build(deps): bump hoverkraft-tech/ci-github-common from 0.15.0 to 0.28.0

.github/dependabot.yml

@@ -1,34 +1,49 @@
 # .github/dependabot.yml
 version: 2
 updates:
+  - package-ecosystem: docker
+    open-pull-requests-limit: 20
+    directory: "/"
+    schedule:
+      interval: weekly
+      day: friday
+      time: "04:00"
+    groups:
+      docker-dependencies:
+        patterns:
+          - "*"
 
-  - package-ecosystem: "github-actions"
+  - package-ecosystem: github-actions
+    open-pull-requests-limit: 20
     directories:
       - "/"
-    open-pull-requests-limit: 3
-    labels:
-      - "github_actions"
+      - "/actions/**/*"
     schedule:
-      interval: "weekly"
+      interval: weekly
       day: friday
-      time: '04:00'
+      time: "04:00"
+    groups:
+      github-actions-dependencies:
+        patterns:
+          - "*"
 
-  - package-ecosystem: "docker"
+  - package-ecosystem: "devcontainers"
+    open-pull-requests-limit: 20
     directory: "/"
-    open-pull-requests-limit: 3
-    labels:
-      - "docker"
     schedule:
-      interval: "weekly"
+      interval: weekly
       day: friday
-      time: '04:10'
+      time: "04:00"
 
   - package-ecosystem: "pip"
     directory: "/"
-    open-pull-requests-limit: 3
-    labels:
-      - "pip"
+    open-pull-requests-limit: 20
+    directory: "/"
     schedule:
-      interval: "weekly"
+      interval: weekly
       day: friday
-      time: '04:20'
+      time: "04:00"
+    groups:
+      pip-dependencies:
+        patterns:
+          - "*"

.github/workflows/__shared-ci.yml

@@ -12,22 +12,25 @@ on:
         value: ${{ jobs.docker-build-images.outputs.built-images }}
 
 jobs:
-
   chart-testing:
     name: "Tests: helm chart"
     runs-on: self-hosted
     steps:
       - name: Checkout
-        uses: actions/checkout@v4
+        uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5.0.0
         with:
           fetch-depth: 0
+
       - name: Install tools with asdf
-        uses: asdf-vm/actions/install@v3
-      - uses: actions/setup-python@v5
+        uses: asdf-vm/actions/install@1902764435ca0dd2f3388eea723a4f92a4eb8302 # v4.0.0
+
+      - uses: actions/setup-python@e797f83bcb11b83ae66e0230d6156d7c80228e7c # v6.0.0
         with:
-          python-version: '3.12'
+          python-version: "3.12"
+
       - name: Set up chart-testing
-        uses: helm/chart-testing-action@v2.6.1
+        uses: helm/chart-testing-action@0d28d3144d3a25ea2cc349d6e59901c4ff469b3b # v2.7.0
+
       - name: Run chart-testing (list-changed)
         id: list-changed
         run: |
@@ -39,18 +42,22 @@ jobs:
           else
             echo "INFO: The chart has no changes compared to the default branch"
           fi
+
       - name: Run chart-testing (lint)
         if: steps.list-changed.outputs.changed == 'true'
         run: ct lint --target-branch ${{ github.event.repository.default_branch }}
+
       - name: Create kind cluster
         if: steps.list-changed.outputs.changed == 'true'
-        uses: helm/kind-action@v1.12.0
+        uses: helm/kind-action@92086f6be054225fa813e0a4b13787fc9088faab # v1.13.0
+
       - name: Run chart-testing (install)
         if: steps.list-changed.outputs.changed == 'true'
         run: |
           ct install \
             --target-branch ${{ github.event.repository.default_branch }} \
             --wait"
+
       - name: show pods
         if: steps.list-changed.outputs.changed == 'true'
         run: |

.github/workflows/release.yml

@@ -98,7 +98,7 @@ jobs:
         with:
           input: dufs/values.yaml
 
-      - uses: hoverkraft-tech/ci-github-common/actions/create-and-merge-pull-request@0.15.0
+      - uses: hoverkraft-tech/ci-github-common/actions/create-and-merge-pull-request@0.28.0
         with:
           github-token: ${{ secrets.GITHUB_TOKEN }}
           branch: release-chart-${{ needs.update_release_draft.outputs.latestRelease }}