Bump action versions (#1480)

* Bump action versions Bump versions for: - docker/login-action - mheap/github-action-required-labels - peter-evans/create-pull-request Signed-off-by: Daniel Mikusa <[email protected]> * Adjust logic for calculating version (#1481) In most cases, `GITHUB_REF` is set to something that starts with `refs/*`. There is a bug where it's not set and when that happens, we get a bad release. The version calculation happens incorrectly and it uses the git commit hash for the version, but that does not work for an actual release. There are three scenarios when the version is calculated: - When publishing a builder - When publishing a buildpack - When running tests for publishing a builder (i.e. create-package) The first two happen on release, and should read the tag and parse out the semver number. The latter should not have a version so it will fallback to running git to obtain the git commit hash and use that for a version. We were previously trying to detect the case where the variable was unset or empty, but didn't have the logic right. This PR switches things so that we look to make sure `GITHUB_REF` starts with `refs/*`. I'm hoping this will be more reliable. Signed-off-by: Daniel Mikusa <[email protected]> --------- Signed-off-by: Daniel Mikusa <[email protected]>
paketo-buildpacks · Feb 14, 2024 · ac8b4f0 · ac8b4f0
1 parent 4094bd1
commit ac8b4f0
Show file tree

Hide file tree

Showing 50 changed files with 54 additions and 54 deletions.
diff --git a/.github/workflows/pb-create-action-adoptium-dependency.yml b/.github/workflows/pb-create-action-adoptium-dependency.yml
@@ -21,7 +21,7 @@ jobs:
         steps:
             - name: Docker login ghcr.io
               if: ${{ (github.event_name != 'pull_request' || ! github.event.pull_request.head.repo.fork) && (github.actor != 'dependabot[bot]') }}
-              uses: docker/login-action@v2
+              uses: docker/login-action@v3
               with:
                 password: ${{ secrets.PAKETO_BOT_GITHUB_TOKEN }}
                 registry: ghcr.io

diff --git a/.github/workflows/pb-create-action-alibaba-dragonwell-dependency.yml b/.github/workflows/pb-create-action-alibaba-dragonwell-dependency.yml
@@ -21,7 +21,7 @@ jobs:
         steps:
             - name: Docker login ghcr.io
               if: ${{ (github.event_name != 'pull_request' || ! github.event.pull_request.head.repo.fork) && (github.actor != 'dependabot[bot]') }}
-              uses: docker/login-action@v2
+              uses: docker/login-action@v3
               with:
                 password: ${{ secrets.PAKETO_BOT_GITHUB_TOKEN }}
                 registry: ghcr.io

diff --git a/.github/workflows/pb-create-action-amazon-corretto-dependency.yml b/.github/workflows/pb-create-action-amazon-corretto-dependency.yml
@@ -21,7 +21,7 @@ jobs:
         steps:
             - name: Docker login ghcr.io
               if: ${{ (github.event_name != 'pull_request' || ! github.event.pull_request.head.repo.fork) && (github.actor != 'dependabot[bot]') }}
-              uses: docker/login-action@v2
+              uses: docker/login-action@v3
               with:
                 password: ${{ secrets.PAKETO_BOT_GITHUB_TOKEN }}
                 registry: ghcr.io

diff --git a/.github/workflows/pb-create-action-appdynamics-dependency.yml b/.github/workflows/pb-create-action-appdynamics-dependency.yml
@@ -21,7 +21,7 @@ jobs:
         steps:
             - name: Docker login ghcr.io
               if: ${{ (github.event_name != 'pull_request' || ! github.event.pull_request.head.repo.fork) && (github.actor != 'dependabot[bot]') }}
-              uses: docker/login-action@v2
+              uses: docker/login-action@v3
               with:
                 password: ${{ secrets.PAKETO_BOT_GITHUB_TOKEN }}
                 registry: ghcr.io

