From 3f2c40044346be06eb387475b96225007e434897 Mon Sep 17 00:00:00 2001
From: "github-actions[bot]"
 <41898282+github-actions[bot]@users.noreply.github.com>
Date: Tue, 1 Sep 2026 09:05:26 +0000
Subject: [PATCH] chore(sync): synced file(s) with cplieger/ci

---
 .github/workflows/ci.yaml      | 2 +-
 .github/workflows/codeql.yml   | 2 +-
 .github/workflows/coverage.yml | 2 +-
 .github/workflows/release.yaml | 2 +-
 .github/workflows/security.yml | 2 +-
 5 files changed, 5 insertions(+), 5 deletions(-)

diff --git a/.github/workflows/ci.yaml b/.github/workflows/ci.yaml
index 934492f..9919674 100644
--- a/.github/workflows/ci.yaml
+++ b/.github/workflows/ci.yaml
@@ -33,4 +33,4 @@ concurrency:
 
 jobs:
   ci:
-    uses: cplieger/ci/.github/workflows/ci.yaml@3bc98a89b87ce2247590f8186d3a1b3b1d9a296a # v2
+    uses: cplieger/ci/.github/workflows/ci.yaml@d935987d20af18f79aeb166d7b90f85524bbb962 # v2
diff --git a/.github/workflows/codeql.yml b/.github/workflows/codeql.yml
index a6711d3..a945987 100644
--- a/.github/workflows/codeql.yml
+++ b/.github/workflows/codeql.yml
@@ -23,4 +23,4 @@ jobs:
       security-events: write
       contents: read
       actions: read
-    uses: cplieger/ci/.github/workflows/codeql.yaml@5ba93f366541ece117eaed5d1490e0d4c4bc5fd0 # v2
+    uses: cplieger/ci/.github/workflows/codeql.yaml@d935987d20af18f79aeb166d7b90f85524bbb962 # v2
diff --git a/.github/workflows/coverage.yml b/.github/workflows/coverage.yml
index 4558791..5a7b900 100644
--- a/.github/workflows/coverage.yml
+++ b/.github/workflows/coverage.yml
@@ -32,4 +32,4 @@ jobs:
     # preset disables the github-actions manager on all six synced workflow
     # filenames, so sync cannot be raced. Only in cplieger/ci itself (and two other
     # named exclusions) does Renovate track this pin.
-    uses: cplieger/ci/.github/workflows/coverage.yaml@5ba93f366541ece117eaed5d1490e0d4c4bc5fd0 # v2
+    uses: cplieger/ci/.github/workflows/coverage.yaml@d935987d20af18f79aeb166d7b90f85524bbb962 # v2
diff --git a/.github/workflows/release.yaml b/.github/workflows/release.yaml
index 23be082..04d0cee 100644
--- a/.github/workflows/release.yaml
+++ b/.github/workflows/release.yaml
@@ -63,7 +63,7 @@ jobs:
       id-token: write
       attestations: write
       security-events: write
-    uses: cplieger/ci/.github/workflows/release.yaml@5ba93f366541ece117eaed5d1490e0d4c4bc5fd0 # v2
+    uses: cplieger/ci/.github/workflows/release.yaml@d935987d20af18f79aeb166d7b90f85524bbb962 # v2
     # Forward only the two Docker Hub publish credentials the reusable pipeline
     # actually declares and consumes, rather than `secrets: inherit` (which
     # exposes every repo secret to the reusable-workflow trust boundary). Both
diff --git a/.github/workflows/security.yml b/.github/workflows/security.yml
index 62d6857..ff05a7f 100644
--- a/.github/workflows/security.yml
+++ b/.github/workflows/security.yml
@@ -28,4 +28,4 @@ jobs:
     permissions:
       contents: read
       security-events: write
-    uses: cplieger/ci/.github/workflows/security-scan.yaml@5ba93f366541ece117eaed5d1490e0d4c4bc5fd0 # v2
+    uses: cplieger/ci/.github/workflows/security-scan.yaml@d935987d20af18f79aeb166d7b90f85524bbb962 # v2