Merge pull request #50 from chezmoi-sh/renovate/github-actions

⬆️ (deps): Update GitHub actions

Author: xunleii

.github/workflows/merge_group,pull_request.all.lint.yaml

@@ -22,4 +22,4 @@ jobs:
       - name: ⬇️ Checkout repository
         uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
       - name: ⚡️ Run `trunk check`
-        uses: trunk-io/trunk-action@06c428bf05832198443baab1096754b166a6c466 # v1.2.2
+        uses: trunk-io/trunk-action@b8812b3da2f527db878ef7541c4177f8d280cd89 # v1.2.3

.github/workflows/merge_group,pull_request.all.tests.yaml

@@ -42,7 +42,7 @@ jobs:
         run: pnpm test:ci
 
       - name: 📊 Upload test results
-        uses: dorny/test-reporter@6e6a65b7a0bd2c9197df7d0ae36ac5cee784230c # v2.0.0
+        uses: dorny/test-reporter@890a17cecf52a379fc869ab770a71657660be727 # v2.1.0
         if: always()
         with:
           name: Jest Test Results

.github/workflows/push,pull_request.chromatic.yaml

@@ -42,7 +42,7 @@ jobs:
         run: pnpm install
 
       - name: 📸 Run Chromatic
-        uses: chromaui/action@e8cc4c31775280b175a3c440076c00d19a9014d7 # v11.28.2
+        uses: chromaui/action@2e159400ffb5a759b36dc3e08cee63a0fd2969f7 # v11.28.3
         with:
           exitOnceUploaded: true
           projectToken: ${{ secrets.CHROMATIC_PROJECT_TOKEN }}

.github/workflows/push.trunk-cache.yaml

@@ -20,6 +20,6 @@ jobs:
       - name: ⬇️ Checkout repository
         uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
       - name: 📦️ Populate cache with Trunk
-        uses: trunk-io/trunk-action@06c428bf05832198443baab1096754b166a6c466 # v1.2.2
+        uses: trunk-io/trunk-action@b8812b3da2f527db878ef7541c4177f8d280cd89 # v1.2.3
         with:
           check-mode: populate_cache_only

.github/workflows/security.dependencies.yaml

@@ -39,7 +39,7 @@ jobs:
         run: pnpm audit --json | pnpx npm-audit-sarif /dev/stdin > pnpm-audit.sarif || true
 
       - name: 📊 Upload audit results to GitHub Code Scanning
-        uses: github/codeql-action/upload-sarif@60168efe1c415ce0f5521ea06d5c2062adbeed1b # v3.28.17
+        uses: github/codeql-action/upload-sarif@ff0a06e83cb2de871e5a09832bc6a81e7276941f # v3.28.18
         with:
           sarif_file: pnpm-audit.sarif
           category: pnpm-audit

.github/workflows/security.workflows.yaml

@@ -28,4 +28,4 @@ jobs:
           ./actionlint -color
 
       - name: ✅ Ensure SHA pinned actions
-        uses: zgosalvez/github-actions-ensure-sha-pinned-actions@2d6823da4039243036c86d76f503c84e2ded2517 # v3.0.24
+        uses: zgosalvez/github-actions-ensure-sha-pinned-actions@fc87bb5b5a97953d987372e74478de634726b3e5 # v3.0.25