐛 Bug Fixes
-
-- **deps:** Update dependency @octokit/rest to v21.1.0 ([#2394](https://github.com/tj-actions/changed-files/issues/2394)) ([7b72c97](https://github.com/tj-actions/changed-files/commit/7b72c97d739f955f5cadca0d59799d826ae9f6c9))  - (renovate[bot])
-
-## <!-- 7 -->⚙️ Miscellaneous Tasks
-
 - **deps:** Update dependency eslint-plugin-github to v5.1.8 ([#2424](https://github.com/tj-actions/changed-files/issues/2424)) ([dcc7a0c](https://github.com/tj-actions/changed-files/commit/dcc7a0cba800f454d79fff4b993e8c3555bcc0a8))  - (renovate[bot])
 - **deps:** Update dependency @types/node to v22.13.1 ([#2422](https://github.com/tj-actions/changed-files/issues/2422)) ([364748a](https://github.com/tj-actions/changed-files/commit/364748aaa8a1ba2cd0a06c35e27f0b736cce57d1))  - (renovate[bot])
 - **deps:** Lock file maintenance ([#2420](https://github.com/tj-actions/changed-files/issues/2420)) ([301bed6](https://github.com/tj-actions/changed-files/commit/301bed650e89313e46f9582591f9a1f4839f2826))  - (renovate[bot])
@@ -73,21 +139,6 @@ Co-authored-by: jackton1 <17484350+jackton1@users.noreply.github.com> ([b1ba699]
 - **deps:** Update dependency typescript to v5.7.3 ([#2393](https://github.com/tj-actions/changed-files/issues/2393)) ([82deec7](https://github.com/tj-actions/changed-files/commit/82deec73be8984405676feff8f0a4562b60df95c))  - (renovate[bot])
 - **deps:** Update dependency eslint-plugin-github to v5.1.5 ([#2392](https://github.com/tj-actions/changed-files/issues/2392)) ([ef7202d](https://github.com/tj-actions/changed-files/commit/ef7202db4d23bd79d2fb79d667a7a43ddb08b783))  - (renovate[bot])
 - **deps:** Lock file maintenance ([#2390](https://github.com/tj-actions/changed-files/issues/2390)) ([01c978c](https://github.com/tj-actions/changed-files/commit/01c978c0f8cace666c3b0102d1c2c59bf698acdf))  - (renovate[bot])
-
-## <!-- 9 -->⬆️ Upgrades
-
-- Upgraded to v45.0.6 ([#2389](https://github.com/tj-actions/changed-files/issues/2389))
-
-Co-authored-by: jackton1 <17484350+jackton1@users.noreply.github.com> ([ed8e9f6](https://github.com/tj-actions/changed-files/commit/ed8e9f69eea433e8fca92ad9b928ca6520d79c2a))  - (tj-actions[bot])
-
-# [45.0.6](https://github.com/tj-actions/changed-files/compare/v45.0.5...v45.0.6) - (2025-01-03)
-
-## <!-- 1 -->🐛 Bug Fixes
-
-- **deps:** Update dependency yaml to v2.7.0 ([#2383](https://github.com/tj-actions/changed-files/issues/2383)) ([5f974c2](https://github.com/tj-actions/changed-files/commit/5f974c28f5044c411f0c9e7becf3f172029cf9cf))  - (renovate[bot])
-
-## <!-- 7 -->⚙️ Miscellaneous Tasks
-
 - **deps:** Update dependency @types/lodash to v4.17.14 ([#2388](https://github.com/tj-actions/changed-files/issues/2388)) ([d6e91a2](https://github.com/tj-actions/changed-files/commit/d6e91a2266cdb9d62096cebf1e8546899c6aa18f))  - (renovate[bot])
 - **deps:** Update dependency @types/node to v22.10.5 ([#2387](https://github.com/tj-actions/changed-files/issues/2387)) ([73401cd](https://github.com/tj-actions/changed-files/commit/73401cd67665346cf3a3370dc3cdea80f86ae5a0))  - (renovate[bot])
 - **deps:** Update dependency @types/node to v22.10.4 ([#2386](https://github.com/tj-actions/changed-files/issues/2386)) ([7f28b2b](https://github.com/tj-actions/changed-files/commit/7f28b2be82d24be06a22503ab3cc3b462ca18212))  - (renovate[bot])
@@ -99,17 +150,6 @@ Co-authored-by: jackton1 <17484350+jackton1@users.noreply.github.com> ([ed8e9f6]
 - **deps:** Lock file maintenance ([#2377](https://github.com/tj-actions/changed-files/issues/2377)) ([515a6b3](https://github.com/tj-actions/changed-files/commit/515a6b35d1d0948f7da6d5cdb347ed1600859795))  - (renovate[bot])
 - **deps:** Update dependency @types/node to v22.10.2 ([#2376](https://github.com/tj-actions/changed-files/issues/2376)) ([ac47125](https://github.com/tj-actions/changed-files/commit/ac47125d2d05ea616734c7e19a125149a325d43f))  - (renovate[bot])
 - **deps:** Lock file maintenance ([#2375](https://github.com/tj-actions/changed-files/issues/2375)) ([ef3b6f1](https://github.com/tj-actions/changed-files/commit/ef3b6f1fa5eccdc95d915ec0f87a16535a73d0ca))  - (renovate[bot])
-
-## <!-- 9 -->⬆️ Upgrades
-
-- Upgraded to v45.0.5 ([#2374](https://github.com/tj-actions/changed-files/issues/2374))
-
-Co-authored-by: jackton1 <17484350+jackton1@users.noreply.github.com> ([8082fbc](https://github.com/tj-actions/changed-files/commit/8082fbc636f98079ae92dc93aaadbfb9105a24e0))  - (tj-actions[bot])
-
-# [45.0.5](https://github.com/tj-actions/changed-files/compare/v45.0.4...v45.0.5) - (2024-12-05)
-
-## <!-- 7 -->⚙️ Miscellaneous Tasks
-
 - **deps:** Update dependency eslint-plugin-github to v5.1.4 ([#2372](https://github.com/tj-actions/changed-files/issues/2372)) ([bab30c2](https://github.com/tj-actions/changed-files/commit/bab30c2299617f6615ec02a68b9a40d10bd21366))  - (renovate[bot])
 - **deps:** Update dependency prettier to v3.4.2 ([#2370](https://github.com/tj-actions/changed-files/issues/2370)) ([657a3f9](https://github.com/tj-actions/changed-files/commit/657a3f914f8c3dc9d8e541c1c2173057072d94f1))  - (renovate[bot])
 - **deps:** Lock file maintenance ([#2369](https://github.com/tj-actions/changed-files/issues/2369)) ([05f0aba](https://github.com/tj-actions/changed-files/commit/05f0aba931687dcad284e6c7f2e049c258a53fb8))  - (renovate[bot])
@@ -132,6 +172,18 @@ Co-authored-by: jackton1 <17484350+jackton1@users.noreply.github.com> ([8082fbc]
 
