Bump carpentries/actions/comment-diff from 0.18.0 to 1.0.0

[dependabot]

Bumps carpentries/actions/comment-diff from 0.18.0 to 1.0.0.

Release notes

Sourced from carpentries/actions/comment-diff's releases.

v1.0.0

This release fundamentally changes how the renv caching steps work, by moving away from GH/AWS S3 caches (which require elevated permissions) to docker dependency layer caches published to GitHub's package repository, GHCR.io.

The reasons for doing so are due to recent breaking changes in restricting permissions for pull_request triggered workflows (e.g. in "03 Maintain: Apply Package Cache" and "Bot: Receive Pull Request"). These changes meant that the default GITHUB_TOKEN could no longer be used to access credentials or manage PRs when automatically triggered by certain action triggers.

The new docker layer builds on the base workbench-docker image, and stores the R packages installed by renv during the 03 Apply workflow. The published dependency image layer can be used both by the workflows for subsequent builds, but also by the community in their own environments so they get a fully reproducible build of the lesson at a given point in time (including all packages).

What Else Has Changed

• Update to node24, create-pull-request v8, and checkout v6 by @​froggleston in carpentries/actions#123
• Bump actions/upload-artifact from 4 to 7 in /update-lockfile by @​dependabot[bot] in carpentries/actions#127
• Bump actions/cache from 4 to 5 in /update-lockfile by @​dependabot[bot] in carpentries/actions#126
• Bump actions/cache from 4 to 5 in /setup-lesson-deps by @​dependabot[bot] in carpentries/actions#125
• Bump actions/upload-artifact from 4 to 7 in /record-container-version by @​dependabot[bot] in carpentries/actions#124
• Add workflow update error handling, revert checkout to v5 for l10n by @​froggleston in carpentries/actions#132
• Fix config lang issue when using l10n_main by @​froggleston in carpentries/actions#134
• Use renv profile library in update-lockfile by @​froggleston in carpentries/actions#135
• Remove renv check in docker version update by @​froggleston in carpentries/actions#137
• Add token to update-workflows curl calls by @​froggleston in carpentries/actions#138
• Missed one curl header by @​froggleston in carpentries/actions#139
• Only use github token in workflow update if set by @​froggleston in carpentries/actions#140
• Check for empty sysreqs before calling by @​froggleston in carpentries/actions#145
• Bump tespkg/actions-cache from 1.10.0 to 1.10.2 in /renv-checks by @​dependabot[bot] in carpentries/actions#143
• Bump uuid and @​actions/core in /check-valid-pr by @​dependabot[bot] in carpentries/actions#131
• Bump uuid and @​actions/core in /download-workflow-artifact by @​dependabot[bot] in carpentries/actions#130
• Bump uuid and @​actions/core in /comment-diff by @​dependabot[bot] in carpentries/actions#129
• Bump uuid and @​actions/core in /remove-branch by @​dependabot[bot] in carpentries/actions#128
• Make merged PR a non-fail but warn by @​froggleston in carpentries/actions#148
• PR check to ignore files in .github but aren't yaml by @​froggleston in carpentries/actions#149
• Add support to install from GitHub source, add yaml import by @​froggleston in carpentries/actions#150
• Fail on build based on cache failure by @​froggleston in carpentries/actions#151
• Await diff file stat before reading by @​froggleston in carpentries/actions#152
• Collect up required repos from lockfile by @​froggleston in carpentries/actions#153

Full Changelog: carpentries/actions@v0.18.0...v1.0.0

Commits

• 69a37a6 Add hpc-carpentry to validate-org
• 6cdca37 Fix prune action name
• 3b54f49 Prepare for v1
• dcc9e48 Remove unneeded OIDC S3 GH cache steps
• 8d08409 Pass back base image if no renv
• 0b73550 Final prune action
• fc872b4 Fix prune, keep 1 digest
• 28dfeaa Fix GH_TOKEN
• 6814a75 Add dependency pruning action
• 0c5b3db Test using full repo contents instead of just the renv dir
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)