From 0cf5c9dad37e64ef6fc875bdf50881a62a919be0 Mon Sep 17 00:00:00 2001
From: "renovate[bot]" <29139614+renovate[bot]@users.noreply.github.com>
Date: Sat, 25 Jul 2026 00:51:39 +0000
Subject: [PATCH 1/2] =?UTF-8?q?chore(container):=20update=20image=20ghcr.i?=
 =?UTF-8?q?o/devsecninja/dotfiles-devcontainer=20(=2097be4de=20=E2=9E=94?=
 =?UTF-8?q?=20a1d5ef1=20)=20[automerge]?=
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

---
 .devcontainer/devcontainer.json | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/.devcontainer/devcontainer.json b/.devcontainer/devcontainer.json
index 449d96e6..b365f9f6 100644
--- a/.devcontainer/devcontainer.json
+++ b/.devcontainer/devcontainer.json
@@ -6,7 +6,7 @@
   // fresh, correctly detecting the runtime environment (CI, Codespaces, etc.)
   // Pinned by digest only (no tag): the devcontainers CLI cannot parse a
   // combined `:tag@sha256:...` reference, so Renovate keeps just the digest.
-  "image": "ghcr.io/devsecninja/dotfiles-devcontainer@sha256:97be4de68122c9d5f710dd056e5c1d11d4cf8d6766d7860329c6d8fc2cd5c49b",
+  "image": "ghcr.io/devsecninja/dotfiles-devcontainer@sha256:a1d5ef1fbc4f3fe6a059b3dbe6644aeed075ed53c978f0ec06f20804a39c18e4",
   "features": {
     "ghcr.io/devcontainers/features/git-lfs:1": {
       "version": "latest"

From b67f6ff5175946d52323f09ae39988916ec8ba9f Mon Sep 17 00:00:00 2001
From: "renovate[bot]" <29139614+renovate[bot]@users.noreply.github.com>
Date: Sat, 25 Jul 2026 00:51:50 +0000
Subject: [PATCH 2/2] =?UTF-8?q?fix(mise):=20update=20tool=20pipx:apm-cli?=
 =?UTF-8?q?=20(=200.24.0=20=E2=9E=94=200.24.1=20)=20[automerge]?=
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

---
 .devcontainer/devcontainer.json | 2 +-
 .mise.toml                      | 2 +-
 2 files changed, 2 insertions(+), 2 deletions(-)

diff --git a/.devcontainer/devcontainer.json b/.devcontainer/devcontainer.json
index b365f9f6..449d96e6 100644
--- a/.devcontainer/devcontainer.json
+++ b/.devcontainer/devcontainer.json
@@ -6,7 +6,7 @@
   // fresh, correctly detecting the runtime environment (CI, Codespaces, etc.)
   // Pinned by digest only (no tag): the devcontainers CLI cannot parse a
   // combined `:tag@sha256:...` reference, so Renovate keeps just the digest.
-  "image": "ghcr.io/devsecninja/dotfiles-devcontainer@sha256:a1d5ef1fbc4f3fe6a059b3dbe6644aeed075ed53c978f0ec06f20804a39c18e4",
+  "image": "ghcr.io/devsecninja/dotfiles-devcontainer@sha256:97be4de68122c9d5f710dd056e5c1d11d4cf8d6766d7860329c6d8fc2cd5c49b",
   "features": {
     "ghcr.io/devcontainers/features/git-lfs:1": {
       "version": "latest"
diff --git a/.mise.toml b/.mise.toml
index 2498b9ea..2395f18f 100644
--- a/.mise.toml
+++ b/.mise.toml
@@ -39,7 +39,7 @@ uv = "latest"
 # release is a PyInstaller bundle that mise's github/ubi backends extract
 # incompletely, so pipx is the working install path.
 # renovate: datasource=pypi depName=apm-cli
-"pipx:apm-cli" = "0.24.0"
+"pipx:apm-cli" = "0.24.1"
 
 # Additional tools for development (commented out by default)
 # Uncomment based on your needs