build(deps): bump crazy-max/ghaction-import-gpg from 6.2.0 to 6.3.0

dependabot[bot] · web-flow · commit d09e4856b900 · 2025-05-02T22:55:27.000-04:00
PR-URL: stdlib-js#6891 Reviewed-by: Philipp Burckhardt <pburckhardt@outlook.com> Signed-off-by: dependabot[bot] <support@github.com>
diff --git a/.github/workflows/generate_monthly_changelog.yml b/.github/workflows/generate_monthly_changelog.yml
@@ -106,7 +106,7 @@ jobs:
       # Import GPG key to sign commits:
       - name: 'Import GPG key to sign commits'
         # Pin action to full length commit SHA
-        uses: crazy-max/ghaction-import-gpg@cb9bde2e2525e640591a934b1fd28eef1dcaf5e5 # v6.2.0
+        uses: crazy-max/ghaction-import-gpg@e89d40939c28e39f97cf32126055eeae86ba74ec # v6.3.0
         with:
           gpg_private_key: ${{ secrets.STDLIB_BOT_GPG_PRIVATE_KEY }}
           passphrase: ${{ secrets.STDLIB_BOT_GPG_PASSPHRASE }}
