From 1c2c2e21c073588b6420d14f382f1809b42c93b4 Mon Sep 17 00:00:00 2001
From: Christopher Plieger <917744+cplieger@users.noreply.github.com>
Date: Fri, 7 Aug 2026 15:01:30 +0000
Subject: [PATCH] chore(deps): update cplieger/ci digest to 06e673c

---
 .github/workflow-templates/ci.yml       | 2 +-
 .github/workflow-templates/codeql.yml   | 2 +-
 .github/workflow-templates/coverage.yml | 2 +-
 .github/workflow-templates/release.yml  | 2 +-
 .github/workflow-templates/security.yml | 2 +-
 .github/workflows/coverage.yaml         | 2 +-
 .github/workflows/docker-release.yaml   | 2 +-
 .github/workflows/release.yaml          | 2 +-
 8 files changed, 8 insertions(+), 8 deletions(-)

diff --git a/.github/workflow-templates/ci.yml b/.github/workflow-templates/ci.yml
index 44b054f..6218705 100644
--- a/.github/workflow-templates/ci.yml
+++ b/.github/workflow-templates/ci.yml
@@ -33,4 +33,4 @@ concurrency:
 
 jobs:
   ci:
-    uses: cplieger/ci/.github/workflows/ci.yaml@3e8f1aca28d5852d28031657b637ef48c9bc4d14 # v2
+    uses: cplieger/ci/.github/workflows/ci.yaml@06e673c8341ac85645a7cafb6911eb01d5816f3d # v2
diff --git a/.github/workflow-templates/codeql.yml b/.github/workflow-templates/codeql.yml
index 29877cd..77b54ec 100644
--- a/.github/workflow-templates/codeql.yml
+++ b/.github/workflow-templates/codeql.yml
@@ -16,4 +16,4 @@ jobs:
       security-events: write
       contents: read
       actions: read
-    uses: cplieger/ci/.github/workflows/codeql.yaml@3e8f1aca28d5852d28031657b637ef48c9bc4d14 # v2
+    uses: cplieger/ci/.github/workflows/codeql.yaml@06e673c8341ac85645a7cafb6911eb01d5816f3d # v2
diff --git a/.github/workflow-templates/coverage.yml b/.github/workflow-templates/coverage.yml
index 87b6b71..67ebb53 100644
--- a/.github/workflow-templates/coverage.yml
+++ b/.github/workflow-templates/coverage.yml
@@ -27,4 +27,4 @@ jobs:
     # NOTE: pin this @SHA to the ci release tag that first contains
     # coverage.yaml when cutting that tag (see ci.md "Updating and propagating").
     # Renovate then tracks the `# v2` comment and bumps the digest thereafter.
-    uses: cplieger/ci/.github/workflows/coverage.yaml@3e8f1aca28d5852d28031657b637ef48c9bc4d14 # v2
+    uses: cplieger/ci/.github/workflows/coverage.yaml@06e673c8341ac85645a7cafb6911eb01d5816f3d # v2
diff --git a/.github/workflow-templates/release.yml b/.github/workflow-templates/release.yml
index 29782c4..d14bfa8 100644
--- a/.github/workflow-templates/release.yml
+++ b/.github/workflow-templates/release.yml
@@ -63,7 +63,7 @@ jobs:
       id-token: write
       attestations: write
       security-events: write
-    uses: cplieger/ci/.github/workflows/release.yaml@3e8f1aca28d5852d28031657b637ef48c9bc4d14 # v2
+    uses: cplieger/ci/.github/workflows/release.yaml@06e673c8341ac85645a7cafb6911eb01d5816f3d # v2
     # Forward only the two Docker Hub publish credentials the reusable pipeline
     # actually declares and consumes, rather than `secrets: inherit` (which
     # exposes every repo secret to the reusable-workflow trust boundary). Both
diff --git a/.github/workflow-templates/security.yml b/.github/workflow-templates/security.yml
index 49a57c8..f116f84 100644
--- a/.github/workflow-templates/security.yml
+++ b/.github/workflow-templates/security.yml
@@ -22,4 +22,4 @@ jobs:
     permissions:
       contents: read
       security-events: write
-    uses: cplieger/ci/.github/workflows/security-scan.yaml@3e8f1aca28d5852d28031657b637ef48c9bc4d14 # v2
+    uses: cplieger/ci/.github/workflows/security-scan.yaml@06e673c8341ac85645a7cafb6911eb01d5816f3d # v2
diff --git a/.github/workflows/coverage.yaml b/.github/workflows/coverage.yaml
index 11b002b..286f311 100644
--- a/.github/workflows/coverage.yaml
+++ b/.github/workflows/coverage.yaml
@@ -102,7 +102,7 @@ jobs:
       # move.
       - name: Publish coverage badge
         if: ${{ steps.d.outputs.kind != 'none' }}
-        uses: cplieger/ci/actions/publish-badge@3e8f1aca28d5852d28031657b637ef48c9bc4d14 # v2
+        uses: cplieger/ci/actions/publish-badge@06e673c8341ac85645a7cafb6911eb01d5816f3d # v2
         with:
           repo: ${{ github.repository }}
           token: ${{ github.token }}
diff --git a/.github/workflows/docker-release.yaml b/.github/workflows/docker-release.yaml
index 2e274aa..07f7e56 100644
--- a/.github/workflows/docker-release.yaml
+++ b/.github/workflows/docker-release.yaml
@@ -757,7 +757,7 @@ jobs:
       - name: Publish image-size badge
         if: ${{ steps.sizebadge.outputs.json != '' }}
         continue-on-error: true
-        uses: cplieger/ci/actions/publish-badge@3e8f1aca28d5852d28031657b637ef48c9bc4d14 # v2
+        uses: cplieger/ci/actions/publish-badge@06e673c8341ac85645a7cafb6911eb01d5816f3d # v2
         with:
           repo: ${{ github.repository }}
           token: ${{ github.token }}
diff --git a/.github/workflows/release.yaml b/.github/workflows/release.yaml
index b7d3346..fb4289c 100644
--- a/.github/workflows/release.yaml
+++ b/.github/workflows/release.yaml
@@ -117,7 +117,7 @@ jobs:
         # resolves against the CONSUMER's checked-out workspace, not this
         # repo, so it 404s when release.yaml is called from another repo. This
         # action's content is stable, so pin-lag is a non-issue here.
-        uses: cplieger/ci/actions/git-cliff-version@3e8f1aca28d5852d28031657b637ef48c9bc4d14 # v2
+        uses: cplieger/ci/actions/git-cliff-version@06e673c8341ac85645a7cafb6911eb01d5816f3d # v2
 
       - name: Detect type + subpackages
         id: type