chore(ci): Bump check-spelling/check-spelling from 0.0.21 to 0.0.23

[dependabot]

Bumps check-spelling/check-spelling from 0.0.21 to 0.0.23.

Release notes

Sourced from check-spelling/check-spelling's releases.

Release 0.0.23

⏩ Upgrading

• 🏷️ Test first on a branch by changing your workflow tags/references to this release. See 🐣 Breaking Changes for how to adapt your workflow.

🐣 Breaking Changes

use_magic_file is now enabled by default

Background

magic file enables check-spelling to automatically recognize more files to exclude. It has been pretty reliable/helpful.

Migrating

When you upgrade, if there are files that magic file detects as worthy of excluding, it will suggest adding them to excludes. If they turn out to be files that shouldn't be excluded, you can add use_magic_file: 0 to turn it off (and please file an issue with a sample showing why the files were falsely suggested for exclusion).

cache-dictionaries has been removed

... along with all other caching -- check-spelling should be faster now than in previous versions, so the lack of this caching shouldn't be a concern.

Migrating

If you're using this setting, just remove it (you'll get a warning from GitHub when the workflow runs).

check-spelling now requires actions/upload-artifact@v4 / actions/checkout@v4

It is quite possible that GHES does not support these yet.

Migrating

Users of GHES instances that don't have access to those actions should not upgrade until they're available.

Comment block before forbidden-patterns is now shown when patterns are tripped

When a forbidden-pattern matches content, lines immediately preceding it that start with # will be shown in the GitHub Step Summary.

Migrating

You should change such comments to start with # (a single # that isn't followed by a space is assumed to be a commented out pattern). And you should ensure that comments are easy for readers to understand.

For example, in spell-check-this, lines that used to say # s.b. ... have been changed to # Should be ...

See 💬 Report associated comment for forbidden patterns

Events not listed in warnings and notices will not be promoted to errors

Events can now be categorized directly. In previous versions, anything not set via warnings/notices would be promoted to errors. In this release, events have default states and if you want to make something else an error, you need to set it via errors.

https://github.com/check-spelling/check-spelling/wiki/Feature%3A-Set-event-severity

... (truncated)

Commits

• 2c9e4a8 action: Release v0.0.23
• 8da92f1 action: Load actions on demand
• 6494dc2 action: Improve missing merge head handling
• 41422d3 test: Download gh if it is ancient
• 21dd9f4 apt-get: Limit ubuntu apt package database
• 51d0efe unknown-words: Check expect files in clean env
• b83dbf1 UnknownWordSplitter: Put all directories into a sandbox
• 0851aa9 unknown-words: Avoid using temp env var
• 637add0 Split dictionary-not-found errors
• 4825b2f tests: Add FlakyServer.t
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot merge will merge this PR after your CI passes on it
• @dependabot squash and merge will squash and merge this PR after your CI passes on it
• @dependabot cancel merge will cancel a previously requested merge and block automerging
• @dependabot reopen will reopen this PR if it is closed
• @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

[dependabot]

Superseded by #21678.