⬆️ update GitHub Actions

[renovate]

This PR contains the following updates:

Package	Type	Update	Change
Spillgebees/admin (changelog)	action	digest	a71d815 → e75cced
actions/setup-dotnet (changelog)	action	digest	c2fa09f → 26b0ec1

---

Configuration

📅 Schedule: (in timezone Europe/Luxembourg)

• Branch creation
  • "every weekday"
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.

[coderabbitai]

Important

Review skipped

Bot user detected.

To trigger a single review, invoke the @coderabbitai review command.

⚙️ Run configuration

Configuration used: Organization UI

Review profile: CHILL

Plan: Pro Plus

Run ID: e508bfe3-6f93-4fd8-945d-a72434f42d64

You can disable this status message by setting the reviews.review_status to false in the CodeRabbit configuration file.

Use the checkbox below for a quick retry:

• 🔍 Trigger review

📝 Walkthrough

Walkthrough

Four GitHub Actions workflow files receive updated pinned commit SHAs: actions/checkout is bumped in three workflows, actions/setup-dotnet is bumped in two workflows, and the Spillgebees/admin zizmor reusable workflow reference is bumped in one workflow. No workflow logic, step parameters, or job structure changes.

Changes

CI Action SHA Updates

Layer / File(s)	Summary
Pinned SHA updates across all workflows .github/workflows/build-and-test.yml, .github/workflows/build-test-publish.yml, .github/workflows/publish.yml, .github/workflows/zizmor.yml	actions/checkout SHA updated in all three build/publish workflows; actions/setup-dotnet SHA updated in build-test-publish.yml and publish.yml; Spillgebees/admin zizmor reusable workflow SHA updated in zizmor.yml. Step structure and inputs unchanged throughout.

Estimated code review effort

🎯 1 (Trivial) | ⏱️ ~2 minutes

Possibly related issues

• Dependency Dashboard #23: This PR directly implements the actions/checkout and actions/setup-dotnet SHA pin updates tracked in the Renovate dependency dashboard issue.

Possibly related PRs

• Spillgebees/Transmodel#54: Overlaps on the same jobs.zizmor.uses line in .github/workflows/zizmor.yml, updating the pinned SHA for the Spillgebees/admin reusable workflow.

Poem

🐇 Hop, hop, hooray for hashes new,
The SHAs are bumped, the actions true!
No logic changed, no steps astray,
Just safer pins to rule the day.
A bunny cheers each workflow file —
Pinned commits make CI worthwhile! 🎉

🚥 Pre-merge checks | ✅ 5

✅ Passed checks (5 passed)

Check name	Status	Explanation
Title check	✅ Passed	The title accurately reflects the main change: updating GitHub Actions to their latest versions across multiple workflow files.
Docstring Coverage	✅ Passed	No functions found in the changed files to evaluate docstring coverage. Skipping docstring coverage check.
Linked Issues check	✅ Passed	Check skipped because no linked issues were found for this pull request.
Out of Scope Changes check	✅ Passed	Check skipped because no linked issues were found for this pull request.
Description Check	✅ Passed	Check skipped - CodeRabbit’s high-level summary is enabled.

✨ Finishing Touches

🧪 Generate unit tests (beta)

• Create PR with unit tests
• Commit unit tests in branch chore/renovate-github-actions

---

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

• X
• Mastodon
• Reddit
• LinkedIn

_{Comment @coderabbitai help to get the list of available commands.}