From c3954a8ac327f7a53df72d23a513ba116b9e6d97 Mon Sep 17 00:00:00 2001
From: "renovate[bot]" <29139614+renovate[bot]@users.noreply.github.com>
Date: Fri, 14 Aug 2026 22:28:05 +0000
Subject: [PATCH 1/2] =?UTF-8?q?chore(container):=20update=20image=20ghcr.i?=
 =?UTF-8?q?o/devsecninja/dotfiles-devcontainer=20(=2011bf3fa=20=E2=9E=94?=
 =?UTF-8?q?=2081a2412=20)=20[automerge]?=
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

---
 .devcontainer/devcontainer.json | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/.devcontainer/devcontainer.json b/.devcontainer/devcontainer.json
index 2d8abdfb..72e39b78 100644
--- a/.devcontainer/devcontainer.json
+++ b/.devcontainer/devcontainer.json
@@ -6,7 +6,7 @@
   // fresh, correctly detecting the runtime environment (CI, Codespaces, etc.)
   // Pinned by digest only (no tag): the devcontainers CLI cannot parse a
   // combined `:tag@sha256:...` reference, so Renovate keeps just the digest.
-  "image": "ghcr.io/devsecninja/dotfiles-devcontainer@sha256:11bf3faedff4ede29c365dd2de9b16661b2f81a8b70ad72e8909fac39a590725",
+  "image": "ghcr.io/devsecninja/dotfiles-devcontainer@sha256:81a241208af89054c4b45e4fed28c24c1ea34b4d35798215fa1c6b8171ffbfa4",
   "features": {
     "ghcr.io/devcontainers/features/git-lfs:1": {
       "version": "latest"

From 253613c1b0a8935396acf28e5602ca1c76e98e0d Mon Sep 17 00:00:00 2001
From: "renovate[bot]" <29139614+renovate[bot]@users.noreply.github.com>
Date: Fri, 14 Aug 2026 22:28:19 +0000
Subject: [PATCH 2/2] =?UTF-8?q?ci(github-tag):=20Update=20tag=20actions/ca?=
 =?UTF-8?q?che=20(=20v5.1.0=20=E2=9E=94=20v6.1.0=20)?=
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

---
 .devcontainer/devcontainer.json | 2 +-
 .github/workflows/ci.yaml       | 2 +-
 2 files changed, 2 insertions(+), 2 deletions(-)

diff --git a/.devcontainer/devcontainer.json b/.devcontainer/devcontainer.json
index 72e39b78..2d8abdfb 100644
--- a/.devcontainer/devcontainer.json
+++ b/.devcontainer/devcontainer.json
@@ -6,7 +6,7 @@
   // fresh, correctly detecting the runtime environment (CI, Codespaces, etc.)
   // Pinned by digest only (no tag): the devcontainers CLI cannot parse a
   // combined `:tag@sha256:...` reference, so Renovate keeps just the digest.
-  "image": "ghcr.io/devsecninja/dotfiles-devcontainer@sha256:81a241208af89054c4b45e4fed28c24c1ea34b4d35798215fa1c6b8171ffbfa4",
+  "image": "ghcr.io/devsecninja/dotfiles-devcontainer@sha256:11bf3faedff4ede29c365dd2de9b16661b2f81a8b70ad72e8909fac39a590725",
   "features": {
     "ghcr.io/devcontainers/features/git-lfs:1": {
       "version": "latest"
diff --git a/.github/workflows/ci.yaml b/.github/workflows/ci.yaml
index 0706d8e6..2089bad2 100644
--- a/.github/workflows/ci.yaml
+++ b/.github/workflows/ci.yaml
@@ -118,7 +118,7 @@ jobs:
           password: ${{ secrets.GITHUB_TOKEN }}
 
       - name: Cache Docker layers
-        uses: actions/cache@caa296126883cff596d87d8935842f9db880ef25 # v5.1.0
+        uses: actions/cache@55cc8345863c7cc4c66a329aec7e433d2d1c52a9 # v6.1.0
         with:
           path: /tmp/.buildx-cache
           key: ${{ runner.os }}-devcontainer-${{ hashFiles('.devcontainer/devcontainer.json', 'home/install.sh') }}