From 1270e764c873d9d60891b3a6a459d2b219798353 Mon Sep 17 00:00:00 2001
From: "renovate-rancher[bot]"
 <119870437+renovate-rancher[bot]@users.noreply.github.com>
Date: Fri, 23 Oct 2026 04:48:40 +0000
Subject: [PATCH] chore(deps): update github actions go

---
 .github/workflows/lint-unitest.yaml  | 2 +-
 .github/workflows/renovate-vault.yml | 2 +-
 .github/workflows/update-charts.yml  | 2 +-
 .github/workflows/zizmor.yaml        | 2 +-
 4 files changed, 4 insertions(+), 4 deletions(-)

diff --git a/.github/workflows/lint-unitest.yaml b/.github/workflows/lint-unitest.yaml
index 45583123f..799ddd7d0 100644
--- a/.github/workflows/lint-unitest.yaml
+++ b/.github/workflows/lint-unitest.yaml
@@ -10,7 +10,7 @@ jobs:
           fetch-depth: 0
       - uses: actions/setup-go@b7ad1dad31e06c5925ef5d2fc7ad053ef454303e # v7.0.0
         with:
-          go-version: '1.26'
+          go-version: '1.27'
       - name: Run chart-testing (lint)
         id: lint
         uses: helm/chart-testing-action@b0c06062b7b8cb6f3bf1473a0c117ba2a86f3442
diff --git a/.github/workflows/renovate-vault.yml b/.github/workflows/renovate-vault.yml
index 878bede92..805a9192c 100644
--- a/.github/workflows/renovate-vault.yml
+++ b/.github/workflows/renovate-vault.yml
@@ -22,7 +22,7 @@ permissions:
 
 jobs:
   call-workflow:
-    uses: rancher/renovate-config/.github/workflows/renovate-vault.yml@e79860bf92e5fd1337150c058a308d7a1435eb7a # release
+    uses: rancher/renovate-config/.github/workflows/renovate-vault.yml@a9a7bf7f36e37c5ecb5f1c5afdb781fe8be3e917 # release
     with:
       logLevel: ${{ inputs.logLevel || 'info' }}
       overrideSchedule: ${{ github.event.inputs.overrideSchedule == 'true' && '{''schedule'':null}' || '' }}
diff --git a/.github/workflows/update-charts.yml b/.github/workflows/update-charts.yml
index ea9b3192c..6efcccb94 100644
--- a/.github/workflows/update-charts.yml
+++ b/.github/workflows/update-charts.yml
@@ -14,7 +14,7 @@ jobs:
         with:
           persist-credentials: false
       - name: Install Updatecli in the runner
-        uses: updatecli/updatecli-action@41b9c8d707830a9daebaeaa84c1b62d60b779564 # v3.6.0
+        uses: updatecli/updatecli-action@5d180ff09f5204e599bbd6030cd1736009ed5ff2 # v3.9.0
       - name: Update neuvector charts
         env:
           UPDATECLI_GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
diff --git a/.github/workflows/zizmor.yaml b/.github/workflows/zizmor.yaml
index 146e82cb5..4f0450768 100644
--- a/.github/workflows/zizmor.yaml
+++ b/.github/workflows/zizmor.yaml
@@ -20,7 +20,7 @@ jobs:
           persist-credentials: false
 
       - name: Run zizmor 🌈
-        uses: zizmorcore/zizmor-action@70fb788f84895a7701f5643d103d587e460b5c99 # v0.6.3
+        uses: zizmorcore/zizmor-action@85b2b9fb8e3325e7a23d7d0a9d7ba5ae0f999e3e # v0.7.1
         with:
           # intentionally not scanning the entire repository,
           inputs: ./.github/