diff --git a/actions.yml b/actions.yml
index deb1911e..6d43f591 100644
--- a/actions.yml
+++ b/actions.yml
@@ -196,6 +196,11 @@ carabiner-dev/actions/install/ampel:
     expires_at: 2026-10-20
   36a39ef667efe7112df8b1a534a4e37f35fad6fd:
     tag: v1.2.6
+  # transitive: ampel/verify @ v1.2.6 (36a39ef6) pins its internal action refs
+  # to this untagged commit. Verified carabiner release-bot commit, ancestor of
+  # 36a39ef6.
+  2fec8bd8e1dcfdea26080648070b4827f1fa0584:
+    expires_at: 2026-10-21
 carabiner-dev/actions/install/ampel-bootstrap:
   2a11d59a135c5e291f305f249a92ad7903e3ee0f:
     # transitive dep of carabiner-dev/actions/ampel/verify @ v1.2.0
@@ -233,6 +238,12 @@ carabiner-dev/actions/install/ampel-bootstrap:
   60563b5460a9e4ae9921c0da551b4ddd6059ff45:
     expires_at: 2026-10-20
   4c23ca5801511c2f0e9dd8c8dd011cab26a46be4: {}
+  # transitive: install/download-and-verify @ 4c23ca58 pins this ref, and
+  # @ 2fec8bd8 in turn pins 16009dca. Verified carabiner release-bot commits.
+  2fec8bd8e1dcfdea26080648070b4827f1fa0584:
+    expires_at: 2026-10-21
+  16009dca48ac369882d4333f1d15d7cd3a4ded31:
+    expires_at: 2026-10-21
 carabiner-dev/actions/install/bnd:
   2a11d59a135c5e291f305f249a92ad7903e3ee0f:
     # transitive dep of carabiner-dev/actions/ampel/verify @ v1.2.0
@@ -284,6 +295,13 @@ carabiner-dev/actions/install/download-and-verify:
   60563b5460a9e4ae9921c0da551b4ddd6059ff45:
     expires_at: 2026-10-20
   4c23ca5801511c2f0e9dd8c8dd011cab26a46be4: {}
+  # transitive: install/{ampel,bnd} @ v1.2.6 (36a39ef6) pin this ref, and
+  # install/ampel @ 2fec8bd8 in turn pins 16009dca. Verified carabiner
+  # release-bot commits.
+  2fec8bd8e1dcfdea26080648070b4827f1fa0584:
+    expires_at: 2026-10-21
+  16009dca48ac369882d4333f1d15d7cd3a4ded31:
+    expires_at: 2026-10-21
 carloscastrojumo/github-cherry-pick-action:
   503773289f4a459069c832dc628826685b75b4b3:
     tag: v1.0.10
diff --git a/approved_patterns.yml b/approved_patterns.yml
index 8f1168f8..9e8b02f7 100644
--- a/approved_patterns.yml
+++ b/approved_patterns.yml
@@ -76,6 +76,7 @@
 - carabiner-dev/actions/install/ampel@619a474b2178d06ccf274349397cd67a7802a4fe
 - carabiner-dev/actions/install/ampel@2a4b2cd115ede14629b03ef7e77586d3269d4c72
 - carabiner-dev/actions/install/ampel@36a39ef667efe7112df8b1a534a4e37f35fad6fd
+- carabiner-dev/actions/install/ampel@2fec8bd8e1dcfdea26080648070b4827f1fa0584
 - carabiner-dev/actions/install/ampel-bootstrap@2a11d59a135c5e291f305f249a92ad7903e3ee0f
 - carabiner-dev/actions/install/ampel-bootstrap@0a075bb75a68646d05f99c85cbbf2be40dd8e442
 - carabiner-dev/actions/install/ampel-bootstrap@9db1a064ca5691ef6f5d983031739ca287de0968
@@ -88,6 +89,8 @@
 - carabiner-dev/actions/install/ampel-bootstrap@619a474b2178d06ccf274349397cd67a7802a4fe
 - carabiner-dev/actions/install/ampel-bootstrap@60563b5460a9e4ae9921c0da551b4ddd6059ff45
 - carabiner-dev/actions/install/ampel-bootstrap@4c23ca5801511c2f0e9dd8c8dd011cab26a46be4
+- carabiner-dev/actions/install/ampel-bootstrap@2fec8bd8e1dcfdea26080648070b4827f1fa0584
+- carabiner-dev/actions/install/ampel-bootstrap@16009dca48ac369882d4333f1d15d7cd3a4ded31
 - carabiner-dev/actions/install/bnd@2a11d59a135c5e291f305f249a92ad7903e3ee0f
 - carabiner-dev/actions/install/bnd@e0e3b8149dafed833431095bc148d50e7eade4e8
 - carabiner-dev/actions/install/bnd@94f29392187fe5082d1195a7d4cae3a7ddf09d9c
@@ -105,6 +108,8 @@
 - carabiner-dev/actions/install/download-and-verify@be6b4fa42fa3a8432416475d74218b9aa51ea527
 - carabiner-dev/actions/install/download-and-verify@60563b5460a9e4ae9921c0da551b4ddd6059ff45
 - carabiner-dev/actions/install/download-and-verify@4c23ca5801511c2f0e9dd8c8dd011cab26a46be4
+- carabiner-dev/actions/install/download-and-verify@2fec8bd8e1dcfdea26080648070b4827f1fa0584
+- carabiner-dev/actions/install/download-and-verify@16009dca48ac369882d4333f1d15d7cd3a4ded31
 - carloscastrojumo/github-cherry-pick-action@503773289f4a459069c832dc628826685b75b4b3
 - carlosperate/arm-none-eabi-gcc-action@*
 - chromaui/action@*