chore(github-actions): update ppat/github-workflows (v4.2.0 -> v4.4.0)

[ppat-self-hosted-renovate-bot]

This PR contains the following updates:

Package	Type	Update	Change
ppat/github-workflows	action	minor	v4.2.0 → v4.4.0

---

Release Notes

ppat/github-workflows (ppat/github-workflows)

v4.4.0

Compare Source

🧹 Miscellaneous

• dev-tools: update alessandrojcm/commitlint-pre-commit-hook (non-major) (#​530) (b0ec9b0)
• dev-tools: update aquaproj/aqua (v2.59.0 -> v2.59.1) (#​483) (c6ebcbf)
• dev-tools: update aquaproj/aqua (v2.59.1 -> v2.60.0) (#​501) (df84b91)
• dev-tools: update aquaproj/aqua (v2.60.0 -> v2.60.1) (#​502) (748c60b)
• dev-tools: update astral-sh/uv (0.11.16 -> 0.11.17) (#​489) (db1f79a)
• dev-tools: update astral-sh/uv (0.11.17 -> 0.11.18) (#​490) (7c8f07e)
• dev-tools: update astral-sh/uv (0.11.18 -> 0.11.19) (#​493) (e468140)
• dev-tools: update astral-sh/uv (0.11.19 -> 0.11.21) (#​498) (6a66cc8)
• dev-tools: update astral-sh/uv (0.11.21 -> 0.11.22) (#​503) (91cf84e)
• dev-tools: update astral-sh/uv (github-actions dependency) (0.11.22 -> 0.11.23) (#​504) (957090e)
• dev-tools: update kindest/node (v1.35.1 -> v1.35.5) (#​492) (56675fb)
• dev-tools: update kubernetes (v1.35.6 -> v1.36.0) (#​506) (6605eee)
• dev-tools: update kubernetes-sigs/kind (v0.31.0 -> v0.32.0) (#​495) (506c2bf)
• dev-tools: update kubernetes/kubernetes (v1.35.1 -> v1.35.5) (#​484) (75915c5)
• dev-tools: update kubernetes/kubernetes (v1.35.5 -> v1.35.6) (#​499) (d78fe6f)
• dev-tools: update lockfile bun (#​488) (292c6cd)
• dev-tools: update lockfile bun (#​500) (bed5d4a)
• dev-tools: update lockfile bun (#​533) (89a1813)
• dev-tools: update renovatebot/renovate (43.195.0 -> 43.227.1) (#​486) (196a343)
• dev-tools: update renovatebot/renovate (github-actions dependency) (43.227.1 -> 43.233.3) (#​507) (57a73d2)
• dev-tools: update terraform-linters/tflint (v0.62.1 -> v0.63.1) (#​496) (cf96372)
• github-actions: update actions/checkout (v4 -> v7.0.0) and actions/create-github-app-token (v2 -> v3.2.0) (#​514) (08975ad)
• github-actions: update renovatebot/github-action (v44.2.6 -> v46.1.17) (#​515) (9e6b7e6)
• release: set next release version (5bb10c9)

✨ Features

• dev-tools: update kindest/node (v1.35.5 -> v1.36.1) (#​531) (e1784d7)
• github-actions: add zizmor static analysis security gate (#​535) (7926396)
• github-actions: update docker/build-push-action (v6.18.0 -> v7.2.0) (#​521) (8a94a05)
• github-actions: update docker/login-action (v3.6.0 -> v4.2.0) (#​522) (47c1dd4)
• github-actions: update docker/metadata-action (v5.10.0 -> v6.1.0) (#​523) (3286626)
• github-actions: update docker/setup-buildx-action (v3.11.1 -> v4.1.0) (#​524) (fea51eb)
• github-actions: update docker/setup-qemu-action (v3.7.0 -> v4.1.0) (#​525) (dc53535)
• github-actions: update googleapis/release-please-action (v4.4.0 -> v5.0.0) (#​526) (0f16be6)
• github-actions: update peter-evans/dockerhub-description (v4.0.2 -> v5.0.0) (#​527) (bc815ad)
• github-actions: update ppat/homelab-ops-actions (v1.0.4 -> v2.0.0) (#​511) (1a578a6)
• github-actions: update tailscale/github-action (v3.3.0 -> v4.1.2) (#​528) (495b096)
• github-actions: update tj-actions/changed-files (v46.0.5 -> v47.0.6) (#​529) (fd206fe)
• github-actions: update trusted github-actions (#​516) (d5cd138)
• update commitlint packages (#​494) (82fa85b)
• update commitlint packages (21.0.2 -> 21.1.0) (#​520) (f74959b)
• update commitlint packages (21.1.0 -> 21.2.0) (#​536) (d2e6b84)
• update conventional-changelog-conventionalcommits (9.3.1 -> 10.2.0) (#​532) (e4c8986)

