bump github/branch-deploy to v10

.github/workflows/branch-deploy.yml

@@ -22,7 +22,7 @@ jobs:
     steps:
       - name: branch-deploy
         id: branch-deploy
-        uses: github/branch-deploy@v9
+        uses: github/branch-deploy@v10
         with:
           admins: the-hideout/core-contributors
           admins_pat: ${{ secrets.BRANCH_DEPLOY_ADMINS_PAT }}
@@ -31,7 +31,7 @@ jobs:
 
       - name: checkout
         if: steps.branch-deploy.outputs.continue == 'true'
-        uses: actions/checkout@v4.2.2
+        uses: actions/checkout@v4
         with:
           ref: ${{ steps.branch-deploy.outputs.sha }}
 

.github/workflows/ci.yml

@@ -17,7 +17,7 @@ jobs:
 
     steps:
       - name: checkout
-        uses: actions/checkout@v4.2.2
+        uses: actions/checkout@v4
 
       # validate JSON and YAML files
       - name: json-yaml-validate

.github/workflows/deploy.yml

@@ -16,7 +16,7 @@ jobs:
 
     steps:
       - name: deployment check
-        uses: github/branch-deploy@v9
+        uses: github/branch-deploy@v10
         id: deployment-check
         with:
           merge_deploy_mode: "true" # tells the Action to use the merge commit workflow strategy
@@ -25,7 +25,9 @@ jobs:
       # always run checkout because the 'release (sentry)' step needs the code
       # do we still need this after removing sentry?
       - name: checkout
-        uses: actions/[email protected]
+        uses: actions/checkout@v4
+        with:
+          ref: ${{ steps.deployment-check.outputs.sha }}
 
       - uses: actions/[email protected]
         if: ${{ steps.deployment-check.outputs.continue == 'true' }}

.github/workflows/unlock-on-merge.yml

@@ -14,7 +14,7 @@ jobs:
 
     steps:
       - name: unlock on merge
-        uses: github/branch-deploy@v9
+        uses: github/branch-deploy@v10
         id: unlock-on-merge
         with:
           unlock_on_merge_mode: "true" # <-- indicates that this is the "Unlock on Merge Mode" workflow