dallay · yacosta738 · Sep 22, 2026 · Sep 17, 2026
diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
@@ -243,7 +243,7 @@ jobs:
       - name: Setup Rust toolchain
         uses: dtolnay/rust-toolchain@6c977a6ca4077a0ceb28ffbe03f59d46e9ac8772 # v1
         with:
-          toolchain: 1.98.0
+          toolchain: 1.98.1
 
       - name: Install system packages required to build cargo-audit
         run: |
@@ -288,7 +288,7 @@ jobs:
           persist-credentials: false
 
       - name: Setup Docker Buildx
-        uses: docker/setup-buildx-action@37fe631027851001ddb9b187196cc803df7f5f0e # v4.3.0
+        uses: docker/setup-buildx-action@f87e5991a6d7451dcb8d9637bfbc97413f497069 # v4.4.1
 
       - name: Prepare E2E fixtures
         run: |

diff --git a/.github/workflows/cleanup-cache.yml b/.github/workflows/cleanup-cache.yml
@@ -10,5 +10,5 @@
 
 jobs:
   cleanup:
-    uses: dallay/common-actions/.github/workflows/cleanup-cache.yml@v2.2.3
+    uses: dallay/common-actions/.github/workflows/cleanup-cache.yml@v2.2.4
     secrets: inherit
diff --git a/.github/workflows/dependabot-auto-merge.yml b/.github/workflows/dependabot-auto-merge.yml
@@ -11,7 +11,7 @@
       github.actor == 'renovate[bot]' ||
       github.actor == 'dependabot[bot]' ||
       github.actor == 'dependabot-preview[bot]'
-    uses: dallay/common-actions/.github/workflows/dependabot-auto-merge.yml@v2.2.3
+    uses: dallay/common-actions/.github/workflows/dependabot-auto-merge.yml@v2.2.4
     with:
       target: squash
       approve: true

diff --git a/.github/workflows/deploy-docs.yml b/.github/workflows/deploy-docs.yml
@@ -24,7 +24,7 @@ jobs:
           persist-credentials: false
 
       - name: Setup pnpm
-        uses: pnpm/action-setup@0977fd99725f1db4007ccb2928dbb4e90d06cc86 # v6.0.10
+        uses: pnpm/action-setup@ea17c68df8912ef543352723c149a84f56e3d413 # v6.1.0
         with:
           version: 11
 

diff --git a/.github/workflows/greetings.yml b/.github/workflows/greetings.yml
@@ -14,5 +14,5 @@
       github.actor != 'dallay-bot' &&
       !contains(github.actor, '[bot]') &&
       github.event.pull_request.user.type != 'Bot'
-    uses: dallay/common-actions/.github/workflows/greetings.yml@v2.2.3
+    uses: dallay/common-actions/.github/workflows/greetings.yml@v2.2.4
     secrets: inherit
diff --git a/.github/workflows/issue-labeler.yml b/.github/workflows/issue-labeler.yml
@@ -9,5 +9,5 @@
 
 jobs:
   label:
-    uses: dallay/common-actions/.github/workflows/issue-labeler.yml@v2.2.3
+    uses: dallay/common-actions/.github/workflows/issue-labeler.yml@v2.2.4
     secrets: inherit
diff --git a/.github/workflows/label.yml b/.github/workflows/label.yml
@@ -8,5 +8,5 @@
 
 jobs:
   label:
-    uses: dallay/common-actions/.github/workflows/pr-labeler.yml@v2.2.3
+    uses: dallay/common-actions/.github/workflows/pr-labeler.yml@v2.2.4
     secrets: inherit
diff --git a/.github/workflows/labels-sync.yml b/.github/workflows/labels-sync.yml
@@ -13,5 +13,5 @@
 
 jobs:
   sync:
-    uses: dallay/common-actions/.github/workflows/labels-sync.yml@v2.2.3
+    uses: dallay/common-actions/.github/workflows/labels-sync.yml@v2.2.4
     secrets: inherit
diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml
@@ -243,7 +243,7 @@ jobs:
         run: ls -la artifacts/
 
