chore(github-tag): update tag devsecninja/.github to v1.9.0 [automerge]

[renovate]

This PR contains the following updates:

Package	Type	Update	Change
DevSecNinja/.github	action	minor	v1.7.0 → v1.9.0

---

Release Notes

DevSecNinja/.github (DevSecNinja/.github)

v1.9.0

Compare Source

Features

• apm: activate apm-sync on the .github consumer (#​195) (ec157a4)
• deps: update dependency wrangler ( 4.101.0 ➔ 4.102.0 ) [automerge] (#​203) (d00a875)
• github-release: update mise ( v2026.5.16 ➔ v2026.6.1 ) [automerge] (#​187) (0486962)
• labels: add apm-sync base label for materialize PRs (#​205) (13bbc73)
• mise: update tool trivy ( 0.70.0 ➔ 0.71.0 ) [automerge] (#​189) (38532b6)
• pages: add Cloudflare acceptance deploy and release-gated production (#​181) (da8af05)
• pages: make node-version and wrangler-version optional (#​206) (3fdcae5)

Bug Fixes

• apm: maintain ai-toolkit pin via Renovate + materialize workflow (#​199) (5f9bb48)
• apm: materialize post-merge in a separate PR, not on the Renovate branch (#​202) (fbc6913)
• ci: resolve zizmor template-injection, artipacked, and cache-poisoning alerts (#​204) (8a5b1ee)

v1.8.0

Compare Source

Features

• apm: add reusable APM sync workflow + onboarding (#​194) (2fe813b)
• apm: onboard repositority into my apm (6d2632d)
• deps: update dependency wrangler ( 4.100.0 ➔ 4.101.0 ) [automerge] (#​190) (3c349e9)

Bug Fixes

• mise: update tool pipx:checkov ( 3.2.530 ➔ 3.2.533 ) [automerge] (#​182) (c588e8b)
• pages: stamp real head commit on PR preview builds (#​185) (d88fa46)

---

Configuration

📅 Schedule: (in timezone Europe/Amsterdam)

• Branch creation
  • "every weekend,on Friday"
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Enabled.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.