chore(deps): update nsheaps/ai-mktpl digest to 08d1043

[renovate]

This PR contains the following updates:

Package	Type	Update	Change
nsheaps/ai-mktpl (changelog)	action	digest	1f8fadf → 08d1043

---

Warning

Some dependencies could not be looked up. Check the Dependency Dashboard for more information.

---

Configuration

📅 Schedule: (in timezone America/New_York)

• Branch creation
  • At any time (no schedule defined)
• Automerge
  • "after 10am and before 4pm every weekday"

🚦 Automerge: Enabled.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.

[github-actions]

Plugin Version Preview

Preview only — plugin versions and marketplace.json are bumped automatically on merge to main, not in this PR. Manual bumps to higher versions are preserved. See the file annotations for the pending change on each plugin.json.

Plugin	Base	Current	Action
review-utils	0.2.8	0.2.9	Auto-bumped

Dismissed: new commits since last approval require re-review.

Dismissed: new commits since last approval require re-review.

[henry-nsheaps]

### ✅ Approve — routine Renovate SHA bump, pinned artifacts unchanged in range     - ✅ Both pins advance to newer commits on `main`; neither pinned file itself changed within its SHA range → effective action behavior unchanged - ✅ SHA pinning preserved; `# main` trailing comment retained on both lines (convention respected) - ✅ Rolling-`@main` pattern is explicitly documented at `.github/workflows/dispatch-review.yaml:64-67` — Renovate is doing exactly what the comment prescribes - ✅ Scope: 2 files / 2 changes / 1 commit; no collateral edits _Click to expand for full details_

### What changed | Pin | Before | After | Pinned file touched in range? | |---|---|---|---| | `nsheaps/agents/.github/workflows/review-dispatch.yaml` | `51887d0` | `57debfc` | ❌ No | | `nsheaps/ai-mktpl/.github/actions/interpolate-prompt` | `1f8fadf` | `08d1043` | ❌ No | The PR base (`main`) is itself at `57debfc` — Renovate is syncing the self-referenced pin to the current head of `main`, which matches the intent of the `@main` rolling pattern. ### Range analysis **`nsheaps/agents` `51887d0..57debfc` — 13 commits** (all release automation + prior Renovate PRs): - `0452606` chore(deps): update nsheaps + squink github actions (#345) - `b11915f` release v0.3.138 · `5f0ca8b` @release-it/bumper v8 (#346) - `931f2a8` release v0.3.139 · `416bd3f` bump plugin versions - `93f8743` release-it v21 (#347) · `1a129ad` release v0.3.140 - `d1c0daa` @release-it/conventional-changelog v12 (#348) · `b63ee92` release v0.3.141 - `e64fefd` pipx:litellm v1.94.0 (#350) · `2c1da98` release v0.3.142 - `6609d66` tilt v0.37.6 (#320) · `57debfc` release v0.3.143 Files touched in range: `.claude-plugin/marketplace.json`, `.github/workflows/dispatch-review.yaml`, `CHANGELOG.md`, `bun.lock`, `mise.toml`, `package.json`, `plugins/claude-code/review-utils/.claude-plugin/plugin.json`, `plugins/claude-code/review-utils/actions/run-agent/action.yaml`. The pinned file — **`.github/workflows/review-dispatch.yaml`** — is NOT in that set. (`dispatch-review.yaml` in the range is a distinct sibling file, and the consuming file is what's being bumped, not the reusable workflow itself.) Reusable-workflow behavior unchanged. **`nsheaps/ai-mktpl` `1f8fadf..08d1043` — 3 commits:** - `ec4e3ef` @release-it/bumper v8 (#774) - `b64d7cc` release-it v21 (#775) - `08d1043` actions/stale v11 (#777) Files touched: `.github/workflows/stale.yml`, `package.json`, `yarn.lock`. The pinned `.github/actions/interpolate-prompt/action.yaml` is NOT in the set. Composite action unchanged. ### Quality checks - 🔒 **Security**: SHA pinning preserved on both lines; both target repos are same-org (`nsheaps/*`) so no supply-chain surface expansion. `# main` comment retained. - 📚 **Convention**: Rolling-`@main` pattern documented at `.github/workflows/dispatch-review.yaml:64-67` ("`@main` = rolling updates … operators who need pinned stability should replace @main with a commit SHA"). Renovate is aligned. - 📦 **Scope**: 2 files / 2 changes / 1 commit. No collateral edits. - 🎯 **Risk**: Effectively zero — pinned artifacts are byte-identical before/after in both ranges. ### How I reviewed 1. Fetched PR metadata, diff, files, prior reviews (two — both my own; the earlier one dismissed and now minimized as outdated after each head-SHA roll), and prior review comments (none). 2. For each bump, ran `gh api repos///compare/...` to enumerate commits and changed files across the SHA range. 3. Verified via the file lists that neither pinned filename appears in the changed-file set for its range. 4. Confirmed the pinning convention in-tree at `.github/workflows/dispatch-review.yaml:64-67` and `plugins/claude-code/review-utils/actions/run-agent/action.yaml:225-228`. 5. Noted the PR base (`main`) is itself at `57debfc` — target of the bump — consistent with Renovate keeping the self-reference at head-of-main. **Follow-ups:** _None._ --- - Workflow run: ]]>