From 822a953d04722074f75cb07e9fd7b3b7972334cf Mon Sep 17 00:00:00 2001 From: "renovate[bot]" <29139614+renovate[bot]@users.noreply.github.com> Date: Mon, 3 Aug 2026 15:46:55 +0000 Subject: [PATCH 1/2] =?UTF-8?q?chore(container):=20update=20image=20ghcr.i?= =?UTF-8?q?o/devsecninja/dotfiles-devcontainer=20(=2076b3dc7=20=E2=9E=94?= =?UTF-8?q?=20ec49ca2=20)=20[automerge]?= MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit --- .devcontainer/devcontainer.json | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/.devcontainer/devcontainer.json b/.devcontainer/devcontainer.json index 84039ba6..24971adb 100644 --- a/.devcontainer/devcontainer.json +++ b/.devcontainer/devcontainer.json @@ -6,7 +6,7 @@ // fresh, correctly detecting the runtime environment (CI, Codespaces, etc.) // Pinned by digest only (no tag): the devcontainers CLI cannot parse a // combined `:tag@sha256:...` reference, so Renovate keeps just the digest. - "image": "ghcr.io/devsecninja/dotfiles-devcontainer@sha256:76b3dc71906ad8f64cdae9a4ad365d71817efaabfe84a58a32bc969fc58cfef6", + "image": "ghcr.io/devsecninja/dotfiles-devcontainer@sha256:ec49ca2eed385804baf001904abc595fa6e6c1f01f683e84f36b410d685a7c6a", "features": { "ghcr.io/devcontainers/features/git-lfs:1": { "version": "latest" From 35fcb921b50205eb109fb39671c5152dca4cdc96 Mon Sep 17 00:00:00 2001 From: "renovate[bot]" <29139614+renovate[bot]@users.noreply.github.com> Date: Mon, 3 Aug 2026 15:47:10 +0000 Subject: [PATCH 2/2] =?UTF-8?q?ci(github-tag):=20Update=20tag=20actions/ch?= =?UTF-8?q?eckout=20(=20v6.1.0=20=E2=9E=94=20v7.0.1=20)?= MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit --- .devcontainer/devcontainer.json | 2 +- .github/workflows/bats.yml | 2 +- .github/workflows/ci.yaml | 18 +++++++++--------- .github/workflows/devcontainer-prebuild.yaml | 4 ++-- .github/workflows/docs.yml | 2 +- .github/workflows/release.yml | 2 +- .github/workflows/sign-powershell.yml | 2 +- .github/workflows/sync-develop.yaml | 2 +- .github/workflows/todo-to-issue.yml | 2 +- 9 files changed, 18 insertions(+), 18 deletions(-) diff --git a/.devcontainer/devcontainer.json b/.devcontainer/devcontainer.json index 24971adb..84039ba6 100644 --- a/.devcontainer/devcontainer.json +++ b/.devcontainer/devcontainer.json @@ -6,7 +6,7 @@ // fresh, correctly detecting the runtime environment (CI, Codespaces, etc.) // Pinned by digest only (no tag): the devcontainers CLI cannot parse a // combined `:tag@sha256:...` reference, so Renovate keeps just the digest. - "image": "ghcr.io/devsecninja/dotfiles-devcontainer@sha256:ec49ca2eed385804baf001904abc595fa6e6c1f01f683e84f36b410d685a7c6a", + "image": "ghcr.io/devsecninja/dotfiles-devcontainer@sha256:76b3dc71906ad8f64cdae9a4ad365d71817efaabfe84a58a32bc969fc58cfef6", "features": { "ghcr.io/devcontainers/features/git-lfs:1": { "version": "latest" diff --git a/.github/workflows/bats.yml b/.github/workflows/bats.yml index 4c433920..e62d9435 100644 --- a/.github/workflows/bats.yml +++ b/.github/workflows/bats.yml @@ -45,7 +45,7 @@ jobs: uses: DevSecNinja/.github/actions/harden-runner@bf22fcfcb4ef94a359eed55cea4b5ce7f5b98167 # main - name: Checkout code - uses: actions/checkout@d23441a48e516b6c34aea4fa41551a30e30af803 # v6.1.0 + uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 with: persist-credentials: false diff --git a/.github/workflows/ci.yaml b/.github/workflows/ci.yaml index 660d5af4..f5355aee 100644 --- a/.github/workflows/ci.yaml +++ b/.github/workflows/ci.yaml @@ -45,7 +45,7 @@ jobs: uses: DevSecNinja/.github/actions/harden-runner@bf22fcfcb4ef94a359eed55cea4b5ce7f5b98167 # main - name: Checkout repository - uses: actions/checkout@d23441a48e516b6c34aea4fa41551a30e30af803 # v6.1.0 + uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 - name: Install mise uses: jdx/mise-action@9e7f7633ff6f6d6048a9418a68d48f288f50eb14 # v4.2.3 @@ -101,7 +101,7 @@ jobs: uses: DevSecNinja/.github/actions/harden-runner@bf22fcfcb4ef94a359eed55cea4b5ce7f5b98167 # main - name: Checkout repository - uses: actions/checkout@d23441a48e516b6c34aea4fa41551a30e30af803 # v6.1.0 + uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 - name: Set up Docker Buildx uses: docker/setup-buildx-action@bb05f3f5519dd87d3ba754cc423b652a5edd6d2c # v4.2.0 @@ -174,7 +174,7 @@ jobs: steps: - name: Checkout repository - uses: actions/checkout@d23441a48e516b6c34aea4fa41551a30e30af803 # v6.1.0 + uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 - name: Install mise uses: jdx/mise-action@9e7f7633ff6f6d6048a9418a68d48f288f50eb14 # v4.2.3 @@ -239,7 +239,7 @@ jobs: steps: - name: Checkout repository - uses: actions/checkout@d23441a48e516b6c34aea4fa41551a30e30af803 # v6.1.0 + uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 - name: Install mise uses: jdx/mise-action@9e7f7633ff6f6d6048a9418a68d48f288f50eb14 # v4.2.3 @@ -295,7 +295,7 @@ jobs: steps: - name: Checkout repository - uses: actions/checkout@d23441a48e516b6c34aea4fa41551a30e30af803 # v6.1.0 + uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 - name: Install mise uses: jdx/mise-action@9e7f7633ff6f6d6048a9418a68d48f288f50eb14 # v4.2.3 @@ -324,7 +324,7 @@ jobs: steps: - name: Checkout repository - uses: actions/checkout@d23441a48e516b6c34aea4fa41551a30e30af803 # v6.1.0 + uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 - name: Install mise uses: jdx/mise-action@9e7f7633ff6f6d6048a9418a68d48f288f50eb14 # v4.2.3 @@ -342,7 +342,7 @@ jobs: steps: - name: Checkout repository - uses: actions/checkout@d23441a48e516b6c34aea4fa41551a30e30af803 # v6.1.0 + uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 - name: Run Windows install script shell: pwsh @@ -472,7 +472,7 @@ jobs: steps: - name: Checkout repository - uses: actions/checkout@d23441a48e516b6c34aea4fa41551a30e30af803 # v6.1.0 + uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 - name: Run root Windows install script (Coder support) shell: pwsh @@ -540,7 +540,7 @@ jobs: steps: - name: Checkout repository - uses: actions/checkout@d23441a48e516b6c34aea4fa41551a30e30af803 # v6.1.0 + uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 - name: Install Pester shell: pwsh diff --git a/.github/workflows/devcontainer-prebuild.yaml b/.github/workflows/devcontainer-prebuild.yaml index 63f64fca..d1d8c473 100644 --- a/.github/workflows/devcontainer-prebuild.yaml +++ b/.github/workflows/devcontainer-prebuild.yaml @@ -58,7 +58,7 @@ jobs: uses: DevSecNinja/.github/actions/harden-runner@bf22fcfcb4ef94a359eed55cea4b5ce7f5b98167 # main - name: Checkout repository - uses: actions/checkout@d23441a48e516b6c34aea4fa41551a30e30af803 # v6.1.0 + uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 - name: Set lowercase repository owner id: lowercase @@ -191,7 +191,7 @@ jobs: uses: DevSecNinja/.github/actions/harden-runner@bf22fcfcb4ef94a359eed55cea4b5ce7f5b98167 # main - name: Checkout repository - uses: actions/checkout@d23441a48e516b6c34aea4fa41551a30e30af803 # v6.1.0 + uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 - name: Set lowercase repository owner id: lowercase diff --git a/.github/workflows/docs.yml b/.github/workflows/docs.yml index 14b09103..3d75c6d1 100644 --- a/.github/workflows/docs.yml +++ b/.github/workflows/docs.yml @@ -32,7 +32,7 @@ jobs: uses: DevSecNinja/.github/actions/harden-runner@bf22fcfcb4ef94a359eed55cea4b5ce7f5b98167 # main - name: Checkout code - uses: actions/checkout@d23441a48e516b6c34aea4fa41551a30e30af803 # v6.1.0 + uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 with: fetch-depth: 0 persist-credentials: false diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml index f453addf..4309327f 100644 --- a/.github/workflows/release.yml +++ b/.github/workflows/release.yml @@ -57,7 +57,7 @@ jobs: uses: DevSecNinja/.github/actions/harden-runner@bf22fcfcb4ef94a359eed55cea4b5ce7f5b98167 # main - name: Checkout code - uses: actions/checkout@d23441a48e516b6c34aea4fa41551a30e30af803 # v6.1.0 + uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 with: ref: ${{ github.ref_name }} fetch-depth: 0 diff --git a/.github/workflows/sign-powershell.yml b/.github/workflows/sign-powershell.yml index b7ba2ff7..98db4721 100644 --- a/.github/workflows/sign-powershell.yml +++ b/.github/workflows/sign-powershell.yml @@ -23,7 +23,7 @@ jobs: steps: - name: Checkout code - uses: actions/checkout@d23441a48e516b6c34aea4fa41551a30e30af803 # v6.1.0 + uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 with: fetch-depth: 0 diff --git a/.github/workflows/sync-develop.yaml b/.github/workflows/sync-develop.yaml index 8e678d39..b5ce75aa 100644 --- a/.github/workflows/sync-develop.yaml +++ b/.github/workflows/sync-develop.yaml @@ -29,7 +29,7 @@ jobs: uses: DevSecNinja/.github/actions/harden-runner@bf22fcfcb4ef94a359eed55cea4b5ce7f5b98167 # main - name: Checkout repository - uses: actions/checkout@d23441a48e516b6c34aea4fa41551a30e30af803 # v6.1.0 + uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 with: ref: main fetch-depth: 0 diff --git a/.github/workflows/todo-to-issue.yml b/.github/workflows/todo-to-issue.yml index 45a2d9dd..57102f15 100644 --- a/.github/workflows/todo-to-issue.yml +++ b/.github/workflows/todo-to-issue.yml @@ -25,7 +25,7 @@ jobs: uses: DevSecNinja/.github/actions/harden-runner@bf22fcfcb4ef94a359eed55cea4b5ce7f5b98167 # main - name: Checkout code - uses: actions/checkout@d23441a48e516b6c34aea4fa41551a30e30af803 # v6.1.0 + uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 with: persist-credentials: false