From 56343f7c8940e8f5281a7e346daa3f89937829c5 Mon Sep 17 00:00:00 2001
From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com>
Date: Mon, 27 Jul 2026 03:56:01 +0000
Subject: [PATCH] chore(ci): bump the actions-all group with 2 updates

Bumps the actions-all group with 2 updates: [actions/github-script](https://github.com/actions/github-script) and [googleapis/release-please-action](https://github.com/googleapis/release-please-action).


Updates `actions/github-script` from 8.0.0 to 9.0.0
- [Release notes](https://github.com/actions/github-script/releases)
- [Commits](https://github.com/actions/github-script/compare/ed597411d8f924073f98dfc5c65a23a2325f34cd...3a2844b7e9c422d3c10d287c895573f7108da1b3)

Updates `googleapis/release-please-action` from 4.4.1 to 5.0.0
- [Release notes](https://github.com/googleapis/release-please-action/releases)
- [Changelog](https://github.com/googleapis/release-please-action/blob/main/CHANGELOG.md)
- [Commits](https://github.com/googleapis/release-please-action/compare/5c625bfb5d1ff62eadeeb3772007f7f66fdcf071...45996ed1f6d02564a971a2fa1b5860e934307cf7)

---
updated-dependencies:
- dependency-name: actions/github-script
  dependency-version: 9.0.0
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: actions-all
- dependency-name: googleapis/release-please-action
  dependency-version: 5.0.0
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: actions-all
...

Signed-off-by: dependabot[bot] <support@github.com>
---
 .github/workflows/finalize-releases.yml | 10 +++++-----
 .github/workflows/release-desktop.yml   |  2 +-
 .github/workflows/release-please.yml    |  2 +-
 3 files changed, 7 insertions(+), 7 deletions(-)

diff --git a/.github/workflows/finalize-releases.yml b/.github/workflows/finalize-releases.yml
index 88844146..707ab800 100644
--- a/.github/workflows/finalize-releases.yml
+++ b/.github/workflows/finalize-releases.yml
@@ -35,7 +35,7 @@ jobs:
           sparse-checkout: .github/scripts
 
       - name: Verify release automation was CI-tested
-        uses: actions/github-script@ed597411d8f924073f98dfc5c65a23a2325f34cd # v8
+        uses: actions/github-script@3a2844b7e9c422d3c10d287c895573f7108da1b3 # v9.0.0
         env:
           TESTED_SHA: ${{ github.event.workflow_run.head_sha }}
         with:
@@ -72,7 +72,7 @@ jobs:
       # pushes are no-ops, and release-please may only see this one pending Desktop release PR.
       - name: Resolve tested release candidate
         id: candidate
-        uses: actions/github-script@ed597411d8f924073f98dfc5c65a23a2325f34cd # v8
+        uses: actions/github-script@3a2844b7e9c422d3c10d287c895573f7108da1b3 # v9.0.0
         env:
           TESTED_SHA: ${{ github.event.workflow_run.head_sha }}
         with:
@@ -90,7 +90,7 @@ jobs:
       # release-PR merge SHA. Ordinary commits may advance master; release policy must not drift.
       - name: Verify tested release configuration is still current
         if: ${{ steps.candidate.outputs.state == 'pending' }}
-        uses: actions/github-script@ed597411d8f924073f98dfc5c65a23a2325f34cd # v8
+        uses: actions/github-script@3a2844b7e9c422d3c10d287c895573f7108da1b3 # v9.0.0
         env:
           TESTED_SHA: ${{ steps.candidate.outputs.sha }}
         with:
@@ -108,7 +108,7 @@ jobs:
       - name: Create draft releases
         id: release
         if: ${{ steps.candidate.outputs.state == 'pending' }}
-        uses: googleapis/release-please-action@5c625bfb5d1ff62eadeeb3772007f7f66fdcf071 # v4
+        uses: googleapis/release-please-action@45996ed1f6d02564a971a2fa1b5860e934307cf7 # v5.0.0
         with:
           token: ${{ steps.release-token.outputs.token }}
           config-file: release-please-config.json
@@ -121,7 +121,7 @@ jobs:
       # acted on exactly the commit this CI run tested.
       - name: Verify started Desktop release
         if: ${{ steps.candidate.outputs.state == 'pending' }}
-        uses: actions/github-script@ed597411d8f924073f98dfc5c65a23a2325f34cd # v8
+        uses: actions/github-script@3a2844b7e9c422d3c10d287c895573f7108da1b3 # v9.0.0
         env:
           RELEASE_CREATED: ${{ steps.release.outputs.release_created }}
           RELEASE_SHA: ${{ steps.candidate.outputs.sha }}
diff --git a/.github/workflows/release-desktop.yml b/.github/workflows/release-desktop.yml
index 5a1c42d9..4f49bfea 100644
--- a/.github/workflows/release-desktop.yml
+++ b/.github/workflows/release-desktop.yml
@@ -80,7 +80,7 @@ jobs:
 
       - name: Verify release-please Release exists
         if: ${{ github.event_name == 'push' }}
-        uses: actions/github-script@ed597411d8f924073f98dfc5c65a23a2325f34cd # v8
+        uses: actions/github-script@3a2844b7e9c422d3c10d287c895573f7108da1b3 # v9.0.0
         env:
           TAG: ${{ steps.meta.outputs.tag }}
           RELEASE_SHA: ${{ github.sha }}
diff --git a/.github/workflows/release-please.yml b/.github/workflows/release-please.yml
index 2021e60e..e12162b5 100644
--- a/.github/workflows/release-please.yml
+++ b/.github/workflows/release-please.yml
@@ -32,7 +32,7 @@ jobs:
           permission-pull-requests: write
 
       - name: Maintain release PRs
-        uses: googleapis/release-please-action@5c625bfb5d1ff62eadeeb3772007f7f66fdcf071 # v4
+        uses: googleapis/release-please-action@45996ed1f6d02564a971a2fa1b5860e934307cf7 # v5.0.0
         with:
           token: ${{ steps.release-token.outputs.token }}
           config-file: release-please-config.json