 ## <!-- 9 -->⬆️ Upgrades
 
+- Upgraded to v45.0.8 ([#2462](https://github.com/tj-actions/changed-files/issues/2462))
+
+Co-authored-by: jackton1 <17484350+jackton1@users.noreply.github.com> ([a284dc1](https://github.com/tj-actions/changed-files/commit/a284dc1814e3fd07f2e34267fc8f81227ed29fb8))  - (tj-actions[bot])
+- Upgraded to v45.0.7 ([#2425](https://github.com/tj-actions/changed-files/issues/2425))
+
+Co-authored-by: jackton1 <17484350+jackton1@users.noreply.github.com> ([b1ba699](https://github.com/tj-actions/changed-files/commit/b1ba699b304f2083b602164e06a89b868c84f076))  - (tj-actions[bot])
+- Upgraded to v45.0.6 ([#2389](https://github.com/tj-actions/changed-files/issues/2389))
+
+Co-authored-by: jackton1 <17484350+jackton1@users.noreply.github.com> ([ed8e9f6](https://github.com/tj-actions/changed-files/commit/ed8e9f69eea433e8fca92ad9b928ca6520d79c2a))  - (tj-actions[bot])
+- Upgraded to v45.0.5 ([#2374](https://github.com/tj-actions/changed-files/issues/2374))
+
+Co-authored-by: jackton1 <17484350+jackton1@users.noreply.github.com> ([8082fbc](https://github.com/tj-actions/changed-files/commit/8082fbc636f98079ae92dc93aaadbfb9105a24e0))  - (tj-actions[bot])
 - Upgraded to v45.0.4 ([#2344](https://github.com/tj-actions/changed-files/issues/2344))
 
