From ec2f2c1b0ed412fe94f527e72e780ad373371470 Mon Sep 17 00:00:00 2001
From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com>
Date: Mon, 24 Aug 2026 17:33:32 +0000
Subject: [PATCH] chore(deps): Bump the minor-patch group with 13 updates

Bumps the minor-patch group with 13 updates:

| Package | From | To |
| --- | --- | --- |
| [chainguard-dev/actions/goimports](https://github.com/chainguard-dev/actions) | `1.6.31` | `1.6.32` |
| [github/codeql-action/init](https://github.com/github/codeql-action) | `4.37.7` | `4.37.8` |
| [github/codeql-action/analyze](https://github.com/github/codeql-action) | `4.37.7` | `4.37.8` |
| [chainguard-dev/actions/donotsubmit](https://github.com/chainguard-dev/actions) | `1.6.31` | `1.6.32` |
| [mikefarah/yq](https://github.com/mikefarah/yq) | `4.53.3` | `4.53.6` |
| [chainguard-dev/actions/setup-mirror](https://github.com/chainguard-dev/actions) | `1.6.31` | `1.6.32` |
| [chainguard-dev/actions/kind-diag](https://github.com/chainguard-dev/actions) | `1.6.31` | `1.6.32` |
| [chainguard-dev/actions/setup-kind](https://github.com/chainguard-dev/actions) | `1.6.31` | `1.6.32` |
| [github/codeql-action/upload-sarif](https://github.com/github/codeql-action) | `4.37.7` | `4.37.8` |
| [chainguard-dev/actions/gofmt](https://github.com/chainguard-dev/actions) | `1.6.31` | `1.6.32` |
| [chainguard-dev/actions/nodiff](https://github.com/chainguard-dev/actions) | `1.6.31` | `1.6.32` |
| [chainguard-dev/actions/trailing-space](https://github.com/chainguard-dev/actions) | `1.6.31` | `1.6.32` |
| [chainguard-dev/actions/eof-newline](https://github.com/chainguard-dev/actions) | `1.6.31` | `1.6.32` |


Updates `chainguard-dev/actions/goimports` from 1.6.31 to 1.6.32
- [Release notes](https://github.com/chainguard-dev/actions/releases)
- [Commits](https://github.com/chainguard-dev/actions/compare/bed8050123fff65538e2db1902ff9404030c0221...7bd1e94b2a1b7faa891392757de7d89489070c5c)

Updates `github/codeql-action/init` from 4.37.7 to 4.37.8
- [Release notes](https://github.com/github/codeql-action/releases)
- [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md)
- [Commits](https://github.com/github/codeql-action/compare/ff2f1c621b7f889edc0d3c761ac2e6a3f8cdb0dd...db488ddef3bf6cb639b32c2e9a7c0a7ea8271d28)

Updates `github/codeql-action/analyze` from 4.37.7 to 4.37.8
- [Release notes](https://github.com/github/codeql-action/releases)
- [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md)
- [Commits](https://github.com/github/codeql-action/compare/ff2f1c621b7f889edc0d3c761ac2e6a3f8cdb0dd...db488ddef3bf6cb639b32c2e9a7c0a7ea8271d28)

Updates `chainguard-dev/actions/donotsubmit` from 1.6.31 to 1.6.32
- [Release notes](https://github.com/chainguard-dev/actions/releases)
- [Commits](https://github.com/chainguard-dev/actions/compare/bed8050123fff65538e2db1902ff9404030c0221...7bd1e94b2a1b7faa891392757de7d89489070c5c)

Updates `mikefarah/yq` from 4.53.3 to 4.53.6
- [Release notes](https://github.com/mikefarah/yq/releases)
- [Changelog](https://github.com/mikefarah/yq/blob/master/release_notes.txt)
- [Commits](https://github.com/mikefarah/yq/compare/1b9b4ac5187171d2e5e3129be0cfa827c7f9d53d...c14f446382944492701b16c1ddb48bb9dbe683e3)

Updates `chainguard-dev/actions/setup-mirror` from 1.6.31 to 1.6.32
- [Release notes](https://github.com/chainguard-dev/actions/releases)
- [Commits](https://github.com/chainguard-dev/actions/compare/bed8050123fff65538e2db1902ff9404030c0221...7bd1e94b2a1b7faa891392757de7d89489070c5c)

