From a7f608ba7ca9526312127d9843192e79a750d44e Mon Sep 17 00:00:00 2001
From: "khepri-bot[bot]" <269588972+khepri-bot[bot]@users.noreply.github.com>
Date: Tue, 28 Jul 2026 16:48:42 +0000
Subject: [PATCH] chore(deps): update all non-major dependencies

---
 .github/workflows/pr-checks.yaml                |  4 ++--
 .github/workflows/render-template.yaml          |  2 +-
 includes/ci-consistency-job.jinja               |  2 +-
 prek.toml                                       | 10 +++++-----
 template/.github/workflows/pr-checks.yaml.jinja |  2 +-
 template/prek.toml.jinja                        | 10 +++++-----
 6 files changed, 15 insertions(+), 15 deletions(-)

diff --git a/.github/workflows/pr-checks.yaml b/.github/workflows/pr-checks.yaml
index a45cdf4..428a5fd 100644
--- a/.github/workflows/pr-checks.yaml
+++ b/.github/workflows/pr-checks.yaml
@@ -18,7 +18,7 @@ jobs:
     runs-on: ubuntu-latest
     timeout-minutes: 15
     steps:
-      - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6
+      - uses: actions/checkout@d23441a48e516b6c34aea4fa41551a30e30af803 # v6
       - uses: ./.github/actions/nix-setup
       - name: Lint
         run: nix develop -c just lint
@@ -30,7 +30,7 @@ jobs:
   consistency:
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6
+      - uses: actions/checkout@d23441a48e516b6c34aea4fa41551a30e30af803 # v6
       - uses: ./.github/actions/nix-setup
       - name: Set up Git
         run: |
diff --git a/.github/workflows/render-template.yaml b/.github/workflows/render-template.yaml
index f3cb0d4..d3b6a2b 100644
--- a/.github/workflows/render-template.yaml
+++ b/.github/workflows/render-template.yaml
@@ -25,7 +25,7 @@ jobs:
       # up to the push) -- they should always run so template bugs still get caught
       # even when the bot token below is unset or invalid.
       - name: Checkout
-        uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6
+        uses: actions/checkout@d23441a48e516b6c34aea4fa41551a30e30af803 # v6
         with:
           ref: ${{ github.ref }}
 
diff --git a/includes/ci-consistency-job.jinja b/includes/ci-consistency-job.jinja
index a1a31be..0516d4e 100644
--- a/includes/ci-consistency-job.jinja
+++ b/includes/ci-consistency-job.jinja
@@ -3,7 +3,7 @@
   consistency:
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6
+      - uses: actions/checkout@d23441a48e516b6c34aea4fa41551a30e30af803 # v6
       - uses: ./.github/actions/nix-setup
       - name: Set up Git
         run: |
diff --git a/prek.toml b/prek.toml
index 8103867..2e26516 100644
--- a/prek.toml
+++ b/prek.toml
@@ -63,7 +63,7 @@ priority = 0
 
 [[repos]]
 repo = "https://github.com/editorconfig-checker/editorconfig-checker"
-rev = "v3.6.1"
+rev = "v3.8.0"
 
 [[repos.hooks]]
 id = "editorconfig-checker"
@@ -118,7 +118,7 @@ priority = 0
 
 [[repos]]
 repo = "https://github.com/rhysd/actionlint"
-rev = "v1.7.11"
+rev = "v1.7.12"
 
 [[repos.hooks]]
 id = "actionlint"
@@ -127,7 +127,7 @@ priority = 0
 
 [[repos]]
 repo = "https://github.com/python-jsonschema/check-jsonschema"
-rev = "0.37.0"
+rev = "0.37.4"
 
 [[repos.hooks]]
 id = "check-github-actions"
@@ -141,7 +141,7 @@ priority = 0
 
 [[repos]]
 repo = "https://github.com/renovatebot/pre-commit-hooks"
-rev = "43.76.4"
+rev = "43.263.3"
 
 [[repos.hooks]]
 id = "renovate-config-validator"
@@ -151,7 +151,7 @@ priority = 0
 
 [[repos]]
 repo = "https://github.com/gitleaks/gitleaks"
-rev = "v8.30.0"
+rev = "v8.30.1"
 
 [[repos.hooks]]
 id = "gitleaks"
diff --git a/template/.github/workflows/pr-checks.yaml.jinja b/template/.github/workflows/pr-checks.yaml.jinja
index 928014e..94ccaa6 100644
--- a/template/.github/workflows/pr-checks.yaml.jinja
+++ b/template/.github/workflows/pr-checks.yaml.jinja
@@ -19,7 +19,7 @@ jobs:
     runs-on: ubuntu-latest
     timeout-minutes: 15
     steps:
-      - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6
+      - uses: actions/checkout@d23441a48e516b6c34aea4fa41551a30e30af803 # v6
       - uses: ./.github/actions/nix-setup
       - name: Lint
         run: nix develop -c just lint
diff --git a/template/prek.toml.jinja b/template/prek.toml.jinja
index 5294871..dc22587 100644
--- a/template/prek.toml.jinja
+++ b/template/prek.toml.jinja
@@ -63,7 +63,7 @@ priority = 0
 
 [[repos]]
 repo = "https://github.com/editorconfig-checker/editorconfig-checker"
-rev = "v3.6.1"
+rev = "v3.8.0"
 
 [[repos.hooks]]
 id = "editorconfig-checker"
@@ -119,7 +119,7 @@ priority = 0
 
 [[repos]]
 repo = "https://github.com/rhysd/actionlint"
-rev = "v1.7.11"
+rev = "v1.7.12"
 
 [[repos.hooks]]
 id = "actionlint"
@@ -128,7 +128,7 @@ priority = 0
 
 [[repos]]
 repo = "https://github.com/python-jsonschema/check-jsonschema"
-rev = "0.37.0"
+rev = "0.37.4"
 
 [[repos.hooks]]
 id = "check-github-actions"
@@ -142,7 +142,7 @@ priority = 0
 
 [[repos]]
 repo = "https://github.com/renovatebot/pre-commit-hooks"
-rev = "43.76.4"
+rev = "43.263.3"
 
 [[repos.hooks]]
 id = "renovate-config-validator"
@@ -153,7 +153,7 @@ priority = 0
 
 [[repos]]
 repo = "https://github.com/gitleaks/gitleaks"
-rev = "v8.30.0"
+rev = "v8.30.1"
 
 [[repos.hooks]]
 id = "gitleaks"