chore(deps): update dargmuesli/github-actions action to v3 (#327)

This PR contains the following updates:

| Package | Type | Update | Change |
|---|---|---|---|
|
[dargmuesli/github-actions](https://redirect.github.com/dargmuesli/github-actions)
| action | major | `2.6.6` -> `3.2.0` |

---

### Release Notes

<details>
<summary>dargmuesli/github-actions (dargmuesli/github-actions)</summary>

###
[`v3.2.0`](https://redirect.github.com/dargmuesli/github-actions/blob/HEAD/CHANGELOG.md#320-2025-11-07)

[Compare
Source](https://redirect.github.com/dargmuesli/github-actions/compare/3.1.0...3.2.0)

##### Features

- **ci-optimization:** add personal access token secret
([20a4c0b](https://redirect.github.com/dargmuesli/github-actions/commit/20a4c0b98b028e568d1a89042857dbe1c3820178))

###
[`v3.1.0`](https://redirect.github.com/dargmuesli/github-actions/blob/HEAD/CHANGELOG.md#310-2025-11-07)

[Compare
Source](https://redirect.github.com/dargmuesli/github-actions/compare/3.0.0...3.1.0)

##### Features

- **deploy-cloudflare-pages:** switch to wrangler action
([c5323a2](https://redirect.github.com/dargmuesli/github-actions/commit/c5323a29ab98a662a2addfeda73e3ca9338fab34))

###
[`v3.0.0`](https://redirect.github.com/dargmuesli/github-actions/blob/HEAD/CHANGELOG.md#300-2025-11-07)

[Compare
Source](https://redirect.github.com/dargmuesli/github-actions/compare/2.8.0...3.0.0)

##### ⚠ BREAKING CHANGES

- **release-semantic:** upgrade semantic release to v25.0.1
- rework node setup
- **docker:** drop cache variant
- tweak permissions
- **release-semantic:** drop npm token

##### Features

- **docker:** drop cache variant
([462bbbe](https://redirect.github.com/dargmuesli/github-actions/commit/462bbbe08e9d801101d19612c03281c28adc4ad0))
- install latest corepack
([61ac9d2](https://redirect.github.com/dargmuesli/github-actions/commit/61ac9d2a94ba9fbf5a1022b797c8d851980688fa))
- **release-schedule:** drop content read permissions
([fddedb6](https://redirect.github.com/dargmuesli/github-actions/commit/fddedb6c72a4fea71d83b072261ca7b563bc540d))
- **release-semantic:** drop npm token
([41670e0](https://redirect.github.com/dargmuesli/github-actions/commit/41670e0bb0859e02541491c3b0b1c43ddd0256e1))
- **release-semantic:** upgrade semantic release to v25.0.1
([305b1f5](https://redirect.github.com/dargmuesli/github-actions/commit/305b1f5397cea93dd47a856eccb9f883f8dca140))
- rework node setup
([99b2c46](https://redirect.github.com/dargmuesli/github-actions/commit/99b2c469331b56d5be5ca655d4609434d94018a1))
- tweak permissions
([0b70e8a](https://redirect.github.com/dargmuesli/github-actions/commit/0b70e8a7185627943143b663a06b92a4ca58d1ab))

##### Bug Fixes

- **ci-optimization:** correct boolean output type
([8efba40](https://redirect.github.com/dargmuesli/github-actions/commit/8efba40a1e181d5055f0214da94ef25438881842))
- **release-semantic:** only setup node on dependency installation
([8548a82](https://redirect.github.com/dargmuesli/github-actions/commit/8548a82e2c01f7357f76815730e9ae792a0cc569))
- **release-semantic:** reenable content write permissions
([f1e3fb9](https://redirect.github.com/dargmuesli/github-actions/commit/f1e3fb9d01781a2407eb84883cb9f5057a8cb686))
- revert corepack order
([9365045](https://redirect.github.com/dargmuesli/github-actions/commit/93650456739406008f9e137cfad5d00532334886))

###
[`v2.8.0`](https://redirect.github.com/dargmuesli/github-actions/blob/HEAD/CHANGELOG.md#280-2025-11-06)

[Compare
Source](https://redirect.github.com/dargmuesli/github-actions/compare/2.7.0...2.8.0)

##### Features

- **ci:** extract optimization
([d4230e2](https://redirect.github.com/dargmuesli/github-actions/commit/d4230e25e1925027b086c2bb6e72ab6fd70acc01))

###
[`v2.7.0`](https://redirect.github.com/dargmuesli/github-actions/blob/HEAD/CHANGELOG.md#270-2025-11-05)

[Compare
Source](https://redirect.github.com/dargmuesli/github-actions/compare/2.6.9...2.7.0)

##### Features

- **deps:** update node.js to v24
([f8f10a0](https://redirect.github.com/dargmuesli/github-actions/commit/f8f10a036b74bd0ca781ec2ca33aea5520e5e36d))

###
[`v2.6.9`](https://redirect.github.com/dargmuesli/github-actions/blob/HEAD/CHANGELOG.md#269-2025-10-29)

[Compare
Source](https://redirect.github.com/dargmuesli/github-actions/compare/2.6.8...2.6.9)

##### Bug Fixes

- schedule release
([e1b2868](https://redirect.github.com/dargmuesli/github-actions/commit/e1b286827bc14a9acb32bdbe1175d756127b82ab))

