Update actions/create-github-app-token action to v1.11.0 (#206) #443

	---
	name: Update rebar.lock

	"on":
	push:
	branches:
	- main
	pull_request:
	branches:
	- "*"
	workflow_dispatch: {}
	merge_group:

	concurrency:
	group: ${{github.workflow}}-${{github.ref}}
	cancel-in-progress: true

	jobs:
	branch:
	outputs:
	head_ref: ${{steps.branch.outputs.head_ref}}

	runs-on: ubuntu-24.04

	steps:
	- id: branch
	run: \|
	head_ref=${GITHUB_HEAD_REF}
	echo "head_ref is ${head_ref}"
	echo "head_ref=${head_ref}" > "${GITHUB_OUTPUT}"

	update:
	name: Update rebar.lock

	needs: [branch]

	if: endsWith(needs.branch.outputs.head_ref, 'rebar.config-deps')

	runs-on: ubuntu-24.04

	steps:
	- uses: actions/create-github-app-token@5d869da34e18e7287c1daad50e0b8ea0f506ce69 # v1.11.0
	id: app-token
	with:
	app-id: ${{vars.ARIZONA_BOT_APP_ID}}
	private-key: ${{secrets.ARIZONA_BOT_PRIVATE_KEY}}

	- uses: actions/checkout@692973e3d937129bcbf40652eb9f2f61becf3332 # v4.1.7
	with:
	token: ${{steps.app-token.outputs.token}}
	ref: ${{needs.branch.outputs.head_ref}}

	- uses: erlef/setup-beam@b9c58b0450cd832ccdb3c17cc156a47065d2114f # v1.18.1
	with:
	version-type: strict
	version-file: .tool-versions

	- run: \|
	rebar3 upgrade --all
	if ! git diff --exit-code >/dev/null; then
	# there's stuff to push
	git config user.name "arizona[bot]"
	git config user.email "[email protected]"
	git add rebar.lock
	git commit -m "[automation] update \`rebar.lock\` after Renovate"
	git push
	fi
	env:
	GITHUB_TOKEN: ${{secrets.GITHUB_TOKEN}}

Provide feedback