Repository navigation

feat(deps): update ghcr.io/kiwigrid/k8s-sidecar docker tag 2.13.4 → 2.14.1 #7075

	---
Check warning on line 1 in .github/workflows/labeler.yaml View workflow run for this annotation GitHub Actions / Labeler Workflow execution policy warning (evaluate mode) On November 2, 2026, GitHub will restrict `pull_request_target` on public repositories by default. To continue allowing the event trigger, configure an Actions policy. Learn more: https://gh.io/securely-using-pull_request_target#default-policy-for-pull_request_target
	# yaml-language-server: $schema=https://json.schemastore.org/github-workflow.json
	name: Labeler

	on:
	# zizmor: ignore[dangerous-triggers]
	pull_request_target:

	permissions:
	contents: read

	jobs:
	labeler:
	name: Labeler
	runs-on:
	group: default
	permissions:
	contents: read
	pull-requests: write
	steps:
	- name: Checkout
	uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
	with:
	persist-credentials: false

	- name: Generate Token
	uses: actions/create-github-app-token@bcd2ba49218906704ab6c1aa796996da409d3eb1 # v3.2.0
	id: app-token
	with:
	app-id: ${{ secrets.BOT_APP_ID }}
	private-key: ${{ secrets.BOT_APP_PRIVATE_KEY }}

	- name: Setup Just
	uses: extractions/setup-crate@7577c1bdf2d95e6d65d532788f35ed79d4b1dda2 # v2.0.1
	with:
	repo: casey/just

	- name: Generate Label Config
	run: \|-
	just generate-label-config

	- name: Labeler
	uses: actions/labeler@bf12e9b00b37c5c0ca2b87b79b2daf7891dbda13 # v7.0.0
	with:
	repo-token: ${{ steps.app-token.outputs.token }}
	configuration-path: .github/labeler.yaml