diff --git a/.github/workflows/pb-create-action-aqua-security-dependency.yml b/.github/workflows/pb-create-action-aqua-security-dependency.yml
@@ -21,7 +21,7 @@ jobs:
         steps:
             - name: Docker login ghcr.io
               if: ${{ (github.event_name != 'pull_request' || ! github.event.pull_request.head.repo.fork) && (github.actor != 'dependabot[bot]') }}
-              uses: docker/login-action@v2
+              uses: docker/login-action@v3
               with:
                 password: ${{ secrets.PAKETO_BOT_GITHUB_TOKEN }}
                 registry: ghcr.io

diff --git a/.github/workflows/pb-create-action-aternity-dependency.yml b/.github/workflows/pb-create-action-aternity-dependency.yml
@@ -21,7 +21,7 @@ jobs:
         steps:
             - name: Docker login ghcr.io
               if: ${{ (github.event_name != 'pull_request' || ! github.event.pull_request.head.repo.fork) && (github.actor != 'dependabot[bot]') }}
-              uses: docker/login-action@v2
+              uses: docker/login-action@v3
               with:
                 password: ${{ secrets.PAKETO_BOT_GITHUB_TOKEN }}
                 registry: ghcr.io

diff --git a/.github/workflows/pb-create-action-azul-zulu-dependency.yml b/.github/workflows/pb-create-action-azul-zulu-dependency.yml
@@ -21,7 +21,7 @@ jobs:
         steps:
             - name: Docker login ghcr.io
               if: ${{ (github.event_name != 'pull_request' || ! github.event.pull_request.head.repo.fork) && (github.actor != 'dependabot[bot]') }}
-              uses: docker/login-action@v2
+              uses: docker/login-action@v3
               with:
                 password: ${{ secrets.PAKETO_BOT_GITHUB_TOKEN }}
                 registry: ghcr.io

diff --git a/.github/workflows/pb-create-action-bellsoft-liberica-dependency.yml b/.github/workflows/pb-create-action-bellsoft-liberica-dependency.yml
@@ -21,7 +21,7 @@ jobs:
         steps:
             - name: Docker login ghcr.io
               if: ${{ (github.event_name != 'pull_request' || ! github.event.pull_request.head.repo.fork) && (github.actor != 'dependabot[bot]') }}
-              uses: docker/login-action@v2
+              uses: docker/login-action@v3
               with:
                 password: ${{ secrets.PAKETO_BOT_GITHUB_TOKEN }}
                 registry: ghcr.io

diff --git a/.github/workflows/pb-create-action-ca-apm-dependency.yml b/.github/workflows/pb-create-action-ca-apm-dependency.yml
@@ -21,7 +21,7 @@ jobs:
         steps:
             - name: Docker login ghcr.io
               if: ${{ (github.event_name != 'pull_request' || ! github.event.pull_request.head.repo.fork) && (github.actor != 'dependabot[bot]') }}
-              uses: docker/login-action@v2
+              uses: docker/login-action@v3
               with:
                 password: ${{ secrets.PAKETO_BOT_GITHUB_TOKEN }}
                 registry: ghcr.io

diff --git a/.github/workflows/pb-create-action-cf-java-index-dependency.yml b/.github/workflows/pb-create-action-cf-java-index-dependency.yml
@@ -21,7 +21,7 @@ jobs:
         steps:
             - name: Docker login ghcr.io
               if: ${{ (github.event_name != 'pull_request' || ! github.event.pull_request.head.repo.fork) && (github.actor != 'dependabot[bot]') }}
-              uses: docker/login-action@v2
+              uses: docker/login-action@v3
               with:
                 password: ${{ secrets.PAKETO_BOT_GITHUB_TOKEN }}
                 registry: ghcr.io

