From 37bfa52476eaa19821d8078bff3b3a4d8d5ef189 Mon Sep 17 00:00:00 2001
From: "renovate[bot]" <29139614+renovate[bot]@users.noreply.github.com>
Date: Sat, 14 Nov 2026 15:47:44 +0000
Subject: [PATCH] Update GitHub Actions

---
 .github/workflows/desktop-macos-signing.yml | 2 +-
 .github/workflows/images.yml                | 6 +++---
 .github/workflows/release.yml               | 2 +-
 3 files changed, 5 insertions(+), 5 deletions(-)

diff --git a/.github/workflows/desktop-macos-signing.yml b/.github/workflows/desktop-macos-signing.yml
index b4d1c5a7fb..09c8f70034 100644
--- a/.github/workflows/desktop-macos-signing.yml
+++ b/.github/workflows/desktop-macos-signing.yml
@@ -77,7 +77,7 @@ jobs:
   # apart.
   checks:
     name: Updater regressions (no Apple access)
-    runs-on: macos-15
+    runs-on: macos-26
     timeout-minutes: 15
     steps:
       - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
diff --git a/.github/workflows/images.yml b/.github/workflows/images.yml
index 81e5d2c8d6..db146317ff 100644
--- a/.github/workflows/images.yml
+++ b/.github/workflows/images.yml
@@ -165,7 +165,7 @@ jobs:
       packages: read
     steps:
       - uses: docker/setup-buildx-action@f87e5991a6d7451dcb8d9637bfbc97413f497069 # v4.4.1
-      - uses: docker/login-action@81c6f93d4bc991e510b342a00b419b3bb4efc5c6 # v4.7.0
+      - uses: docker/login-action@8aa5831fb8d48d8f76594c7ddde61ae58019f550 # v4.8.0
         with:
           registry: ghcr.io
           username: ${{ github.actor }}
@@ -237,7 +237,7 @@ jobs:
           ref: ${{ inputs.ref }}
           persist-credentials: false
       - uses: docker/setup-buildx-action@f87e5991a6d7451dcb8d9637bfbc97413f497069 # v4.4.1
-      - uses: docker/login-action@81c6f93d4bc991e510b342a00b419b3bb4efc5c6 # v4.7.0
+      - uses: docker/login-action@8aa5831fb8d48d8f76594c7ddde61ae58019f550 # v4.8.0
         with:
           registry: ghcr.io
           username: ${{ github.actor }}
@@ -311,7 +311,7 @@ jobs:
         image: ${{ fromJSON(needs.components.outputs.components) }}
     steps:
       - uses: docker/setup-buildx-action@f87e5991a6d7451dcb8d9637bfbc97413f497069 # v4.4.1
-      - uses: docker/login-action@81c6f93d4bc991e510b342a00b419b3bb4efc5c6 # v4.7.0
+      - uses: docker/login-action@8aa5831fb8d48d8f76594c7ddde61ae58019f550 # v4.8.0
         with:
           registry: ghcr.io
           username: ${{ github.actor }}
diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml
index 6d0f7a6d1f..5895b3e4bc 100644
--- a/.github/workflows/release.yml
+++ b/.github/workflows/release.yml
@@ -287,7 +287,7 @@ jobs:
       # gates the release itself instead of the proposal for one.
       - name: Open the release PR
         if: '!inputs.dry_run'
-        uses: peter-evans/create-pull-request@5f6978faf089d4d20b00c7766989d076bb2fc7f1 # v8.1.1
+        uses: peter-evans/create-pull-request@3ffccacd46053766916f087ce41d627c0b8cf2d1 # v8.1.3
         with:
           token: ${{ secrets.GITHUB_TOKEN }}
           branch: release/publish/v${{ steps.prepare.outputs.version }}