From 360e5d78733e2420b0498411353e6cd1e77d7a82 Mon Sep 17 00:00:00 2001
From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com>
Date: Sat, 25 Jul 2026 14:47:30 +0000
Subject: [PATCH] ci: Bump the actions group with 3 updates

Bumps the actions group with 3 updates: [fsfe/reuse-action](https://github.com/fsfe/reuse-action), [taiki-e/install-action](https://github.com/taiki-e/install-action) and [ossf/scorecard-action](https://github.com/ossf/scorecard-action).


Updates `fsfe/reuse-action` from 772649cfa03a64a08c458c7cca9a6a473d74e7f9 to 676e2d560c9a403aa252096d99fcab3e1132b0f5
- [Release notes](https://github.com/fsfe/reuse-action/releases)
- [Commits](https://github.com/fsfe/reuse-action/compare/772649cfa03a64a08c458c7cca9a6a473d74e7f9...676e2d560c9a403aa252096d99fcab3e1132b0f5)

Updates `taiki-e/install-action` from 2.85.0 to 2.85.1
- [Release notes](https://github.com/taiki-e/install-action/releases)
- [Changelog](https://github.com/taiki-e/install-action/blob/main/CHANGELOG.md)
- [Commits](https://github.com/taiki-e/install-action/compare/7572810d7dd469b651bb7793945692cf78da5dd7...3d7d7cd5ac7f994c1892ae0c06165095b9139094)

Updates `ossf/scorecard-action` from 2.4.3 to 2.4.4
- [Release notes](https://github.com/ossf/scorecard-action/releases)
- [Changelog](https://github.com/ossf/scorecard-action/blob/main/RELEASE.md)
- [Commits](https://github.com/ossf/scorecard-action/compare/4eaacf0543bb3f2c246792bd56e8cdeffafb205a...2d1146689b8cda280b9bc96326124645441f03bc)

---
updated-dependencies:
- dependency-name: fsfe/reuse-action
  dependency-version: 676e2d560c9a403aa252096d99fcab3e1132b0f5
  dependency-type: direct:production
  dependency-group: actions
- dependency-name: taiki-e/install-action
  dependency-version: 2.85.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: actions
- dependency-name: ossf/scorecard-action
  dependency-version: 2.4.4
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: actions
...

Signed-off-by: dependabot[bot] <support@github.com>
---
 .github/workflows/ci.yml           | 2 +-
 .github/workflows/release.yml      | 2 +-
 .github/workflows/sbom-monitor.yml | 2 +-
 .github/workflows/scorecard.yml    | 2 +-
 4 files changed, 4 insertions(+), 4 deletions(-)

diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
index af4cdcf..036b1a8 100644
--- a/.github/workflows/ci.yml
+++ b/.github/workflows/ci.yml
@@ -26,7 +26,7 @@ jobs:
       - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
       - uses: raven-actions/actionlint@3d39aea434753780c3b3d4a1a31c854b4dbf49d7 # v2.2.0
       - uses: crate-ci/typos@bee27e3a4fd1ea2111cf90ab89cd076c870fce14 # v1.47.2
-      - uses: fsfe/reuse-action@772649cfa03a64a08c458c7cca9a6a473d74e7f9 # v6
+      - uses: fsfe/reuse-action@676e2d560c9a403aa252096d99fcab3e1132b0f5 # v6
       - name: Reject incomplete implementation markers
         shell: bash
         run: |
diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml
index 3f9e8bb..967b9c2 100644
--- a/.github/workflows/release.yml
+++ b/.github/workflows/release.yml
@@ -106,7 +106,7 @@ jobs:
             -nsb https://github.com/P4suta/Snaply `
             -mi SPDX:2.2 `
             -cd '--DirectoryExclusionList **/artifacts/** --DirectoryExclusionList **/build/**'
-      - uses: taiki-e/install-action@7572810d7dd469b651bb7793945692cf78da5dd7 # v2.85.0
+      - uses: taiki-e/install-action@3d7d7cd5ac7f994c1892ae0c06165095b9139094 # v2.85.1
         with:
           tool: osv-scanner@2.3.6
       - name: Scan release SBOM
diff --git a/.github/workflows/sbom-monitor.yml b/.github/workflows/sbom-monitor.yml
index 2aa510f..859d24b 100644
--- a/.github/workflows/sbom-monitor.yml
+++ b/.github/workflows/sbom-monitor.yml
@@ -29,7 +29,7 @@ jobs:
           gh release download "$tag" --pattern 'snaply.spdx.json' --dir sbom
           echo "available=true" >> "$GITHUB_OUTPUT"
           echo "tag=$tag" >> "$GITHUB_OUTPUT"
-      - uses: taiki-e/install-action@7572810d7dd469b651bb7793945692cf78da5dd7 # v2.85.0
+      - uses: taiki-e/install-action@3d7d7cd5ac7f994c1892ae0c06165095b9139094 # v2.85.1
         if: steps.release.outputs.available == 'true'
         with:
           tool: osv-scanner@2.3.6
diff --git a/.github/workflows/scorecard.yml b/.github/workflows/scorecard.yml
index 712ab28..de03521 100644
--- a/.github/workflows/scorecard.yml
+++ b/.github/workflows/scorecard.yml
@@ -22,7 +22,7 @@ jobs:
       - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
         with:
           persist-credentials: false
-      - uses: ossf/scorecard-action@4eaacf0543bb3f2c246792bd56e8cdeffafb205a # v2.4.3
+      - uses: ossf/scorecard-action@2d1146689b8cda280b9bc96326124645441f03bc # v2.4.4
         with:
           results_file: results.sarif
           results_format: sarif