···

       
27
       
27
       
 
       
    steps:

     

       
28
       
28
       
 
       
      # Use a GitHub App to create the PR so that CI gets triggered

     

       
29
       
29
       
 
       
      # The App is scoped to Repository > Contents and Pull Requests: write for Nixpkgs

     

       
30
       
30
       
-
       
      - uses: actions/create-github-app-token@a8d616148505b5069dccd32f177bb87d7f39123b # v2.1.1

     

       
30
       
30
       
+
       
      - uses: actions/create-github-app-token@67018539274d69449ef7c02e8e71183d1719ab42 # v2.1.4

     

       
31
       
31
       
 
       
        id: app-token

     

       
32
       
32
       
 
       
        with:

     

       
33
       
33
       
 
       
          app-id: ${{ vars.NIXPKGS_CI_APP_ID }}

     

···

       
109
       
109
       
 
       
      - name: Build codeowners validator

     

       
110
       
110
       
 
       
        run: nix-build nixpkgs/trusted/ci --arg nixpkgs ./nixpkgs/trusted-pinned -A codeownersValidator

     

       
111
       
111
       
 
       


     

       
112
       
112
       
-
       
      - uses: actions/create-github-app-token@a8d616148505b5069dccd32f177bb87d7f39123b # v2.1.1

     

       
112
       
112
       
+
       
      - uses: actions/create-github-app-token@67018539274d69449ef7c02e8e71183d1719ab42 # v2.1.4

     

       
113
       
113
       
 
       
        if: github.event_name == 'pull_request_target' && vars.OWNER_RO_APP_ID

     

       
114
       
114
       
 
       
        id: app-token

     

       
115
       
115
       
 
       
        with:

     

···

       
36
       
36
       
 
       
      # Use a GitHub App to create the PR so that CI gets triggered

     

       
37
       
37
       
 
       
      # The App is scoped to Repository > Contents and Pull Requests: write for Nixpkgs

     

       
38
       
38
       
 
       
      # We only need Pull Requests: write here, but the app is also used for backports.

     

       
39
       
39
       
-
       
      - uses: actions/create-github-app-token@a8d616148505b5069dccd32f177bb87d7f39123b # v2.1.1

     

       
39
       
39
       
+
       
      - uses: actions/create-github-app-token@67018539274d69449ef7c02e8e71183d1719ab42 # v2.1.4

     

       
40
       
40
       
 
       
        id: app-token

     

       
41
       
41
       
 
       
        with:

     

       
42
       
42
       
 
       
          app-id: ${{ vars.NIXPKGS_CI_APP_ID }}

     

···

       
49
       
49
       
 
       
        run: npm install @actions/artifact bottleneck

     

       
50
       
50
       
 
       


     

       
51
       
51
       
 
       
      # Use a GitHub App, because it has much higher rate limits: 12,500 instead of 5,000 req / hour.

     

       
52
       
52
       
-
       
      - uses: actions/create-github-app-token@a8d616148505b5069dccd32f177bb87d7f39123b # v2.1.1

     

       
52
       
52
       
+
       
      - uses: actions/create-github-app-token@67018539274d69449ef7c02e8e71183d1719ab42 # v2.1.4

     

       
53
       
53
       
 
       
        if: github.event_name != 'pull_request' && vars.NIXPKGS_CI_APP_ID

     

       
54
       
54
       
 
       
        id: app-token

     

       
55
       
55
       
 
       
        with:

     

···

       
23
       
23
       
 
       
    steps:

     

       
24
       
24
       
 
       
      # Use a GitHub App to create the PR so that CI gets triggered

     

       
25
       
25
       
 
       
      # The App is scoped to Repository > Contents and Pull Requests: write for Nixpkgs

     

       
26
       
26
       
-
       
      - uses: actions/create-github-app-token@a8d616148505b5069dccd32f177bb87d7f39123b # v2.1.1

     

       
26
       
26
       
+
       
      - uses: actions/create-github-app-token@67018539274d69449ef7c02e8e71183d1719ab42 # v2.1.4

     

       
27
       
27
       
 
       
        id: app-token

     

       
28
       
28
       
 
       
        with:

     

       
29
       
29
       
 
       
          app-id: ${{ vars.NIXPKGS_CI_APP_ID }}

     

···

       
48
       
48
       
 
       
      #   - OWNER_APP_PRIVATE_KEY (secret)

     

       
49
       
49
       
 
       
      #

     

       
50
       
50
       
 
       
      # Can't use the token received from permissions above, because it can't get enough permissions.

     

       
51
       
51
       
-
       
      - uses: actions/create-github-app-token@a8d616148505b5069dccd32f177bb87d7f39123b # v2.1.1

     

       
51
       
51
       
+
       
      - uses: actions/create-github-app-token@67018539274d69449ef7c02e8e71183d1719ab42 # v2.1.4

     

       
52
       
52
       
 
       
        if: github.event_name == 'pull_request_target' && vars.OWNER_APP_ID

     

       
53
       
53
       
 
       
        id: app-token

     

       
54
       
54
       
 
       
        with: