chore(deps): bump guardian/actions-publish-image from 0.0.2 to 0.0.3 in /.github/workflows

[dependabot]

Bumps guardian/actions-publish-image from 0.0.2 to 0.0.3.

Release notes

Sourced from guardian/actions-publish-image's releases.

v0.0.3

What's Changed

This change introduces PR comments and requires the pull-requests: write permission as a result.

Before

permissions:
  contents: read
  id-token: write
steps:
  - name: Publish Image
    uses: guardian/actions-publish-image@v0.0.2
    id: publish-image
    with:
      roleArn: ${{ secrets.GU_RIFF_RAFF_ROLE_ARN }}
      branchName: ${{ needs.facts.outputs.branchName }}
      buildNumber: ${{ needs.facts.outputs.buildNumber }}
      commitSha: ${{ needs.facts.outputs.commitSha }}

After

permissions:
  contents: read
  id-token: write
  pull-requests: write # <-- NEW
steps:
  - name: Publish Image
    uses: guardian/actions-publish-image@v0.0.3 # <-- NEW
    id: publish-image
    with:
      roleArn: ${{ secrets.GU_RIFF_RAFF_ROLE_ARN }}
      branchName: ${{ needs.facts.outputs.branchName }}
      buildNumber: ${{ needs.facts.outputs.buildNumber }}
      commitSha: ${{ needs.facts.outputs.commitSha }}
      githubToken: ${{ secrets.GITHUB_TOKEN }} # <-- NEW

• chore(deps): Bump aws-actions/configure-aws-credentials from 6.2.0 to 6.2.1 by @​dependabot[bot] in guardian/actions-publish-image#5
• feat: Add PR comment by @​akash1810 in guardian/actions-publish-image#7
• chore(deps): Bump aws-actions/configure-aws-credentials from 6.2.1 to 6.2.3 by @​dependabot[bot] in guardian/actions-publish-image#8
• chore(deps): Bump actions/checkout from 7.0.0 to 7.0.1 by @​dependabot[bot] in guardian/actions-publish-image#10
• chore(deps): Bump @​types/node from 24.1.0 to 26.2.0 by @​dependabot[bot] in guardian/actions-publish-image#9

Full Changelog: guardian/actions-publish-image@v0.0.2...v0.0.3

Commits

• 0a88f25 Merge pull request #9 from guardian/dependabot/npm_and_yarn/types/node-26.2.0
• 2613dd7 chore(deps): Bump @​types/node from 24.1.0 to 26.2.0
• 9a0fd69 Merge pull request #10 from guardian/dependabot/github_actions/actions/checko...
• 3129207 chore(deps): Bump actions/checkout from 7.0.0 to 7.0.1
• 47b2126 Merge pull request #8 from guardian/dependabot/github_actions/aws-actions/con...
• f979054 chore(deps): Bump aws-actions/configure-aws-credentials
• c23d3e1 Merge pull request #7 from guardian/aa/pr-comment
• 6cf4973 docs: Update permissions list in README.md
• a6af0e8 ci: Run a typecheck on every PR or push to main
• 40ed804 chore: Configure Dependabot for NPM
• Additional commits viewable in compare view

You can trigger a rebase of this PR by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)