* Upgrade from node16 to node20
node16 is now EOL
* Ugrade node and npm versions
* Use the GitHub Actions reporter to stop failing on core.setFailure tests
* `npm >= 10` requires `node >= 20.5.0`
Co-authored-by: Paul <schuette.paul@gmail.com>
---------
Co-authored-by: Jeff Widman <jeff@jeffwidman.com>
Co-authored-by: Paul <schuette.paul@gmail.com>
Add a `skip-verification` (boolean) option:
- If `true`, the action will not validate the user or the commit verification status
- Defaults to `false`
Allows for scenarios where users want to add or amend commits on the Dependabot PR, and those commits will not come from the :dependabot: user.
There's a fair bit of discussion on this use case and also why this isn't the default behavior, see:
* https://github.com/dependabot/fetch-metadata/pull/336
* https://github.com/dependabot/fetch-metadata/issues/332
