From 1561fd38b0299aaabfa115b8f02b9b612981cc33 Mon Sep 17 00:00:00 2001
From: "renovate[bot]" <29139614+renovate[bot]@users.noreply.github.com>
Date: Sat, 16 Aug 2025 19:23:00 +0000
Subject: [PATCH] chore(deps): update github actions

---
 .github/workflows/deploy.yml | 4 ++--
 .github/workflows/lint.yml   | 4 ++--
 2 files changed, 4 insertions(+), 4 deletions(-)

diff --git a/.github/workflows/deploy.yml b/.github/workflows/deploy.yml
index 5fce3ef..ae23e01 100644
--- a/.github/workflows/deploy.yml
+++ b/.github/workflows/deploy.yml
@@ -196,7 +196,7 @@ jobs:
           service-account-token: ${{ secrets.OP_SERVICE_ACCOUNT_TOKEN }}
 
       - name: Cache Tailscale state
-        uses: actions/cache@ab5e6d0c87105b4c9c2047343972218f562e4319  # v4.0.1
+        uses: actions/cache@0400d5f644dc74513175e3cd8d07132dd4860809  # v4.2.4
         with:
           path: |
             ~/.cache/tailscale
@@ -206,7 +206,7 @@ jobs:
             tailscale-${{ runner.os }}-
 
       - name: Cache deployment tools
-        uses: actions/cache@ab5e6d0c87105b4c9c2047343972218f562e4319  # v4.0.1
+        uses: actions/cache@0400d5f644dc74513175e3cd8d07132dd4860809  # v4.2.4
         with:
           path: |
             ~/.cache/pip
diff --git a/.github/workflows/lint.yml b/.github/workflows/lint.yml
index 923b2a4..4df1885 100644
--- a/.github/workflows/lint.yml
+++ b/.github/workflows/lint.yml
@@ -162,7 +162,7 @@ jobs:
           fi
 
       - name: Run Trivy vulnerability scanner
-        uses: aquasecurity/trivy-action@69c385a8e8012f41a4b0be75be89040e764b9e9d  # v0.26.0
+        uses: aquasecurity/trivy-action@dc5a429b52fcf669ce959baa2c2dd26090d2a6c4  # 0.32.0
         if: steps.extract-images.outputs.images != ''
         with:
           scan-type: 'image'
@@ -174,7 +174,7 @@ jobs:
           timeout: '5m'
 
       - name: Upload Trivy scan results to GitHub Security tab
-        uses: github/codeql-action/upload-sarif@461ef6c76ddd5a41db8f30df0b4da4ae7ffb3a1b  # v3.27.5
+        uses: github/codeql-action/upload-sarif@df559355d593797519d70b90fc8edd5db049e7a2  # v3.29.9
         if: steps.extract-images.outputs.images != '' && always()
         with:
           sarif_file: 'trivy-results-${{ matrix.stack }}.sarif'