 Co-authored-by: jackton1 <17484350+jackton1@users.noreply.github.com> ([6809677](https://github.com/tj-actions/changed-files/commit/6809677b7a5911221b35d87417198c8a289e34ec))  - (tj-actions[bot])
@@ -2772,7 +2824,14 @@ Co-authored-by: jackton1 <jackton1@users.noreply.github.com> ([648f9c1](https://
 
 Co-authored-by: jackton1 <jackton1@users.noreply.github.com> ([d6d7cb2](https://github.com/tj-actions/changed-files/commit/d6d7cb291e28bba32464fbbf0d13c7f6c2c75de1))  - (tj-actions[bot])
 
-# [37.0.0](https://github.com/tj-actions/changed-files/compare/v36.4.1...v37.0.0) - (2023-06-23)
+# [37.0.0](https://github.com/tj-actions/changed-files/compare/v36.4.2...v37.0.0) - (2023-06-23)
+
+## <!-- 7 -->⚙️ Miscellaneous Tasks
+
+- Update README.md ([5817a9e](https://github.com/tj-actions/changed-files/commit/5817a9efb0d7cc34b917d8146ea10b9f32044968))  - (Tonye Jack)
+- **deps:** Lock file maintenance ([#1297](https://github.com/tj-actions/changed-files/issues/1297)) ([33d50af](https://github.com/tj-actions/changed-files/commit/33d50af03f5e8e0914e7ddea9455ca6cde2033b1))  - (renovate[bot])
+
+# [36.4.2](https://github.com/tj-actions/changed-files/compare/v36.4.1...v36.4.2) - (2023-06-23)
 
 ## <!-- 0 -->🚀 Features
 
@@ -2793,8 +2852,6 @@ Co-authored-by: repo-ranger[bot] <repo-ranger[bot]@users.noreply.github.com> ([6
 
 ## <!-- 7 -->⚙️ Miscellaneous Tasks
 
-- Update README.md ([5817a9e](https://github.com/tj-actions/changed-files/commit/5817a9efb0d7cc34b917d8146ea10b9f32044968))  - (Tonye Jack)
-- **deps:** Lock file maintenance ([#1297](https://github.com/tj-actions/changed-files/issues/1297)) ([33d50af](https://github.com/tj-actions/changed-files/commit/33d50af03f5e8e0914e7ddea9455ca6cde2033b1))  - (renovate[bot])
 - Use input api url ([#1293](https://github.com/tj-actions/changed-files/issues/1293)) ([a4cd522](https://github.com/tj-actions/changed-files/commit/a4cd522ee2e5d7999bb102867e6d806e59861c52))  - (Tonye Jack)
 - **deps:** Lock file maintenance ([#1290](https://github.com/tj-actions/changed-files/issues/1290)) ([c4a394a](https://github.com/tj-actions/changed-files/commit/c4a394a9cfbbfcea1d864b5d6c9f9aa2b7960a9b))  - (renovate[bot])
 - **deps:** Update tj-actions/verify-changed-files action to v16 ([#1288](https://github.com/tj-actions/changed-files/issues/1288)) ([50ae49b](https://github.com/tj-actions/changed-files/commit/50ae49b0e4dc2c5bdccb7aad26373561c753b17f))  - (renovate[bot])

README.md

@@ -9,7 +9,7 @@
 
 <!-- ALL-CONTRIBUTORS-BADGE:START - Do not remove or modify this section -->
 
-[![All Contributors](https://img.shields.io/badge/all_contributors-27-orange.svg?style=flat-square)](#contributors-)
+[![All Contributors](https://img.shields.io/badge/all_contributors-29-orange.svg?style=flat-square)](#contributors-)
 