###
[`v2.6.8`](https://redirect.github.com/dargmuesli/github-actions/blob/HEAD/CHANGELOG.md#268-2025-10-22)

[Compare
Source](https://redirect.github.com/dargmuesli/github-actions/compare/2.6.7...2.6.8)

##### Bug Fixes

- schedule release
([4d87361](https://redirect.github.com/dargmuesli/github-actions/commit/4d87361369f6baf151cf2c4cbbcea69998da3c82))

###
[`v2.6.7`](https://redirect.github.com/dargmuesli/github-actions/blob/HEAD/CHANGELOG.md#267-2025-10-15)

[Compare
Source](https://redirect.github.com/dargmuesli/github-actions/compare/2.6.6...2.6.7)

##### Bug Fixes

- schedule release
([4107dd3](https://redirect.github.com/dargmuesli/github-actions/commit/4107dd32fe1cd51fe159ce327681715ff8051756))

</details>

---

### Configuration

📅 **Schedule**: Branch creation - At any time (no schedule defined),
Automerge - At any time (no schedule defined).

🚦 **Automerge**: Disabled by config. Please merge this manually once you
are satisfied.

♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the
rebase/retry checkbox.

🔕 **Ignore**: Close this PR and you won't be reminded about this update
again.

---

- [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check
this box

---

This PR was generated by [Mend Renovate](https://mend.io/renovate/).
View the [repository job
log](https://developer.mend.io/github/flipdot/drinks-touch).

<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0MS4xNTkuNCIsInVwZGF0ZWRJblZlciI6IjQxLjE1OS40IiwidGFyZ2V0QnJhbmNoIjoibWFzdGVyIiwibGFiZWxzIjpbXX0=-->

---------

Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
Co-authored-by: Jonas Thelemann <[email protected]>

Author: renovate[bot]

.github/workflows/ci.yml

@@ -1,55 +1,61 @@
 name: CI
 
+permissions: {}
+
 on:
   pull_request:
   push:
     branches:
       - alpha
       - beta
+      - main
       - master
       - renovate/**
 
 jobs:
-  prepare_jobs:
-    name: "Prepare: job optimization"
-    runs-on: ubuntu-latest
-    outputs:
-      pr_found: ${{ steps.pr.outputs.pr_found }}
-    steps:
-      - name: Get current PR
-        id: pr
-        uses: 8BitJonny/gh-get-current-pr@4056877062a1f3b624d5d4c2bedefa9cf51435c9 # 4.0.0
-        with:
-          filterOutClosed: true
-          filterOutDraft: true
+  ci-optimization:
+    name: CI optimization
+    uses: dargmuesli/github-actions/.github/workflows/ci-optimization.yml@a8900fcf9e9d1e7f4c1138484cb7bf8d7bd3f3cb # 3.0.0
+    permissions:
+      pull-requests: read
   release_semantic_dry:
-    needs: prepare_jobs
+    needs: ci-optimization
+    if: needs.ci-optimization.outputs.continue == 'true'
     name: Release (semantic, dry)
-    uses: dargmuesli/github-actions/.github/workflows/release-semantic.yml@0036fa065c77d414215048016288a49106a37818 # 2.6.6
-    if: needs.prepare_jobs.outputs.pr_found == 'false' || github.event_name == 'pull_request'
+    uses: dargmuesli/github-actions/.github/workflows/release-semantic.yml@714a68188444d710ffa3e9f35a05f6a9d420931d # 3.2.0
+    permissions:
+      contents: write
+      id-token: write
     secrets:
       PERSONAL_ACCESS_TOKEN: ${{ secrets.PERSONAL_ACCESS_TOKEN }}
     with:
       DRY_RUN: true
   pre-commit:
+    needs: ci-optimization
+    if: needs.ci-optimization.outputs.continue == 'true'
     runs-on: ubuntu-latest
+    permissions:
+      contents: read
     steps:
-    - uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5
-    - uses: actions/setup-python@e797f83bcb11b83ae66e0230d6156d7c80228e7c # v6
+    - uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5.0.0
+    - uses: actions/setup-python@e797f83bcb11b83ae66e0230d6156d7c80228e7c # v6.0.0
       with:
           python-version: '3.13'
     - uses: pre-commit/action@2c7b3805fd2a0fd8c1884dcaebf91fc102a13ecd # v3.0.1
   build:
     name: Build
-    uses: dargmuesli/github-actions/.github/workflows/docker.yml@0036fa065c77d414215048016288a49106a37818 # 2.6.6
+    uses: dargmuesli/github-actions/.github/workflows/docker.yml@714a68188444d710ffa3e9f35a05f6a9d420931d # 3.2.0
     needs: [release_semantic_dry, pre-commit]
+    permissions:
+      packages: write
     with:
       TAG: ${{ needs.release_semantic_dry.outputs.new_release_version }}
   release_semantic:
     needs: build
     name: Release (semantic)
-    uses: dargmuesli/github-actions/.github/workflows/release-semantic.yml@0036fa065c77d414215048016288a49106a37818 # 2.6.6
+    uses: dargmuesli/github-actions/.github/workflows/release-semantic.yml@714a68188444d710ffa3e9f35a05f6a9d420931d # 3.2.0
     permissions:
       contents: write
+      id-token: write
     secrets:
       PERSONAL_ACCESS_TOKEN: ${{ secrets.PERSONAL_ACCESS_TOKEN }}