From dc33eefcd5d492b6bcbf1860fbce95ae8213782e Mon Sep 17 00:00:00 2001
From: "renovate[bot]" <29139614+renovate[bot]@users.noreply.github.com>
Date: Mon, 26 Oct 2026 16:37:08 +0000
Subject: [PATCH] chore(deps): update dependencies (minor)

---
 .github/workflows/osv-scanner.yml           | 4 ++--
 .github/workflows/renovate-dev-kit-lock.yml | 2 +-
 2 files changed, 3 insertions(+), 3 deletions(-)

diff --git a/.github/workflows/osv-scanner.yml b/.github/workflows/osv-scanner.yml
index cc5f552..c2a6e8f 100644
--- a/.github/workflows/osv-scanner.yml
+++ b/.github/workflows/osv-scanner.yml
@@ -33,7 +33,7 @@ jobs:
       actions: read
       security-events: write
       contents: read
-    uses: google/osv-scanner-action/.github/workflows/osv-scanner-reusable.yml@a345acffa64b0eaede81a3d9aae6141214d9c8fc # v2.6.0
+    uses: google/osv-scanner-action/.github/workflows/osv-scanner-reusable.yml@b1d267aea5211fa648d9d442fa64b90dbdcbdd36 # v2.7.0
     with:
       scan-args: ${{ inputs.scan-args }}
       runs-on: ubuntu-24.04
@@ -43,7 +43,7 @@ jobs:
       actions: read
       security-events: write
       contents: read
-    uses: google/osv-scanner-action/.github/workflows/osv-scanner-reusable-pr.yml@a345acffa64b0eaede81a3d9aae6141214d9c8fc # v2.6.0
+    uses: google/osv-scanner-action/.github/workflows/osv-scanner-reusable-pr.yml@b1d267aea5211fa648d9d442fa64b90dbdcbdd36 # v2.7.0
     with:
       scan-args: ${{ inputs.scan-args }}
       runs-on: ubuntu-24.04
diff --git a/.github/workflows/renovate-dev-kit-lock.yml b/.github/workflows/renovate-dev-kit-lock.yml
index 5d00173..8065e5d 100644
--- a/.github/workflows/renovate-dev-kit-lock.yml
+++ b/.github/workflows/renovate-dev-kit-lock.yml
@@ -76,7 +76,7 @@ jobs:
           HEAD_REF: ${{ github.event.pull_request.head.ref }}
           GO_BRANCH: ${{ inputs.go-branch }}
         run: ../dev-kit/scripts/renovate-relock.sh "$HEAD_REF" "$GO_BRANCH" >> "$GITHUB_OUTPUT"
-      - uses: actions/create-github-app-token@bcd2ba49218906704ab6c1aa796996da409d3eb1 # v3.2.0
+      - uses: actions/create-github-app-token@64ab729a6294000f5aa4a4bc0b73d1f32bc45510 # v3.3.0
         if: steps.relock.outputs.changed == 'true'
         id: app
         with: