From 99853a2502804ecf680708150f131d38002ed2b7 Mon Sep 17 00:00:00 2001
From: Gregor MacLennan <gmaclennan@digital-democracy.org>
Date: Tue, 22 Oct 2024 20:33:35 +0100
Subject: [PATCH] fix: fix updating comments in lockfile-changes workflow

---
 .github/workflows/lockfile.yml | 3 ++-
 1 file changed, 2 insertions(+), 1 deletion(-)

diff --git a/.github/workflows/lockfile.yml b/.github/workflows/lockfile.yml
index 524d2c63d..5e7cd84be 100644
--- a/.github/workflows/lockfile.yml
+++ b/.github/workflows/lockfile.yml
@@ -29,7 +29,8 @@ jobs:
           private-key: ${{ secrets.LOCKFILE_BOT_PRIVATE_KEY }}
       - name: NPM Lockfile Changes
         # The original doesn't support v3 lockfiles so we use a fork that adds support for them
-        uses: rvanvelzen/npm-lockfile-changes@6fded38b5a054f5ab49efd6850668e796f780604
+        # The fork doesn't update comments by an app token, so we use our own fork
+        uses: digidem/npm-lockfile-changes@fix/update-comments
         with:
           token: ${{ steps.app-token.outputs.token }}
           updateComment: true