From 06f29163081f0b6a4b132ce2b80ec518f916bff9 Mon Sep 17 00:00:00 2001
From: "renovate[bot]" <29139614+renovate[bot]@users.noreply.github.com>
Date: Fri, 23 Oct 2026 18:29:18 +0000
Subject: [PATCH] Update CI dependencies

---
 .github/workflows/__codeql.yml     | 6 +++---
 .github/workflows/__deploy.yml     | 4 ++--
 .github/workflows/__package.yml    | 2 +-
 .github/workflows/pull_request.yml | 2 +-
 4 files changed, 7 insertions(+), 7 deletions(-)

diff --git a/.github/workflows/__codeql.yml b/.github/workflows/__codeql.yml
index 81b2744cae..5cb0651337 100644
--- a/.github/workflows/__codeql.yml
+++ b/.github/workflows/__codeql.yml
@@ -26,15 +26,15 @@ jobs:
           show-progress: false
 
       - name: Initialize CodeQL 🛠️
-        uses: github/codeql-action/init@f205ea1c3313d32999d8d6a48b4f6530d4437b38 # v4.37.4
+        uses: github/codeql-action/init@9b3254085494b55a0f7c4c2b3d2d52cc712ce370 # v4.39.1
         with:
           queries: security-and-quality
           languages: ${{ matrix.language }}
 
       - name: Autobuild 📦
-        uses: github/codeql-action/autobuild@f205ea1c3313d32999d8d6a48b4f6530d4437b38 # v4.37.4
+        uses: github/codeql-action/autobuild@9b3254085494b55a0f7c4c2b3d2d52cc712ce370 # v4.39.1
 
       - name: Perform CodeQL Analysis 🧪
-        uses: github/codeql-action/analyze@f205ea1c3313d32999d8d6a48b4f6530d4437b38 # v4.37.4
+        uses: github/codeql-action/analyze@9b3254085494b55a0f7c4c2b3d2d52cc712ce370 # v4.39.1
         with:
           category: '/language:${{matrix.language}}'
diff --git a/.github/workflows/__deploy.yml b/.github/workflows/__deploy.yml
index df1e03899b..c165d6819f 100644
--- a/.github/workflows/__deploy.yml
+++ b/.github/workflows/__deploy.yml
@@ -55,14 +55,14 @@ jobs:
 
     steps:
       - name: Download workflow artifact ⬇️
-        uses: actions/download-artifact@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c # v8.0.1
+        uses: actions/download-artifact@9000827ccba6bdab643e8b6fd33ac0654aef8333 # v8.0.2
         with:
           name: ${{ inputs.artifact_name }}
           run-id: ${{ inputs.workflow_run_id }}
           github-token: ${{ github.token }}
 
       - name: Publish to Cloudflare Pages 📃
-        uses: cloudflare/wrangler-action@ebbaa1584979971c8614a24965b4405ff95890e0 # v4.0.0
+        uses: cloudflare/wrangler-action@953926a2e2182532811c01a25e53647d93bf07c0 # v4.1.3
         id: cf
         with:
           apiToken: ${{ secrets.CLOUDFLARE_API_TOKEN }}
diff --git a/.github/workflows/__package.yml b/.github/workflows/__package.yml
index 65fa2c5476..f0a4540d34 100644
--- a/.github/workflows/__package.yml
+++ b/.github/workflows/__package.yml
@@ -39,7 +39,7 @@ jobs:
           mv dist/config.tmp.json dist/config.json
 
       - name: Upload artifact
-        uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7.0.1
+        uses: actions/upload-artifact@cf430e030ddbb5b0abf93d22962f4752f3646cd9 # v7.0.2
         with:
           name: frontend
           path: dist
diff --git a/.github/workflows/pull_request.yml b/.github/workflows/pull_request.yml
index d6d496077b..d557d39501 100644
--- a/.github/workflows/pull_request.yml
+++ b/.github/workflows/pull_request.yml
@@ -61,6 +61,6 @@ jobs:
         run: npm ci --no-audit
     
       - name: Run eslint
-        uses: CatChen/eslint-suggestion-action@2b07b898c0dd5a016586d22b54282199b79cd358 # v4.1.33
+        uses: CatChen/eslint-suggestion-action@c16f1e40a5cd43506b9c9ea61ba66b0fd0016738 # v4.1.37
         with:
           github-token: ${{ secrets.GITHUB_TOKEN }}