From 2280020e2ea54bc70850e47a55940ec9d902daa6 Mon Sep 17 00:00:00 2001
From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com>
Date: Mon, 8 Sep 2025 13:19:17 +0000
Subject: [PATCH] build(deps): bump the github-actions group across 1 directory
 with 3 updates

Bumps the github-actions group with 3 updates in the / directory: [actions/download-artifact](https://github.com/actions/download-artifact), [actions/checkout](https://github.com/actions/checkout) and [actions/github-script](https://github.com/actions/github-script).


Updates `actions/download-artifact` from 4 to 5
- [Release notes](https://github.com/actions/download-artifact/releases)
- [Commits](https://github.com/actions/download-artifact/compare/v4...v5)

Updates `actions/checkout` from 4 to 5
- [Release notes](https://github.com/actions/checkout/releases)
- [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md)
- [Commits](https://github.com/actions/checkout/compare/v4...v5)

Updates `actions/github-script` from 7 to 8
- [Release notes](https://github.com/actions/github-script/releases)
- [Commits](https://github.com/actions/github-script/compare/v7...v8)

---
updated-dependencies:
- dependency-name: actions/download-artifact
  dependency-version: '5'
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: github-actions
- dependency-name: actions/checkout
  dependency-version: '5'
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: github-actions
- dependency-name: actions/github-script
  dependency-version: '8'
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: github-actions
...

Signed-off-by: dependabot[bot] <support@github.com>
---
 .github/workflows/codeql.yml |  2 +-
 action.yml                   | 10 +++++-----
 2 files changed, 6 insertions(+), 6 deletions(-)

diff --git a/.github/workflows/codeql.yml b/.github/workflows/codeql.yml
index 1acf60a3..67ba87aa 100644
--- a/.github/workflows/codeql.yml
+++ b/.github/workflows/codeql.yml
@@ -55,7 +55,7 @@ jobs:
         # your codebase is analyzed, see https://docs.github.com/en/code-security/code-scanning/creating-an-advanced-setup-for-code-scanning/codeql-code-scanning-for-compiled-languages
     steps:
     - name: Checkout repository
-      uses: actions/checkout@v4
+      uses: actions/checkout@v5
 
     # Initializes the CodeQL tools for scanning.
     - name: Initialize CodeQL
diff --git a/action.yml b/action.yml
index 82269b3d..f9afa071 100644
--- a/action.yml
+++ b/action.yml
@@ -177,7 +177,7 @@ runs:
 
   - name: Download artifacts
     if: ${{ inputs.step == 'create-comment' }}
-    uses: actions/download-artifact@v4
+    uses: actions/download-artifact@v5
 
   - name: Move artifacts to home directory
     if: ${{ inputs.step == 'create-comment' }}
@@ -223,7 +223,7 @@ runs:
 
   - name: Checkout model repo
     if: ${{ inputs.step == 'create-comment' }}
-    uses: actions/checkout@v4
+    uses: actions/checkout@v5
     with:
       fetch-depth: 0
       path: model-repo
@@ -255,7 +255,7 @@ runs:
 
   - name: Checkout validator repo
     if: ${{ inputs.step == 'create-comment' }}
-    uses: actions/checkout@v4
+    uses: actions/checkout@v5
     with:
       repository: lkstrp/pypsa-validator
       ref: ${{ github.repository }}
@@ -365,7 +365,7 @@ runs:
   - name: Retrieve or create comment
     if: ${{ inputs.step == 'create-comment' }}
     id: comment
-    uses: actions/github-script@v7
+    uses: actions/github-script@v8
     with:
       script: |
         const owner = context.repo.owner;
@@ -408,7 +408,7 @@ runs:
 
   - name: Update comment
     if: ${{ inputs.step == 'create-comment' }}
-    uses: actions/github-script@v7
+    uses: actions/github-script@v8
     with:
       script: |
         const fs = require('fs');