Updates `chainguard-dev/actions/kind-diag` from 1.6.31 to 1.6.32
- [Release notes](https://github.com/chainguard-dev/actions/releases)
- [Commits](https://github.com/chainguard-dev/actions/compare/bed8050123fff65538e2db1902ff9404030c0221...7bd1e94b2a1b7faa891392757de7d89489070c5c)

Updates `chainguard-dev/actions/setup-kind` from 1.6.31 to 1.6.32
- [Release notes](https://github.com/chainguard-dev/actions/releases)
- [Commits](https://github.com/chainguard-dev/actions/compare/bed8050123fff65538e2db1902ff9404030c0221...7bd1e94b2a1b7faa891392757de7d89489070c5c)

Updates `github/codeql-action/upload-sarif` from 4.37.7 to 4.37.8
- [Release notes](https://github.com/github/codeql-action/releases)
- [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md)
- [Commits](https://github.com/github/codeql-action/compare/ff2f1c621b7f889edc0d3c761ac2e6a3f8cdb0dd...db488ddef3bf6cb639b32c2e9a7c0a7ea8271d28)

Updates `chainguard-dev/actions/gofmt` from 1.6.31 to 1.6.32
- [Release notes](https://github.com/chainguard-dev/actions/releases)
- [Commits](https://github.com/chainguard-dev/actions/compare/bed8050123fff65538e2db1902ff9404030c0221...7bd1e94b2a1b7faa891392757de7d89489070c5c)

Updates `chainguard-dev/actions/nodiff` from 1.6.31 to 1.6.32
- [Release notes](https://github.com/chainguard-dev/actions/releases)
- [Commits](https://github.com/chainguard-dev/actions/compare/bed8050123fff65538e2db1902ff9404030c0221...7bd1e94b2a1b7faa891392757de7d89489070c5c)

Updates `chainguard-dev/actions/trailing-space` from 1.6.31 to 1.6.32
- [Release notes](https://github.com/chainguard-dev/actions/releases)
- [Commits](https://github.com/chainguard-dev/actions/compare/bed8050123fff65538e2db1902ff9404030c0221...7bd1e94b2a1b7faa891392757de7d89489070c5c)

Updates `chainguard-dev/actions/eof-newline` from 1.6.31 to 1.6.32
- [Release notes](https://github.com/chainguard-dev/actions/releases)
- [Commits](https://github.com/chainguard-dev/actions/compare/bed8050123fff65538e2db1902ff9404030c0221...7bd1e94b2a1b7faa891392757de7d89489070c5c)

---
updated-dependencies:
- dependency-name: chainguard-dev/actions/goimports
  dependency-version: 1.6.32
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: minor-patch
- dependency-name: github/codeql-action/init
  dependency-version: 4.37.8
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: minor-patch
- dependency-name: github/codeql-action/analyze
  dependency-version: 4.37.8
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: minor-patch
- dependency-name: chainguard-dev/actions/donotsubmit
  dependency-version: 1.6.32
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: minor-patch
- dependency-name: mikefarah/yq
  dependency-version: 4.53.6
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: minor-patch
- dependency-name: chainguard-dev/actions/setup-mirror
  dependency-version: 1.6.32
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: minor-patch
- dependency-name: chainguard-dev/actions/kind-diag
  dependency-version: 1.6.32
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: minor-patch
- dependency-name: chainguard-dev/actions/setup-kind
  dependency-version: 1.6.32
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: minor-patch
- dependency-name: github/codeql-action/upload-sarif
  dependency-version: 4.37.8
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: minor-patch
- dependency-name: chainguard-dev/actions/gofmt
  dependency-version: 1.6.32
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: minor-patch
- dependency-name: chainguard-dev/actions/nodiff
  dependency-version: 1.6.32
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: minor-patch
- dependency-name: chainguard-dev/actions/trailing-space
  dependency-version: 1.6.32
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: minor-patch
- dependency-name: chainguard-dev/actions/eof-newline
  dependency-version: 1.6.32
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: minor-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
---
 .github/workflows/build.yaml                               | 2 +-
 .github/workflows/codeql-analysis.yml                      | 4 ++--
 .github/workflows/donotsubmit.yaml                         | 2 +-
 .github/workflows/kind-cluster-image-policy-no-tuf.yaml    | 6 +++---
 .github/workflows/kind-cluster-image-policy-trustroot.yaml | 6 +++---
 .github/workflows/kind-cluster-image-policy-tsa.yaml       | 6 +++---
 .github/workflows/kind-cluster-image-policy.yaml           | 6 +++---
 .github/workflows/kind-e2e-cosigned.yaml                   | 6 +++---
 .github/workflows/kind-e2e-trustroot-crd.yaml              | 6 +++---
 .github/workflows/scorecard_action.yml                     | 2 +-
 .github/workflows/style.yaml                               | 4 ++--
 .github/workflows/verify-codegen.yaml                      | 2 +-
 .github/workflows/verify-docs.yaml                         | 2 +-
 .github/workflows/whitespace.yaml                          | 4 ++--
 14 files changed, 29 insertions(+), 29 deletions(-)

