Bump github.com/spf13/cobra from 1.7.0 to 1.8.0 #362

	name: 'changelog'
	on:
	pull_request:
	types:
	- opened
	- synchronize
	- reopened
	- ready_for_review
	- labeled
	- unlabeled

	permissions:
	contents: write

	jobs:
	changelog:
	runs-on: ubuntu-latest
	steps:
	- uses: actions/checkout@v4
	with:
	# Depending on your needs, you can use a token that will re-trigger workflows
	# See https://github.com/stefanzweifel/git-auto-commit-action#commits-made-by-this-action-do-not-trigger-new-workflow-runs
	token: ${{ secrets.BOT_CPR_PAT }}

	# All commits must be signed, import key and sign commit of updated change log.
	- name: Import GPG key
	id: import_gpg
	uses: crazy-max/ghaction-import-gpg@v6
	with:
	# Use a key associated with the provenanceio-bot github account.
	gpg_private_key: ${{ secrets.BOT_GPG_PRIVATE_KEY }}
	passphrase: ${{ secrets.BOT_GPG_PRIVATE_KEY_PW }}
	git_user_signingkey: true
	git_commit_gpgsign: true

	- uses: dangoslen/dependabot-changelog-helper@v3
	with:
	version: ${{ needs.setup.outputs.version }}
	activationLabel: 'dependencies'
	changelogPath: './CHANGELOG.md'

	# This step is required for committing the changes to your branch.
	# See https://github.com/stefanzweifel/git-auto-commit-action#commits-made-by-this-action-do-not-trigger-new-workflow-runs
	- uses: stefanzweifel/git-auto-commit-action@v5
	with:
	commit_user_name: "Provenance-io Bot"
	commit_user_email: "[email protected]"
	commit_options: "-S"
	commit_message: "Updated Changelog"

Provide feedback