chore(github-tag): update tag devsecninja/.github to v2

[renovate]

This PR contains the following updates:

Package	Type	Update	Change	Pending
DevSecNinja/.github	action	major	v1.7.0 → v2.2.0	v2.5.0 (+2)

---

Release Notes

DevSecNinja/.github (DevSecNinja/.github)

v2.2.0

Compare Source

Features

• deps: update dependency apm-cli ( 0.23.1 ➔ 0.24.0 ) [automerge] (#​247) (dcb8c94)
• deps: update dependency wrangler ( 4.105.0 ➔ 4.106.0 ) [automerge] (#​241) (8b65ff6)
• deps: update dependency wrangler ( 4.106.0 ➔ 4.107.0 ) [automerge] (#​248) (13630dd)
• github-tag: update tag devsecninja/ai-toolkit ( v0.7.0 ➔ v0.8.0 ) [automerge] (#​245) (0eb545a)
• lint: add upload-sarif input to skip GitHub code scanning upload (#​249) (30660c7)
• mise: update tool pipx:json5 ( 0.14.0 ➔ 0.15.0 ) [automerge] (#​244) (d2cdf62)
• mise: update tool zizmor ( 1.25.2 ➔ 1.26.1 ) [automerge] (#​246) (31bcb5f)

Bug Fixes

• mise: update tool uv ( 0.11.22 ➔ 0.11.23 ) [automerge] (#​242) (21344d2)

v2.1.0

Compare Source

Features

• deps: update dependency apm-cli ( 0.21.0 ➔ 0.22.0 ) [automerge] (#​214) (a9c7e67)
• deps: update dependency apm-cli ( 0.22.0 ➔ 0.23.1 ) [automerge] (#​236) (1c2c307)
• deps: update dependency wrangler ( 4.102.0 ➔ 4.105.0 ) [automerge] (#​213) (0ea0bbe)
• github-tag: update tag devsecninja/ai-toolkit ( v0.3.0 ➔ v0.6.2 ) [automerge] (#​215) (2cac081)
• github-tag: update tag devsecninja/ai-toolkit ( v0.6.2 ➔ v0.7.0 ) [automerge] (#​237) (46e0c28)
• mise: update tool pipx:checkov ( 3.2.533 ➔ 3.3.1 ) [automerge] (#​217) (7bbbe00)
• sync: distribute and consume labels-base.yaml via config-sync (#​223) (f219d42)

Bug Fixes

• ci: config-sync only fails when pipeline fails, not when changes detected (#​225) (1b46a68)
• fetch materialize branch in workflow (de33b8c)
• github-release: update release jdx/mise ( v2026.6.1 ➔ v2026.6.3 ) [automerge] (#​210) (88053b4)
• github-release: update release jdx/mise ( v2026.6.3 ➔ v2026.6.4 ) [automerge] (#​218) (c91478b)
• github-release: update release jdx/mise ( v2026.6.4 ➔ v2026.6.5 ) [automerge] (#​219) (f3539ca)
• github-release: update release jdx/mise ( v2026.6.5 ➔ v2026.6.6 ) [automerge] (#​220) (65b20fe)
• github-release: update release jdx/mise ( v2026.6.6 ➔ v2026.6.9 ) [automerge] (#​221) (df6f420)
• github-release: update release jdx/mise ( v2026.6.9 ➔ v2026.6.11 ) [automerge] (#​232) (63e120b)
• lint: install caller-pinned mise tools; friendly error when a tool isn't pinned (#​239) (56235e1)
• mise: update tool trivy ( 0.71.0 ➔ 0.71.2 ) [automerge] (#​233) (2636596)
• mise: update tool uv ( 0.11.21 ➔ 0.11.22 ) [automerge] (#​234) (f5fb5c7)

v2.0.0

Compare Source

⚠ BREAKING CHANGES

• pages: require artifact-path input (#​207)

Features

• pages: require artifact-path input (#​207) (6197650)

v1.9.0

Compare Source

Features

• apm: activate apm-sync on the .github consumer (#​195) (ec157a4)
• deps: update dependency wrangler ( 4.101.0 ➔ 4.102.0 ) [automerge] (#​203) (d00a875)
• github-release: update mise ( v2026.5.16 ➔ v2026.6.1 ) [automerge] (#​187) (0486962)
• labels: add apm-sync base label for materialize PRs (#​205) (13bbc73)
• mise: update tool trivy ( 0.70.0 ➔ 0.71.0 ) [automerge] (#​189) (38532b6)
• pages: add Cloudflare acceptance deploy and release-gated production (#​181) (da8af05)
• pages: make node-version and wrangler-version optional (#​206) (3fdcae5)

Bug Fixes

• apm: maintain ai-toolkit pin via Renovate + materialize workflow (#​199) (5f9bb48)
• apm: materialize post-merge in a separate PR, not on the Renovate branch (#​202) (fbc6913)
• ci: resolve zizmor template-injection, artipacked, and cache-poisoning alerts (#​204) (8a5b1ee)

v1.8.0

Compare Source

Features

• apm: add reusable APM sync workflow + onboarding (#​194) (2fe813b)
• apm: onboard repositority into my apm (6d2632d)
• deps: update dependency wrangler ( 4.100.0 ➔ 4.101.0 ) [automerge] (#​190) (3c349e9)

Bug Fixes

• mise: update tool pipx:checkov ( 3.2.530 ➔ 3.2.533 ) [automerge] (#​182) (c588e8b)
• pages: stamp real head commit on PR preview builds (#​185) (d88fa46)

---

Configuration

📅 Schedule: (in timezone Europe/Amsterdam)

• Branch creation
  • "every weekend,on Friday"
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.