From be7d6c5cb30376dcd0f64bb06d1f8082dca14994 Mon Sep 17 00:00:00 2001
From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com>
Date: Mon, 6 Jul 2026 01:54:21 +0000
Subject: [PATCH] chore: bump the actions group with 3 updates

Bumps the actions group with 3 updates: [actions/attest-build-provenance](https://github.com/actions/attest-build-provenance), [tiobe/tics-github-action](https://github.com/tiobe/tics-github-action) and [github/codeql-action](https://github.com/github/codeql-action).


Updates `actions/attest-build-provenance` from 4.1.0 to 4.1.1
- [Release notes](https://github.com/actions/attest-build-provenance/releases)
- [Changelog](https://github.com/actions/attest-build-provenance/blob/main/RELEASE.md)
- [Commits](https://github.com/actions/attest-build-provenance/compare/a2bbfa25375fe432b6a289bc6b6cd05ecd0c4c32...0f67c3f4856b2e3261c31976d6725780e5e4c373)

Updates `tiobe/tics-github-action` from 3.9.1 to 3.10.0
- [Release notes](https://github.com/tiobe/tics-github-action/releases)
- [Commits](https://github.com/tiobe/tics-github-action/compare/3300ccc8de3c938cb83dc940ec4d07096c1bf185...016a4d79f3027fe7b4a2901619a58c745ab7cadf)

Updates `github/codeql-action` from 4 to 4.36.2
- [Release notes](https://github.com/github/codeql-action/releases)
- [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md)
- [Commits](https://github.com/github/codeql-action/compare/v4...v4.36.2)

---
updated-dependencies:
- dependency-name: actions/attest-build-provenance
  dependency-version: 4.1.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: actions
- dependency-name: tiobe/tics-github-action
  dependency-version: 3.10.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: actions
- dependency-name: github/codeql-action
  dependency-version: 4.36.2
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: actions
...

Signed-off-by: dependabot[bot] <support@github.com>
---
 .github/workflows/binaries.yml | 2 +-
 .github/workflows/snap.yml     | 2 +-
 .github/workflows/tiobe.yaml   | 2 +-
 .github/workflows/zizmor.yml   | 2 +-
 4 files changed, 4 insertions(+), 4 deletions(-)

diff --git a/.github/workflows/binaries.yml b/.github/workflows/binaries.yml
index a5bbdc80a..ec75dcaca 100644
--- a/.github/workflows/binaries.yml
+++ b/.github/workflows/binaries.yml
@@ -72,7 +72,7 @@ jobs:
 
     - name: Attest build provenance
       if: ${{ github.event_name == 'release' }}
-      uses: actions/attest-build-provenance@a2bbfa25375fe432b6a289bc6b6cd05ecd0c4c32  # v4.1.0
+      uses: actions/attest-build-provenance@0f67c3f4856b2e3261c31976d6725780e5e4c373  # v4.1.1
       with:
         subject-path: dist/${{ steps.build.outputs.ARCHIVE_FILE }}
 
diff --git a/.github/workflows/snap.yml b/.github/workflows/snap.yml
index d92182381..46598e862 100644
--- a/.github/workflows/snap.yml
+++ b/.github/workflows/snap.yml
@@ -107,7 +107,7 @@ jobs:
 
       - name: Attest build provenance
         if: steps.build-snap.outcome == 'success'
-        uses: actions/attest-build-provenance@a2bbfa25375fe432b6a289bc6b6cd05ecd0c4c32  # v4.1.0
+        uses: actions/attest-build-provenance@0f67c3f4856b2e3261c31976d6725780e5e4c373  # v4.1.1
         with:
           subject-path: ${{ steps.build-snap.outputs.snap }}
 
diff --git a/.github/workflows/tiobe.yaml b/.github/workflows/tiobe.yaml
index e18981477..02ad83255 100644
--- a/.github/workflows/tiobe.yaml
+++ b/.github/workflows/tiobe.yaml
@@ -36,7 +36,7 @@ jobs:
           gocov-xml < coverage.json > .coverage/coverage.xml
 
       - name: TICS GitHub Action
-        uses: tiobe/tics-github-action@3300ccc8de3c938cb83dc940ec4d07096c1bf185  # 3.9.1
+        uses: tiobe/tics-github-action@016a4d79f3027fe7b4a2901619a58c745ab7cadf  # 3.10.0
         with:
           mode: qserver
           viewerUrl: https://canonical.tiobe.com/tiobeweb/TICS/api/cfg?name=GoProjects
diff --git a/.github/workflows/zizmor.yml b/.github/workflows/zizmor.yml
index 16c9b8366..c7a838e77 100644
--- a/.github/workflows/zizmor.yml
+++ b/.github/workflows/zizmor.yml
@@ -28,7 +28,7 @@ jobs:
           GH_TOKEN: ${{ secrets.GITHUB_TOKEN }}
 
       - name: Upload SARIF file
-        uses: github/codeql-action/upload-sarif@v4
+        uses: github/codeql-action/upload-sarif@v4.36.2
         with:
           sarif_file: results.sarif
           category: zizmor