 <!-- ALL-CONTRIBUTORS-BADGE:END -->
 
@@ -122,7 +122,7 @@ jobs:
       # -----------------------------------------------------------------------------------------------------------
       - name: Get changed files
         id: changed-files
-        uses: tj-actions/changed-files@v45
+        uses: tj-actions/changed-files@26a38635fc1173cc5820336ce97be6188d0de9f5 # v46
         # To compare changes between the current commit and the last pushed remote commit set `since_last_remote_commit: true`. e.g
         # with:
         #   since_last_remote_commit: true 
@@ -140,7 +140,7 @@ jobs:
       # -----------------------------------------------------------------------------------------------------------
       - name: Get all changed markdown files
         id: changed-markdown-files
-        uses: tj-actions/changed-files@v45
+        uses: tj-actions/changed-files@26a38635fc1173cc5820336ce97be6188d0de9f5 # v46
         with:
           # Avoid using single or double quotes for multiline patterns
           files: |
@@ -161,7 +161,7 @@ jobs:
       # -----------------------------------------------------------------------------------------------------------
       - name: Get all test, doc and src files that have changed
         id: changed-files-yaml
-        uses: tj-actions/changed-files@v45
+        uses: tj-actions/changed-files@26a38635fc1173cc5820336ce97be6188d0de9f5 # v46
         with:
           files_yaml: |
             doc:
@@ -196,7 +196,7 @@ jobs:
       # -----------------------------------------------------------------------------------------------------------
       - name: Get changed files in the docs folder
         id: changed-files-specific
-        uses: tj-actions/changed-files@v45
+        uses: tj-actions/changed-files@26a38635fc1173cc5820336ce97be6188d0de9f5 # v46
         with:
           files: docs/*.{js,html}  # Alternatively using: `docs/**`
           files_ignore: docs/static.js
@@ -238,7 +238,7 @@ jobs:
     steps:
       - name: Get changed files
         id: changed-files
-        uses: tj-actions/changed-files@v45
+        uses: tj-actions/changed-files@26a38635fc1173cc5820336ce97be6188d0de9f5 # v46
 
       - name: List all changed files
         env:
@@ -281,7 +281,7 @@ jobs:
 
       - name: Get changed files
         id: changed-files
-        uses: tj-actions/changed-files@v45
+        uses: tj-actions/changed-files@26a38635fc1173cc5820336ce97be6188d0de9f5 # v46
       # NOTE: `since_last_remote_commit: true` is implied by default and falls back to the previous local commit.
 
       - name: List all changed files
@@ -328,7 +328,7 @@ Support this project with a :star:
 <!-- AUTO-DOC-INPUT:START - Do not remove or modify this section -->
 
 ```yaml
-- uses: tj-actions/changed-files@v45
+- uses: tj-actions/changed-files@26a38635fc1173cc5820336ce97be6188d0de9f5 # v46
   id: changed-files
   with:
     # Github API URL.
@@ -813,7 +813,7 @@ The format of the version string is as follows:
 ...
     - name: Get changed files
       id: changed-files
-      uses: tj-actions/changed-files@v45
+      uses: tj-actions/changed-files@26a38635fc1173cc5820336ce97be6188d0de9f5 # v46
 ...
 ```
 
@@ -826,7 +826,7 @@ The format of the version string is as follows:
 ...
     - name: Get changed files
       id: changed-files
-      uses: tj-actions/changed-files@v45
+      uses: tj-actions/changed-files@26a38635fc1173cc5820336ce97be6188d0de9f5 # v46
       with:
         safe_output: false # set to false because we are using an environment variable to store the output and avoid command injection.
 
@@ -849,7 +849,7 @@ The format of the version string is as follows:
 ...
     - name: Get all changed files and use a comma separator in the output
       id: changed-files
-      uses: tj-actions/changed-files@v45
+      uses: tj-actions/changed-files@26a38635fc1173cc5820336ce97be6188d0de9f5 # v46
       with:
         separator: ","
 ...
@@ -866,7 +866,7 @@ See [inputs](#inputs) for more information.
 ...
     - name: Get changed files
       id: changed-files
-      uses: tj-actions/changed-files@v45
+      uses: tj-actions/changed-files@26a38635fc1173cc5820336ce97be6188d0de9f5 # v46
 
     - name: List all added files
       env:
@@ -889,7 +889,7 @@ See [outputs](#outputs) for a list of all available outputs.
 ...
     - name: Get changed files
       id: changed-files
-      uses: tj-actions/changed-files@v45
+      uses: tj-actions/changed-files@26a38635fc1173cc5820336ce97be6188d0de9f5 # v46
 
     - name: Run a step if my-file.txt was modified
       if: contains(steps.changed-files.outputs.modified_files, 'my-file.txt')
@@ -910,7 +910,7 @@ See [outputs](#outputs) for a list of all available outputs.
 