diff --git a/.github/workflows/build.yaml b/.github/workflows/build.yaml
index 37878e065..09029382d 100644
--- a/.github/workflows/build.yaml
+++ b/.github/workflows/build.yaml
@@ -52,7 +52,7 @@ jobs:
           # release before the strict check; unpin once a ko release includes #1699.
           version: v0.18.1
 
-      - uses: chainguard-dev/actions/goimports@bed8050123fff65538e2db1902ff9404030c0221 # v1.6.31
+      - uses: chainguard-dev/actions/goimports@7bd1e94b2a1b7faa891392757de7d89489070c5c # v1.6.32
 
       - name: Set up Cloud SDK
         uses: google-github-actions/auth@7c6bc770dae815cd3e89ee6cdf493a5fab2cc093 # v3.0.0
diff --git a/.github/workflows/codeql-analysis.yml b/.github/workflows/codeql-analysis.yml
index 7e2f3f2ec..2ee1a32e3 100644
--- a/.github/workflows/codeql-analysis.yml
+++ b/.github/workflows/codeql-analysis.yml
@@ -61,7 +61,7 @@ jobs:
 
     # Initializes the CodeQL tools for scanning.
     - name: Initialize CodeQL
-      uses: github/codeql-action/init@ff2f1c621b7f889edc0d3c761ac2e6a3f8cdb0dd # v3.29.5
+      uses: github/codeql-action/init@db488ddef3bf6cb639b32c2e9a7c0a7ea8271d28 # v3.29.5
       with:
         languages: ${{ matrix.language }}
 
@@ -70,4 +70,4 @@ jobs:
         make policy-controller
 
     - name: Perform CodeQL Analysis
-      uses: github/codeql-action/analyze@ff2f1c621b7f889edc0d3c761ac2e6a3f8cdb0dd # v3.29.5
+      uses: github/codeql-action/analyze@db488ddef3bf6cb639b32c2e9a7c0a7ea8271d28 # v3.29.5
diff --git a/.github/workflows/donotsubmit.yaml b/.github/workflows/donotsubmit.yaml
index 8e99133c1..888fd3763 100644
--- a/.github/workflows/donotsubmit.yaml
+++ b/.github/workflows/donotsubmit.yaml
@@ -17,4 +17,4 @@ jobs:
         uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 #v7.0.1
 
       - name: Do Not Submit
-        uses: chainguard-dev/actions/donotsubmit@bed8050123fff65538e2db1902ff9404030c0221 # v1.6.31
+        uses: chainguard-dev/actions/donotsubmit@7bd1e94b2a1b7faa891392757de7d89489070c5c # v1.6.32
diff --git a/.github/workflows/kind-cluster-image-policy-no-tuf.yaml b/.github/workflows/kind-cluster-image-policy-no-tuf.yaml
index 5b56c77fe..313c1bd1c 100644
--- a/.github/workflows/kind-cluster-image-policy-no-tuf.yaml
+++ b/.github/workflows/kind-cluster-image-policy-no-tuf.yaml
@@ -110,10 +110,10 @@ jobs:
     - uses: imranismail/setup-kustomize@53f941b41dca13ed61874bbc6b4b6e1562877530 # v3.0.0
 
     - name: Install yq
-      uses: mikefarah/yq@1b9b4ac5187171d2e5e3129be0cfa827c7f9d53d # v4.53.3
+      uses: mikefarah/yq@c14f446382944492701b16c1ddb48bb9dbe683e3 # v4.53.6
 
