From e572333fbf11545fd356c3d1b122361ac0785db7 Mon Sep 17 00:00:00 2001
From: "renovate[bot]" <29139614+renovate[bot]@users.noreply.github.com>
Date: Fri, 7 Nov 2025 11:05:57 +0000
Subject: [PATCH 1/2] chore(deps): update dargmuesli/github-actions action to
 v3

---
 .github/workflows/ci.yml               | 4 ++--
 .github/workflows/release-schedule.yml | 2 +-
 2 files changed, 3 insertions(+), 3 deletions(-)

diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
index 98ee9568..dc0ac824 100644
--- a/.github/workflows/ci.yml
+++ b/.github/workflows/ci.yml
@@ -7,11 +7,11 @@ on:
 jobs:
   build:
     name: DargStack rgen
-    uses: dargmuesli/github-actions/.github/workflows/dargstack-rgen.yml@2b47b35b82df04152c34ae042bd011dd83f28ffd # 2.8.0
+    uses: dargmuesli/github-actions/.github/workflows/dargstack-rgen.yml@714a68188444d710ffa3e9f35a05f6a9d420931d # 3.2.0
   release-semantic:
     needs: build
     name: Semantic Release
-    uses: dargmuesli/github-actions/.github/workflows/release-semantic.yml@2b47b35b82df04152c34ae042bd011dd83f28ffd # 2.8.0
+    uses: dargmuesli/github-actions/.github/workflows/release-semantic.yml@714a68188444d710ffa3e9f35a05f6a9d420931d # 3.2.0
     permissions:
       contents: write
     secrets:
diff --git a/.github/workflows/release-schedule.yml b/.github/workflows/release-schedule.yml
index 32b718d0..13ef2b34 100644
--- a/.github/workflows/release-schedule.yml
+++ b/.github/workflows/release-schedule.yml
@@ -8,7 +8,7 @@ on:
 jobs:
   release-schedule:
     name: 'Release: Scheduled'
-    uses: dargmuesli/github-actions/.github/workflows/release-schedule.yml@2b47b35b82df04152c34ae042bd011dd83f28ffd # 2.8.0
+    uses: dargmuesli/github-actions/.github/workflows/release-schedule.yml@714a68188444d710ffa3e9f35a05f6a9d420931d # 3.2.0
     secrets:
       PERSONAL_ACCESS_TOKEN: ${{ secrets.PERSONAL_ACCESS_TOKEN }}
     with:

From 3bda150353ad1a6bf4250b3c7bc9daa485f30999 Mon Sep 17 00:00:00 2001
From: Jonas Thelemann <e-mail@jonas-thelemann.de>
Date: Fri, 7 Nov 2025 15:56:33 +0100
Subject: [PATCH 2/2] ci: upgrade to dargmuesli/github-actions action to v3

---
 .github/workflows/ci.yml | 22 ++++++++++++++++++++--
 1 file changed, 20 insertions(+), 2 deletions(-)

diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
index dc0ac824..b2d2e938 100644
--- a/.github/workflows/ci.yml
+++ b/.github/workflows/ci.yml
@@ -1,18 +1,36 @@
-name: 'CI'
+name: CI
+
+permissions: {}
 
 on:
   pull_request:
   push:
+    branches:
+      - alpha
+      - beta
+      - main
+      - master
+      - renovate/**
 
 jobs:
+  ci-optimization:
+    name: CI optimization
+    uses: dargmuesli/github-actions/.github/workflows/ci-optimization.yml@714a68188444d710ffa3e9f35a05f6a9d420931d # 3.2.0
+    permissions:
+      pull-requests: read
   build:
-    name: DargStack rgen
+    needs: ci-optimization
+    if: needs.ci-optimization.outputs.continue == 'true'
+    name: dargstack rgen
     uses: dargmuesli/github-actions/.github/workflows/dargstack-rgen.yml@714a68188444d710ffa3e9f35a05f6a9d420931d # 3.2.0
+    permissions:
+      contents: read
   release-semantic:
     needs: build
     name: Semantic Release
     uses: dargmuesli/github-actions/.github/workflows/release-semantic.yml@714a68188444d710ffa3e9f35a05f6a9d420931d # 3.2.0
     permissions:
       contents: write
+      id-token: write
     secrets:
       PERSONAL_ACCESS_TOKEN: ${{ secrets.PERSONAL_ACCESS_TOKEN }}