chore(deps): update github actions non-major

[renovate]

This PR contains the following updates:

Package	Type	Update	Change
actions/checkout	action	patch	v6.0.2 → 6.0.3
actions/create-github-app-token	action	minor	3.1.1 → 3.2.0
actions/create-github-app-token	action	minor	v3.1.1 → 3.2.0

---

Release Notes

actions/checkout (actions/checkout)

v6.0.3

Compare Source

• Fix checkout init for SHA-256 repositories by @​yaananth in #​2439
• fix: expand merge commit SHA regex and add SHA-256 test cases by @​yaananth in #​2414

actions/create-github-app-token (actions/create-github-app-token)

v3.2.0

Compare Source

Features

• add support for enterprise-level GitHub Apps (#​263) (952a2a7)
• support full repository names in repositories input (#​372) (85eb8dd)

Bug Fixes

• deps: bump @​actions/core from 3.0.0 to 3.0.1 in the production-dependencies group (#​364) (43e5c34)
• validate private-key input (#​376) (f24bbd8)

---

Configuration

📅 Schedule: (in timezone UTC)

• Branch creation
  • "on the 15th day of the month before 12pm"
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Enabled.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.

[greptile-apps]

Greptile Summary

Routine Renovate-generated bump of two GitHub Actions — actions/checkout (patch: SHA-256 regex fix) and actions/create-github-app-token (minor: enterprise-level app support, full repo names in repositories input) — across all five workflow files. All changes are SHA-pinned and no workflow logic is modified.

• actions/checkout updated from v6.0.2 → 6.0.3 in ci.yml, release.yml, and runtime-tests.yml; the patch fixes checkout init for SHA-256 repositories.
• actions/create-github-app-token updated from v3.1.1 → 3.2.0 in release-please.yml and workos-node-dep-bump.yml; the minor version adds enterprise GitHub App support and full repo-name handling.

Confidence Score: 5/5

Safe to merge — all changes are SHA-pinned action version bumps with no modifications to workflow logic.

Every changed line is a SHA-pinned action reference update generated by Renovate. Both upstream actions (actions/checkout and actions/create-github-app-token) are well-maintained official GitHub Actions, and the new commit SHAs correspond to tagged releases documented in their changelogs. No workflow steps, triggers, secrets handling, or job logic were modified.

No files require special attention.

Important Files Changed

Filename	Overview
.github/workflows/ci.yml	Updates actions/checkout SHA pin from v6.0.2 to 6.0.3; no logic changes.
.github/workflows/release-please.yml	Updates actions/create-github-app-token SHA pin from v3.1.1 to 3.2.0; no logic changes.
.github/workflows/release.yml	Updates actions/checkout SHA pin from v6.0.2 to 6.0.3; no logic changes.
.github/workflows/runtime-tests.yml	Updates actions/checkout SHA pin from v6.0.2 to 6.0.3; no logic changes.
.github/workflows/workos-node-dep-bump.yml	Updates actions/create-github-app-token SHA pin from 3.1.1 to 3.2.0; no logic changes.

Flowchart

%%{init: {'theme': 'neutral'}}%%
flowchart TD
    A[Renovate Bot] -->|Bumps action versions| B[ci.yml]
    A -->|Bumps action versions| C[release.yml]
    A -->|Bumps action versions| D[runtime-tests.yml]
    A -->|Bumps action versions| E[release-please.yml]
    A -->|Bumps action versions| F[workos-node-dep-bump.yml]

    B -->|actions/checkout| G[v6.0.2 → 6.0.3]
    C -->|actions/checkout| G
    D -->|actions/checkout| G

    E -->|actions/create-github-app-token| H[v3.1.1 → 3.2.0]
    F -->|actions/create-github-app-token| H

Loading

_{Reviews (1): Last reviewed commit: "chore(deps): update github actions non-m..." | Re-trigger Greptile}