diff --git a/.github/workflows/pb-create-action-clojure-tools-dependency.yml b/.github/workflows/pb-create-action-clojure-tools-dependency.yml
@@ -21,7 +21,7 @@ jobs:
         steps:
             - name: Docker login ghcr.io
               if: ${{ (github.event_name != 'pull_request' || ! github.event.pull_request.head.repo.fork) && (github.actor != 'dependabot[bot]') }}
-              uses: docker/login-action@v2
+              uses: docker/login-action@v3
               with:
                 password: ${{ secrets.PAKETO_BOT_GITHUB_TOKEN }}
                 registry: ghcr.io

diff --git a/.github/workflows/pb-create-action-compute-artifact-description.yml b/.github/workflows/pb-create-action-compute-artifact-description.yml
@@ -21,7 +21,7 @@ jobs:
         steps:
             - name: Docker login ghcr.io
               if: ${{ (github.event_name != 'pull_request' || ! github.event.pull_request.head.repo.fork) && (github.actor != 'dependabot[bot]') }}
-              uses: docker/login-action@v2
+              uses: docker/login-action@v3
               with:
                 password: ${{ secrets.PAKETO_BOT_GITHUB_TOKEN }}
                 registry: ghcr.io

diff --git a/.github/workflows/pb-create-action-draft-release.yml b/.github/workflows/pb-create-action-draft-release.yml
@@ -21,7 +21,7 @@ jobs:
         steps:
             - name: Docker login ghcr.io
               if: ${{ (github.event_name != 'pull_request' || ! github.event.pull_request.head.repo.fork) && (github.actor != 'dependabot[bot]') }}
-              uses: docker/login-action@v2
+              uses: docker/login-action@v3
               with:
                 password: ${{ secrets.PAKETO_BOT_GITHUB_TOKEN }}
                 registry: ghcr.io

diff --git a/.github/workflows/pb-create-action-foojay-dependency.yml b/.github/workflows/pb-create-action-foojay-dependency.yml
@@ -21,7 +21,7 @@ jobs:
         steps:
             - name: Docker login ghcr.io
               if: ${{ (github.event_name != 'pull_request' || ! github.event.pull_request.head.repo.fork) && (github.actor != 'dependabot[bot]') }}
-              uses: docker/login-action@v2
+              uses: docker/login-action@v3
               with:
                 password: ${{ secrets.PAKETO_BOT_GITHUB_TOKEN }}
                 registry: ghcr.io

diff --git a/.github/workflows/pb-create-action-gcs-dependency.yml b/.github/workflows/pb-create-action-gcs-dependency.yml
@@ -21,7 +21,7 @@ jobs:
         steps:
             - name: Docker login ghcr.io
               if: ${{ (github.event_name != 'pull_request' || ! github.event.pull_request.head.repo.fork) && (github.actor != 'dependabot[bot]') }}
-              uses: docker/login-action@v2
+              uses: docker/login-action@v3
               with:
                 password: ${{ secrets.PAKETO_BOT_GITHUB_TOKEN }}
                 registry: ghcr.io

diff --git a/.github/workflows/pb-create-action-github-release-dependency.yml b/.github/workflows/pb-create-action-github-release-dependency.yml
@@ -21,7 +21,7 @@ jobs:
         steps:
             - name: Docker login ghcr.io
               if: ${{ (github.event_name != 'pull_request' || ! github.event.pull_request.head.repo.fork) && (github.actor != 'dependabot[bot]') }}
-              uses: docker/login-action@v2
+              uses: docker/login-action@v3
               with:
                 password: ${{ secrets.PAKETO_BOT_GITHUB_TOKEN }}
                 registry: ghcr.io

diff --git a/.github/workflows/pb-create-action-google-stackdriver-profiler-dependency.yml b/.github/workflows/pb-create-action-google-stackdriver-profiler-dependency.yml
@@ -21,7 +21,7 @@ jobs:
         steps:
             - name: Docker login ghcr.io
               if: ${{ (github.event_name != 'pull_request' || ! github.event.pull_request.head.repo.fork) && (github.actor != 'dependabot[bot]') }}
-              uses: docker/login-action@v2
+              uses: docker/login-action@v3
               with:
                 password: ${{ secrets.PAKETO_BOT_GITHUB_TOKEN }}
                 registry: ghcr.io

