From 49e19708669a7bc31b434b9a63213037f1154d51 Mon Sep 17 00:00:00 2001
From: "renovate[bot]" <29139614+renovate[bot]@users.noreply.github.com>
Date: Wed, 16 Sep 2026 18:56:52 +0000
Subject: [PATCH 1/2] chore(container): update image
 ghcr.io/devsecninja/dotfiles-devcontainer to bceb577 [automerge]

---
 .devcontainer/devcontainer.json | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/.devcontainer/devcontainer.json b/.devcontainer/devcontainer.json
index 68130b76..7b7ee6b4 100644
--- a/.devcontainer/devcontainer.json
+++ b/.devcontainer/devcontainer.json
@@ -6,7 +6,7 @@
   // fresh, correctly detecting the runtime environment (CI, Codespaces, etc.)
   // Pinned by digest only (no tag): the devcontainers CLI cannot parse a
   // combined `:tag@sha256:...` reference, so Renovate keeps just the digest.
-  "image": "ghcr.io/devsecninja/dotfiles-devcontainer@sha256:4e9a61f502d6384f66e7a3f8b433a99a13fa761ea89e2177cb02150d52eaeee1",
+  "image": "ghcr.io/devsecninja/dotfiles-devcontainer@sha256:bceb577639a52d93b2608d6509a64b07f6296acdb631be7920b0a667f4b91514",
   "features": {
     "ghcr.io/devcontainers/features/git-lfs:1": {
       "version": "latest"

From 395601837b73ad12b98155f88193fe14069e1e19 Mon Sep 17 00:00:00 2001
From: "renovate[bot]" <29139614+renovate[bot]@users.noreply.github.com>
Date: Wed, 16 Sep 2026 18:57:33 +0000
Subject: [PATCH 2/2] chore(github-tag): update tag devsecninja/.github to v2

---
 .devcontainer/devcontainer.json      | 2 +-
 .github/workflows/config-sync.yml    | 2 +-
 .github/workflows/release-please.yml | 2 +-
 3 files changed, 3 insertions(+), 3 deletions(-)

diff --git a/.devcontainer/devcontainer.json b/.devcontainer/devcontainer.json
index 7b7ee6b4..68130b76 100644
--- a/.devcontainer/devcontainer.json
+++ b/.devcontainer/devcontainer.json
@@ -6,7 +6,7 @@
   // fresh, correctly detecting the runtime environment (CI, Codespaces, etc.)
   // Pinned by digest only (no tag): the devcontainers CLI cannot parse a
   // combined `:tag@sha256:...` reference, so Renovate keeps just the digest.
-  "image": "ghcr.io/devsecninja/dotfiles-devcontainer@sha256:bceb577639a52d93b2608d6509a64b07f6296acdb631be7920b0a667f4b91514",
+  "image": "ghcr.io/devsecninja/dotfiles-devcontainer@sha256:4e9a61f502d6384f66e7a3f8b433a99a13fa761ea89e2177cb02150d52eaeee1",
   "features": {
     "ghcr.io/devcontainers/features/git-lfs:1": {
       "version": "latest"
diff --git a/.github/workflows/config-sync.yml b/.github/workflows/config-sync.yml
index a972ed50..4e10e296 100644
--- a/.github/workflows/config-sync.yml
+++ b/.github/workflows/config-sync.yml
@@ -12,7 +12,7 @@ permissions:
 
 jobs:
   sync:
-    uses: DevSecNinja/.github/.github/workflows/config-sync.yml@27fd66740c629ea38380dcd3bf93e7bc74c54247 # v1.9.0
+    uses: DevSecNinja/.github/.github/workflows/config-sync.yml@0d0f448de257f354c89dc3a128871235d6ba8c11 # v2.5.0
     permissions:
       contents: write
       pull-requests: write
diff --git a/.github/workflows/release-please.yml b/.github/workflows/release-please.yml
index b8caf7ce..67234f79 100644
--- a/.github/workflows/release-please.yml
+++ b/.github/workflows/release-please.yml
@@ -34,7 +34,7 @@ concurrency:
 jobs:
   release-please:
     # renovate: datasource=github-tags depName=DevSecNinja/.github
-    uses: DevSecNinja/.github/.github/workflows/release-please.yml@27fd66740c629ea38380dcd3bf93e7bc74c54247 # v1.9.0
+    uses: DevSecNinja/.github/.github/workflows/release-please.yml@0d0f448de257f354c89dc3a128871235d6ba8c11 # v2.5.0
     permissions:
       contents: write
       pull-requests: write