From 9b60eeed90c5c1f99fba08134cfba962f254ba90 Mon Sep 17 00:00:00 2001
From: "renovate[bot]" <29139614+renovate[bot]@users.noreply.github.com>
Date: Mon, 7 Sep 2026 10:33:05 +0000
Subject: [PATCH 1/2] chore(deps): update `pre-commit` non-major hooks

---
 .pre-commit-config.yaml | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/.pre-commit-config.yaml b/.pre-commit-config.yaml
index 33ce399..f5f4e3f 100644
--- a/.pre-commit-config.yaml
+++ b/.pre-commit-config.yaml
@@ -24,12 +24,12 @@ repos:
         name: Check GitHub Actions workflows with check-jsonschema
         args: ["--verbose"]
   - repo: https://github.com/zizmorcore/zizmor-pre-commit
-    rev: v1.29.0
+    rev: v1.30.0
     hooks:
       - id: zizmor
         name: Check GitHub Actions workflows with zizmor
   - repo: https://github.com/renovatebot/pre-commit-hooks
-    rev: 44.39.3
+    rev: 44.66.1
     hooks:
       - id: renovate-config-validator
         name: Check Renovate config with renovate-config-validator

From c0786c76a98cf0dcaeff48e47f44027247ee32fe Mon Sep 17 00:00:00 2001
From: Dafydd Jones <dafydd@techneg.it>
Date: Mon, 7 Sep 2026 14:56:13 +0100
Subject: [PATCH 2/2] ci(workflows): use new `self-repository` workflow calling
 syntax

---
 .github/workflows/apply-admin-safe-settings.yml   | 2 +-
 .github/workflows/apply-formula-safe-settings.yml | 2 +-
 2 files changed, 2 insertions(+), 2 deletions(-)

diff --git a/.github/workflows/apply-admin-safe-settings.yml b/.github/workflows/apply-admin-safe-settings.yml
index 4998d45..8a22890 100644
--- a/.github/workflows/apply-admin-safe-settings.yml
+++ b/.github/workflows/apply-admin-safe-settings.yml
@@ -16,7 +16,7 @@ jobs:
       contents: read
     # This is required to work with environment secrets in the called workflow
     secrets: inherit # zizmor: ignore[secrets-inherit]
-    uses: ./.github/workflows/libsafe-settings.yml
+    uses: $/.github/workflows/libsafe-settings.yml
     with:
       config-path: admin-safe-settings
       dry-run: ${{ inputs.dry-run }}
diff --git a/.github/workflows/apply-formula-safe-settings.yml b/.github/workflows/apply-formula-safe-settings.yml
index dc0cef4..0f8f52f 100644
--- a/.github/workflows/apply-formula-safe-settings.yml
+++ b/.github/workflows/apply-formula-safe-settings.yml
@@ -16,7 +16,7 @@ jobs:
       contents: read
     # This is required to work with environment secrets in the called workflow
     secrets: inherit # zizmor: ignore[secrets-inherit]
-    uses: ./.github/workflows/libsafe-settings.yml
+    uses: $/.github/workflows/libsafe-settings.yml
     with:
       config-path: formula-safe-settings
       dry-run: ${{ inputs.dry-run }}