    - name: Get changed files and write the outputs to a Txt file
      id: changed-files-write-output-files-txt
-     uses: tj-actions/changed-files@v45
+     uses: tj-actions/changed-files@26a38635fc1173cc5820336ce97be6188d0de9f5 # v46
      with:
        write_output_files: true
 
@@ -929,7 +929,7 @@ See [outputs](#outputs) for a list of all available outputs.
 ...
    - name: Get changed files and write the outputs to a JSON file
      id: changed-files-write-output-files-json
-     uses: tj-actions/changed-files@v45
+     uses: tj-actions/changed-files@26a38635fc1173cc5820336ce97be6188d0de9f5 # v46
      with:
        json: true
        write_output_files: true
@@ -949,7 +949,7 @@ See [outputs](#outputs) for a list of all available outputs.
 ...
     - name: Get changed files
       id: changed-files
-      uses: tj-actions/changed-files@v45
+      uses: tj-actions/changed-files@26a38635fc1173cc5820336ce97be6188d0de9f5 # v46
       with:
         files: |
           my-file.txt
@@ -972,7 +972,7 @@ See [inputs](#inputs) for more information.
 ...
     - name: Get changed files
       id: changed-files-specific
-      uses: tj-actions/changed-files@v45
+      uses: tj-actions/changed-files@26a38635fc1173cc5820336ce97be6188d0de9f5 # v46
       with:
         files: |
           my-file.txt
@@ -1023,7 +1023,7 @@ See [outputs](#outputs) for a list of all available outputs.
 ...
     - name: Get changed files using a source file or list of file(s) to populate to files input.
       id: changed-files-specific-source-file
-      uses: tj-actions/changed-files@v45
+      uses: tj-actions/changed-files@26a38635fc1173cc5820336ce97be6188d0de9f5 # v46
       with:
         files_from_source_file: test/changed-files-list.txt
 ...
@@ -1040,7 +1040,7 @@ See [inputs](#inputs) for more information.
 ...
     - name: Get changed files using a source file or list of file(s) to populate to files input and optionally specify more files.
       id: changed-files-specific-source-file-and-specify-files
-      uses: tj-actions/changed-files@v45
+      uses: tj-actions/changed-files@26a38635fc1173cc5820336ce97be6188d0de9f5 # v46
       with:
         files_from_source_file: |
           test/changed-files-list.txt
@@ -1061,7 +1061,7 @@ See [inputs](#inputs) for more information.
 ...
     - name: Get changed files using a different SHA
       id: changed-files
-      uses: tj-actions/changed-files@v45
+      uses: tj-actions/changed-files@26a38635fc1173cc5820336ce97be6188d0de9f5 # v46
       with:
         sha: ${{ github.event.pull_request.head.sha }}
 ...
@@ -1078,7 +1078,7 @@ See [inputs](#inputs) for more information.
 ...
     - name: Get changed files using a different base SHA
       id: changed-files
-      uses: tj-actions/changed-files@v45
+      uses: tj-actions/changed-files@26a38635fc1173cc5820336ce97be6188d0de9f5 # v46
       with:
         base_sha: ${{ github.event.pull_request.base.sha }}
 ...
@@ -1110,7 +1110,7 @@ jobs:
 
       - name: Get changed files
         id: changed-files
-        uses: tj-actions/changed-files@v45
+        uses: tj-actions/changed-files@26a38635fc1173cc5820336ce97be6188d0de9f5 # v46
 
       - name: List changed files
         env:
@@ -1120,7 +1120,7 @@ jobs:
 
       - name: Get changed files in the .github folder
         id: changed-files-specific
-        uses: tj-actions/changed-files@v45
+        uses: tj-actions/changed-files@26a38635fc1173cc5820336ce97be6188d0de9f5 # v46
         with:
           files: .github/**
 
@@ -1151,7 +1151,7 @@ See [inputs](#inputs) for more information.
 
