From 49e19708669a7bc31b434b9a63213037f1154d51 Mon Sep 17 00:00:00 2001 From: "renovate[bot]" <29139614+renovate[bot]@users.noreply.github.com> Date: Wed, 16 Sep 2026 18:56:52 +0000 Subject: [PATCH 1/2] chore(container): update image ghcr.io/devsecninja/dotfiles-devcontainer to bceb577 [automerge] --- .devcontainer/devcontainer.json | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/.devcontainer/devcontainer.json b/.devcontainer/devcontainer.json index 68130b76..7b7ee6b4 100644 --- a/.devcontainer/devcontainer.json +++ b/.devcontainer/devcontainer.json @@ -6,7 +6,7 @@ // fresh, correctly detecting the runtime environment (CI, Codespaces, etc.) // Pinned by digest only (no tag): the devcontainers CLI cannot parse a // combined `:tag@sha256:...` reference, so Renovate keeps just the digest. - "image": "ghcr.io/devsecninja/dotfiles-devcontainer@sha256:4e9a61f502d6384f66e7a3f8b433a99a13fa761ea89e2177cb02150d52eaeee1", + "image": "ghcr.io/devsecninja/dotfiles-devcontainer@sha256:bceb577639a52d93b2608d6509a64b07f6296acdb631be7920b0a667f4b91514", "features": { "ghcr.io/devcontainers/features/git-lfs:1": { "version": "latest" From 08390dc5f7efb0d4aff937016a783ab14c4ba819 Mon Sep 17 00:00:00 2001 From: "renovate[bot]" <29139614+renovate[bot]@users.noreply.github.com> Date: Wed, 16 Sep 2026 18:57:17 +0000 Subject: [PATCH 2/2] chore(github-tag): update tag actions/checkout to v7 --- .devcontainer/devcontainer.json | 2 +- .github/workflows/bats.yml | 2 +- .github/workflows/ci.yaml | 18 +++++++++--------- .github/workflows/devcontainer-prebuild.yaml | 4 ++-- .github/workflows/docs.yml | 2 +- .github/workflows/release.yml | 2 +- .github/workflows/sign-powershell.yml | 2 +- .github/workflows/sync-develop.yaml | 2 +- .github/workflows/todo-to-issue.yml | 2 +- 9 files changed, 18 insertions(+), 18 deletions(-) diff --git a/.devcontainer/devcontainer.json b/.devcontainer/devcontainer.json index 7b7ee6b4..68130b76 100644 --- a/.devcontainer/devcontainer.json +++ b/.devcontainer/devcontainer.json @@ -6,7 +6,7 @@ // fresh, correctly detecting the runtime environment (CI, Codespaces, etc.) // Pinned by digest only (no tag): the devcontainers CLI cannot parse a // combined `:tag@sha256:...` reference, so Renovate keeps just the digest. - "image": "ghcr.io/devsecninja/dotfiles-devcontainer@sha256:bceb577639a52d93b2608d6509a64b07f6296acdb631be7920b0a667f4b91514", + "image": "ghcr.io/devsecninja/dotfiles-devcontainer@sha256:4e9a61f502d6384f66e7a3f8b433a99a13fa761ea89e2177cb02150d52eaeee1", "features": { "ghcr.io/devcontainers/features/git-lfs:1": { "version": "latest" diff --git a/.github/workflows/bats.yml b/.github/workflows/bats.yml index 9e37f163..6e706d2b 100644 --- a/.github/workflows/bats.yml +++ b/.github/workflows/bats.yml @@ -45,7 +45,7 @@ jobs: uses: DevSecNinja/.github/actions/harden-runner@bf22fcfcb4ef94a359eed55cea4b5ce7f5b98167 # main - name: Checkout code - uses: actions/checkout@d23441a48e516b6c34aea4fa41551a30e30af803 # v6.1.0 + uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 with: persist-credentials: false diff --git a/.github/workflows/ci.yaml b/.github/workflows/ci.yaml index 53bc849e..1063155d 100644 --- a/.github/workflows/ci.yaml +++ b/.github/workflows/ci.yaml @@ -45,7 +45,7 @@ jobs: uses: DevSecNinja/.github/actions/harden-runner@bf22fcfcb4ef94a359eed55cea4b5ce7f5b98167 # main - name: Checkout repository - uses: actions/checkout@d23441a48e516b6c34aea4fa41551a30e30af803 # v6.1.0 + uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 - name: Install mise uses: jdx/mise-action@c2a87611a18de5b3828c5652fe268e992400cb5c # v4.3.0 @@ -101,7 +101,7 @@ jobs: uses: DevSecNinja/.github/actions/harden-runner@bf22fcfcb4ef94a359eed55cea4b5ce7f5b98167 # main - name: Checkout repository - uses: actions/checkout@d23441a48e516b6c34aea4fa41551a30e30af803 # v6.1.0 + uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 - name: Set up Docker Buildx uses: docker/setup-buildx-action@37fe631027851001ddb9b187196cc803df7f5f0e # v4.3.0 @@ -174,7 +174,7 @@ jobs: steps: - name: Checkout repository - uses: actions/checkout@d23441a48e516b6c34aea4fa41551a30e30af803 # v6.1.0 + uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 - name: Install mise uses: jdx/mise-action@c2a87611a18de5b3828c5652fe268e992400cb5c # v4.3.0 @@ -239,7 +239,7 @@ jobs: steps: - name: Checkout repository - uses: actions/checkout@d23441a48e516b6c34aea4fa41551a30e30af803 # v6.1.0 + uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 - name: Install mise uses: jdx/mise-action@c2a87611a18de5b3828c5652fe268e992400cb5c # v4.3.0 @@ -295,7 +295,7 @@ jobs: