diff --git a/actions.yml b/actions.yml
index 42c888f9..fef199dc 100644
--- a/actions.yml
+++ b/actions.yml
@@ -171,6 +171,10 @@ carabiner-dev/actions/install/ampel:
   94f29392187fe5082d1195a7d4cae3a7ddf09d9c:
     tag: v1.2.1
 carabiner-dev/actions/install/ampel-bootstrap:
+  2a11d59a135c5e291f305f249a92ad7903e3ee0f:
+    # transitive dep of carabiner-dev/actions/ampel/verify @ v1.2.0
+    tag: v1.1.7
+    expires_at: 2026-08-16
   # level-3 transitive: called by install/download-and-verify; commit is untagged
   # (per upstream: "bootstrap rotated to ampel v1.2.1")
   0a075bb75a68646d05f99c85cbbf2be40dd8e442:
diff --git a/approved_patterns.yml b/approved_patterns.yml
index 8d22c3fd..e976d15e 100644
--- a/approved_patterns.yml
+++ b/approved_patterns.yml
@@ -68,6 +68,7 @@
 - carabiner-dev/actions/install/ampel@2a11d59a135c5e291f305f249a92ad7903e3ee0f
 - carabiner-dev/actions/install/ampel@e0e3b8149dafed833431095bc148d50e7eade4e8
 - carabiner-dev/actions/install/ampel@94f29392187fe5082d1195a7d4cae3a7ddf09d9c
+- carabiner-dev/actions/install/ampel-bootstrap@2a11d59a135c5e291f305f249a92ad7903e3ee0f
 - carabiner-dev/actions/install/ampel-bootstrap@0a075bb75a68646d05f99c85cbbf2be40dd8e442
 - carabiner-dev/actions/install/ampel-bootstrap@9db1a064ca5691ef6f5d983031739ca287de0968
 - carabiner-dev/actions/install/ampel-bootstrap@b60791af41423360b892a1a3cee90cd4e131f381