From 32f258f90751e8193a848ac3e8f95e95f8d94031 Mon Sep 17 00:00:00 2001
From: "ferrlabs-renovate[bot]"
 <282300760+ferrlabs-renovate[bot]@users.noreply.github.com>
Date: Mon, 21 Sep 2026 14:00:55 +0000
Subject: [PATCH] chore(deps): update github actions

---
 .github/workflows/e2e.yml       | 2 +-
 .github/workflows/publish.yml   | 4 ++--
 .github/workflows/scorecard.yml | 2 +-
 3 files changed, 4 insertions(+), 4 deletions(-)

diff --git a/.github/workflows/e2e.yml b/.github/workflows/e2e.yml
index 1c25275..aced493 100644
--- a/.github/workflows/e2e.yml
+++ b/.github/workflows/e2e.yml
@@ -49,7 +49,7 @@ jobs:
         with:
           cluster_name: ferrvault-e2e
           # Keep the node image pinned so a kind release doesn't break us.
-          node_image: kindest/node:v1.32.2
+          node_image: kindest/node:v1.37.0
 
       - name: Install Helm
         if: steps.gate.outputs.has_go == 'true'
diff --git a/.github/workflows/publish.yml b/.github/workflows/publish.yml
index 235ed39..722f06e 100644
--- a/.github/workflows/publish.yml
+++ b/.github/workflows/publish.yml
@@ -44,8 +44,8 @@ jobs:
           echo "Stamping chart with version $V"
           sed -i -E "s/^version: .*/version: \"$V\"/" charts/ferrvault-operator/Chart.yaml
           sed -i -E "s/^appVersion: .*/appVersion: \"$V\"/" charts/ferrvault-operator/Chart.yaml
-      - uses: docker/setup-qemu-action@1f40c72289eff860ee54a304f1438e3cff362e0a # v4
-      - uses: docker/setup-buildx-action@37fe631027851001ddb9b187196cc803df7f5f0e # v4
+      - uses: docker/setup-qemu-action@99012661954931238ded8c8b007157a8430204e1 # v4
+      - uses: docker/setup-buildx-action@f87e5991a6d7451dcb8d9637bfbc97413f497069 # v4
       - uses: docker/login-action@dbcb813823bdd20940b903addbd779551569679f # v4
         with:
           registry: ghcr.io
diff --git a/.github/workflows/scorecard.yml b/.github/workflows/scorecard.yml
index b8b71fc..a3931e0 100644
--- a/.github/workflows/scorecard.yml
+++ b/.github/workflows/scorecard.yml
@@ -45,6 +45,6 @@ jobs:
           retention-days: 5
 
       - name: Upload to code scanning
-        uses: github/codeql-action/upload-sarif@b96794f015dfd88f77b49b1c93e0fa7110f94c63 # v4
+        uses: github/codeql-action/upload-sarif@1c5b675653bb5c22dbe9b12b556ec555138e09fd # v4
         with:
           sarif_file: results.sarif