     - name: Setup mirror
-      uses: chainguard-dev/actions/setup-mirror@bed8050123fff65538e2db1902ff9404030c0221 # v1.6.31
+      uses: chainguard-dev/actions/setup-mirror@7bd1e94b2a1b7faa891392757de7d89489070c5c # v1.6.32
       with:
         mirror: mirror.gcr.io
 
@@ -147,4 +147,4 @@ jobs:
 
     - name: Collect diagnostics
       if: ${{ failure() }}
-      uses: chainguard-dev/actions/kind-diag@bed8050123fff65538e2db1902ff9404030c0221 # v1.6.31
+      uses: chainguard-dev/actions/kind-diag@7bd1e94b2a1b7faa891392757de7d89489070c5c # v1.6.32
diff --git a/.github/workflows/kind-cluster-image-policy-trustroot.yaml b/.github/workflows/kind-cluster-image-policy-trustroot.yaml
index 7692a2afc..437e5040c 100644
--- a/.github/workflows/kind-cluster-image-policy-trustroot.yaml
+++ b/.github/workflows/kind-cluster-image-policy-trustroot.yaml
@@ -115,10 +115,10 @@ jobs:
     - uses: imranismail/setup-kustomize@53f941b41dca13ed61874bbc6b4b6e1562877530 # v3.0.0
 
     - name: Install yq
-      uses: mikefarah/yq@1b9b4ac5187171d2e5e3129be0cfa827c7f9d53d # v4.53.3
+      uses: mikefarah/yq@c14f446382944492701b16c1ddb48bb9dbe683e3 # v4.53.6
 
     - name: Setup mirror
-      uses: chainguard-dev/actions/setup-mirror@bed8050123fff65538e2db1902ff9404030c0221 # v1.6.31
+      uses: chainguard-dev/actions/setup-mirror@7bd1e94b2a1b7faa891392757de7d89489070c5c # v1.6.32
       with:
         mirror: mirror.gcr.io
 
@@ -154,4 +154,4 @@ jobs:
 
     - name: Collect diagnostics
       if: ${{ failure() }}
-      uses: chainguard-dev/actions/kind-diag@bed8050123fff65538e2db1902ff9404030c0221 # v1.6.31
+      uses: chainguard-dev/actions/kind-diag@7bd1e94b2a1b7faa891392757de7d89489070c5c # v1.6.32
diff --git a/.github/workflows/kind-cluster-image-policy-tsa.yaml b/.github/workflows/kind-cluster-image-policy-tsa.yaml
index bd94e4c37..f046c2d7a 100644
--- a/.github/workflows/kind-cluster-image-policy-tsa.yaml
+++ b/.github/workflows/kind-cluster-image-policy-tsa.yaml
@@ -110,10 +110,10 @@ jobs:
     - uses: imranismail/setup-kustomize@53f941b41dca13ed61874bbc6b4b6e1562877530 # v3.0.0
 
     - name: Install yq
-      uses: mikefarah/yq@1b9b4ac5187171d2e5e3129be0cfa827c7f9d53d # v4.53.3
+      uses: mikefarah/yq@c14f446382944492701b16c1ddb48bb9dbe683e3 # v4.53.6
 
     - name: Setup mirror
-      uses: chainguard-dev/actions/setup-mirror@bed8050123fff65538e2db1902ff9404030c0221 # v1.6.31
+      uses: chainguard-dev/actions/setup-mirror@7bd1e94b2a1b7faa891392757de7d89489070c5c # v1.6.32
       with:
         mirror: mirror.gcr.io
 
@@ -183,4 +183,4 @@ jobs:
 
     - name: Collect diagnostics
       if: ${{ failure() }}
-      uses: chainguard-dev/actions/kind-diag@bed8050123fff65538e2db1902ff9404030c0221 # v1.6.31
+      uses: chainguard-dev/actions/kind-diag@7bd1e94b2a1b7faa891392757de7d89489070c5c # v1.6.32
diff --git a/.github/workflows/kind-cluster-image-policy.yaml b/.github/workflows/kind-cluster-image-policy.yaml
index b18bf9b08..f62b85648 100644
--- a/.github/workflows/kind-cluster-image-policy.yaml
+++ b/.github/workflows/kind-cluster-image-policy.yaml
@@ -125,10 +125,10 @@ jobs:
     - uses: imranismail/setup-kustomize@53f941b41dca13ed61874bbc6b4b6e1562877530 # v3.0.0
 
