build(deps): bump winston from 3.15.0 to 3.16.0 in /workspaces/upptime #466

	name: Automate changeset feedback
	on:
	pull_request_target:
	branches: ["main"]

	permissions:
	pull-requests: write
	actions: none
	checks: none
	contents: read
	deployments: none
	issues: none
	packages: none
	pages: none
	repository-projects: none
	security-events: none
	statuses: none

	jobs:
	changeset-feedback:
	name:
	Generate Changeset Feedback
	# prevent running towards forks and version packages
	if: github.repository == 'philips-software/philips-backstage-plugins' && github.event.pull_request.user.login != 'backstage-service'
	runs-on: ubuntu-latest
	steps:
	- name: Harden Runner
	uses: step-security/harden-runner@91182cccc01eb5e619899d80e4e971d6181294a7 # v2.10.1
	with:
	egress-policy: audit

	- uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
	with:
	# Fetch the commit that's merged into the base rather than the target ref
	# This will let us diff only the contents of the PR, without fetching more history
	ref: "refs/pull/${{ github.event.pull_request.number }}/merge"
	- name: fetch base
	run: git fetch --depth 1 origin ${{ github.base_ref }}

	- uses: backstage/actions/[email protected]
	name: Generate feedback
	with:
	diff-ref: "origin/main"
	marker: <!-- changeset-feedback -->
	issue-number: ${{ github.event.pull_request.number }}
	bot-username: philips-backstage-plugins-bot[bot]
	app-id: ${{ secrets.BACKSTAGE_BOT_APPLICATION_ID }}
	private-key: ${{ secrets.BACKSTAGE_BOT_PRIVATE_KEY }}
	installation-id: ${{ secrets.BACKSTAGE_BOT_INSTALLATION_ID }}
	multiple-workspaces: true

Provide feedback