diff --git a/.github/workflows/pb-create-action-graalvm-dependency.yml b/.github/workflows/pb-create-action-graalvm-dependency.yml
@@ -21,7 +21,7 @@ jobs:
         steps:
             - name: Docker login ghcr.io
               if: ${{ (github.event_name != 'pull_request' || ! github.event.pull_request.head.repo.fork) && (github.actor != 'dependabot[bot]') }}
-              uses: docker/login-action@v2
+              uses: docker/login-action@v3
               with:
                 password: ${{ secrets.PAKETO_BOT_GITHUB_TOKEN }}
                 registry: ghcr.io

diff --git a/.github/workflows/pb-create-action-gradle-dependency.yml b/.github/workflows/pb-create-action-gradle-dependency.yml
@@ -21,7 +21,7 @@ jobs:
         steps:
             - name: Docker login ghcr.io
               if: ${{ (github.event_name != 'pull_request' || ! github.event.pull_request.head.repo.fork) && (github.actor != 'dependabot[bot]') }}
-              uses: docker/login-action@v2
+              uses: docker/login-action@v3
               with:
                 password: ${{ secrets.PAKETO_BOT_GITHUB_TOKEN }}
                 registry: ghcr.io

diff --git a/.github/workflows/pb-create-action-ibm-semeru-dependency.yml b/.github/workflows/pb-create-action-ibm-semeru-dependency.yml
@@ -21,7 +21,7 @@ jobs:
         steps:
             - name: Docker login ghcr.io
               if: ${{ (github.event_name != 'pull_request' || ! github.event.pull_request.head.repo.fork) && (github.actor != 'dependabot[bot]') }}
-              uses: docker/login-action@v2
+              uses: docker/login-action@v3
               with:
                 password: ${{ secrets.PAKETO_BOT_GITHUB_TOKEN }}
                 registry: ghcr.io

diff --git a/.github/workflows/pb-create-action-jprofiler-dependency.yml b/.github/workflows/pb-create-action-jprofiler-dependency.yml
@@ -21,7 +21,7 @@ jobs:
         steps:
             - name: Docker login ghcr.io
               if: ${{ (github.event_name != 'pull_request' || ! github.event.pull_request.head.repo.fork) && (github.actor != 'dependabot[bot]') }}
-              uses: docker/login-action@v2
+              uses: docker/login-action@v3
               with:
                 password: ${{ secrets.PAKETO_BOT_GITHUB_TOKEN }}
                 registry: ghcr.io

diff --git a/.github/workflows/pb-create-action-jrebel-dependency.yml b/.github/workflows/pb-create-action-jrebel-dependency.yml
@@ -21,7 +21,7 @@ jobs:
         steps:
             - name: Docker login ghcr.io
               if: ${{ (github.event_name != 'pull_request' || ! github.event.pull_request.head.repo.fork) && (github.actor != 'dependabot[bot]') }}
-              uses: docker/login-action@v2
+              uses: docker/login-action@v3
               with:
                 password: ${{ secrets.PAKETO_BOT_GITHUB_TOKEN }}
                 registry: ghcr.io

diff --git a/.github/workflows/pb-create-action-leiningen-dependency.yml b/.github/workflows/pb-create-action-leiningen-dependency.yml
@@ -21,7 +21,7 @@ jobs:
         steps:
             - name: Docker login ghcr.io
               if: ${{ (github.event_name != 'pull_request' || ! github.event.pull_request.head.repo.fork) && (github.actor != 'dependabot[bot]') }}
-              uses: docker/login-action@v2
+              uses: docker/login-action@v3
               with:
                 password: ${{ secrets.PAKETO_BOT_GITHUB_TOKEN }}
                 registry: ghcr.io

diff --git a/.github/workflows/pb-create-action-liberty-dependency.yml b/.github/workflows/pb-create-action-liberty-dependency.yml
@@ -21,7 +21,7 @@ jobs:
         steps:
             - name: Docker login ghcr.io
               if: ${{ (github.event_name != 'pull_request' || ! github.event.pull_request.head.repo.fork) && (github.actor != 'dependabot[bot]') }}
-              uses: docker/login-action@v2
+              uses: docker/login-action@v3
               with:
                 password: ${{ secrets.PAKETO_BOT_GITHUB_TOKEN }}
                 registry: ghcr.io

diff --git a/.github/workflows/pb-create-action-maven-dependency.yml b/.github/workflows/pb-create-action-maven-dependency.yml
@@ -21,7 +21,7 @@ jobs:
         steps:
             - name: Docker login ghcr.io
               if: ${{ (github.event_name != 'pull_request' || ! github.event.pull_request.head.repo.fork) && (github.actor != 'dependabot[bot]') }}
-              uses: docker/login-action@v2
+              uses: docker/login-action@v3
               with:
                 password: ${{ secrets.PAKETO_BOT_GITHUB_TOKEN }}
                 registry: ghcr.io

diff --git a/.github/workflows/pb-create-action-new-relic-dependency.yml b/.github/workflows/pb-create-action-new-relic-dependency.yml
@@ -21,7 +21,7 @@ jobs:
         steps:
             - name: Docker login ghcr.io
               if: ${{ (github.event_name != 'pull_request' || ! github.event.pull_request.head.repo.fork) && (github.actor != 'dependabot[bot]') }}
-              uses: docker/login-action@v2
+              uses: docker/login-action@v3
               with:
                 password: ${{ secrets.PAKETO_BOT_GITHUB_TOKEN }}
                 registry: ghcr.io

diff --git a/.github/workflows/pb-create-action-npm-dependency.yml b/.github/workflows/pb-create-action-npm-dependency.yml
@@ -21,7 +21,7 @@ jobs:
         steps:
             - name: Docker login ghcr.io
               if: ${{ (github.event_name != 'pull_request' || ! github.event.pull_request.head.repo.fork) && (github.actor != 'dependabot[bot]') }}
-              uses: docker/login-action@v2
+              uses: docker/login-action@v3
               with:
                 password: ${{ secrets.PAKETO_BOT_GITHUB_TOKEN }}
                 registry: ghcr.io

diff --git a/.github/workflows/pb-create-action-oracle-dependency.yml b/.github/workflows/pb-create-action-oracle-dependency.yml
@@ -21,7 +21,7 @@ jobs:
         steps:
             - name: Docker login ghcr.io
               if: ${{ (github.event_name != 'pull_request' || ! github.event.pull_request.head.repo.fork) && (github.actor != 'dependabot[bot]') }}
-              uses: docker/login-action@v2
+              uses: docker/login-action@v3
               with:
                 password: ${{ secrets.PAKETO_BOT_GITHUB_TOKEN }}
                 registry: ghcr.io

diff --git a/.github/workflows/pb-create-action-overops-dependency.yml b/.github/workflows/pb-create-action-overops-dependency.yml
@@ -21,7 +21,7 @@ jobs:
         steps:
             - name: Docker login ghcr.io
               if: ${{ (github.event_name != 'pull_request' || ! github.event.pull_request.head.repo.fork) && (github.actor != 'dependabot[bot]') }}
-              uses: docker/login-action@v2
+              uses: docker/login-action@v3
               with:
                 password: ${{ secrets.PAKETO_BOT_GITHUB_TOKEN }}
                 registry: ghcr.io

