From 18410b7f374a9d0abeb132be1326c2694b5a88fd Mon Sep 17 00:00:00 2001
From: "ferrlabs-renovate[bot]"
 <282300760+ferrlabs-renovate[bot]@users.noreply.github.com>
Date: Mon, 29 Jun 2026 03:33:00 +0000
Subject: [PATCH] chore(deps): update github actions

---
 .github/workflows/cargo-audit.yml | 2 +-
 .github/workflows/ci-rust.yml     | 2 +-
 .github/workflows/cli-release.yml | 4 ++--
 .github/workflows/codeql.yml      | 2 +-
 .github/workflows/e2e.yml         | 4 ++--
 .github/workflows/publish.yml     | 4 ++--
 .github/workflows/scorecard.yml   | 2 +-
 7 files changed, 10 insertions(+), 10 deletions(-)

diff --git a/.github/workflows/cargo-audit.yml b/.github/workflows/cargo-audit.yml
index 7600b28..7655a53 100644
--- a/.github/workflows/cargo-audit.yml
+++ b/.github/workflows/cargo-audit.yml
@@ -29,7 +29,7 @@ jobs:
       contents: read
       issues: write
     steps:
-      - uses: actions/checkout@v6
+      - uses: actions/checkout@v7
       - name: Install Rust toolchain (1.89, satisfies cargo-audit's smol_str transitive dep)
         uses: dtolnay/rust-toolchain@1.89.0
       - name: Install cargo-audit (locked, avoids transitive MSRV churn)
diff --git a/.github/workflows/ci-rust.yml b/.github/workflows/ci-rust.yml
index 07a1f1c..bed39b4 100644
--- a/.github/workflows/ci-rust.yml
+++ b/.github/workflows/ci-rust.yml
@@ -24,7 +24,7 @@ jobs:
     name: Check CLI
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v6
+      - uses: actions/checkout@v7
       - name: Install Linux deps for keyring
         run: |
           sudo apt-get update
diff --git a/.github/workflows/cli-release.yml b/.github/workflows/cli-release.yml
index c4c91d4..0a068db 100644
--- a/.github/workflows/cli-release.yml
+++ b/.github/workflows/cli-release.yml
@@ -19,7 +19,7 @@ jobs:
     name: Create GitHub release
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v6
+      - uses: actions/checkout@v7
       - uses: taiki-e/create-gh-release-action@v1
         with:
           prefix: cli
@@ -55,7 +55,7 @@ jobs:
             tool: cargo
     runs-on: ${{ matrix.os }}
     steps:
-      - uses: actions/checkout@v6
+      - uses: actions/checkout@v7
       - name: Install Linux deps for keyring (native builds only — cross uses Cross.toml)
         if: runner.os == 'Linux' && matrix.tool == 'cargo'
         run: |
diff --git a/.github/workflows/codeql.yml b/.github/workflows/codeql.yml
index 08c1c55..82dfbfb 100644
--- a/.github/workflows/codeql.yml
+++ b/.github/workflows/codeql.yml
@@ -31,7 +31,7 @@ jobs:
           - language: actions
             build-mode: none
     steps:
-      - uses: actions/checkout@v6
+      - uses: actions/checkout@v7
       - uses: github/codeql-action/init@v4
         with:
           languages: ${{ matrix.language }}
diff --git a/.github/workflows/e2e.yml b/.github/workflows/e2e.yml
index 0c4799e..a293860 100644
--- a/.github/workflows/e2e.yml
+++ b/.github/workflows/e2e.yml
@@ -25,7 +25,7 @@ jobs:
     runs-on: ubuntu-latest
     timeout-minutes: 15
     steps:
-      - uses: actions/checkout@v6
+      - uses: actions/checkout@v7
 
       - name: Check Go project presence
         id: gate
@@ -55,7 +55,7 @@ jobs:
         if: steps.gate.outputs.has_go == 'true'
         uses: azure/setup-helm@dda3372f752e03dde6b3237bc9431cdc2f7a02a2 # v5
         with:
-          version: v3.21.0
+          version: v4.2.2
 
       - name: Download dependencies
         if: steps.gate.outputs.has_go == 'true'
diff --git a/.github/workflows/publish.yml b/.github/workflows/publish.yml
index 0de2b47..8b0f80d 100644
--- a/.github/workflows/publish.yml
+++ b/.github/workflows/publish.yml
@@ -25,7 +25,7 @@ jobs:
     if: github.event_name == 'workflow_dispatch' || contains(github.ref_name, '.')
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v6
+      - uses: actions/checkout@v7
         with:
           fetch-depth: 0
           persist-credentials: false
@@ -53,7 +53,7 @@ jobs:
           password: ${{ secrets.GITHUB_TOKEN }}
       - uses: azure/setup-helm@dda3372f752e03dde6b3237bc9431cdc2f7a02a2 # v5
         with:
-          version: v3.21.0
+          version: v4.2.2
       - name: Log in to GHCR for helm push
         env:
           GH_TOKEN: ${{ secrets.GITHUB_TOKEN }}
diff --git a/.github/workflows/scorecard.yml b/.github/workflows/scorecard.yml
index 768079c..93cb968 100644
--- a/.github/workflows/scorecard.yml
+++ b/.github/workflows/scorecard.yml
@@ -24,7 +24,7 @@ jobs:
 
     steps:
       - name: Checkout
-        uses: actions/checkout@v6
+        uses: actions/checkout@v7
         with:
           persist-credentials: false