chore(deps): update all non-major dependencies

Author: renovate[bot]

.github/workflows/ci.yml

@@ -26,12 +26,12 @@ jobs:
   build:
     needs: prepare_jobs
     name: dargstack rgen
-    uses: dargmuesli/github-actions/.github/workflows/dargstack-rgen.yml@2.5.13
+    uses: dargmuesli/github-actions/.github/workflows/dargstack-rgen.yml@2.5.14
     if: needs.prepare_jobs.outputs.pr_found == 'false' || github.event_name == 'pull_request'
   release-semantic:
     needs: build
     name: Semantic Release
-    uses: dargmuesli/github-actions/.github/workflows/release-semantic.yml@2.5.13
+    uses: dargmuesli/github-actions/.github/workflows/release-semantic.yml@2.5.14
     permissions:
       contents: write
     secrets:

.github/workflows/release-schedule.yml

@@ -8,7 +8,7 @@ on:
 jobs:
   release-schedule:
     name: "Release: Scheduled"
-    uses: dargmuesli/github-actions/.github/workflows/release-schedule.yml@2.5.13
+    uses: dargmuesli/github-actions/.github/workflows/release-schedule.yml@2.5.14
     secrets:
       PERSONAL_ACCESS_TOKEN: ${{ secrets.PERSONAL_ACCESS_TOKEN }}
     with:

src/production/production.yml

@@ -73,7 +73,7 @@ services:
         - (( append ))
         - traefik.http.routers.redpanda_secure.tls.certresolver=default
   sqitch:
-    image: ghcr.io/maevsi/sqitch:9.2.0
+    image: ghcr.io/maevsi/sqitch:9.4.1
     volumes: (( prune ))
   traefik:
     command: