chore(deps): bump planetscale/ghcommit-action from 0.2.21 to 0.2.22 in the github-actions-dependencies group

[dependabot]

Bumps the github-actions-dependencies group with 1 update: planetscale/ghcommit-action.

Updates planetscale/ghcommit-action from 0.2.21 to 0.2.22

Release notes

Sourced from planetscale/ghcommit-action's releases.

v0.2.22

What's Changed

🏕 Changes

• chore: capture and use image digest in Dockerfile by @​kminehart in planetscale/ghcommit-action#139

New Contributors

• @​kminehart made their first contribution in planetscale/ghcommit-action#139

Full Changelog: planetscale/ghcommit-action@v0.2.21...v0.2.22

Commits

• a6b150b 🤖 Bump version in Dockerfile
• d9bb780 Merge pull request #139 from kminehart/main
• 4bb24db chore: capture and use image digest in Dockerfile
• See full diff in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
• @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
• @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
• @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
• @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

[claude]

Claude finished @dependabot[bot]'s task in 30s —— View job

---

Dependency Bump Review: planetscale/ghcommit-action 0.2.21 → 0.2.22

• Identify changed dependencies
• Review changelog / release notes for breaking changes
• Check repo usage for compatibility
• Assess upgrade safety

Summary

Verdict: ✅ Safe to merge — patch bump, no action-level changes.

What changed

• One file: .github/workflows/helm-chart.yml (line 97), bumping planetscale/ghcommit-action from @v0.2.21 → @v0.2.22.
• The v0.2.22 release contains a single change: chore: capture and use image digest in Dockerfile (#139). This is an internal build/packaging change to how the action's Docker image pins its base — it does not touch the action's inputs, outputs, or runtime behavior.

Usage in this repo

The action is used once, in the Commit and push changes step of helm-chart.yml:

- name: Commit and push changes
  uses: planetscale/ghcommit-action@v0.2.22
  with:
    commit_message: 'Update helm docs'
    repo: ${{ github.repository }}
    branch: helm-docs-update
  env:
    GITHUB_TOKEN: ${{ steps.generate_token.outputs.token }}

All inputs (commit_message, repo, branch) and the GITHUB_TOKEN env var are unchanged between the two versions, so no migration is needed.

Risks / follow-ups

• None functional. This is a patch release with no input/behavior changes.
• Minor note (pre-existing, not introduced by this PR): the action is pinned to a floating tag (@v0.2.22) rather than a commit SHA. For supply-chain hardening you may consider pinning to the commit SHA (a6b150b…), but that's a repo-wide policy decision unrelated to this bump.

No code changes required. The Dependabot bump can be merged as-is.
· dependabot/github_actions/github-actions-dependencies-2cf9cc8a7a