From f8fa84c55e9ce07724e067dd7bcbc903a893b67a Mon Sep 17 00:00:00 2001
From: "renovate[bot]" <29139614+renovate[bot]@users.noreply.github.com>
Date: Mon, 25 May 2026 12:34:26 +0000
Subject: [PATCH] =?UTF-8?q?=E2=AC=86=EF=B8=8F=20Update=20GitHub=20Actions?=
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

---
 .github/workflows/upstream-ci.yaml     | 4 ++--
 .github/workflows/upstream-deploy.yaml | 2 +-
 2 files changed, 3 insertions(+), 3 deletions(-)

diff --git a/.github/workflows/upstream-ci.yaml b/.github/workflows/upstream-ci.yaml
index d6c0849..1282f37 100644
--- a/.github/workflows/upstream-ci.yaml
+++ b/.github/workflows/upstream-ci.yaml
@@ -114,7 +114,7 @@ jobs:
         with:
           python-version: "3.14"
       - name: ⚡ Set up uv
-        uses: astral-sh/setup-uv@v7
+        uses: astral-sh/setup-uv@v8.1.0
         with:
           version: "0.11.16"
       - name: 🧰 Install test dependencies
@@ -201,7 +201,7 @@ jobs:
           fi
       - name: 🚀 Build
         id: build
-        uses: docker/build-push-action@v6
+        uses: docker/build-push-action@v7
         with:
           push: false
           # Intentionally rely on image ID rather than tags for smoke testing.
diff --git a/.github/workflows/upstream-deploy.yaml b/.github/workflows/upstream-deploy.yaml
index a4e81e0..65fe13b 100644
--- a/.github/workflows/upstream-deploy.yaml
+++ b/.github/workflows/upstream-deploy.yaml
@@ -113,7 +113,7 @@ jobs:
           username: ${{ steps.registry.outputs.owner }}
           password: ${{ secrets.GITHUB_TOKEN }}
       - name: 🚀 Build
-        uses: docker/build-push-action@10e90e3645eae34f1e60eeb005ba3a3d33f178e8 # v6.19.2
+        uses: docker/build-push-action@f9f3042f7e2789586610d6e8b85c8f03e5195baf # v7.2.0
         with:
           load: true
           # yamllint disable rule:line-length