From 81b5fc47971501ec33dc31ee1800e6015505a6bf Mon Sep 17 00:00:00 2001
From: "home-infrastructure-renovate[bot]"
 <253672885+home-infrastructure-renovate[bot]@users.noreply.github.com>
Date: Sun, 16 Aug 2026 14:12:59 +0000
Subject: [PATCH] chore(github-action): update github-actions

---
 .github/actions/app-tests/action.yaml     | 2 +-
 .github/actions/app-versions/action.yaml  | 2 +-
 .github/workflows/app-builder.yaml        | 2 +-
 .github/workflows/codeql.yaml             | 4 ++--
 .github/workflows/go-mod-cache.yaml       | 2 +-
 .github/workflows/labeler.yaml            | 2 +-
 .github/workflows/pull-request.yaml       | 4 ++--
 .github/workflows/vulnerability-scan.yaml | 2 +-
 8 files changed, 10 insertions(+), 10 deletions(-)

diff --git a/.github/actions/app-tests/action.yaml b/.github/actions/app-tests/action.yaml
index 0b9d1841c..af2df9530 100644
--- a/.github/actions/app-tests/action.yaml
+++ b/.github/actions/app-tests/action.yaml
@@ -15,7 +15,7 @@ runs:
   using: composite
   steps:
     - name: Setup Mise
-      uses: jdx/mise-action@7e36c90d9ab29c415a2384db3006f3ec8a8cc654 # v4.2.4
+      uses: jdx/mise-action@3c2e0cf82a5b2e5249f0d3635a4d83d0ae861518 # v4.2.5
       with:
         experimental: true
         install_args: --locked
diff --git a/.github/actions/app-versions/action.yaml b/.github/actions/app-versions/action.yaml
index d2f52ccda..309dded31 100644
--- a/.github/actions/app-versions/action.yaml
+++ b/.github/actions/app-versions/action.yaml
@@ -37,7 +37,7 @@ runs:
         EOF
 
     - name: Setup Mise
-      uses: jdx/mise-action@7e36c90d9ab29c415a2384db3006f3ec8a8cc654 # v4.2.4
+      uses: jdx/mise-action@3c2e0cf82a5b2e5249f0d3635a4d83d0ae861518 # v4.2.5
       with:
         experimental: true
         install_args: --locked
diff --git a/.github/workflows/app-builder.yaml b/.github/workflows/app-builder.yaml
index d61fa1c37..9a7bb5ea2 100644
--- a/.github/workflows/app-builder.yaml
+++ b/.github/workflows/app-builder.yaml
@@ -272,7 +272,7 @@ jobs:
           image: ghcr.io/${{ github.repository_owner }}/${{ inputs.app }}@${{ needs.merge.outputs.digest }}
 
       - name: Attestation
-        uses: actions/attest@508db95dd578ae2727ebd6217d5ba78e4fbda05d # v4.2.1
+        uses: actions/attest@1e69f48acb82d1966a394da916b4c1698aa569d6 # v4.2.2
         with:
           push-to-registry: true
           subject-name: ghcr.io/${{ github.repository_owner }}/${{ inputs.app }}
diff --git a/.github/workflows/codeql.yaml b/.github/workflows/codeql.yaml
index d42fff07a..68597a2ce 100644
--- a/.github/workflows/codeql.yaml
+++ b/.github/workflows/codeql.yaml
@@ -33,13 +33,13 @@ jobs:
           persist-credentials: false
 
       - name: Initialize CodeQL
-        uses: github/codeql-action/init@d1ba80a13dd99fba24a470575428917156a28b43 # v4.37.5
+        uses: github/codeql-action/init@ff2f1c621b7f889edc0d3c761ac2e6a3f8cdb0dd # v4.37.7
         with:
           languages: ${{ matrix.language }}
           build-mode: ${{ matrix.build-mode }}
           source-root: ${{ matrix.source-root }}
 
       - name: Perform CodeQL Analysis
-        uses: github/codeql-action/analyze@d1ba80a13dd99fba24a470575428917156a28b43 # v4.37.5
+        uses: github/codeql-action/analyze@ff2f1c621b7f889edc0d3c761ac2e6a3f8cdb0dd # v4.37.7
         with:
           category: language:${{ matrix.language }}
diff --git a/.github/workflows/go-mod-cache.yaml b/.github/workflows/go-mod-cache.yaml
index b0b1d3614..fc7c4fe82 100644
--- a/.github/workflows/go-mod-cache.yaml
+++ b/.github/workflows/go-mod-cache.yaml
@@ -27,7 +27,7 @@ jobs:
           persist-credentials: false
 
       - name: Setup Mise
-        uses: jdx/mise-action@7e36c90d9ab29c415a2384db3006f3ec8a8cc654 # v4.2.4
+        uses: jdx/mise-action@3c2e0cf82a5b2e5249f0d3635a4d83d0ae861518 # v4.2.5
         with:
           experimental: true
           install_args: --locked
diff --git a/.github/workflows/labeler.yaml b/.github/workflows/labeler.yaml
index 6ff1ce437..2342c441f 100644
--- a/.github/workflows/labeler.yaml
+++ b/.github/workflows/labeler.yaml
@@ -40,7 +40,7 @@ jobs:
           permission-pull-requests: write
 
       - name: Setup Mise
-        uses: jdx/mise-action@7e36c90d9ab29c415a2384db3006f3ec8a8cc654 # v4.2.4
+        uses: jdx/mise-action@3c2e0cf82a5b2e5249f0d3635a4d83d0ae861518 # v4.2.5
         with:
           experimental: true
           install_args: --locked
diff --git a/.github/workflows/pull-request.yaml b/.github/workflows/pull-request.yaml
index ff562082a..7787736b9 100644
--- a/.github/workflows/pull-request.yaml
+++ b/.github/workflows/pull-request.yaml
@@ -42,7 +42,7 @@ jobs:
           persist-credentials: false
 
       - name: Setup Mise
-        uses: jdx/mise-action@7e36c90d9ab29c415a2384db3006f3ec8a8cc654 # v4.2.4
+        uses: jdx/mise-action@3c2e0cf82a5b2e5249f0d3635a4d83d0ae861518 # v4.2.5
         with:
           experimental: true
           install_args: --locked
@@ -73,7 +73,7 @@ jobs:
           persist-credentials: false
 
       - name: Setup Mise
-        uses: jdx/mise-action@7e36c90d9ab29c415a2384db3006f3ec8a8cc654 # v4.2.4
+        uses: jdx/mise-action@3c2e0cf82a5b2e5249f0d3635a4d83d0ae861518 # v4.2.5
         with:
           experimental: true
           install_args: --locked
diff --git a/.github/workflows/vulnerability-scan.yaml b/.github/workflows/vulnerability-scan.yaml
index 686c5e9f9..7e38bef65 100644
--- a/.github/workflows/vulnerability-scan.yaml
+++ b/.github/workflows/vulnerability-scan.yaml
@@ -96,7 +96,7 @@ jobs:
           severity-cutoff: high
 
       - name: Upload Report
-        uses: github/codeql-action/upload-sarif@d1ba80a13dd99fba24a470575428917156a28b43 # v4.37.5
+        uses: github/codeql-action/upload-sarif@ff2f1c621b7f889edc0d3c761ac2e6a3f8cdb0dd # v4.37.7
         with:
           category: container:${{ matrix.app }}
           sarif_file: ${{ steps.scan.outputs.sarif }}