diff --git a/.github/workflows/pb-create-action-paketo-deps-dependency.yml b/.github/workflows/pb-create-action-paketo-deps-dependency.yml
@@ -21,7 +21,7 @@ jobs:
         steps:
             - name: Docker login ghcr.io
               if: ${{ (github.event_name != 'pull_request' || ! github.event.pull_request.head.repo.fork) && (github.actor != 'dependabot[bot]') }}
-              uses: docker/login-action@v2
+              uses: docker/login-action@v3
               with:
                 password: ${{ secrets.PAKETO_BOT_GITHUB_TOKEN }}
                 registry: ghcr.io

diff --git a/.github/workflows/pb-create-action-rust-dependency.yml b/.github/workflows/pb-create-action-rust-dependency.yml
@@ -21,7 +21,7 @@ jobs:
         steps:
             - name: Docker login ghcr.io
               if: ${{ (github.event_name != 'pull_request' || ! github.event.pull_request.head.repo.fork) && (github.actor != 'dependabot[bot]') }}
-              uses: docker/login-action@v2
+              uses: docker/login-action@v3
               with:
                 password: ${{ secrets.PAKETO_BOT_GITHUB_TOKEN }}
                 registry: ghcr.io

diff --git a/.github/workflows/pb-create-action-rustup-init-dependency.yml b/.github/workflows/pb-create-action-rustup-init-dependency.yml
@@ -21,7 +21,7 @@ jobs:
         steps:
             - name: Docker login ghcr.io
               if: ${{ (github.event_name != 'pull_request' || ! github.event.pull_request.head.repo.fork) && (github.actor != 'dependabot[bot]') }}
-              uses: docker/login-action@v2
+              uses: docker/login-action@v3
               with:
                 password: ${{ secrets.PAKETO_BOT_GITHUB_TOKEN }}
                 registry: ghcr.io

diff --git a/.github/workflows/pb-create-action-skywalking-dependency.yml b/.github/workflows/pb-create-action-skywalking-dependency.yml
@@ -21,7 +21,7 @@ jobs:
         steps:
             - name: Docker login ghcr.io
               if: ${{ (github.event_name != 'pull_request' || ! github.event.pull_request.head.repo.fork) && (github.actor != 'dependabot[bot]') }}
-              uses: docker/login-action@v2
+              uses: docker/login-action@v3
               with:
                 password: ${{ secrets.PAKETO_BOT_GITHUB_TOKEN }}
                 registry: ghcr.io

diff --git a/.github/workflows/pb-create-action-spring-generations.yml b/.github/workflows/pb-create-action-spring-generations.yml
@@ -21,7 +21,7 @@ jobs:
         steps:
             - name: Docker login ghcr.io
               if: ${{ (github.event_name != 'pull_request' || ! github.event.pull_request.head.repo.fork) && (github.actor != 'dependabot[bot]') }}
-              uses: docker/login-action@v2
+              uses: docker/login-action@v3
               with:
                 password: ${{ secrets.PAKETO_BOT_GITHUB_TOKEN }}
                 registry: ghcr.io

diff --git a/.github/workflows/pb-create-action-tomcat-dependency.yml b/.github/workflows/pb-create-action-tomcat-dependency.yml
@@ -21,7 +21,7 @@ jobs:
         steps:
             - name: Docker login ghcr.io
               if: ${{ (github.event_name != 'pull_request' || ! github.event.pull_request.head.repo.fork) && (github.actor != 'dependabot[bot]') }}
-              uses: docker/login-action@v2
+              uses: docker/login-action@v3
               with:
                 password: ${{ secrets.PAKETO_BOT_GITHUB_TOKEN }}
                 registry: ghcr.io

diff --git a/.github/workflows/pb-create-action-tomee-dependency.yml b/.github/workflows/pb-create-action-tomee-dependency.yml
@@ -21,7 +21,7 @@ jobs:
         steps:
             - name: Docker login ghcr.io
               if: ${{ (github.event_name != 'pull_request' || ! github.event.pull_request.head.repo.fork) && (github.actor != 'dependabot[bot]') }}
-              uses: docker/login-action@v2
+              uses: docker/login-action@v3
               with:
                 password: ${{ secrets.PAKETO_BOT_GITHUB_TOKEN }}
                 registry: ghcr.io

