From 0f62650ca255659b4ac422d2248b858d9e134acb Mon Sep 17 00:00:00 2001
From: "graelo-ci-bot[bot]"
 <274240725+graelo-ci-bot[bot]@users.noreply.github.com>
Date: Fri, 2 Oct 2026 23:15:34 +0000
Subject: [PATCH] chore(deps): update minor updates

---
 .github/workflows/_ci-security.yml      | 2 +-
 .github/workflows/schedule-renovate.yml | 2 +-
 2 files changed, 2 insertions(+), 2 deletions(-)

diff --git a/.github/workflows/_ci-security.yml b/.github/workflows/_ci-security.yml
index 2c4fd90..e9e3497 100644
--- a/.github/workflows/_ci-security.yml
+++ b/.github/workflows/_ci-security.yml
@@ -42,7 +42,7 @@ jobs:
 
       - name: Upload SARIF
         if: always()
-        uses: github/codeql-action/upload-sarif@cdf488f595d80d6e07e03d4674febd5ab45fa938 # v4.37.9
+        uses: github/codeql-action/upload-sarif@2892aa5e19bbd11bc0cff5427e3b750a04d9e3c2 # v4.38.2
         with:
           sarif_file: results.sarif
           category: poutine
diff --git a/.github/workflows/schedule-renovate.yml b/.github/workflows/schedule-renovate.yml
index 412c06b..716267e 100644
--- a/.github/workflows/schedule-renovate.yml
+++ b/.github/workflows/schedule-renovate.yml
@@ -46,7 +46,7 @@ jobs:
           persist-credentials: false
 
       - name: Run Renovate
-        uses: renovatebot/github-action@5402b206248e5a8c8427a15102702eb9c1793efc # v46.2.4
+        uses: renovatebot/github-action@6d26fcf0275dc65624cbc3d51fe78bc773f98321 # v46.3.6
         env:
           RENOVATE_REPOSITORIES: ${{ github.repository }}
           RENOVATE_TOKEN: ${{ steps.app-token.outputs.token }}