From 61bc5bf6964e7938567498a1a52155109a3de9b2 Mon Sep 17 00:00:00 2001
From: "1bsv-renovate[bot]"
 <321132618+1bsv-renovate[bot]@users.noreply.github.com>
Date: Tue, 13 Oct 2026 19:36:17 +0000
Subject: [PATCH] Update non-major

---
 .github/workflows/ci.yml      | 2 +-
 .github/workflows/release.yml | 4 ++--
 Dockerfile                    | 2 +-
 host/Dockerfile               | 2 +-
 host/package-lock.json        | 6 +++---
 5 files changed, 8 insertions(+), 8 deletions(-)

diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
index 5437564..a413acb 100644
--- a/.github/workflows/ci.yml
+++ b/.github/workflows/ci.yml
@@ -51,7 +51,7 @@ jobs:
         working-directory: host
     steps:
       - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
-      - uses: actions/setup-node@820762786026740c76f36085b0efc47a31fe5020 # v7.0.0
+      - uses: actions/setup-node@949feb2413d6458794dcd2491c4babbbce0c15c1 # v7.1.0
         with:
           # The runtime major the overlay host runs, which package.json also
           # pins.
diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml
index 3fbfa51..247c252 100644
--- a/.github/workflows/release.yml
+++ b/.github/workflows/release.yml
@@ -59,7 +59,7 @@ jobs:
           tar -C dist -czf "dist/${dir}.tar.gz" "${dir}"
           ( cd dist && sha256sum "${dir}.tar.gz" > "${dir}.tar.gz.sha256" )
 
-      - uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7.0.1
+      - uses: actions/upload-artifact@cf430e030ddbb5b0abf93d22962f4752f3646cd9 # v7.0.2
         with:
           name: borg_${{ matrix.goos }}_${{ matrix.goarch }}
           path: |
@@ -76,7 +76,7 @@ jobs:
       - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
         with:
           fetch-depth: 0
-      - uses: actions/download-artifact@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c # v8.0.1
+      - uses: actions/download-artifact@9000827ccba6bdab643e8b6fd33ac0654aef8333 # v8.0.2
         with:
           path: dist
           merge-multiple: true
diff --git a/Dockerfile b/Dockerfile
index d1d0d55..cdd27ea 100644
--- a/Dockerfile
+++ b/Dockerfile
@@ -1,4 +1,4 @@
-# syntax=docker/dockerfile:1.27.1@sha256:4edf897a3ffa55b89f906fc8cc78afdb3f1834cc9c7083565e611a8a7d5fe99e
+# syntax=docker/dockerfile:1.28.0@sha256:bb22d9815c728170f72750f4e5b0d672e06176142e1d602c7e66c050100b7e5b
 #
 # Two images from one build, each a single static binary on a distroless
 # nonroot base:
diff --git a/host/Dockerfile b/host/Dockerfile
index e60f2ab..9500326 100644
--- a/host/Dockerfile
+++ b/host/Dockerfile
@@ -1,4 +1,4 @@
-# syntax=docker/dockerfile:1.27.1@sha256:4edf897a3ffa55b89f906fc8cc78afdb3f1834cc9c7083565e611a8a7d5fe99e
+# syntax=docker/dockerfile:1.28.0@sha256:bb22d9815c728170f72750f4e5b0d672e06176142e1d602c7e66c050100b7e5b
 #
 # borg-host: a reference overlay host image with the borg module
 # (tm_borg_<hall> and ls_borg) built in, so a host is one image and needs
diff --git a/host/package-lock.json b/host/package-lock.json
index 3cffc12..12c2f08 100644
--- a/host/package-lock.json
+++ b/host/package-lock.json
@@ -530,9 +530,9 @@
       }
     },
     "node_modules/@types/node": {
-      "version": "24.19.0",
-      "resolved": "https://registry.npmjs.org/@types/node/-/node-24.19.0.tgz",
-      "integrity": "sha512-zY+5tKxXdhGh1PYI0ac+7juvEu4OI6vWtVVoj5i2m42jxAY1U+zHGt6QCyOFwykdP62sM3MJ9stoYYUw5aCWew==",
+      "version": "24.19.2",
+      "resolved": "https://registry.npmjs.org/@types/node/-/node-24.19.2.tgz",
+      "integrity": "sha512-93d49wCWJkCyN87MxLpNN6KXPCwFw7bVUg79mGUV1OS40JGWwVCr8n61DXCSqz7CV6/VfPkb7xec7uP2M+QHWQ==",
       "dev": true,
       "license": "MIT",
       "dependencies": {