* ci: update GitHub Actions to latest versions
Bump all workflow actions to their latest releases, including major
updates for checkout (v7), upload-artifact (v7), github-script (v9),
action-download-artifact (v21), and thollander comment action (v3).
* ci: pin third-party actions to commit SHAs
Keep official GitHub actions on version tags, but pin community
actions to immutable commit hashes for supply-chain safety.
v3 renamed inputs from kebab-case to snake_case (repo-token -> repo_token,
pr-message -> pr_message). The old names were silently ignored, causing
"Input required and not supplied: issue_message" errors.
actions/cache@v3 uses the deprecated Node.js 16 so update to
use v4 which uses Node.js 20. This also applies to save and
restore
old-commit-hash: ba2538c29c
* auto PR comments
* little more
* test
* update action
* cleanup
* ensure it only runs once
* comment that part out
---------
Co-authored-by: Adeeb Shihadeh <adeebshihadeh@gmail.com>
old-commit-hash: e9a10ca712
* Add GH Actions workflow to check for a PR template
* switch to headings and checkboxes for template detection
* check for bold text in template too
* move template check over to auto_pr_review action and remove label only if check succeeded
* only run template check on external PRs
* wording
---------
Co-authored-by: Justin Newberry <justin@comma.ai>
old-commit-hash: 8a05d212ec
Adeeb Shihadeh