Merge pull request #2 from damoun/chore/improve-workflow-security

chore: improve workflow security by using native git

Author: damoun

.github/workflows/update-json.yml

@@ -16,12 +16,17 @@ jobs:
       - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
         with:
           ref: ${{ github.head_ref || github.ref_name }}
-          persist-credentials: false
       - uses: cachix/install-nix-action@8aa03977d8d733052d78f4e008a241fd1dbf36b3 # v31.10.6
       - name: Run update script
         run: ./update.sh
       - name: Commit changes
-        uses: stefanzweifel/git-auto-commit-action@e348103e9026cc0eee72ae06630dbe30c8bf7a79 # v5.1.0
-        with:
-          commit_message: "chore: update versions.json"
-          file_pattern: "versions.json"
+        run: |
+          if ! git diff --quiet versions.json; then
+            git config --global user.name "github-actions[bot]"
+            git config --global user.email "github-actions[bot]@users.noreply.github.com"
+            git add versions.json
+            git commit -m "chore: update versions.json"
+            git push
+          else
+            echo "No changes to commit."
+          fi