     - name: Install yq
-      uses: mikefarah/yq@1b9b4ac5187171d2e5e3129be0cfa827c7f9d53d # v4.53.3
+      uses: mikefarah/yq@c14f446382944492701b16c1ddb48bb9dbe683e3 # v4.53.6
 
     - name: Setup mirror
-      uses: chainguard-dev/actions/setup-mirror@bed8050123fff65538e2db1902ff9404030c0221 # v1.6.31
+      uses: chainguard-dev/actions/setup-mirror@7bd1e94b2a1b7faa891392757de7d89489070c5c # v1.6.32
       with:
         mirror: mirror.gcr.io
 
@@ -179,4 +179,4 @@ jobs:
 
     - name: Collect diagnostics
       if: ${{ failure() }}
-      uses: chainguard-dev/actions/kind-diag@bed8050123fff65538e2db1902ff9404030c0221 # v1.6.31
+      uses: chainguard-dev/actions/kind-diag@7bd1e94b2a1b7faa891392757de7d89489070c5c # v1.6.32
diff --git a/.github/workflows/kind-e2e-cosigned.yaml b/.github/workflows/kind-e2e-cosigned.yaml
index 8d99adbea..3f66908e1 100644
--- a/.github/workflows/kind-e2e-cosigned.yaml
+++ b/.github/workflows/kind-e2e-cosigned.yaml
@@ -118,12 +118,12 @@ jobs:
     - uses: sigstore/cosign-installer@d58896d6a1865668819e1d91763c7751a165e159 # v3.9.2
 
     - name: Setup mirror
-      uses: chainguard-dev/actions/setup-mirror@bed8050123fff65538e2db1902ff9404030c0221 # v1.6.31
+      uses: chainguard-dev/actions/setup-mirror@7bd1e94b2a1b7faa891392757de7d89489070c5c # v1.6.32
       with:
         mirror: mirror.gcr.io
 
     - name: Setup kind cluster
-      uses: chainguard-dev/actions/setup-kind@bed8050123fff65538e2db1902ff9404030c0221 # v1.6.31
+      uses: chainguard-dev/actions/setup-kind@7bd1e94b2a1b7faa891392757de7d89489070c5c # v1.6.32
       with:
         k8s-version: ${{ matrix.k8s-version }}
         cluster-suffix: c${{ github.run_id }}.local
@@ -180,4 +180,4 @@ jobs:
 
     - name: Collect diagnostics
       if: ${{ failure() }}
-      uses: chainguard-dev/actions/kind-diag@bed8050123fff65538e2db1902ff9404030c0221 # v1.6.31
+      uses: chainguard-dev/actions/kind-diag@7bd1e94b2a1b7faa891392757de7d89489070c5c # v1.6.32
diff --git a/.github/workflows/kind-e2e-trustroot-crd.yaml b/.github/workflows/kind-e2e-trustroot-crd.yaml
index 37f1b4934..51bac8c91 100644
--- a/.github/workflows/kind-e2e-trustroot-crd.yaml
+++ b/.github/workflows/kind-e2e-trustroot-crd.yaml
@@ -118,12 +118,12 @@ jobs:
     - uses: sigstore/cosign-installer@d58896d6a1865668819e1d91763c7751a165e159
 
     - name: Setup mirror
-      uses: chainguard-dev/actions/setup-mirror@bed8050123fff65538e2db1902ff9404030c0221 # v1.6.31
+      uses: chainguard-dev/actions/setup-mirror@7bd1e94b2a1b7faa891392757de7d89489070c5c # v1.6.32
       with:
         mirror: mirror.gcr.io
 
     - name: Setup kind cluster
-      uses: chainguard-dev/actions/setup-kind@bed8050123fff65538e2db1902ff9404030c0221 # v1.6.31
+      uses: chainguard-dev/actions/setup-kind@7bd1e94b2a1b7faa891392757de7d89489070c5c # v1.6.32
       with:
         k8s-version: ${{ matrix.k8s-version }}
         cluster-suffix: c${{ github.run_id }}.local
@@ -151,4 +151,4 @@ jobs:
 
