ci(github-action): update action devsecninja/.github ( v1.6.1 ➔ v1.7.0 ) [automerge]

[renovate]

This PR contains the following updates:

Package	Type	Update	Change
DevSecNinja/.github	action	minor	v1.6.1 → v1.7.0

---

Release Notes

DevSecNinja/.github (DevSecNinja/.github)

v1.7.0

Compare Source

Features

• deps: update dependency wrangler ( 4.95.0 ➔ 4.97.0 ) [automerge] (#​158) (3d14dd6)
• deps: update dependency wrangler ( 4.97.0 ➔ 4.98.0 ) [automerge] (#​162) (c04ee2c)
• deps: update dependency wrangler ( 4.98.0 ➔ 4.100.0 ) [automerge] (#​174) (416eecb)
• renovate: add digest-pinned container image custom manager (#​172) (aa43930)
• renovate: branch-automerge dotfiles devcontainer digest updates without tests (#​161) (5657813)
• renovate: merge dotfiles devcontainer digests anytime and fix dprint failure (#​164) (a0618e2)

Bug Fixes

• github-release: update mise ( v2026.5.11 ➔ v2026.5.14 ) [automerge] (#​153) (56550d3)
• github-release: update mise ( v2026.5.14 ➔ v2026.5.15 ) [automerge] (#​159) (334758a)
• github-release: update mise ( v2026.5.15 ➔ v2026.5.16 ) [automerge] (#​167) (7b793ad)
• make go-lint version optional since we don't always lint go (61a23c2)
• mise: update tool lefthook ( 2.1.6 ➔ 2.1.8 ) [automerge] (#​154) (947b145)
• mise: update tool lefthook ( 2.1.8 ➔ 2.1.9 ) [automerge] (#​169) (566ce48)
• mise: update tool pipx:checkov ( 3.2.529 ➔ 3.2.530 ) [automerge] (#​168) (11841c5)
• prevent shellcheck/shfmt failure when no shell scripts exist (42655d5)
• renovate: add minimumReleaseAge 0 to autoMerge configuration (40ac871)
• renovate: expand CODEOWNERS bot-bump exceptions to cover manifests (df89220)
• renovate: strip leading v from mise node version pins (#​176) (ec1a62a)
• temp update base.json5 to allow unsafe executions (652fcb3)

---

Configuration

📅 Schedule: (in timezone Europe/Amsterdam)

• Branch creation
  • "every weekend,on Friday"
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Enabled.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.

[github-actions]

Dependency Review

✅ No vulnerabilities or license issues or OpenSSF Scorecard issues found.

OpenSSF Scorecard

Package	Version	Score	Details
actions/DevSecNinja/.github/.github/workflows/lint.yml	c1725a7573e1cb5277889d925901b477ee814352	Unknown	Unknown

Scanned Files

• .github/workflows/lint.yml