build(deps): bump the github-actions group across 1 directory with 2 updates - #49

…windows (#36)

> [!WARNING]
> Cooldown could not be applied because no publication date was
available from the registry.
>

Bumps devcontainers/base from `73d85a9` to `86165cf`.


[![Dependabot compatibility
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=devcontainers/base&package-manager=docker&previous-version=bookworm&new-version=bookworm)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)


</details>

<!-- atrinik-delivery:dependency-refresh-20261004 -->
## Summary

Refreshed this dependency update against main after #49 merged.

## Implementation / behavior

Preserves the intended immutable `devcontainers/base` digest update to
`86165cf` in both Windows base stages and all changes from main. The
complete diff from main remains only the two digest replacements in
`windows/Dockerfile`.

## Validation

- Independently reviewed exact head
`f82b5024f92e86abc9a2d09c15268d2ea0b62fa5` against main
`0bf62b4faa4f86bb273b18386d71311dd71088a7`.
- Official checksum-verified Buildx Dockerfile check passed with no
warnings.
- Actionlint, exact dependency-change contract, and diff checks passed;
worktree is clean.
- Fresh GitHub Windows image builds, smoke tests, both native Windows
test paths, candidate measurements, required aggregate, PR title, and
all four CodeQL analyses passed on the updated head.

## Limitations / follow-up

Cold MXE builds and native Windows execution were validated through the
repository CI path. This update does not merge the PR or dispatch a
release/deployment.

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: Zoey Rose <zoey@zoeysr.com>