From d2c29f5637c7465d7c36a2ca0da10f63a6e1072d Mon Sep 17 00:00:00 2001
From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com>
Date: Wed, 22 Jul 2026 16:45:09 +0000
Subject: [PATCH] build(deps): bump the actions group across 1 directory with 2
 updates

Bumps the actions group with 2 updates in the / directory: [docker/setup-buildx-action](https://github.com/docker/setup-buildx-action) and [openai/codex-action](https://github.com/openai/codex-action).


Updates `docker/setup-buildx-action` from 4.1.0 to 4.2.0
- [Release notes](https://github.com/docker/setup-buildx-action/releases)
- [Commits](https://github.com/docker/setup-buildx-action/compare/d7f5e7f509e45cec5c76c4d5afdd7de93d0b3df5...bb05f3f5519dd87d3ba754cc423b652a5edd6d2c)

Updates `openai/codex-action` from 1.8 to 1.11
- [Changelog](https://github.com/openai/codex-action/blob/main/CHANGELOG.md)
- [Commits](https://github.com/openai/codex-action/compare/e0fdf01220eb9a88167c4898839d273e3f2609d1...52fe01ec70a42f454c9d2ebd47598f9fd6893d56)

---
updated-dependencies:
- dependency-name: docker/setup-buildx-action
  dependency-version: 4.2.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: actions
- dependency-name: openai/codex-action
  dependency-version: '1.11'
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: actions
...

Signed-off-by: dependabot[bot] <support@github.com>
---
 .github/workflows/ci.yml           | 2 +-
 .github/workflows/codex-review.yml | 2 +-
 .github/workflows/release-sbom.yml | 2 +-
 3 files changed, 3 insertions(+), 3 deletions(-)

diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
index ea26d7e6..73c05cf0 100644
--- a/.github/workflows/ci.yml
+++ b/.github/workflows/ci.yml
@@ -363,7 +363,7 @@ jobs:
       uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd  # v6
 
     - name: Set up Docker Buildx
-      uses: docker/setup-buildx-action@d7f5e7f509e45cec5c76c4d5afdd7de93d0b3df5  # v4
+      uses: docker/setup-buildx-action@bb05f3f5519dd87d3ba754cc423b652a5edd6d2c  # v4
 
     - name: Set up Syft
       uses: ./.github/actions/setup-syft
diff --git a/.github/workflows/codex-review.yml b/.github/workflows/codex-review.yml
index 87ae798e..c26148de 100644
--- a/.github/workflows/codex-review.yml
+++ b/.github/workflows/codex-review.yml
@@ -54,7 +54,7 @@ jobs:
 
     - name: Run Codex
       id: run_codex
-      uses: openai/codex-action@e0fdf01220eb9a88167c4898839d273e3f2609d1  # v1
+      uses: openai/codex-action@52fe01ec70a42f454c9d2ebd47598f9fd6893d56  # v1
       with:
         openai-api-key: ${{ secrets.OPENAI_API_KEY }}
         sandbox: read-only
diff --git a/.github/workflows/release-sbom.yml b/.github/workflows/release-sbom.yml
index 89060086..f939544f 100644
--- a/.github/workflows/release-sbom.yml
+++ b/.github/workflows/release-sbom.yml
@@ -57,7 +57,7 @@ jobs:
         version: ${{ env.SYFT_VERSION }}
 
     - name: Set up Docker Buildx
-      uses: docker/setup-buildx-action@d7f5e7f509e45cec5c76c4d5afdd7de93d0b3df5  # v4
+      uses: docker/setup-buildx-action@bb05f3f5519dd87d3ba754cc423b652a5edd6d2c  # v4
 
     - name: Login to GitHub Container Registry
       uses: docker/login-action@c94ce9fb468520275223c153574b00df6fe4bcc9  # v3