From 300f93b3e2eee1f066468552aa4f44c913badc4e Mon Sep 17 00:00:00 2001
From: "renovatabot[bot]" <291602224+renovatabot[bot]@users.noreply.github.com>
Date: Mon, 14 Sep 2026 06:35:43 +0000
Subject: [PATCH] Update github-actions

---
 .github/workflows/publish.yml          | 4 ++--
 .github/workflows/renovate.yml         | 4 ++--
 .github/workflows/test.yml             | 2 +-
 .github/workflows/update-locations.yml | 2 +-
 4 files changed, 6 insertions(+), 6 deletions(-)

diff --git a/.github/workflows/publish.yml b/.github/workflows/publish.yml
index afd29d5..5607b3b 100644
--- a/.github/workflows/publish.yml
+++ b/.github/workflows/publish.yml
@@ -13,7 +13,7 @@ jobs:
     if: vars.PUBLISH_ENABLED == 'true'
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0  # v7.0.0
+      - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1  # v7.0.1
       - uses: astral-sh/setup-uv@11f9893b081a58869d3b5fccaea48c9e9e46f990  # v8.3.2
       - run: uv build
       - uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a  # v7.0.1
@@ -36,4 +36,4 @@ jobs:
         with:
           name: dist
           path: dist/
-      - uses: pypa/gh-action-pypi-publish@cef221092ed1bacb1cc03d23a2d87d1d172e277b  # v1.14.0
+      - uses: pypa/gh-action-pypi-publish@dc37677b2e1c63e2034f94d8a5b11f265b73ba33  # v1.14.2
diff --git a/.github/workflows/renovate.yml b/.github/workflows/renovate.yml
index eb5a264..124dc81 100644
--- a/.github/workflows/renovate.yml
+++ b/.github/workflows/renovate.yml
@@ -39,14 +39,14 @@ jobs:
           client-id: ${{ secrets.RENOVATE_CLIENT_ID }}
           private-key: ${{ secrets.RENOVATE_APP_PRIVATE_KEY }}
 
-      - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0  # v7.0.0
+      - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1  # v7.0.1
 
       - name: Run Renovate
         # configurationFile loads .github/renovate.json as Renovate's global config so the
         # settings apply even before the repo config is discovered on the default branch.
         # Renovate also auto-discovers the same committed file as repo config; the two layers
         # are identical, so the merge is harmless.
-        uses: renovatebot/github-action@b50d2ba2bd928235abdcc14d06dfafc217f1c565  # v46.1.18
+        uses: renovatebot/github-action@37beffda261423addd537c33f2d126df7f6ffbab  # v46.2.6
         with:
           token: ${{ steps.app-token.outputs.token }}
           configurationFile: .github/renovate.json
diff --git a/.github/workflows/test.yml b/.github/workflows/test.yml
index cd4c012..f0e489a 100644
--- a/.github/workflows/test.yml
+++ b/.github/workflows/test.yml
@@ -16,7 +16,7 @@ jobs:
       matrix:
         python-version: ["3.12", "3.13", "3.14"]
     steps:
-      - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0  # v7.0.0
+      - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1  # v7.0.1
       - uses: astral-sh/setup-uv@11f9893b081a58869d3b5fccaea48c9e9e46f990  # v8.3.2
       - run: uv python install ${{ matrix.python-version }}
       - run: uv sync --all-groups --python ${{ matrix.python-version }}
diff --git a/.github/workflows/update-locations.yml b/.github/workflows/update-locations.yml
index d69891c..04e5ba8 100644
--- a/.github/workflows/update-locations.yml
+++ b/.github/workflows/update-locations.yml
@@ -13,7 +13,7 @@ jobs:
   update-locations:
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0  # v7.0.0
+      - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1  # v7.0.1
       - uses: astral-sh/setup-uv@11f9893b081a58869d3b5fccaea48c9e9e46f990  # v8.3.2
       - run: uv sync --no-dev
       - name: Update geotargets CSV