chore(deps): update nick-fields/assert-action action to v4 #2401

	name: Composer Diff
	on:
	## To make this workflow work in the simplest way possible, without a PAT or juggling information between, we need to
	## run it with permissions as if it was already merged.
	## Refs: https://docs.github.com/en/actions/reference/events-that-trigger-workflows#pull_request_target
	## Refs: https://securitylab.github.com/research/github-actions-preventing-pwn-requests/
	## Refs: https://twitter.com/WyriHaximus/status/1393679576828686340
	pull_request_target:
	types:
	- opened
	- synchronize
	- reopened
	## This workflow needs the `pull-request` permissions to work
	## Refs: https://docs.github.com/en/actions/reference/workflow-syntax-for-github-actions#permissions
	permissions:
	pull-requests: write
	jobs:
	comment-composer-lock-diff:
	name: Comment composer.lock diff
	runs-on: ubuntu-latest
	steps:
	- name: Comment composer.lock diff
	uses: WyriHaximus/github-action-composer.lock-diff@a2ab16955cb525669a4eac1144796250ee97ddf7 # v2.2.2
	env:
	GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}

Provide feedback