Merge pull request #1894 from tgstation/dependabot/github_actions/mas…

…ter/thollander/actions-comment-pull-request-2.5.0

Bump thollander/actions-comment-pull-request from 2.4.3 to 2.5.0

.github/workflows/ci-security.yml

@@ -34,14 +34,14 @@ jobs:
 
       - name: Comment on new Fork PR
         if: github.event.action == 'opened' && !contains(github.event.pull_request.labels.*.name, 'CI Cleared') && github.event.pull_request.user.id != 49699333
-        uses: thollander/actions-comment-pull-request@1d3973dc4b8e1399c0620d3f2b1aa5e795465308
+        uses: thollander/actions-comment-pull-request@fabd468d3a1a0b97feee5f6b9e499eab0dd903f6
         with:
           message: Thank you for contributing to ${{ github.event.pull_request.base.repo.name }}! The workflow '${{ github.workflow }}' requires repository secrets and will not run without approval. Maintainers can add the `CI Cleared` label to allow it to run. Note that any changes to ci-security.yml and ci-pipeline.yml will not be reflected.
           GITHUB_TOKEN: ${{ steps.app-token-generation.outputs.token }}
 
       - name: Comment on dependabot PR
         if: github.event.action == 'opened' && !contains(github.event.pull_request.labels.*.name, 'CI Cleared') && github.event.pull_request.user.id == 49699333
-        uses: thollander/actions-comment-pull-request@1d3973dc4b8e1399c0620d3f2b1aa5e795465308
+        uses: thollander/actions-comment-pull-request@fabd468d3a1a0b97feee5f6b9e499eab0dd903f6
         with:
           message: Set the milestone to the next ${{ (github.head_ref == 'master' && 'patch') || 'minor' }} version, check for supply chain attacks, and then add the `CI Cleared` label to allow CI to run.
           GITHUB_TOKEN: ${{ steps.app-token-generation.outputs.token }}