From 02931d7a503ceeb4d42474ccac1a5f876d87e63a Mon Sep 17 00:00:00 2001
From: "renovate[bot]" <29139614+renovate[bot]@users.noreply.github.com>
Date: Thu, 30 Jul 2026 23:55:37 +0000
Subject: [PATCH] chore(deps): update github-actions

---
 .github/workflows/pr_chezmoi_init.yaml           | 2 +-
 .github/workflows/pr_mise_lock.yaml              | 4 ++--
 .github/workflows/pr_renovate_release_notes.yaml | 2 +-
 .github/workflows/pr_trunkio.yaml                | 2 +-
 .github/workflows/trunk_upgrades.yaml            | 2 +-
 5 files changed, 6 insertions(+), 6 deletions(-)

diff --git a/.github/workflows/pr_chezmoi_init.yaml b/.github/workflows/pr_chezmoi_init.yaml
index 7c893abd..38c448d3 100644
--- a/.github/workflows/pr_chezmoi_init.yaml
+++ b/.github/workflows/pr_chezmoi_init.yaml
@@ -15,7 +15,7 @@ jobs:
       checks: write
     steps:
       - name: Checkout
-        uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0
+        uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
       - name: dagger call init
         # yamllint disable-line rule:line-length
         uses: dagger/dagger-for-github@27b130bf0f79a7f6fbbbe0fbca6760dc9bb40a77 # v8.4.1
diff --git a/.github/workflows/pr_mise_lock.yaml b/.github/workflows/pr_mise_lock.yaml
index 3ee5b290..cb7a42ed 100644
--- a/.github/workflows/pr_mise_lock.yaml
+++ b/.github/workflows/pr_mise_lock.yaml
@@ -20,7 +20,7 @@ jobs:
       pull-requests: write
     steps:
       - name: checkout
-        uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0
+        uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
         with:
           # should be used for PRs only
           # https://github.com/marketplace/actions/add-commit#working-with-prs
@@ -38,7 +38,7 @@ jobs:
           permission-contents: write # create releases
           permission-pull-requests: write # create release pull requests
       - name: install mise
-        uses: jdx/mise-action@dad1bfd3df957f44999b559dd69dc1671cb4e9ea # v4.2.1
+        uses: jdx/mise-action@9e7f7633ff6f6d6048a9418a68d48f288f50eb14 # v4.2.3
         with:
           install: true
           install_args: aqua:int128/ghcp
diff --git a/.github/workflows/pr_renovate_release_notes.yaml b/.github/workflows/pr_renovate_release_notes.yaml
index 02e74744..d7daa7d6 100644
--- a/.github/workflows/pr_renovate_release_notes.yaml
+++ b/.github/workflows/pr_renovate_release_notes.yaml
@@ -21,7 +21,7 @@ jobs:
       pull-requests: read
     steps:
       - name: Checkout base repository
-        uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0
+        uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
         with:
           ref: ${{ github.event.pull_request.base.sha }}
           persist-credentials: false
diff --git a/.github/workflows/pr_trunkio.yaml b/.github/workflows/pr_trunkio.yaml
index a16d24b4..b6bfa194 100644
--- a/.github/workflows/pr_trunkio.yaml
+++ b/.github/workflows/pr_trunkio.yaml
@@ -13,6 +13,6 @@ jobs:
       checks: write
     steps:
       - name: Checkout
-        uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0
+        uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
       - name: Trunk
         uses: trunk-io/trunk-action@04ba50e7658c81db7356da96657e6e77f220bfa3 # v1.3.1
diff --git a/.github/workflows/trunk_upgrades.yaml b/.github/workflows/trunk_upgrades.yaml
index 68d01aa1..02e99793 100644
--- a/.github/workflows/trunk_upgrades.yaml
+++ b/.github/workflows/trunk_upgrades.yaml
@@ -14,7 +14,7 @@ jobs:
       pull-requests: write # For trunk to create PRs
     steps:
       - name: Checkout
-        uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0
+        uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
         # pr changes using our GitHub app in order to
         # trigger other actions workflows
       - name: generate app token