chore(deps): update projectbluefin/actions (#961)

Co-authored-by: mergeraptor[bot] <267480593+mergeraptor[bot]@users.noreply.github.com>

Author: mergeraptor[bot]

.github/workflows/build.yml

@@ -132,7 +132,7 @@ jobs:
       # Note: setup-runner btrfs does not pass loopback-free; watch for disk
       # pressure and upstream the option if needed.
       - name: Setup runner
-        uses: projectbluefin/actions/bootc-build/setup-runner@99d867d662ab64a1f82b4f5f24f73b4051dbff01 # v1
+        uses: projectbluefin/actions/bootc-build/setup-runner@2e8139cf6abc3663aa39e358dc43492bd9fe48d5 # v1
         with:
           storage-backend: btrfs
           update-podman: true
@@ -210,7 +210,7 @@ jobs:
         uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6
 
       - name: Setup runner
-        uses: projectbluefin/actions/bootc-build/setup-runner@99d867d662ab64a1f82b4f5f24f73b4051dbff01 # v1
+        uses: projectbluefin/actions/bootc-build/setup-runner@2e8139cf6abc3663aa39e358dc43492bd9fe48d5 # v1
         with:
           storage-backend: btrfs
           update-podman: true

.github/workflows/cache-warm.yml

@@ -43,7 +43,7 @@ jobs:
         uses: ./.github/actions/check-bst2-pin
 
       - name: Setup runner
-        uses: projectbluefin/actions/bootc-build/setup-runner@99d867d662ab64a1f82b4f5f24f73b4051dbff01 # v1
+        uses: projectbluefin/actions/bootc-build/setup-runner@2e8139cf6abc3663aa39e358dc43492bd9fe48d5 # v1
         with:
           storage-backend: btrfs
           update-podman: true

.github/workflows/execute-release.yml

@@ -42,7 +42,7 @@ jobs:
       issues: write
       packages: write
       pull-requests: write
-    uses: projectbluefin/actions/.github/workflows/reusable-execute-release.yml@99d867d662ab64a1f82b4f5f24f73b4051dbff01 # v1
+    uses: projectbluefin/actions/.github/workflows/reusable-execute-release.yml@2e8139cf6abc3663aa39e358dc43492bd9fe48d5 # v1
     with:
       registry: ghcr.io/projectbluefin
       variants: >-
@@ -61,7 +61,7 @@ jobs:
       contents: write
       id-token: write
       packages: read
-    uses: projectbluefin/actions/.github/workflows/reusable-release.yml@99d867d662ab64a1f82b4f5f24f73b4051dbff01 # v1
+    uses: projectbluefin/actions/.github/workflows/reusable-release.yml@2e8139cf6abc3663aa39e358dc43492bd9fe48d5 # v1
     with:
       stream_name: stable
       image: ghcr.io/projectbluefin/dakota

.github/workflows/pr-release-gate.yml

@@ -15,7 +15,7 @@ permissions:
 jobs:
   gate:
     if: github.event.pull_request.head.ref == 'auto/promote-testing-to-main'
-    uses: projectbluefin/actions/.github/workflows/reusable-release-gate.yml@99d867d662ab64a1f82b4f5f24f73b4051dbff01 # v1
+    uses: projectbluefin/actions/.github/workflows/reusable-release-gate.yml@2e8139cf6abc3663aa39e358dc43492bd9fe48d5 # v1
     with:
       repo: ${{ github.repository }}
       registry: ghcr.io/projectbluefin

.github/workflows/promote-testing-to-main.yml

@@ -30,7 +30,7 @@ permissions:
 
 jobs:
   promote:
-    uses: projectbluefin/actions/.github/workflows/reusable-promote-squash.yml@99d867d662ab64a1f82b4f5f24f73b4051dbff01 # v1
+    uses: projectbluefin/actions/.github/workflows/reusable-promote-squash.yml@2e8139cf6abc3663aa39e358dc43492bd9fe48d5 # v1
     with:
       variants: >-
         [{"image":"dakota"},{"image":"dakota-nvidia"}]