     - name: Collect diagnostics
       if: ${{ failure() }}
-      uses: chainguard-dev/actions/kind-diag@bed8050123fff65538e2db1902ff9404030c0221 # v1.6.31
+      uses: chainguard-dev/actions/kind-diag@7bd1e94b2a1b7faa891392757de7d89489070c5c # v1.6.32
diff --git a/.github/workflows/scorecard_action.yml b/.github/workflows/scorecard_action.yml
index 247e5caa9..56bfb7588 100644
--- a/.github/workflows/scorecard_action.yml
+++ b/.github/workflows/scorecard_action.yml
@@ -53,6 +53,6 @@ jobs:
 
       # Upload the results to GitHub's code scanning dashboard.
       - name: "Upload to code-scanning"
-        uses: github/codeql-action/upload-sarif@ff2f1c621b7f889edc0d3c761ac2e6a3f8cdb0dd # v3.29.5
+        uses: github/codeql-action/upload-sarif@db488ddef3bf6cb639b32c2e9a7c0a7ea8271d28 # v3.29.5
         with:
           sarif_file: results.sarif
diff --git a/.github/workflows/style.yaml b/.github/workflows/style.yaml
index e563747b2..ca2145f7d 100644
--- a/.github/workflows/style.yaml
+++ b/.github/workflows/style.yaml
@@ -21,7 +21,7 @@ jobs:
           go-version-file: './go.mod'
           check-latest: true
 
-      - uses: chainguard-dev/actions/gofmt@bed8050123fff65538e2db1902ff9404030c0221 # v1.6.31
+      - uses: chainguard-dev/actions/gofmt@7bd1e94b2a1b7faa891392757de7d89489070c5c # v1.6.32
         with:
           args: -s
 
@@ -39,4 +39,4 @@ jobs:
           go-version-file: './go.mod'
           check-latest: true
 
-      - uses: chainguard-dev/actions/goimports@bed8050123fff65538e2db1902ff9404030c0221 # v1.6.31
+      - uses: chainguard-dev/actions/goimports@7bd1e94b2a1b7faa891392757de7d89489070c5c # v1.6.32
diff --git a/.github/workflows/verify-codegen.yaml b/.github/workflows/verify-codegen.yaml
index 94cf60edb..966e0ea27 100644
--- a/.github/workflows/verify-codegen.yaml
+++ b/.github/workflows/verify-codegen.yaml
@@ -50,7 +50,7 @@ jobs:
         # For whatever reason running this makes it not complain...
         git status
 
-    - uses: chainguard-dev/actions/nodiff@bed8050123fff65538e2db1902ff9404030c0221 # v1.6.31
+    - uses: chainguard-dev/actions/nodiff@7bd1e94b2a1b7faa891392757de7d89489070c5c # v1.6.32
       with:
         path: ./src/github.com/${{ github.repository }}
         fixup-command: "./hack/update-codegen.sh"
diff --git a/.github/workflows/verify-docs.yaml b/.github/workflows/verify-docs.yaml
index 9339ccedd..844e1a128 100644
--- a/.github/workflows/verify-docs.yaml
+++ b/.github/workflows/verify-docs.yaml
@@ -50,7 +50,7 @@ jobs:
         # For whatever reason running this makes it not complain...
         git status
 
-    - uses: chainguard-dev/actions/nodiff@bed8050123fff65538e2db1902ff9404030c0221 # v1.6.31
+    - uses: chainguard-dev/actions/nodiff@7bd1e94b2a1b7faa891392757de7d89489070c5c # v1.6.32
       with:
         path: ./src/github.com/${{ github.repository }}
         fixup-command: "make docs"
diff --git a/.github/workflows/whitespace.yaml b/.github/workflows/whitespace.yaml
index 141cc0731..515fa3f24 100644
--- a/.github/workflows/whitespace.yaml
+++ b/.github/workflows/whitespace.yaml
@@ -16,8 +16,8 @@ jobs:
       - name: Check out code
         uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
 
-      - uses: chainguard-dev/actions/trailing-space@bed8050123fff65538e2db1902ff9404030c0221 # v1.6.31
+      - uses: chainguard-dev/actions/trailing-space@7bd1e94b2a1b7faa891392757de7d89489070c5c # v1.6.32
         if: ${{ always() }}
 
-      - uses: chainguard-dev/actions/eof-newline@bed8050123fff65538e2db1902ff9404030c0221 # v1.6.31
+      - uses: chainguard-dev/actions/eof-newline@7bd1e94b2a1b7faa891392757de7d89489070c5c # v1.6.32
         if: ${{ always() }}