From c82709bc4b8071bf35032978e20025e562f8c4a4 Mon Sep 17 00:00:00 2001
From: Chris Johnson <cjohnson@phase2.io>
Date: Wed, 21 Oct 2026 15:11:16 -0400
Subject: [PATCH 1/2] Update GitHub Actions versions

Bump checkout, setup-qemu, setup-buildx, login and build-push actions to
current major versions and replace the deprecated set-output command.

Co-Authored-By: Claude Opus 5.5 (1M context) <noreply@anthropic.com>
---
 .github/workflows/default.yml | 14 +++++++-------
 1 file changed, 7 insertions(+), 7 deletions(-)

diff --git a/.github/workflows/default.yml b/.github/workflows/default.yml
index b035388..bdd6ace 100644
--- a/.github/workflows/default.yml
+++ b/.github/workflows/default.yml
@@ -38,7 +38,7 @@ jobs:
         run: echo "$GITHUB_CONTEXT"
 
       - name: Checkout
-        uses: actions/checkout@v2
+        uses: actions/checkout@v7
 
       - name: Prepare Tags
         id: prep
@@ -54,34 +54,34 @@ jobs:
           fi
 
           # Set output parameters.
-          echo ::set-output name=tags::${TAGS}
+          echo "tags=${TAGS}" >> "$GITHUB_OUTPUT"
 
       - name: Set up QEMU
-        uses: docker/setup-qemu-action@v1
+        uses: docker/setup-qemu-action@v4
         with:
           platforms: all
 
       - name: Set up Docker Buildx
         id: buildx
-        uses: docker/setup-buildx-action@v1
+        uses: docker/setup-buildx-action@v4
 
       - name: Login to DockerHub
         if: ${{ github.event_name != 'pull_request' && env.DOCKERHUB_ORG != '' }}
-        uses: docker/login-action@v1
+        uses: docker/login-action@v4
         with:
           username: ${{ secrets.DOCKERHUB_USER }}
           password: ${{ secrets.DOCKERHUB_TOKEN }}
 
       - name: Login to GitHub Container Registry
         if: ${{ github.event_name != 'pull_request' }}
-        uses: docker/login-action@v1
+        uses: docker/login-action@v4
         with:
           registry: ghcr.io
           username: ${{ github.actor }}
           password: ${{ secrets.GITHUB_TOKEN }}
 
       - name: Build
-        uses: docker/build-push-action@v2
+        uses: docker/build-push-action@v7
         with:
           builder: ${{ steps.buildx.outputs.name }}
           context: ./src

From 62de11cf4f3af274b2e5668ed84d495e9a250967 Mon Sep 17 00:00:00 2001
From: Chris Johnson <cjohnson@phase2.io>
Date: Wed, 21 Oct 2026 15:19:27 -0400
Subject: [PATCH 2/2] Set persist-credentials to false as we have no further
 git operations

Co-authored-by: coderabbitai[bot] <136622811+coderabbitai[bot]@users.noreply.github.com>
---
 .github/workflows/default.yml | 2 ++
 1 file changed, 2 insertions(+)

diff --git a/.github/workflows/default.yml b/.github/workflows/default.yml
index bdd6ace..703e0b9 100644
--- a/.github/workflows/default.yml
+++ b/.github/workflows/default.yml
@@ -39,6 +39,8 @@ jobs:
 
       - name: Checkout
         uses: actions/checkout@v7
+        with:
+          persist-credentials: false
 
       - name: Prepare Tags
         id: prep