     - name: Run changed-files with defaults in dir1
       id: changed-files-for-dir1
-      uses: tj-actions/changed-files@v45
+      uses: tj-actions/changed-files@26a38635fc1173cc5820336ce97be6188d0de9f5 # v46
       with:
         path: dir1
 
@@ -1176,13 +1176,13 @@ See [inputs](#inputs) for more information.
 ...
     - name: Run changed-files with quotepath disabled
       id: changed-files-quotepath
-      uses: tj-actions/changed-files@v45
+      uses: tj-actions/changed-files@26a38635fc1173cc5820336ce97be6188d0de9f5 # v46
       with:
         quotepath: "false"
 
     - name: Run changed-files with quotepath disabled for a specified list of file(s)
       id: changed-files-quotepath-specific
-      uses: tj-actions/changed-files@v45
+      uses: tj-actions/changed-files@26a38635fc1173cc5820336ce97be6188d0de9f5 # v46
       with:
         files: test/test-è.txt
         quotepath: "false"
@@ -1215,7 +1215,7 @@ See [inputs](#inputs) for more information.
 
       - name: Run changed-files with the commit of the last successful test workflow run
         id: changed-files-base-sha-push
-        uses: tj-actions/changed-files@v45
+        uses: tj-actions/changed-files@26a38635fc1173cc5820336ce97be6188d0de9f5 # v46
         with:
           base_sha: ${{ steps.last_successful_commit_push.outputs.base }}
 ...
@@ -1242,7 +1242,7 @@ See [inputs](#inputs) for more information.
 
       - name: Run changed-files with the commit of the last successful test workflow run on the main branch
         id: changed-files-base-sha-pull-request
-        uses: tj-actions/changed-files@v45
+        uses: tj-actions/changed-files@26a38635fc1173cc5820336ce97be6188d0de9f5 # v46
         with:
           base_sha: ${{ steps.last_successful_commit_pull_request.outputs.base }}
 ...
@@ -1268,7 +1268,7 @@ See [inputs](#inputs) for more information.
 ...
     - name: Run changed-files with dir_names
       id: changed-files-dir-names
-      uses: tj-actions/changed-files@v45
+      uses: tj-actions/changed-files@26a38635fc1173cc5820336ce97be6188d0de9f5 # v46
       with:
         dir_names: "true"
 ...
@@ -1285,7 +1285,7 @@ See [inputs](#inputs) for more information.
 ...
     - name: Run changed-files with JSON output
       id: changed-files-json
-      uses: tj-actions/changed-files@v45
+      uses: tj-actions/changed-files@26a38635fc1173cc5820336ce97be6188d0de9f5 # v46
       with:
         json: "true"
 ...
@@ -1302,13 +1302,13 @@ See [inputs](#inputs) for more information.
 ...
     - name: Get changed-files since 2022-08-19
       id: changed-files-since
-      uses: tj-actions/changed-files@v45
+      uses: tj-actions/changed-files@26a38635fc1173cc5820336ce97be6188d0de9f5 # v46
       with:
         since: "2022-08-19"
 
     - name: Get changed-files until 2022-08-20
       id: changed-files-until
-      uses: tj-actions/changed-files@v45
+      uses: tj-actions/changed-files@26a38635fc1173cc5820336ce97be6188d0de9f5 # v46
       with:
         until: "2022-08-20"
 ...
@@ -1446,6 +1446,10 @@ Thanks goes to these wonderful people ([emoji key](https://allcontributors.org/d
       <td align="center" valign="top" width="14.28%"><a href="https://keisukeyamashita.com"><img src="https://avatars.githubusercontent.com/u/23056537?v=4?s=100" width="100px;" alt="KeisukeYamashita"/><br /><sub><b>KeisukeYamashita</b></sub></a><br /><a href="https://github.com/tj-actions/changed-files/commits?author=KeisukeYamashita" title="Documentation">📖</a></td>
       <td align="center" valign="top" width="14.28%"><a href="https://github.com/codesculpture"><img src="https://avatars.githubusercontent.com/u/63452117?v=4?s=100" width="100px;" alt="Aravind"/><br /><sub><b>Aravind</b></sub></a><br /><a href="https://github.com/tj-actions/changed-files/commits?author=codesculpture" title="Code">💻</a> <a href="https://github.com/tj-actions/changed-files/issues?q=author%3Acodesculpture" title="Bug reports">🐛</a></td>
       <td align="center" valign="top" width="14.28%"><a href="https://lukaspfahler.de"><img src="https://avatars.githubusercontent.com/u/2308119?v=4?s=100" width="100px;" alt="Lukas Pfahler"/><br /><sub><b>Lukas Pfahler</b></sub></a><br /><a href="https://github.com/tj-actions/changed-files/commits?author=Whadup" title="Code">💻</a></td>
+      <td align="center" valign="top" width="14.28%"><a href="https://github.com/RajendraP"><img src="https://avatars.githubusercontent.com/u/8928165?v=4?s=100" width="100px;" alt="Rajendra Pandey"/><br /><sub><b>Rajendra Pandey</b></sub></a><br /><a href="https://github.com/tj-actions/changed-files/commits?author=RajendraP" title="Documentation">📖</a></td>
+    </tr>
+    <tr>
+      <td align="center" valign="top" width="14.28%"><a href="https://undefined.moe/"><img src="https://avatars.githubusercontent.com/u/29992205?v=4?s=100" width="100px;" alt="undefined"/><br /><sub><b>undefined</b></sub></a><br /><a href="https://github.com/tj-actions/changed-files/commits?author=undefined-moe" title="Documentation">📖</a></td>
     </tr>
   </tbody>
 </table>

