Bump yaml from 2.5.1 to 2.6.0 #645

	name: Build the action

	on:
	pull_request:

	workflow_dispatch:

	# Declare default GITHUB_TOKEN permissions as read only.
	permissions: read-all

	jobs:
	build: # make sure build/ci work properly
	runs-on: ubuntu-latest
	steps:
	- uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
	- name: Compile with NPM
	run: \|
	npm ci
	npm run all

	dependency-check:
	runs-on: ubuntu-latest
	steps:
	- uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2

	- name: 'Dependency Review'
	uses: actions/dependency-review-action@4081bf99e2866ebe428fc0477b69eb4fcda7220a # v4.4.0

	update-dist:
	runs-on: ubuntu-latest
	needs: [build, dependency-check]
	if: github.event_name == 'pull_request' && github.event.action == 'closed' && github.event.pull_request.merged == true
	steps:
	- uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
	- name: Compile with NPM
	run: \|
	npm ci
	npm run all

	- name: Commit changes if any
	run: \|
	if [ -z "$(git status --porcelain)" ]; then
	echo "Found changes to commit"
	git config --global user.email "github-actions[bot]@users.noreply.github.com"
	git config --global user.name "github-actions[bot]"

	git add dist/
	git commit -m "Update dist folder"
	git push
	fi

Provide feedback