diff --git a/.github/workflows/pb-create-action-yourkit-dependency.yml b/.github/workflows/pb-create-action-yourkit-dependency.yml
@@ -21,7 +21,7 @@ jobs:
         steps:
             - name: Docker login ghcr.io
               if: ${{ (github.event_name != 'pull_request' || ! github.event.pull_request.head.repo.fork) && (github.actor != 'dependabot[bot]') }}
-              uses: docker/login-action@v2
+              uses: docker/login-action@v3
               with:
                 password: ${{ secrets.PAKETO_BOT_GITHUB_TOKEN }}
                 registry: ghcr.io

diff --git a/.github/workflows/pb-minimal-labels.yml b/.github/workflows/pb-minimal-labels.yml
@@ -12,7 +12,7 @@ jobs:
         runs-on:
             - ubuntu-latest
         steps:
-            - uses: mheap/github-action-required-labels@v4
+            - uses: mheap/github-action-required-labels@v5
               with:
                 count: 1
                 labels: semver:major, semver:minor, semver:patch
@@ -22,7 +22,7 @@ jobs:
         runs-on:
             - ubuntu-latest
         steps:
-            - uses: mheap/github-action-required-labels@v4
+            - uses: mheap/github-action-required-labels@v5
               with:
                 count: 1
                 labels: type:bug, type:dependency-upgrade, type:documentation, type:enhancement, type:question, type:task

diff --git a/.github/workflows/pb-update-go.yml b/.github/workflows/pb-update-go.yml
@@ -50,7 +50,7 @@ jobs:
                 echo "commit-semver=${COMMIT_SEMVER}" >> "$GITHUB_OUTPUT"
               env:
                 GO_VERSION: "1.20"
-            - uses: peter-evans/create-pull-request@v5
+            - uses: peter-evans/create-pull-request@v6
               with:
                 author: ${{ secrets.JAVA_GITHUB_USERNAME }} <${{ secrets.JAVA_GITHUB_USERNAME }}@users.noreply.github.com>
                 body: |-

diff --git a/.github/workflows/pb-update-pipeline.yml b/.github/workflows/pb-update-pipeline.yml
@@ -65,7 +65,7 @@ jobs:
               env:
                 DESCRIPTOR: .github/pipeline-descriptor.yml
                 GITHUB_TOKEN: ${{ secrets.PAKETO_BOT_GITHUB_TOKEN }}
-            - uses: peter-evans/create-pull-request@v5
+            - uses: peter-evans/create-pull-request@v6
               with:
                 author: ${{ secrets.JAVA_GITHUB_USERNAME }} <${{ secrets.JAVA_GITHUB_USERNAME }}@users.noreply.github.com>
                 body: |-

diff --git a/drafts/mocks/buildpack_loader.go b/drafts/mocks/buildpack_loader.go
diff --git a/octo/builder_dependencies.go b/octo/builder_dependencies.go
@@ -116,7 +116,7 @@ func contributeBuildImage(descriptor Descriptor, image string, classifier string
 						},
 					},
 					{
-						Uses: "peter-evans/create-pull-request@v5",
+						Uses: "peter-evans/create-pull-request@v6",
 						With: map[string]interface{}{
 							"token":  descriptor.GitHub.Token,
 							"author": fmt.Sprintf("%[1]s <%[1][email protected]>", descriptor.GitHub.Username),
@@ -190,7 +190,7 @@ func contributeLifecycle(descriptor Descriptor) (Contribution, error) {
 						},
 					},
 					{
-						Uses: "peter-evans/create-pull-request@v5",
+						Uses: "peter-evans/create-pull-request@v6",
 						With: map[string]interface{}{
 							"token":  descriptor.GitHub.Token,
 							"author": fmt.Sprintf("%[1]s <%[1][email protected]>", descriptor.GitHub.Username),