From e0c6310631392129bd2f5e17a8e659ca6ff1853e Mon Sep 17 00:00:00 2001
From: cplieger <917744+cplieger@users.noreply.github.com>
Date: Fri, 9 Oct 2026 19:18:40 +0200
Subject: [PATCH] ci: run the v3 shared checks

---
 .github/workflows/ci.yaml      | 4 ++--
 .github/workflows/codeql.yml   | 4 ++--
 .github/workflows/security.yml | 4 ++--
 3 files changed, 6 insertions(+), 6 deletions(-)

diff --git a/.github/workflows/ci.yaml b/.github/workflows/ci.yaml
index 84dc780..52879b2 100644
--- a/.github/workflows/ci.yaml
+++ b/.github/workflows/ci.yaml
@@ -3,7 +3,7 @@
 # required `ci / validate` check. No paths filter, so the required check
 # always reports. Hand-maintained: this repo has no go.mod, jsr.json or
 # Dockerfile, so the sync does not deliver it. Renovate bumps the pin through
-# the `# v2` comment.
+# the `# v3` comment.
 name: CI
 
 on:
@@ -22,4 +22,4 @@ concurrency:
 
 jobs:
   ci:
-    uses: cplieger/ci/.github/workflows/ci.yaml@51affb0eab0a80aa0711a6e7c7e0d1339e0c62f2 # v2
+    uses: cplieger/ci/.github/workflows/ci.yaml@b5c28aa5341aa41fa0795f698bd44d0e26ff299a # v3
diff --git a/.github/workflows/codeql.yml b/.github/workflows/codeql.yml
index 540df50..bc6d668 100644
--- a/.github/workflows/codeql.yml
+++ b/.github/workflows/codeql.yml
@@ -1,7 +1,7 @@
 # CodeQL static analysis. Uploads SARIF to the repo's Security tab and backs the
 # code-scanning branch-protection gate. Hand-maintained: this repo has no
 # go.mod, jsr.json or Dockerfile, so the sync does not deliver it. Renovate
-# bumps the pin through the `# v2` comment.
+# bumps the pin through the `# v3` comment.
 name: CodeQL
 
 on:
@@ -20,4 +20,4 @@ jobs:
       security-events: write
       contents: read
       actions: read
-    uses: cplieger/ci/.github/workflows/codeql.yaml@51affb0eab0a80aa0711a6e7c7e0d1339e0c62f2 # v2
+    uses: cplieger/ci/.github/workflows/codeql.yaml@b5c28aa5341aa41fa0795f698bd44d0e26ff299a # v3
diff --git a/.github/workflows/security.yml b/.github/workflows/security.yml
index dcca7cf..37f24be 100644
--- a/.github/workflows/security.yml
+++ b/.github/workflows/security.yml
@@ -1,6 +1,6 @@
 # Dependency and vulnerability review. Hand-maintained: this repo has no
 # go.mod, jsr.json or Dockerfile, so the sync does not deliver it. Renovate
-# bumps the pin through the `# v2` comment.
+# bumps the pin through the `# v3` comment.
 name: Security
 
 on:
@@ -20,4 +20,4 @@ jobs:
     permissions:
       contents: read
       security-events: write
-    uses: cplieger/ci/.github/workflows/security-scan.yaml@51affb0eab0a80aa0711a6e7c7e0d1339e0c62f2 # v2
+    uses: cplieger/ci/.github/workflows/security-scan.yaml@b5c28aa5341aa41fa0795f698bd44d0e26ff299a # v3