From 4778d47bfc8604c9b862395b366b3097e338ec17 Mon Sep 17 00:00:00 2001 From: "renovate[bot]" <29139614+renovate[bot]@users.noreply.github.com> Date: Mon, 18 May 2026 08:29:00 +0000 Subject: [PATCH 1/2] chore(deps): update chainguard-dev/actions digest to 49ad800 --- .github/workflows/bump-version.yaml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/.github/workflows/bump-version.yaml b/.github/workflows/bump-version.yaml index 9a646a0f..0e2dc176 100755 --- a/.github/workflows/bump-version.yaml +++ b/.github/workflows/bump-version.yaml @@ -120,7 +120,7 @@ jobs: - name: Setup Gitsign if: steps.command.outputs.command-name == 'bump' - uses: chainguard-dev/actions/setup-gitsign@79bd291c02ef97a833226e8da2cefaa775874fd2 # main + uses: chainguard-dev/actions/setup-gitsign@49ad80032a18b41a4812d7799939a90a9b8b7d01 # main - name: Commit pre-commit changes if: steps.command.outputs.command-name == 'bump' From 6dfdc74b2ebc3a1cb86a936b19a4043ae87850a0 Mon Sep 17 00:00:00 2001 From: Armel Soro Date: Mon, 18 May 2026 13:17:07 +0200 Subject: [PATCH 2/2] chore(deps): pin chainguard-dev/actions to v1.6.19 tag instead of main Reduces Renovate noise by tracking release tags rather than every commit to the main branch. --- .github/workflows/bump-version.yaml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/.github/workflows/bump-version.yaml b/.github/workflows/bump-version.yaml index 0e2dc176..f02377b7 100755 --- a/.github/workflows/bump-version.yaml +++ b/.github/workflows/bump-version.yaml @@ -120,7 +120,7 @@ jobs: - name: Setup Gitsign if: steps.command.outputs.command-name == 'bump' - uses: chainguard-dev/actions/setup-gitsign@49ad80032a18b41a4812d7799939a90a9b8b7d01 # main + uses: chainguard-dev/actions/setup-gitsign@c69a264ec2a5934c3186c618f368fc1c86f16cff # v1.6.19 - name: Commit pre-commit changes if: steps.command.outputs.command-name == 'bump'