Update GitHub action to use modern versions and credential auth

Author: reedloden

.github/workflows/advisories.yml

@@ -7,19 +7,24 @@ on:
 jobs:
   update-advisories:
     runs-on: ubuntu-latest
+    permissions:
+      # Give the default GITHUB_TOKEN write permission to commit and push the
+      # added or changed files to the repository.
+      contents: write
     steps:
-      - uses: actions/checkout@v2
+      - uses: actions/checkout@v6
+        with:
+          persist-credentials: true
       - name: Checkout ruby-advisory-db
-        uses: actions/checkout@v2
+        uses: actions/checkout@v6
         with:
           repository: rubysec/ruby-advisory-db
           path: _advisories
       - name: Set up Ruby
         uses: ruby/setup-ruby@v1
         with:
           ruby-version: ruby
-      - name: Install dependencies
-        run: bundle install --jobs 4 --retry 3
+          bundler-cache: true
       - name: Generate advisories
         run: bundle exec rake advisories:generate
       - name: Get latest advisory commit
@@ -29,7 +34,7 @@ jobs:
           echo "::set-output name=author::$(git show -s --format='%an <%ae>')"
           echo "::set-output name=hash::$(git rev-parse --short HEAD)"
       - name: Commit any updates
-        uses: stefanzweifel/git-auto-commit-action@v4
+        uses: stefanzweifel/git-auto-commit-action@v7
         with:
           commit_message: "Updated advisory posts against rubysec/ruby-advisory-db@${{ steps.git-commit.outputs.hash }}"
           file_pattern: advisories/_posts/*.md