.github/workflows/publish.yml

@@ -128,7 +128,7 @@ jobs:
       # Note: setup-runner btrfs does not expose loopback-free; watch for disk
       # pressure and upstream the option if needed.
       - name: Setup runner
-        uses: projectbluefin/actions/bootc-build/setup-runner@99d867d662ab64a1f82b4f5f24f73b4051dbff01 # v1
+        uses: projectbluefin/actions/bootc-build/setup-runner@2e8139cf6abc3663aa39e358dc43492bd9fe48d5 # v1
         with:
           storage-backend: btrfs
           update-podman: true
@@ -160,7 +160,7 @@ jobs:
         # xattr-manifest (fakecap-manifest.tsv) is pre-committed (Cargo.lock pattern)
         # and regenerated by the update-filemap workflow when elements change.
         # Merge order: projectbluefin/actions#<PR> must land before this workflow runs.
-        uses: projectbluefin/actions/bootc-build/chunka@99d867d662ab64a1f82b4f5f24f73b4051dbff01 # v1
+        uses: projectbluefin/actions/bootc-build/chunka@2e8139cf6abc3663aa39e358dc43492bd9fe48d5 # v1
         with:
           source-image: localhost/${{ env.IMAGE_NAME }}${{ matrix.image_suffix }}:latest
           max-layers: "120"
@@ -210,7 +210,7 @@ jobs:
         # generate-sbom: false — dakota uses just sbom (BST-native provenance via
         # bst artifact list). Syft post-build scan is less accurate for BST builds.
         # SBOM attachment and SBOM signing are handled in the publish-sbom job.
-        uses: projectbluefin/actions/bootc-build/sign-and-publish@99d867d662ab64a1f82b4f5f24f73b4051dbff01 # v1
+        uses: projectbluefin/actions/bootc-build/sign-and-publish@2e8139cf6abc3663aa39e358dc43492bd9fe48d5 # v1
         with:
           image: ${{ env.IMAGE_REGISTRY }}/${{ env.IMAGE_NAME }}${{ matrix.image_suffix }}
           digest: ${{ steps.push.outputs.digest }}
@@ -570,7 +570,7 @@ jobs:
           ref: ${{ needs.setup.outputs.sha }}
 
       - name: Setup runner
-        uses: projectbluefin/actions/bootc-build/setup-runner@99d867d662ab64a1f82b4f5f24f73b4051dbff01 # v1
+        uses: projectbluefin/actions/bootc-build/setup-runner@2e8139cf6abc3663aa39e358dc43492bd9fe48d5 # v1
         with:
           storage-backend: btrfs
           update-podman: true

.github/workflows/release-reminder.yml

@@ -13,7 +13,7 @@ jobs:
       contents: read
       issues: write
       pull-requests: write
-    uses: projectbluefin/actions/.github/workflows/reusable-release-reminder.yml@99d867d662ab64a1f82b4f5f24f73b4051dbff01 # v1
+    uses: projectbluefin/actions/.github/workflows/reusable-release-reminder.yml@2e8139cf6abc3663aa39e358dc43492bd9fe48d5 # v1
     with:
       days_warn: 7
       days_escalate: 14

.github/workflows/renovate-automerge.yml

@@ -12,6 +12,6 @@ permissions:
 jobs:
   automerge:
     if: github.event.workflow_run.conclusion == 'success'
-    uses: projectbluefin/actions/.github/workflows/reusable-renovate-automerge.yml@99d867d662ab64a1f82b4f5f24f73b4051dbff01 # v1
+    uses: projectbluefin/actions/.github/workflows/reusable-renovate-automerge.yml@2e8139cf6abc3663aa39e358dc43492bd9fe48d5 # v1
     with:
       head_sha: ${{ github.event.workflow_run.head_sha }}

.github/workflows/skill-drift.yml

@@ -10,7 +10,7 @@ permissions:
 
 jobs:
   skill-drift:
-    uses: projectbluefin/actions/.github/workflows/skill-drift-check.yml@99d867d662ab64a1f82b4f5f24f73b4051dbff01 # v1
+    uses: projectbluefin/actions/.github/workflows/skill-drift-check.yml@2e8139cf6abc3663aa39e358dc43492bd9fe48d5 # v1
     with:
       code-paths: '[".github/workflows/**", "build_files/**", "Justfile", "elements/**"]'
       skill-paths: '["docs/skills/**", "docs/*.md", "AGENTS.md"]'

.github/workflows/sync-main-to-testing.yml

@@ -20,7 +20,7 @@ concurrency:
 jobs:
   sync:
     name: Keep testing up-to-date with main
-    uses: projectbluefin/actions/.github/workflows/reusable-sync-branches.yml@99d867d662ab64a1f82b4f5f24f73b4051dbff01 # v1
+    uses: projectbluefin/actions/.github/workflows/reusable-sync-branches.yml@2e8139cf6abc3663aa39e358dc43492bd9fe48d5 # v1
     permissions:
       contents: write