chore: Bump actions-toolkit from 4.0.0 to 6.0.1

[dependabot-preview]

Bumps actions-toolkit from 4.0.0 to 6.0.1.

Release notes

Sourced from actions-toolkit's releases.

v6.0.1

Just a couple of dependency updates for security!

What’s Changed

• Bump node-fetch from 2.6.0 to 2.6.1 (#132) @dependabot
• Bump @actions/core from 1.2.4 to 1.2.6 (#133) @dependabot

v6.0.0

This release includes two TypeScript changes - in an abundance of caution I've marked it as a new major version, but there aren't any changes other than the two PRs below. Have fun!

What’s Changed

• Improve types for context.issue/pull_request (#131) @JasonEtco
• fix: return never from exit functions (#129) @likern

v5.0.0

Breaking Changes

There are a couple of major improvements that are unfortunately breaking changes:

tools.context.issue returns a different object

Thanks to @mheap, tools.context.issue now returns { owner, repo, issue_number } instead of { owner, repo, number }. This is due to a change in the Octokit SDK. To have parity with pull requests, there is now also tools.context.pullRequest, which returns { owner, repo, pull_number }.

See #118 for more information!

Toolkit#getFile is now Toolkit#readFile

The getFile method has been renamed to readFile, and the behavior has changed. It now uses fs.promises.readFile under the hood, so it returns a promise:

const tools = new Toolkit({ ... })
const contents = await tools.readFile('README.md')

See #121 for more information!

tools.store has been removed

This feature was added before the Actions runtime had a way to share data between actions. That now exists in the platform, as "outputs"! See #125 for the removal of Store, and #120 for it's "replacement", tools.outputs (thanks to @abouroubi ✨):

tools.outputs.example = 'foo'

Toolkit#runInWorkspace is now Toolkit#exec

This method was useful, but @actions/exec is built more with the Actions runner in mind. So, now Toolkit#exec calls @actions/exec! This will be more stable for the finicky, ephemeral environments of Actions.

Commits

• 0215e87 6.0.1
• 7fd5db1 Merge pull request #132 from JasonEtco/dependabot/npm_and_yarn/node-fetch-2.6.1
• 9de578c Merge branch 'main' into dependabot/npm_and_yarn/node-fetch-2.6.1
• 212fb31 Merge pull request #133 from JasonEtco/dependabot/npm_and_yarn/actions/core-1...
• 81f91e8 Bump @actions/core from 1.2.4 to 1.2.6
• cd93e43 Bump node-fetch from 2.6.0 to 2.6.1
• 7e261ae 6.0.0
• 433cb37 Merge pull request #131 from JasonEtco/fix-context-types
• 6d5ecd0 Improve types for context.issue/pull_request
• 08ffc05 Merge pull request #129 from breeffy/branch-exit-return-never
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot merge will merge this PR after your CI passes on it
• @dependabot squash and merge will squash and merge this PR after your CI passes on it
• @dependabot cancel merge will cancel a previously requested merge and block automerging
• @dependabot reopen will reopen this PR if it is closed
• @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
• @dependabot use these labels will set the current labels as the default for future PRs for this repo and language
• @dependabot use these reviewers will set the current reviewers as the default for future PRs for this repo and language
• @dependabot use these assignees will set the current assignees as the default for future PRs for this repo and language
• @dependabot use this milestone will set the current milestone as the default for future PRs for this repo and language
• @dependabot badge me will comment on this PR with code to add a "Dependabot enabled" badge to your readme

Additionally, you can set the following in your Dependabot dashboard:

• Update frequency (including time of day and day of week)
• Pull request limits (per update run and/or open at any time)
• Automerge options (never/patch/minor, and dev/runtime dependencies)
• Out-of-range updates (receive only lockfile updates, if desired)
• Security updates (receive only security updates, if desired)