Update get-fellows and review-bot actions (#1001)

Also puts a timeout onto `review-bot`.


- [x] Does not require a CHANGELOG entry

Co-authored-by: Kian Paimani <[email protected]>

Author: bkchr

.github/workflows/auto-merge.yml

@@ -14,7 +14,7 @@ jobs:
     if: ${{ github.event.issue.pull_request && startsWith(github.event.comment.body, '/merge') }}
     steps:
       - name: Get the GitHub handle of the fellows
-        uses: paritytech/[email protected].1
+        uses: paritytech/[email protected].2
         timeout-minutes: 5
         id: fellows
       - name: Generate a token

.github/workflows/cmd.yml

@@ -21,7 +21,7 @@ jobs:
 
       - name: Load fellows
         id: load-fellows
-        uses: paritytech/[email protected].1
+        uses: paritytech/[email protected].2
         timeout-minutes: 5
 
   reject-non-fellows:

.github/workflows/review-bot.yml

@@ -13,6 +13,7 @@ permissions:
 jobs:
   review-approvals:
     runs-on: self-hosted
+    timeout-minutes: 5
     steps:
       - name: Extract content of artifact
         id: number
@@ -26,7 +27,7 @@ jobs:
           app-id: ${{ secrets.REVIEW_APP_ID }}
           private-key: ${{ secrets.REVIEW_APP_KEY }}
       - name: "Evaluates PR reviews and assigns reviewers"
-        uses: paritytech/[email protected].1
+        uses: paritytech/[email protected].2
         with:
           repo-token: ${{ secrets.GITHUB_TOKEN }}
           team-token: ${{ steps.team_token.outputs.token }}

.github/workflows/review-trigger.yml

@@ -28,7 +28,7 @@ jobs:
         env:
           GH_TOKEN: ${{ github.token }}
       - name: Get the GitHub handle of the fellows
-        uses: paritytech/[email protected].1
+        uses: paritytech/[email protected].2
         timeout-minutes: 5
         id: fellows
         # Require new reviews when the author is pushing and he is not a fellow