chore(deps): update rknightion/.github action to v1.25.26 (#849)

Co-authored-by: rknightion-renovate[bot] <268667784+rknightion-renovate[bot]@users.noreply.github.com>

Author: rknightion-renovate[bot]

.github/workflows/actionlint.yml

@@ -9,4 +9,4 @@ jobs:
   actionlint:
     permissions:
       contents: read
-    uses: rknightion/.github/.github/workflows/actionlint.yml@223d9483075f648075df1a806c2ad4db42101a7f # v1.25.25
+    uses: rknightion/.github/.github/workflows/actionlint.yml@42ebc6a7fa65c556994b27956dc176d245cceaba # v1.25.26

.github/workflows/arm-automerge.yml

@@ -18,4 +18,4 @@ jobs:
     permissions:
       contents: write      # enabling auto-merge writes the merge ref
       pull-requests: write # gh pr merge --auto operates on the PR
-    uses: rknightion/.github/.github/workflows/arm-automerge.yml@223d9483075f648075df1a806c2ad4db42101a7f # v1.25.25
+    uses: rknightion/.github/.github/workflows/arm-automerge.yml@42ebc6a7fa65c556994b27956dc176d245cceaba # v1.25.26

.github/workflows/auto-rc.yml

@@ -38,7 +38,7 @@ jobs:
       contents: write      # create the RC tag and the GitHub prerelease
       pull-requests: read  # find the open release-please PR
       checks: read         # poll ci-success for this commit
-    uses: rknightion/.github/.github/workflows/auto-rc.yml@223d9483075f648075df1a806c2ad4db42101a7f # v1.25.25
+    uses: rknightion/.github/.github/workflows/auto-rc.yml@42ebc6a7fa65c556994b27956dc176d245cceaba # v1.25.26
     with:
       # Under workflow_run, github.sha is the DEFAULT BRANCH HEAD, not the
       # commit CI ran on — it races ahead on rapid pushes. head_sha is the

.github/workflows/ci.yml

@@ -140,7 +140,7 @@ jobs:
   helm-lint-kubeconform:
     permissions:
       contents: read
-    uses: rknightion/.github/.github/workflows/helm-validate.yml@223d9483075f648075df1a806c2ad4db42101a7f # v1.25.25
+    uses: rknightion/.github/.github/workflows/helm-validate.yml@42ebc6a7fa65c556994b27956dc176d245cceaba # v1.25.26
     with:
       # This chart renders CRD kinds (ServiceMonitor + PrometheusRule) that kubeconform has no
       # built-in schema for. Give it the schema rather than reaching for

.github/workflows/codeql.yml

@@ -12,6 +12,6 @@ jobs:
       packages: read
       actions: read
       contents: read
-    uses: rknightion/.github/.github/workflows/codeql.yml@223d9483075f648075df1a806c2ad4db42101a7f # v1.25.25
+    uses: rknightion/.github/.github/workflows/codeql.yml@42ebc6a7fa65c556994b27956dc176d245cceaba # v1.25.26
     with:
       languages: '[{"language":"python","build-mode":"none"},{"language":"actions","build-mode":"none"}]'

.github/workflows/dependency-review.yml

@@ -8,4 +8,4 @@ jobs:
     permissions:
       contents: read
       pull-requests: write
-    uses: rknightion/.github/.github/workflows/dependency-review.yml@223d9483075f648075df1a806c2ad4db42101a7f # v1.25.25
+    uses: rknightion/.github/.github/workflows/dependency-review.yml@42ebc6a7fa65c556994b27956dc176d245cceaba # v1.25.26

.github/workflows/docker-security.yml

@@ -11,4 +11,4 @@ jobs:
     permissions:
       contents: read
       security-events: write
-    uses: rknightion/.github/.github/workflows/docker-security.yml@223d9483075f648075df1a806c2ad4db42101a7f # v1.25.25
+    uses: rknightion/.github/.github/workflows/docker-security.yml@42ebc6a7fa65c556994b27956dc176d245cceaba # v1.25.26

.github/workflows/ghcr-cleanup.yml

@@ -21,7 +21,7 @@ jobs:
     permissions:
       contents: read
       packages: write # delete package versions
-    uses: rknightion/.github/.github/workflows/ghcr-cleanup.yml@223d9483075f648075df1a806c2ad4db42101a7f # v1.25.25
+    uses: rknightion/.github/.github/workflows/ghcr-cleanup.yml@42ebc6a7fa65c556994b27956dc176d245cceaba # v1.25.26
     with:
       packages: "meraki-dashboard-exporter,charts/meraki-dashboard-exporter"
       # Scheduled runs prune for real; a manual dispatch defaults to dry-run.

.github/workflows/publish.yml

@@ -54,7 +54,7 @@ jobs:
       packages: read
       actions: read
       security-events: write
-    uses: rknightion/.github/.github/workflows/codeql.yml@223d9483075f648075df1a806c2ad4db42101a7f # v1.25.25
+    uses: rknightion/.github/.github/workflows/codeql.yml@42ebc6a7fa65c556994b27956dc176d245cceaba # v1.25.26
     with:
       languages: '[{"language":"python","build-mode":"none"},{"language":"actions","build-mode":"none"}]'
       ref: ${{ inputs.release_tag || github.sha }}
@@ -69,7 +69,7 @@ jobs:
       id-token: write
       attestations: write
       security-events: write
-    uses: rknightion/.github/.github/workflows/container-publish.yml@223d9483075f648075df1a806c2ad4db42101a7f # v1.25.25
+    uses: rknightion/.github/.github/workflows/container-publish.yml@42ebc6a7fa65c556994b27956dc176d245cceaba # v1.25.26
     with:
       release-tag: ${{ inputs.release_tag }}
       helm-chart-path: charts/meraki-dashboard-exporter

.github/workflows/release-please-lock.yml

@@ -124,7 +124,7 @@ jobs:
       # grant a tailnet join to every pull request on every rknightion repo.
       - name: Mint a scoped push token
         id: bao
-        uses: rknightion/.github/.github/actions/broker-token@223d9483075f648075df1a806c2ad4db42101a7f # v1.25.25
+        uses: rknightion/.github/.github/actions/broker-token@42ebc6a7fa65c556994b27956dc176d245cceaba # v1.25.26
         with:
           permission-set: lockfile-meraki-dashboard-exporter
           role: lockfile-meraki-dashboard-exporter