       - name: Upload to GitHub Release
-        uses: softprops/action-gh-release@3d0d9888cb7fd7b750713d6e236d1fcb99157228 # v3.0.2
+        uses: softprops/action-gh-release@efb35369e0ad2afab669f228072c1b0d510eae64 # v3.0.3
         with:
           tag_name: ${{ needs.release-please.outputs.release_git_tag }}
           files: artifacts/*
@@ -318,11 +318,11 @@ jobs:
       - name: Setup Node.js
         uses: actions/setup-node@820762786026740c76f36085b0efc47a31fe5020 # v7.0.0
         with:
-          node-version: "24.19"
+          node-version: "24.21"
           registry-url: "https://registry.npmjs.org"
 
       - name: Setup pnpm
-        uses: pnpm/action-setup@0977fd99725f1db4007ccb2928dbb4e90d06cc86 # v6.0.10
+        uses: pnpm/action-setup@ea17c68df8912ef543352723c149a84f56e3d413 # v6.1.0
         with:
           version: 11
 
@@ -491,11 +491,11 @@ jobs:
       - name: Setup Node.js
         uses: actions/setup-node@820762786026740c76f36085b0efc47a31fe5020 # v7.0.0
         with:
-          node-version: "24.19"
+          node-version: "24.21"
           registry-url: "https://registry.npmjs.org"
 
       - name: Setup pnpm
-        uses: pnpm/action-setup@0977fd99725f1db4007ccb2928dbb4e90d06cc86 # v6.0.10
+        uses: pnpm/action-setup@ea17c68df8912ef543352723c149a84f56e3d413 # v6.1.0
         with:
           version: 11
 
@@ -582,10 +582,10 @@ jobs:
           ref: ${{ needs.release-please.outputs.release_git_tag }}
 
       - name: Set up QEMU
-        uses: docker/setup-qemu-action@96fe6ef7f33517b61c61be40b68a1882f3264fb8 # v4.2.0
+        uses: docker/setup-qemu-action@99012661954931238ded8c8b007157a8430204e1 # v4.4.0
 
       - name: Set up Docker Buildx
-        uses: docker/setup-buildx-action@37fe631027851001ddb9b187196cc803df7f5f0e # v4.3.0
+        uses: docker/setup-buildx-action@f87e5991a6d7451dcb8d9637bfbc97413f497069 # v4.4.1
 
       - name: Login to Docker Hub
         uses: docker/login-action@dbcb813823bdd20940b903addbd779551569679f # v4.6.0
@@ -614,7 +614,7 @@ jobs:
             type=raw,value=latest
 
       - name: Build and push Docker image
-        uses: docker/build-push-action@53b7df96c91f9c12dcc8a07bcb9ccacbed38856a # v7.3.0
+        uses: docker/build-push-action@c3c9e263c25d99ce0380d002d59b67737d91b0dc # v7.4.0
         with:
           context: .
           push: true

diff --git a/.github/workflows/semantic-pull-request.yml b/.github/workflows/semantic-pull-request.yml
@@ -6,4 +6,4 @@
     types: [opened, edited, synchronize]
 jobs:
   main:
-    uses: dallay/common-actions/.github/workflows/semantic-pr.yml@v2.2.3
+    uses: dallay/common-actions/.github/workflows/semantic-pr.yml@v2.2.4
diff --git a/.github/workflows/sonarcloud.yml b/.github/workflows/sonarcloud.yml
@@ -103,7 +103,7 @@ jobs:
 
       - name: Analyze with SonarCloud
         if: ${{ env.SONAR_TOKEN != '' && (github.event_name != 'pull_request' || !github.event.pull_request.head.repo.fork) }}
-        uses: SonarSource/sonarqube-scan-action@22918119ff8e1ca75a623e15c8296b6ea4fbe28f # v8.2.1
+        uses: SonarSource/sonarqube-scan-action@ba9859eae8dd6bd29e412f25ddbbef3d032000f4 # v8.2.2
         with:
           args: >-
             -Dsonar.projectBaseDir=.

diff --git a/.github/workflows/stale.yml b/.github/workflows/stale.yml
@@ -10,5 +10,5 @@ permissions:
 
 jobs:
   stale:
-    uses: dallay/common-actions/.github/workflows/stale.yml@87129475c06d9f3354d398426926ba4345a4644d # v2.2.3
+    uses: dallay/common-actions/.github/workflows/stale.yml@69060250307677655136ca88c70a2f77cb4153b2 # v2.2.4
     secrets: inherit