From 0a19691ed716ce5def09a1af70bc720c3571179f Mon Sep 17 00:00:00 2001
From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com>
Date: Thu, 30 Apr 2026 06:44:41 +0000
Subject: [PATCH] chore(deps): bump chainguard-dev/actions in the all group

Bumps the all group with 1 update: [chainguard-dev/actions](https://github.com/chainguard-dev/actions).


Updates `chainguard-dev/actions` from 1.6.16 to 1.6.17
- [Release notes](https://github.com/chainguard-dev/actions/releases)
- [Commits](https://github.com/chainguard-dev/actions/compare/0cba302c40fce067ec0d39f1d91b10580d4b06b0...916fec00fb80f3cd124a0b41eef79ee63f607c5d)

---
updated-dependencies:
- dependency-name: chainguard-dev/actions
  dependency-version: 1.6.17
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: all
...

Signed-off-by: dependabot[bot] <support@github.com>
---
 .github/workflows/digestabot.yaml    | 2 +-
 .github/workflows/release.yaml       | 2 +-
 .github/workflows/style.yaml         | 4 ++--
 .github/workflows/third-party.yaml   | 2 +-
 .github/workflows/update-yara-x.yaml | 2 +-
 .github/workflows/version.yaml       | 2 +-
 6 files changed, 7 insertions(+), 7 deletions(-)

diff --git a/.github/workflows/digestabot.yaml b/.github/workflows/digestabot.yaml
index 7626046c7..4cc6fc83d 100644
--- a/.github/workflows/digestabot.yaml
+++ b/.github/workflows/digestabot.yaml
@@ -36,7 +36,7 @@ jobs:
             release-assets.githubusercontent.com:443
             tuf-repo-cdn.sigstore.dev:443
 
-      - uses: chainguard-dev/actions/setup-gitsign@0cba302c40fce067ec0d39f1d91b10580d4b06b0
+      - uses: chainguard-dev/actions/setup-gitsign@916fec00fb80f3cd124a0b41eef79ee63f607c5d
 
       - uses: octo-sts/action@f603d3be9d8dd9871a265776e625a27b00effe05 # v1.1.1
         id: octo-sts
diff --git a/.github/workflows/release.yaml b/.github/workflows/release.yaml
index 70dfd86b0..426bbdcd5 100644
--- a/.github/workflows/release.yaml
+++ b/.github/workflows/release.yaml
@@ -29,7 +29,7 @@ jobs:
             github.com:443
             octo-sts.dev:443
             release-assets.githubusercontent.com:443
-      - uses: chainguard-dev/actions/setup-gitsign@0cba302c40fce067ec0d39f1d91b10580d4b06b0
+      - uses: chainguard-dev/actions/setup-gitsign@916fec00fb80f3cd124a0b41eef79ee63f607c5d
       - name: Set up Octo-STS
         uses: octo-sts/action@f603d3be9d8dd9871a265776e625a27b00effe05 # v1.1.1
         id: octo-sts
diff --git a/.github/workflows/style.yaml b/.github/workflows/style.yaml
index 2fdc43ca0..bfa35257e 100644
--- a/.github/workflows/style.yaml
+++ b/.github/workflows/style.yaml
@@ -125,7 +125,7 @@ jobs:
           go-version-file: go.mod
           check-latest: true
 
-      - uses: chainguard-dev/actions/gofmt@0cba302c40fce067ec0d39f1d91b10580d4b06b0 # main
+      - uses: chainguard-dev/actions/gofmt@916fec00fb80f3cd124a0b41eef79ee63f607c5d # main
         with:
           args: -s
 
@@ -163,7 +163,7 @@ jobs:
           go-version-file: go.mod
           check-latest: true
 
-      - uses: chainguard-dev/actions/goimports@0cba302c40fce067ec0d39f1d91b10580d4b06b0 # main
+      - uses: chainguard-dev/actions/goimports@916fec00fb80f3cd124a0b41eef79ee63f607c5d # main
 
   golangci-lint:
     name: golangci-lint
diff --git a/.github/workflows/third-party.yaml b/.github/workflows/third-party.yaml
index e945d3d5a..3c1556075 100644
--- a/.github/workflows/third-party.yaml
+++ b/.github/workflows/third-party.yaml
@@ -41,7 +41,7 @@ jobs:
         run: |
           apk update
           apk add bash curl findutils gh git gnutar ${{ env.GO_RELEASE }} nodejs perl upx xz yara-x~${{ env.YARA_X_RELEASE }}
-      - uses: chainguard-dev/actions/setup-gitsign@0cba302c40fce067ec0d39f1d91b10580d4b06b0
+      - uses: chainguard-dev/actions/setup-gitsign@916fec00fb80f3cd124a0b41eef79ee63f607c5d
       - name: Set up Octo-STS
         uses: octo-sts/action@f603d3be9d8dd9871a265776e625a27b00effe05 # v1.1.1
         id: octo-sts
diff --git a/.github/workflows/update-yara-x.yaml b/.github/workflows/update-yara-x.yaml
index 7d294489c..7680437c1 100644
--- a/.github/workflows/update-yara-x.yaml
+++ b/.github/workflows/update-yara-x.yaml
@@ -111,7 +111,7 @@ jobs:
             sum.golang.org:443
             tuf-repo-cdn.sigstore.dev:443
 
-      - uses: chainguard-dev/actions/setup-gitsign@0cba302c40fce067ec0d39f1d91b10580d4b06b0
+      - uses: chainguard-dev/actions/setup-gitsign@916fec00fb80f3cd124a0b41eef79ee63f607c5d
       - name: Set up Octo-STS
         uses: octo-sts/action@f603d3be9d8dd9871a265776e625a27b00effe05 # v1.1.1
         id: octo-sts
diff --git a/.github/workflows/version.yaml b/.github/workflows/version.yaml
index 959f1bbfc..6e1f3ba08 100644
--- a/.github/workflows/version.yaml
+++ b/.github/workflows/version.yaml
@@ -39,7 +39,7 @@ jobs:
             rekor.sigstore.dev:443
             release-assets.githubusercontent.com:443
             tuf-repo-cdn.sigstore.dev:443
-      - uses: chainguard-dev/actions/setup-gitsign@0cba302c40fce067ec0d39f1d91b10580d4b06b0
+      - uses: chainguard-dev/actions/setup-gitsign@916fec00fb80f3cd124a0b41eef79ee63f607c5d
       - name: Set up Octo-STS
         uses: octo-sts/action@f603d3be9d8dd9871a265776e625a27b00effe05 # v1.1.1
         id: octo-sts