update some actions

.github/workflows/branch-deploy.yml

@@ -26,7 +26,7 @@ jobs:
     steps:
       - name: branch-deploy
         id: branch-deploy
-        uses: github/branch-deploy@v7.4.0
+        uses: github/branch-deploy@v8
         with:
           admins: the-hideout/core-contributors
           admins_pat: ${{ secrets.BRANCH_DEPLOY_ADMINS_PAT }}
@@ -35,7 +35,7 @@ jobs:
 
       - name: checkout
         if: steps.branch-deploy.outputs.continue == 'true'
-        uses: actions/checkout@v3
+        uses: actions/checkout@v4
         with:
           ref: ${{ steps.branch-deploy.outputs.ref }}
 

.github/workflows/deploy.yml

@@ -22,7 +22,7 @@ jobs:
 
     steps:
       - name: checkout
-        uses: actions/checkout@v3
+        uses: actions/checkout@v4
 
       - uses: hashicorp/setup-terraform@633666f66e0061ca3b725c73b2ec20cd13a8fdd1 # [email protected]
         with:

.github/workflows/new-pr.yml

@@ -16,9 +16,9 @@ jobs:
 
     steps:
       # Comment on new PR requests with deployment instructions
-      - uses: actions/checkout@v3
+      - uses: actions/checkout@v4
       - name: comment
-        uses: GrantBirki/[email protected].5
+        uses: GrantBirki/[email protected].8
         continue-on-error: true
         with:
           file: .github/new-pr-comment.md

.github/workflows/tfsec.yml

@@ -11,6 +11,6 @@ jobs:
     runs-on: ubuntu-latest
 
     steps:
-      - uses: actions/checkout@v3
+      - uses: actions/checkout@v4
       - name: tfsec
         uses: aquasecurity/tfsec-action@b466648d6e39e7c75324f25d83891162a721f2d6 # [email protected]

.github/workflows/unlock-on-merge.yml

@@ -14,7 +14,7 @@ jobs:
 
     steps:
       - name: unlock on merge
-        uses: github/branch-deploy@v7.4.0
+        uses: github/branch-deploy@v8
         id: unlock-on-merge
         with:
           unlock_on_merge_mode: "true" # <-- indicates that this is the "Unlock on Merge Mode" workflow