🚀 Enhancements + Bug Fixes

• align renovate version between renovate.yaml <-> lint-renovate-config-check.yaml (aa30341)
• dev-tools: update astral-sh/uv (0.11.23 -> 0.11.26) (#​518) (85abf5b)
• dev-tools: update kubernetes/kubernetes (v1.36.0 -> v1.36.2) (#​519) (f35e109)
• do not specify tailscale version in build-docker-image workflow (b6ab563)
• github-actions: zizmor auto fixes (#​537) (4f161c7)
• update @​semantic-release/github (12.0.8 -> 12.0.9) (#​517) (5a7fbdb)
• update commitlint packages (21.0.1 -> 21.0.2) (#​505) (bc74483)
• update conventional-changelog-conventionalcommits (10.2.0 -> 10.2.1) (#​538) (5dce630)
• update semantic-release (25.0.3 -> 25.0.5) (#​497) (b7fd1a3)

v4.3.0

Compare Source

🧹 Miscellaneous

• dev-tools: update aquaproj/aqua (v2.55.1 -> v2.55.2) (#​308) (fc5c78d)
• dev-tools: update aquaproj/aqua (v2.55.2 -> v2.55.3) (#​322) (f1b37eb)
• dev-tools: update astral-sh/uv (0.9.10 -> 0.9.11) (#​304) (1982013)
• dev-tools: update astral-sh/uv (0.9.11 -> 0.9.13) (#​310) (2a24f4c)
• dev-tools: update astral-sh/uv (0.9.13 -> 0.9.15) (#​319) (9031e65)
• dev-tools: update astral-sh/uv (0.9.15 -> 0.9.16) (#​320) (6e7da2c)
• dev-tools: update astral-sh/uv (0.9.16 -> 0.9.17) (#​324) (97bbeb7)
• dev-tools: update astral-sh/uv (0.9.5 -> 0.9.7) (#​283) (6ca6763)
• dev-tools: update astral-sh/uv (0.9.7 -> 0.9.8) (#​291) (8c2458f)
• dev-tools: update astral-sh/uv (0.9.8 -> 0.9.9) (#​293) (98624ba)
• dev-tools: update astral-sh/uv (0.9.9 -> 0.9.10) (#​302) (e55625b)
• dev-tools: update bun (1.3.1 -> 1.3.2) (#​292) (df995c5)
• dev-tools: update bun (1.3.2 -> 1.3.3) (#​306) (0ad3138)
• dev-tools: update bun (1.3.3 -> 1.3.4) (#​321) (1e968c5)
• dev-tools: update davidanson/markdownlint-cli2 (non-major) (#​315) (929d695)
• dev-tools: update fluxcd/flux2 (v2.7.2 -> v2.7.3) (#​282) (841ebaf)
• dev-tools: update fluxcd/flux2 (v2.7.3 -> v2.7.4) (#​309) (ab17e08)
• dev-tools: update fluxcd/flux2 (v2.7.4 -> v2.7.5) (#​313) (1a6b4ed)
• dev-tools: update jdx/mise (v2025.10.18 -> v2025.11.1) (#​286) (20371a0)
• dev-tools: update jdx/mise (v2025.11.1 -> v2025.11.2) (#​289) (ffda4ab)
• dev-tools: update jdx/mise (v2025.11.2 -> v2025.11.4) (#​295) (b16f1a9)
• dev-tools: update kindest/node (v1.33.4 -> v1.34.0) (#​254) (75a2864)
• dev-tools: update kyverno/chainsaw (v0.2.13 -> v0.2.14) (#​323) (daeffe7)
• dev-tools: update lockfile bun (#​300) (e8e448d)
• dev-tools: update lockfile bun (#​316) (b61e822)
• dev-tools: update pre-commit/pre-commit (v4.3.0 -> v4.4.0) (#​301) (9d2c7ed)
• dev-tools: update pre-commit/pre-commit (v4.4.0 -> v4.5.0) (#​317) (e7dd034)
• dev-tools: update renovatebot/renovate (41.159.4 -> 41.171.4) (#​287) (2a6ea40)
• dev-tools: update renovatebot/renovate (41.171.4 -> 41.173.1) (#​296) (676fa12)
• dev-tools: update renovatebot/renovate (41.173.1 -> 42.42.2) (#​297) (f34598e)
• dev-tools: update tailscale/tailscale (v1.88.3 -> v1.90.6) (#​285) (8e7ffe2)
• dev-tools: update tailscale/tailscale (v1.90.6 -> v1.90.8) (#​303) (9f41a46)
• dev-tools: update tailscale/tailscale (v1.90.8 -> v1.90.9) (#​311) (d8167cb)
• dev-tools: update terraform-linters/tflint (v0.59.1 -> v0.60.0) (#​307) (51d158c)
• github-actions: update digest googleapis/release-please-action (c2a5a2b -> 16a9c90) (#​279) (628309e)
• github-actions: update digest trusted github-actions (#​294) (9509b92)
• github-actions: update digest trusted github-actions (#​312) (db0818a)
• github-actions: update ppat/homelab-ops-actions (v1.0.1 -> v1.0.2) (#​327) (6e3511c)
• github-actions: update renovatebot/github-action (v43.0.17 -> v43.0.20) (#​314) (cace4d3)

✨ Features

• update @​commitlint/cli (19.8.1 -> 20.1.0) (#​274) (6140693)

🚀 Enhancements + Bug Fixes

• update commitlint-plugin-function-rules (4.1.0 -> 4.1.1) (#​290) (e49ea56)

---

Configuration

📅 Schedule: (in timezone US/Eastern)

• Branch creation
  • At any time (no schedule defined)
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Enabled.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR has been generated by Mend Renovate.