dist/index.js

@@ -1281,7 +1281,7 @@ const getSHAForPullRequestEvent = async ({ inputs, workingDirectory, isShallow,
                             break;
                         }
                         core.info('Merge base is not in the local history, fetching remote target branch again...');
-                        core.info(`Attempt ${i}/10`);
+                        core.info(`Attempt ${i}/${inputs.fetchMissingHistoryMaxRetries || 10}`);
                     }
                 }
             }

renovate.json

@@ -1,35 +0,0 @@
-{
-  "extends": ["config:recommended"],
-  "enabled": true,
-  "prHourlyLimit": 10,
-  "prConcurrentLimit": 5,
-  "rebaseWhen": "behind-base-branch",
-  "addLabels": ["dependencies", "merge when passing"],
-  "assignees": ["jackton1"],
-  "assignAutomerge": true,
-  "dependencyDashboard": true,
-  "dependencyDashboardAutoclose": true,
-  "lockFileMaintenance": {
-    "enabled": true,
-    "automerge": true
-  },
-  "nvm": {
-    "enabled": false
-  },
-  "packageRules": [
-    {
-      "matchUpdateTypes": ["minor", "patch", "pin", "digest"],
-      "automerge": true,
-      "rebaseWhen": "behind-base-branch",
-      "addLabels": ["merge when passing"]
-    },
-    {
-      "description": "docker images",
-      "matchCategories": ["docker"],
-      "matchUpdateTypes": ["minor", "patch", "pin", "digest"],
-      "rebaseWhen": "behind-base-branch",
-      "addLabels": ["merge when passing"],
-      "automerge": true
-    }
-  ]
-}

src/commitSha.ts

@@ -561,7 +561,9 @@ export const getSHAForPullRequestEvent = async ({
             core.info(
               'Merge base is not in the local history, fetching remote target branch again...'
             )
-            core.info(`Attempt ${i}/10`)
+            core.info(
+              `Attempt ${i}/${inputs.fetchMissingHistoryMaxRetries || 10}`
+            )
           }
         }
       }

yarn.lock

@@ -1174,9 +1174,9 @@
     "@types/braces" "*"
 
 "@types/node@*", "@types/node@^22.0.0":
-  version "22.13.10"
-  resolved "https://registry.yarnpkg.com/@types/node/-/node-22.13.10.tgz#df9ea358c5ed991266becc3109dc2dc9125d77e4"
-  integrity sha512-I6LPUvlRH+O6VRUqYOcMudhaIdUVWfsjnZavnsraHvpBwaEyMN29ry+0UVJhImYL16xsscu0aske3yA+uPOWfw==
+  version "22.13.11"
+  resolved "https://registry.yarnpkg.com/@types/node/-/node-22.13.11.tgz#f0ed6b302dcf0f4229d44ea707e77484ad46d234"
+  integrity sha512-iEUCUJoU0i3VnrCmgoWCXttklWcvoCIx4jzcP22fioIVSdTmjgoEvmAO/QPw6TcS9k5FrNgn4w7q5lGOd1CT5g==
   dependencies:
     undici-types "~6.20.0"