ci: bump peter-evans/create-pull-request from 7 to 8 in the actions group across 1 directory

[dependabot]

Bumps the actions group with 1 update in the / directory: peter-evans/create-pull-request.

Updates peter-evans/create-pull-request from 7 to 8

Release notes

Sourced from peter-evans/create-pull-request's releases.

Create Pull Request v8.0.0

What's new in v8

• Requires Actions Runner v2.327.1 or later if you are using a self-hosted runner for Node 24 support.

What's Changed

• chore: Update checkout action version to v6 by @​yonas in peter-evans/create-pull-request#4258
• Update actions/checkout references to @​v6 in docs by @​Copilot in peter-evans/create-pull-request#4259
• feat: v8 by @​peter-evans in peter-evans/create-pull-request#4260

New Contributors

• @​yonas made their first contribution in peter-evans/create-pull-request#4258
• @​Copilot made their first contribution in peter-evans/create-pull-request#4259

Full Changelog: peter-evans/create-pull-request@v7.0.11...v8.0.0

Create Pull Request v7.0.11

What's Changed

• fix: restrict remote prune to self-hosted runners by @​peter-evans in peter-evans/create-pull-request#4250

Full Changelog: peter-evans/create-pull-request@v7.0.10...v7.0.11

Create Pull Request v7.0.10

⚙️ Fixes an issue where updating a pull request failed when targeting a forked repository with the same owner as its parent.

What's Changed

• build(deps): bump the github-actions group with 2 updates by @​dependabot[bot] in peter-evans/create-pull-request#4235
• build(deps-dev): bump prettier from 3.6.2 to 3.7.3 in the npm group by @​dependabot[bot] in peter-evans/create-pull-request#4240
• fix: provider list pulls fallback for multi fork same owner by @​peter-evans in peter-evans/create-pull-request#4245

New Contributors

• @​obnyis made their first contribution in peter-evans/create-pull-request#4064

Full Changelog: peter-evans/create-pull-request@v7.0.9...v7.0.10

Create Pull Request v7.0.9

⚙️ Fixes an incompatibility with the recently released actions/checkout@v6.

What's Changed

• ~70 dependency updates by @​dependabot
• docs: fix workaround description about ready_for_review by @​ybiquitous in peter-evans/create-pull-request#3939
• Docs: add-paths default behavior by @​joeflack4 in peter-evans/create-pull-request#3928
• docs: update to create-github-app-token v2 by @​Goooler in peter-evans/create-pull-request#4063
• Fix compatibility with actions/checkout@v6 by @​ericsciple in peter-evans/create-pull-request#4230

New Contributors

• @​joeflack4 made their first contribution in peter-evans/create-pull-request#3928
• @​Goooler made their first contribution in peter-evans/create-pull-request#4063
• @​ericsciple made their first contribution in peter-evans/create-pull-request#4230

... (truncated)

Commits

• c0f553f feat: add @​octokit/plugin-retry to handle retriable server errors (#4298)
• 7000124 fix: Handle remote prune failures gracefully (#4295)
• 34aa40e build: update distribution (#4289)
• 641099d build(deps-dev): bump undici from 6.22.0 to 6.23.0 (#4284)
• 2271f1d build(deps-dev): bump the npm group with 2 updates (#4274)
• 437c31a build(deps): bump the github-actions group with 2 updates (#4273)
• 0979079 docs: update readme
• 5b751cd README.md: bump given GitHub actions to their latest versions (#4265)
• 98357b1 feat: v8 (#4260)
• 41c0e4b Update actions/checkout references to @​v6 in docs (#4259)
• Additional commits viewable in compare view

[jlebon]

Hmm, the Dependabot auto-merger is failing with:

Warning: Dependabot's commit signature is not verified, refusing to proceed.
Error: PR is not from Dependabot, nothing to do.

which is true. I'm not sure why GHA bumps are not signed while other bumps are. Probably some internal Dependabot tech debt. But honestly, I think we should just drop the use of peter-evans/create-pull-request. Really feels like there should be first party support for this, but until then I'd prefer to just have the action e.g. use the gh CLI to open a PR.

[dependabot]

Looks like peter-evans/create-pull-request is updatable in another way, so this is no longer needed.