Update actions/create-github-app-token action to v3

[gardener-ci-robot]

This PR contains the following updates:

Package	Type	Update	Change
actions/create-github-app-token	action	major	v2.2.1 → v3.0.0

---

Release Notes

actions/create-github-app-token (actions/create-github-app-token)

v3.0.0

Compare Source

• feat!: node 24 support (#​275) (2e564a0)
• fix!: require NODE_USE_ENV_PROXY for proxy support (#​342) (4451bcb)

Bug Fixes

• remove custom proxy handling (#​143) (dce0ab0)

BREAKING CHANGES

• Custom proxy handling has been removed. If you use HTTP_PROXY or HTTPS_PROXY, you must now also set NODE_USE_ENV_PROXY=1 on the action step.
• Requires Actions Runner v2.327.1 or later if you are using a self-hosted runner.

v2.2.2

Compare Source

Bug Fixes

• deps: bump @​actions/core from 1.11.1 to 3.0.0 (#​337) (b044133)
• deps: bump minimatch from 9.0.5 to 9.0.9 (#​335) (5cbc656)
• deps: bump the production-dependencies group with 4 updates (#​336) (6bda5bc)
• deps: bump undici from 7.16.0 to 7.18.2 (#​323) (b4f638f)

---

Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR has been generated by Renovate Bot.

[coderabbitai]

📝 Walkthrough

Walkthrough

GitHub App Token action is updated from version v2.2.1 to v3.0.0 across two workflow files. No logic or control-flow changes; token retrieval and subsequent workflow steps remain functionally equivalent.

Changes

Cohort / File(s)	Summary
GitHub Action Version Updates .github/workflows/cherry-pick-reusable.yaml, .github/workflows/prepare-hotfix-branch.yaml	Updated GitHub App Token action from v2.2.1 to v3.0.0 in workflow steps. No functional changes to control flow or error handling.

Estimated code review effort

🎯 1 (Trivial) | ⏱️ ~3 minutes

Suggested reviewers

• holgerkoser
• petersutter
• grolu
• klocke-io

Poem

🐰 The tokens hop with version cheer,
From v2 to v3, crystal clear!
No logic bends, no flows transform,
Just upgrades keeping workflows warm. ✨

🚥 Pre-merge checks | ✅ 2 | ❌ 1

❌ Failed checks (1 inconclusive)

Check name	Status	Explanation	Resolution
Description check	❓ Inconclusive	The description includes a detailed update table, comprehensive release notes, and configuration details, but lacks the structured template sections (What this PR does, issue fixes, special notes, release note block).	Restructure the description using the repository template with clear sections for 'What this PR does', 'Which issue(s) this PR fixes', and a properly formatted release note block.

✅ Passed checks (2 passed)

Check name	Status	Explanation
Title check	✅ Passed	The PR title clearly and concisely summarizes the primary change: updating the actions/create-github-app-token action to v3.
Docstring Coverage	✅ Passed	No functions found in the changed files to evaluate docstring coverage. Skipping docstring coverage check.

_{✏️ Tip: You can configure your own custom pre-merge checks in the settings.}

✨ Finishing Touches

🧪 Generate unit tests (beta)

• Create PR with unit tests
• Post copyable unit tests in a comment
• Commit unit tests in branch renovate/major-github-actions

📝 Coding Plan

• Generate coding plan for human review comments

---

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

• X
• Mastodon
• Reddit
• LinkedIn

_{Comment @coderabbitai help to get the list of available commands and usage tips.}

[gardener-prow]

[APPROVALNOTIFIER] This PR is NOT APPROVED

This pull-request has been approved by:
Once this PR has been reviewed and has the lgtm label, please assign klocke-io for approval. For more information see the Code Review Process.

The full list of commands accepted by this bot can be found here.

Details

Needs approval from an approver in each of these files:

• OWNERS

Approvers can indicate their approval by writing /approve in a comment
Approvers can cancel approval by writing /approve cancel in a comment

[coderabbitai]

🧹 Nitpick comments (1)

.github/workflows/cherry-pick-reusable.yaml (1)

29-34: Verify SHA and be aware of proxy breaking changes in v3.0.0.

The action is upgraded to v3.0.0 with SHA f8d387b68d61c58ab83c6c016672934102569859. If workflows run behind a proxy (HTTP_PROXY/HTTPS_PROXY), set NODE_USE_ENV_PROXY=1 as an environment variable—v3 removed custom proxy handling. This workflow uses GitHub-hosted runners, so the self-hosted runner version requirement (v2.327.1+) does not apply.

🤖 Prompt for AI Agents

Verify each finding against the current code and only fix it if needed.

In @.github/workflows/cherry-pick-reusable.yaml around lines 29 - 34, The
workflow updates the create-github-app-token action to v3.0.0 using SHA
f8d387b68d61c58ab83c6c016672934102569859; verify that SHA is intentional and
correct, and if this workflow may run behind an HTTP/HTTPS proxy add the
environment variable NODE_USE_ENV_PROXY=1 to the job or step that uses
actions/create-github-app-token (the step with id: token) because v3 removed
custom proxy handling.

🤖 Prompt for all review comments with AI agents

Verify each finding against the current code and only fix it if needed.

Nitpick comments:
In @.github/workflows/cherry-pick-reusable.yaml:
- Around line 29-34: The workflow updates the create-github-app-token action to
v3.0.0 using SHA f8d387b68d61c58ab83c6c016672934102569859; verify that SHA is
intentional and correct, and if this workflow may run behind an HTTP/HTTPS proxy
add the environment variable NODE_USE_ENV_PROXY=1 to the job or step that uses
actions/create-github-app-token (the step with id: token) because v3 removed
custom proxy handling.

---

ℹ️ Review info

⚙️ Run configuration

Configuration used: defaults

Review profile: CHILL

Plan: Pro

Run ID: 2d79f269-8f28-427c-9d40-47465891181c

📥 Commits

Reviewing files that changed from the base of the PR and between ab79a2e and 370d1e2.

📒 Files selected for processing (2)

• .github/workflows/cherry-pick-reusable.yaml
• .github/workflows/prepare-hotfix-branch.yaml