ci(github-action): update action devsecninja/.github ( v1.0.0 ➔ v1.2.0 )

[renovate]

This PR contains the following updates:

Package	Type	Update	Change
DevSecNinja/.github	action	minor	v1.0.0 → v1.2.0

---

Release Notes

DevSecNinja/.github (DevSecNinja/.github)

v1.2.0

Compare Source

Features

• actions: add notify-irm composite action (#​51) (a877d35)
• labels: rename automerge to merge: auto and add release-please labels (#​45) (fa92001)
• mise: update tool zizmor ( 1.23.1 ➔ 1.24.1 ) (9e3203f)
• mise: update tool zizmor ( 1.23.1 ➔ 1.24.1 ) (#​39) (e3291b1)
• open-pr: add composite action to open or update PRs from working tree (#​49) (6764c0f)
• renovate: add merge: manual label rules (#​46) (f447e9e)

v1.1.0

Compare Source

Features

• add custom manager for Ansible inventory YAML files (46eb1be)
• add host rules and registry aliases for dhi.io (641aa02)
• add labels and vulnerability alerts to Renovate configuration (b9273f0)
• config-sync: ensure label exists before opening a PR (1cc371b)
• labeler: add issue labeling via github/issue-labeler (794bec0)
• lint: add auto-fix mode reusable workflow and template (f163ca1)
• lint: add shellcheck/shfmt exclude inputs (17aa697)
• lint: add shellcheck/shfmt exclude inputs to reusable lint workflow (0c4551a)
• mise: update tool dprint ( 0.53.2 ➔ 0.54.0 ) (963e1d1)
• release-please: wire GitHub App token + onboarding doc (217074e)
• release-please: wire GitHub App token + onboarding doc (e29c6a9)
• release: add release-please reusable workflow (4890fa8)
• release: add release-please reusable workflow (7ed381a)
• release: add release-publish composite action (ee0804b)
• release: add release-publish composite action (1f5bcf2)
• release: onboard .github repo to release-please (7d8ca17)
• release: onboard .github repo to release-please (0e0be6d)
• renovate: add custom manager for dotfiles log.sh release pin (aab92ba)
• renovate: expand auto-merge to all minor/patch updates (78be78d)
• todo-to-issue: add auto_assign and label inputs, fix todo-to-issue label (f830665)
• update Renovate configuration to extend best practices and remove deprecated settings (632d58e)
• workflow-templates: pin all template refs to v1.0.0 and add changelog category (8b63cf9)

Bug Fixes

• checkov: filter skipped checks from SARIF before upload (36b12c2)
• config-sync: replace stash with force-checkout and restore from tmp (26b001e)
• config-sync: stash untracked files before branch checkout and auto-create label (b9b199e)
• github-release: update release jdx/mise ( v2026.4.5 ➔ v2026.4.9 ) (bb51292)
• mise: update tool pipx:checkov ( 3.2.513 ➔ 3.2.521 ) (48fd48b)
• mise: update tool shfmt ( 3.13.0 ➔ 3.13.1 ) (f268d08)
• renovate: auto-merge github-actions pinDigest updates (5979dc3)
• workflow-templates: update event types format in assign-issue-to-codeowners.yml (edb5985)
• workflows: quote IDENTIFIERS expression in todo-to-issue workflow (27869fe)

---

Configuration

📅 Schedule: (in timezone Europe/Amsterdam)

• Branch creation
  • "every weekend,on Friday"
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Enabled.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.