From 0d53d89463a166773f3fe4b19dc1eecf3cd8d6b0 Mon Sep 17 00:00:00 2001
From: Christopher Plieger <917744+cplieger@users.noreply.github.com>
Date: Sat, 1 Aug 2026 23:07:36 +0000
Subject: [PATCH] chore(deps): update cplieger/ci digest to 08d5bb5

---
 .github/workflows/ci.yaml      | 2 +-
 .github/workflows/codeql.yml   | 2 +-
 .github/workflows/coverage.yml | 2 +-
 .github/workflows/release.yaml | 2 +-
 .github/workflows/security.yml | 2 +-
 5 files changed, 5 insertions(+), 5 deletions(-)

diff --git a/.github/workflows/ci.yaml b/.github/workflows/ci.yaml
index cfa0296..b0bd603 100644
--- a/.github/workflows/ci.yaml
+++ b/.github/workflows/ci.yaml
@@ -33,4 +33,4 @@ concurrency:
 
 jobs:
   ci:
-    uses: cplieger/ci/.github/workflows/ci.yaml@bcbabc5729e5c3cf3b660867e8fce40263f06a28 # v2
+    uses: cplieger/ci/.github/workflows/ci.yaml@08d5bb5fdbe99353529473dd7e76e35b4fb6b1f0 # v2
diff --git a/.github/workflows/codeql.yml b/.github/workflows/codeql.yml
index b5169d7..2d196c4 100644
--- a/.github/workflows/codeql.yml
+++ b/.github/workflows/codeql.yml
@@ -16,4 +16,4 @@ jobs:
       security-events: write
       contents: read
       actions: read
-    uses: cplieger/ci/.github/workflows/codeql.yaml@bcbabc5729e5c3cf3b660867e8fce40263f06a28 # v2
+    uses: cplieger/ci/.github/workflows/codeql.yaml@08d5bb5fdbe99353529473dd7e76e35b4fb6b1f0 # v2
diff --git a/.github/workflows/coverage.yml b/.github/workflows/coverage.yml
index 8e285ea..b9406b7 100644
--- a/.github/workflows/coverage.yml
+++ b/.github/workflows/coverage.yml
@@ -27,4 +27,4 @@ jobs:
     # NOTE: pin this @SHA to the ci release tag that first contains
     # coverage.yaml when cutting that tag (see ci.md "Updating and propagating").
     # Renovate then tracks the `# v2` comment and bumps the digest thereafter.
-    uses: cplieger/ci/.github/workflows/coverage.yaml@bcbabc5729e5c3cf3b660867e8fce40263f06a28 # v2
+    uses: cplieger/ci/.github/workflows/coverage.yaml@08d5bb5fdbe99353529473dd7e76e35b4fb6b1f0 # v2
diff --git a/.github/workflows/release.yaml b/.github/workflows/release.yaml
index 0dcba06..34c7cfd 100644
--- a/.github/workflows/release.yaml
+++ b/.github/workflows/release.yaml
@@ -63,7 +63,7 @@ jobs:
       id-token: write
       attestations: write
       security-events: write
-    uses: cplieger/ci/.github/workflows/release.yaml@bcbabc5729e5c3cf3b660867e8fce40263f06a28 # v2
+    uses: cplieger/ci/.github/workflows/release.yaml@08d5bb5fdbe99353529473dd7e76e35b4fb6b1f0 # v2
     # Forward only the two Docker Hub publish credentials the reusable pipeline
     # actually declares and consumes, rather than `secrets: inherit` (which
     # exposes every repo secret to the reusable-workflow trust boundary). Both
diff --git a/.github/workflows/security.yml b/.github/workflows/security.yml
index d5adcc0..c41b906 100644
--- a/.github/workflows/security.yml
+++ b/.github/workflows/security.yml
@@ -22,4 +22,4 @@ jobs:
     permissions:
       contents: read
       security-events: write
-    uses: cplieger/ci/.github/workflows/security-scan.yaml@bcbabc5729e5c3cf3b660867e8fce40263f06a28 # v2
+    uses: cplieger/ci/.github/workflows/security-scan.yaml@08d5bb5fdbe99353529473dd7e76e35b4fb6b1f0 # v2