Update github-actions

[gardener-ci-robot]

This PR contains the following updates:

Package	Type	Update	Change
actions/create-github-app-token	action	patch	v2.2.1 → v2.2.2
iarekylew00t/verified-bot-commit	action	patch	v2.1.7 → v2.1.8

---

Release Notes

actions/create-github-app-token (actions/create-github-app-token)

v2.2.2

Compare Source

Bug Fixes

• deps: bump @​actions/core from 1.11.1 to 3.0.0 (#​337) (b044133)
• deps: bump minimatch from 9.0.5 to 9.0.9 (#​335) (5cbc656)
• deps: bump the production-dependencies group with 4 updates (#​336) (6bda5bc)
• deps: bump undici from 7.16.0 to 7.18.2 (#​323) (b4f638f)

iarekylew00t/verified-bot-commit (iarekylew00t/verified-bot-commit)

v2.1.8

Compare Source

What's Changed

🏗️ Dependencies

• build(deps-dev): Bump the npm-development group across 1 directory with 8 updates by @​dependabot[bot] in IAreKyleW00t#303
• build(deps): Bump undici from 6.23.0 to 6.24.1 by @​dependabot[bot] in IAreKyleW00t#305

Full Changelog: IAreKyleW00t/verified-bot-commit@v2.1.7...v2.1.8

---

Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Enabled.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

---

• If you want to rebase/retry this PR, check this box

---

This PR has been generated by Renovate Bot.

[gardener-prow]

[APPROVALNOTIFIER] This PR is NOT APPROVED

This pull-request has been approved by:
Once this PR has been reviewed and has the lgtm label, please assign klocke-io for approval. For more information see the Code Review Process.

The full list of commands accepted by this bot can be found here.

Details

Needs approval from an approver in each of these files:

• OWNERS

Approvers can indicate their approval by writing /approve in a comment
Approvers can cancel approval by writing /approve cancel in a comment

[coderabbitai]

No actionable comments were generated in the recent review. 🎉

ℹ️ Recent review info

⚙️ Run configuration

Configuration used: defaults

Review profile: CHILL

Plan: Pro

Run ID: d4a4faad-183b-4cc6-a0c2-ef54b8753457

📥 Commits

Reviewing files that changed from the base of the PR and between aafb12c and 6599b4c.

📒 Files selected for processing (3)

• .github/workflows/cherry-pick-reusable.yaml
• .github/workflows/dependency-diagrams.yml
• .github/workflows/prepare-hotfix-branch.yaml

🚧 Files skipped from review as they are similar to previous changes (1)

• .github/workflows/cherry-pick-reusable.yaml

---

📝 Walkthrough

Walkthrough

Updated three GitHub Actions workflows to bump action versions: two workflows updated actions/create-github-app-token from v2.2.1 to v2.2.2; one workflow updated iarekylew00t/verified-bot-commit from v2.1.7 to v2.1.8. No other functional changes.

Changes

Cohort / File(s)	Summary
Cherry-pick & reusable workflow .github/workflows/cherry-pick-reusable.yaml	Bumped actions/create-github-app-token from v2.2.1 → v2.2.2 in multiple steps (parse-branches, cherry-pick, summary).
Hotfix branch workflow .github/workflows/prepare-hotfix-branch.yaml	Updated actions/create-github-app-token reference to v2.2.2 (token creation step commit hash changed).
Dependency diagrams workflow .github/workflows/dependency-diagrams.yml	Bumped iarekylew00t/verified-bot-commit from v2.1.7 → v2.1.8 in the "Commit changes" step.

Estimated code review effort

🎯 2 (Simple) | ⏱️ ~10 minutes

Possibly related PRs

• Update iarekylew00t/verified-bot-commit action to v2.1.5 #2786 — Also modifies dependency-diagrams.yml to bump the verified-bot-commit action version.
• Update iarekylew00t/verified-bot-commit action to v2.1.6 #2814 — Updates the same dependency-diagrams workflow step to a different target version of verified-bot-commit.
• Update github-actions #2815 — Prior bump series for verified-bot-commit in dependency-diagrams.yml (v2.1.6→v2.1.7 → now v2.1.8).

Suggested labels

approved, lgtm

Suggested reviewers

• holgerkoser
• petersutter
• grolu
• klocke-io

Poem

🐰 A nibble on versions, a hop and a cheer,
Tokens refreshed and commits draw near.
Workflows updated with a tidy little clue,
Bumps in the YAML — smooth, bright, and new! ✨

🚥 Pre-merge checks | ✅ 2 | ❌ 1

❌ Failed checks (1 inconclusive)

Check name	Status	Explanation	Resolution
Description check	❓ Inconclusive	Description provides detailed information about updates but is missing key template sections like 'What this PR does/why we need it' and 'Special notes for reviewers'.	Complete the PR description template by adding 'What this PR does/why we need it' section and other missing template elements for clarity.

✅ Passed checks (2 passed)

Check name	Status	Explanation
Title check	✅ Passed	Title 'Update github-actions' is directly related to the changeset which updates two GitHub Actions across three workflow files.
Docstring Coverage	✅ Passed	No functions found in the changed files to evaluate docstring coverage. Skipping docstring coverage check.

_{✏️ Tip: You can configure your own custom pre-merge checks in the settings.}

✨ Finishing Touches

🧪 Generate unit tests (beta)

• Create PR with unit tests
• Post copyable unit tests in a comment
• Commit unit tests in branch renovate/github-actions

📝 Coding Plan

• Generate coding plan for human review comments

---

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

• X
• Mastodon
• Reddit
• LinkedIn

_{Comment @coderabbitai help to get the list of available commands and usage tips.}