chore(deps): bump the github-actions group across 8 directories with …

…7 updates (#115)

* chore(deps): bump the github-actions group across 8 directories with 7 updates

Bumps the github-actions group with 1 update in the /config/actions/bump-version directory: [actions/github-script](https://github.com/actions/github-script).
Bumps the github-actions group with 1 update in the /config/actions/bundle-reports directory: [actions/upload-artifact](https://github.com/actions/upload-artifact).
Bumps the github-actions group with 1 update in the /config/actions/determine-semver-bump directory: [actions/github-script](https://github.com/actions/github-script).
Bumps the github-actions group with 1 update in the /config/actions/ensure-version-is-correct directory: [actions/github-script](https://github.com/actions/github-script).
Bumps the github-actions group with 1 update in the /config/actions/gradle-connected-test directory: [reactivecircus/android-emulator-runner](https://github.com/reactivecircus/android-emulator-runner).
Bumps the github-actions group with 1 update in the /config/actions/retrieve-secrets directory: [aws-actions/aws-secretsmanager-get-secrets](https://github.com/aws-actions/aws-secretsmanager-get-secrets).
Bumps the github-actions group with 3 updates in the /config/actions/setup-runner directory: [actions/setup-java](https://github.com/actions/setup-java), [gradle/gradle-build-action](https://github.com/gradle/gradle-build-action) and [android-actions/setup-android](https://github.com/android-actions/setup-android).
Bumps the github-actions group with 1 update in the /config/actions/upload-dokka directory: [actions/upload-artifact](https://github.com/actions/upload-artifact).


Updates `actions/github-script` from 6.4.1 to 7.0.1
- [Release notes](https://github.com/actions/github-script/releases)
- [Commits](actions/github-script@d7906e4...60a0d83)

Updates `actions/upload-artifact` from 3.1.3 to 4.4.3
- [Release notes](https://github.com/actions/upload-artifact/releases)
- [Commits](actions/upload-artifact@a8a3f3a...b4b15b8)

Updates `actions/github-script` from 6.4.1 to 7.0.1
- [Release notes](https://github.com/actions/github-script/releases)
- [Commits](actions/github-script@d7906e4...60a0d83)

Updates `actions/github-script` from 6.4.1 to 7.0.1
- [Release notes](https://github.com/actions/github-script/releases)
- [Commits](actions/github-script@d7906e4...60a0d83)

Updates `reactivecircus/android-emulator-runner` from 2.30.1 to 2.33.0
- [Release notes](https://github.com/reactivecircus/android-emulator-runner/releases)
- [Changelog](https://github.com/ReactiveCircus/android-emulator-runner/blob/main/CHANGELOG.md)
- [Commits](ReactiveCircus/android-emulator-runner@6b0df4b...62dbb60)

Updates `aws-actions/aws-secretsmanager-get-secrets` from 2.0.2 to 2.0.7
- [Release notes](https://github.com/aws-actions/aws-secretsmanager-get-secrets/releases)
- [Commits](aws-actions/aws-secretsmanager-get-secrets@f91b2a3...1d6311a)

Updates `actions/setup-java` from 4.2.1 to 4.5.0
- [Release notes](https://github.com/actions/setup-java/releases)
- [Commits](actions/setup-java@99b8673...8df1039)

Updates `gradle/gradle-build-action` from 2.12.0 to 3.5.0
- [Release notes](https://github.com/gradle/gradle-build-action/releases)
- [Commits](gradle/gradle-build-action@a8f7551...ac2d340)

Updates `android-actions/setup-android` from 2.0.10 to 3.2.2
- [Release notes](https://github.com/android-actions/setup-android/releases)
- [Commits](android-actions/setup-android@7c56723...9fc6c4e)

Updates `actions/upload-artifact` from 3.1.3 to 4.4.3
- [Release notes](https://github.com/actions/upload-artifact/releases)
- [Commits](actions/upload-artifact@a8a3f3a...b4b15b8)

---
updated-dependencies:
- dependency-name: actions/github-script
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: github-actions
- dependency-name: actions/upload-artifact
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: github-actions
- dependency-name: actions/github-script
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: github-actions
- dependency-name: actions/github-script
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: github-actions
- dependency-name: reactivecircus/android-emulator-runner
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: github-actions
- dependency-name: aws-actions/aws-secretsmanager-get-secrets
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: github-actions
- dependency-name: actions/setup-java
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: github-actions
- dependency-name: gradle/gradle-build-action
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: github-actions
- dependency-name: android-actions/setup-android
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: github-actions
- dependency-name: actions/upload-artifact
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: github-actions
...

Signed-off-by: dependabot[bot] <[email protected]>

* Removing confusing `pin` keyword and aligning all version numbers with commits

The pin keyword does not pin a version, pinning has been done by the commit id. The updates will cross major versions and the comments were massively out of date.

