Bump dependencies (#6)

.gitignore

@@ -0,0 +1 @@
+/.vscode

action.yml

@@ -71,7 +71,7 @@ runs:
   using: composite
   steps:
     - name: Checkout ${{inputs.repository}}
-      uses: actions/checkout@v3
+      uses: actions/checkout@v4
       with:
         repository: ${{inputs.repository}}
         token: ${{inputs.token}}
@@ -88,7 +88,7 @@ runs:
           echo "working_dir=${{inputs.repository}}/${{inputs.working-directory}}" >> $GITHUB_ENV
         fi
 
-    - uses: actions/setup-go@v3
+    - uses: actions/setup-go@v5
       with:
         go-version-file: ${{ env.working_dir }}/go.mod
         cache: true
@@ -106,7 +106,7 @@ runs:
 
     # If the only files that changed are go.mod, go.sum, and vendor/modules.txt, then it's not worth a PR.
     - name: Check if relevant files were changed
-      uses: dorny/paths-filter@v2.11.1
+      uses: dorny/paths-filter@v3.0.2
       id: changes
       with:
         working-directory: ${{ env.working_dir }}
@@ -145,7 +145,7 @@ runs:
 
     - name: Create pull request
       if: steps.changes.outputs.relevant == 'true'
-      uses: peter-evans/create-pull-request@v4.2.0
+      uses: peter-evans/create-pull-request@v6.0.2
       id: create-pr
       with:
         branch: ${{inputs.branch}}
@@ -163,7 +163,7 @@ runs:
 
     - name: Enable auto-merge
       if: steps.changes.outputs.relevant == 'true' && inputs.auto-merge == 'true'
-      uses: peter-evans/enable-pull-request-automerge@v2.2.1
+      uses: peter-evans/enable-pull-request-automerge@v3.0.0
       with:
         repository: ${{inputs.repository}}
         token: ${{inputs.token}}