From 00b1d00d20d5bb30eae7fbf294deb07f4d8238e1 Mon Sep 17 00:00:00 2001
From: David Linke <dr.david.linke@gmail.com>
Date: Wed, 17 Jan 2024 00:45:20 +0100
Subject: [PATCH] Update note on pinned actions

---
 .github/workflows/ci-pr.yml   | 4 ++--
 .github/workflows/merge.yml   | 2 +-
 .github/workflows/publish.yml | 2 +-
 3 files changed, 4 insertions(+), 4 deletions(-)

diff --git a/.github/workflows/ci-pr.yml b/.github/workflows/ci-pr.yml
index ad990ad..e84b24f 100644
--- a/.github/workflows/ci-pr.yml
+++ b/.github/workflows/ci-pr.yml
@@ -113,7 +113,7 @@ jobs:
           path: outbox/
 
       - name: Add/stage vocabulary changes
-        # Pin third party action (v4.16.0)
+        # Pinning of action managed by dependabot
         uses: stefanzweifel/git-auto-commit-action@8756aa072ef5b4a080af5dc8fef36c5d586e521d
         with:
           # glob pattern of files which should be added to the commit
@@ -125,7 +125,7 @@ jobs:
           git status
 
       - name: Commit vocabulary changes & xlsx cleanup on behalf of PR-author
-        # Pin third party action (v4.16.0)
+        # Pinning of action managed by dependabot
         uses: stefanzweifel/git-auto-commit-action@8756aa072ef5b4a080af5dc8fef36c5d586e521d
         with:
           commit_user_name: voc4cat-CI-bot
diff --git a/.github/workflows/merge.yml b/.github/workflows/merge.yml
index 35ca42a..1136d52 100644
--- a/.github/workflows/merge.yml
+++ b/.github/workflows/merge.yml
@@ -89,7 +89,7 @@ jobs:
         # This replaces all prior content in gh-pages branch. But we have
         # checked out the gh-pages branch above so that we keep all prior
         # content and just re-publish the extended version.
-        # Pin third party action (v3.9.3)
+        # Pinning of action managed by dependabot
         uses: peaceiris/actions-gh-pages@373f7f263a76c20808c831209c920827a82a2847
         if: (github.event_name == 'push' || github.event_name == 'workflow_dispatch') && github.ref == 'refs/heads/main'
         with:
diff --git a/.github/workflows/publish.yml b/.github/workflows/publish.yml
index 10c0388..464631c 100644
--- a/.github/workflows/publish.yml
+++ b/.github/workflows/publish.yml
@@ -90,7 +90,7 @@ jobs:
         # This replaces all prior content in gh-pages branch. But we have
         # checked out the gh-pages branch above so that we keep all prior
         # content and just re-publish the extended version.
-        # Pin third party action (v3.9.3)
+        # Pinning of action managed by dependabot
         uses: peaceiris/actions-gh-pages@373f7f263a76c20808c831209c920827a82a2847
         with:
           publish_branch: gh-pages