deps: update module golang.org/x/crypto to v0.31.0 [security] (#124) #258

	name: releaser-pleaser

	on:
	push:
	branches: [main]
	# Using pull_request_target to avoid tainting the actual release PR with code from open feature pull requests
	pull_request_target:
	types:
	- edited
	- labeled
	- unlabeled

	permissions: {}

	jobs:
	releaser-pleaser:
	# TODO: if: push or pull_request.closed
	runs-on: ubuntu-latest
	steps:
	- name: Checkout
	uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4
	with:
	ref: main

	- name: Set up Go
	uses: actions/setup-go@41dfa10bad2bb2ae585af6ee5bb4d7d973ad74ed # v5
	with:
	go-version-file: go.mod

	# Build container image from current commit and replace image ref in `action.yml`
	# Without this, any new flags in `action.yml` would break the job in this repository until the new
	# version is released. But a new version can only be released if this job works.
	- uses: ko-build/setup-ko@3aebd0597dc1e9d1a26bcfdb7cbeb19c131d3037 # v0.7
	- run: ko build --bare --local --tags ci github.com/apricote/releaser-pleaser/cmd/rp

	- run: mkdir -p .github/actions/releaser-pleaser
	- run: "sed -i 's\|image: .*$\|image: docker://ghcr.io/apricote/releaser-pleaser:ci\|g' action.yml"

	# Dogfood the action to make sure it works for users.
	- name: releaser-pleaser
	uses: ./
	with:
	token: ${{ secrets.RELEASER_PLEASER_TOKEN }}
	extra-files: \|
	action.yml
	templates/run.yml

Provide feedback