steps: - name: Checkout repository - uses: actions/checkout@d23441a48e516b6c34aea4fa41551a30e30af803 # v6.1.0 + uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 - name: Install mise uses: jdx/mise-action@c2a87611a18de5b3828c5652fe268e992400cb5c # v4.3.0 @@ -324,7 +324,7 @@ jobs: steps: - name: Checkout repository - uses: actions/checkout@d23441a48e516b6c34aea4fa41551a30e30af803 # v6.1.0 + uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 - name: Install mise uses: jdx/mise-action@c2a87611a18de5b3828c5652fe268e992400cb5c # v4.3.0 @@ -342,7 +342,7 @@ jobs: steps: - name: Checkout repository - uses: actions/checkout@d23441a48e516b6c34aea4fa41551a30e30af803 # v6.1.0 + uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 - name: Run Windows install script shell: pwsh @@ -472,7 +472,7 @@ jobs: steps: - name: Checkout repository - uses: actions/checkout@d23441a48e516b6c34aea4fa41551a30e30af803 # v6.1.0 + uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 - name: Run root Windows install script (Coder support) shell: pwsh @@ -540,7 +540,7 @@ jobs: steps: - name: Checkout repository - uses: actions/checkout@d23441a48e516b6c34aea4fa41551a30e30af803 # v6.1.0 + uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 - name: Install Pester shell: pwsh diff --git a/.github/workflows/devcontainer-prebuild.yaml b/.github/workflows/devcontainer-prebuild.yaml index b7bd0f49..26a1770c 100644 --- a/.github/workflows/devcontainer-prebuild.yaml +++ b/.github/workflows/devcontainer-prebuild.yaml @@ -58,7 +58,7 @@ jobs: uses: DevSecNinja/.github/actions/harden-runner@bf22fcfcb4ef94a359eed55cea4b5ce7f5b98167 # main - name: Checkout repository - uses: actions/checkout@d23441a48e516b6c34aea4fa41551a30e30af803 # v6.1.0 + uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 - name: Set lowercase repository owner id: lowercase @@ -191,7 +191,7 @@ jobs: uses: DevSecNinja/.github/actions/harden-runner@bf22fcfcb4ef94a359eed55cea4b5ce7f5b98167 # main - name: Checkout repository - uses: actions/checkout@d23441a48e516b6c34aea4fa41551a30e30af803 # v6.1.0 + uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 - name: Set lowercase repository owner id: lowercase diff --git a/.github/workflows/docs.yml b/.github/workflows/docs.yml index 14b09103..3d75c6d1 100644 --- a/.github/workflows/docs.yml +++ b/.github/workflows/docs.yml @@ -32,7 +32,7 @@ jobs: uses: DevSecNinja/.github/actions/harden-runner@bf22fcfcb4ef94a359eed55cea4b5ce7f5b98167 # main - name: Checkout code - uses: actions/checkout@d23441a48e516b6c34aea4fa41551a30e30af803 # v6.1.0 + uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 with: fetch-depth: 0 persist-credentials: false diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml index 602028bd..b15a6516 100644 --- a/.github/workflows/release.yml +++ b/.github/workflows/release.yml @@ -57,7 +57,7 @@ jobs: uses: DevSecNinja/.github/actions/harden-runner@bf22fcfcb4ef94a359eed55cea4b5ce7f5b98167 # main - name: Checkout code - uses: actions/checkout@d23441a48e516b6c34aea4fa41551a30e30af803 # v6.1.0 + uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 with: ref: ${{ github.ref_name }} fetch-depth: 0 diff --git a/.github/workflows/sign-powershell.yml b/.github/workflows/sign-powershell.yml index b7ba2ff7..98db4721 100644 --- a/.github/workflows/sign-powershell.yml +++ b/.github/workflows/sign-powershell.yml @@ -23,7 +23,7 @@ jobs: steps: - name: Checkout code - uses: actions/checkout@d23441a48e516b6c34aea4fa41551a30e30af803 # v6.1.0 + uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 with: fetch-depth: 0 diff --git a/.github/workflows/sync-develop.yaml b/.github/workflows/sync-develop.yaml index 8e678d39..b5ce75aa 100644 --- a/.github/workflows/sync-develop.yaml +++ b/.github/workflows/sync-develop.yaml @@ -29,7 +29,7 @@ jobs: uses: DevSecNinja/.github/actions/harden-runner@bf22fcfcb4ef94a359eed55cea4b5ce7f5b98167 # main - name: Checkout repository - uses: actions/checkout@d23441a48e516b6c34aea4fa41551a30e30af803 # v6.1.0 + uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 with: ref: main fetch-depth: 0 diff --git a/.github/workflows/todo-to-issue.yml b/.github/workflows/todo-to-issue.yml index 45a2d9dd..57102f15 100644 --- a/.github/workflows/todo-to-issue.yml +++ b/.github/workflows/todo-to-issue.yml @@ -25,7 +25,7 @@ jobs: uses: DevSecNinja/.github/actions/harden-runner@bf22fcfcb4ef94a359eed55cea4b5ce7f5b98167 # main - name: Checkout code - uses: actions/checkout@d23441a48e516b6c34aea4fa41551a30e30af803 # v6.1.0 + uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 with: persist-credentials: false