---------

Signed-off-by: dependabot[bot] <[email protected]>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: dothomson <[email protected]>

config/actions/bump-version/action.yml

@@ -20,7 +20,7 @@ runs:
   steps:
     - name: Bump version
       id: bump-version
-      uses: actions/github-script@d7906e4ad0b1822421a7e6a35d5ca353c962f410 # pin@v6
+      uses: actions/github-script@60a0d83039c74a4aee543508d2ffcb1c3799cdea # v7.0.1
       env:
         INPUT_BUMP: ${{ inputs.bump }}
         INPUT_VERSION_NAME: ${{ inputs.version-name }}

config/actions/bundle-reports/action.yml

@@ -12,7 +12,7 @@ runs:
 
     - name: Upload build reports
       id: uploadBuildReports
-      uses: actions/upload-artifact@a8a3f3ad30e3422c9c7b888a15615d19a852ae32 # pin@v3
+      uses: actions/upload-artifact@b4b15b8c7c6ac21ea08fcf65892d2ee8f75cf882 # v4.4.3
       with:
         name: build-reports
         retention-days: 1

config/actions/determine-semver-bump/action.yml

@@ -11,7 +11,7 @@ runs:
   steps:
     - name: Determine semver bump
       id: determine-semver-bump
-      uses: actions/github-script@d7906e4ad0b1822421a7e6a35d5ca353c962f410 # pin@v6
+      uses: actions/github-script@60a0d83039c74a4aee543508d2ffcb1c3799cdea # v7.0.1
       env:
         PULL_REQUEST_TITLE: ${{ github.event.pull_request.title }}
       with:

config/actions/ensure-version-is-correct/action.yml

@@ -19,7 +19,7 @@ runs:
   steps:
     - name: Get latest tagged version
       id: get-latest-tag
-      uses: actions/github-script@d7906e4ad0b1822421a7e6a35d5ca353c962f410 # pin@v6
+      uses: actions/github-script@60a0d83039c74a4aee543508d2ffcb1c3799cdea # v7.0.1
       with:
         script: |
           const current = process.env.CURRENT

config/actions/gradle-connected-test/action.yml

@@ -19,7 +19,7 @@ runs:
   using: "composite"
   steps:
     - name: Run gradle connected test
-      uses: reactivecircus/android-emulator-runner@6b0df4b0efb23bb0ec63d881db79aefbc976e4b2 # pin@v2
+      uses: reactivecircus/android-emulator-runner@62dbb605bba737720e10b196cb4220d374026a6d # v2.33.0
       with:
         api-level: 30
         arch: ${{ inputs.architecture }}

config/actions/retrieve-secrets/action.yml

@@ -18,14 +18,14 @@ runs:
         role-skip-session-tagging: true
 
     - name: Store github-actions-env secret from AWS SecretManager
-      uses: aws-actions/aws-secretsmanager-get-secrets@f91b2a3e784edce744f972af1685eca7e24d2302 # pin@v2.0.2
+      uses: aws-actions/aws-secretsmanager-get-secrets@1d6311ab61b4856de027ff508aac818ddc1e141b # v2.0.7
       with:
         secret-ids: |
           ,di-mobile-android-onelogin-app/github-actions-env-v2
         parse-json-secrets: true
 
     - name: Store google-play-service-account-json secret from AWS SecretManager
-      uses: aws-actions/aws-secretsmanager-get-secrets@f91b2a3e784edce744f972af1685eca7e24d2302 # pin@v2.0.2
+      uses: aws-actions/aws-secretsmanager-get-secrets@1d6311ab61b4856de027ff508aac818ddc1e141b # v2.0.7
       with:
         secret-ids: |
           GOOGLE_PLAY_SERVICE_ACCOUNT_JSON,di-ipv-dca-mob-android/google-play-service-account-json-v2

config/actions/setup-runner/action.yml

@@ -16,7 +16,7 @@ runs:
       shell: bash
       run: echo "/usr/local/bin" >> $GITHUB_PATH
 
-    - uses: actions/setup-java@99b8673ff64fbf99d8d325f52d9a5bdedb8483e9 # pin@v4.2.1
+    - uses: actions/setup-java@8df1039502a15bceb9433410b1a100fbe190c53b # v4.5.0
       with:
         distribution: 'oracle'
         java-version: ${{ inputs.jdk-version }}
@@ -84,14 +84,14 @@ runs:
 
     - name: Setup Gradle
       id: setupGradle
-      uses: gradle/gradle-build-action@a8f75513eafdebd8141bd1cd4e30fcd194af8dfa # pin@v2
+      uses: gradle/gradle-build-action@ac2d340dc04d9e1113182899e983b5400c17cda1 # v3.5.0
       env:
         CI: 'true'
       with:
         gradle-version: ${{ inputs.gradle-version }}
 
     - name: Setup Android SDK
-      uses: android-actions/setup-android@7c5672355aaa8fde5f97a91aa9a99616d1ace6bc # pin@v2
+      uses: android-actions/setup-android@9fc6c4e9069bf8d3d10b2204b1fb8f6ef7065407 # v3.2.2
 
     - name: Update Android SDK Manager
       run: |

config/actions/upload-dokka/action.yml

@@ -12,7 +12,7 @@ runs:
 
     - name: Upload Dokka Documentation
       id: uploadDokka
-      uses: actions/upload-artifact@a8a3f3ad30e3422c9c7b888a15615d19a852ae32 # v3
+      uses: actions/upload-artifact@b4b15b8c7c6ac21ea08fcf65892d2ee8f75cf882 # v4.4.3
       with:
         name: documentation
         retention-days: 14