build(deps): bump the github-actions group across 1 directory with 8 updates by dependabot[bot] · Pull Request #22 · NeoHsu/mnemark

dependabot · 2026-11-02T19:16:28Z

Bumps the github-actions group with 8 updates in the / directory:

Package	From	To
dtolnay/rust-toolchain	`2c7215f132e9ebf062739d9130488b56d53c060c`	`683b588c487a69d01f6c6ddf40f036ff682cc2c8`
Swatinem/rust-cache	`e18b497796c12c097a38f9edb9d0641fb99eee32`	`c8037a86dde8214a8310e9f54a8fc61ab362aa31`
taiki-e/install-action	`2.84.1`	`2.87.32`
actions/upload-artifact	`7.0.1`	`7.0.2`
zizmorcore/zizmor-action	`0.6.2`	`0.8.0`
actions/setup-python	`7.0.0`	`7.1.0`
actions/download-artifact	`8.0.1`	`8.0.2`
actions/attest-build-provenance	`4.1.1`	`4.2.2`

Updates dtolnay/rust-toolchain from 2c7215f132e9ebf062739d9130488b56d53c060c to 683b588c487a69d01f6c6ddf40f036ff682cc2c8

Commits

683b588 Add 1.99.1 patch release
e2a55d2 Merge pull request #187 from dtolnay/pwn
6af9a09 Unify flags[@] and downgrade[@]
83d0610 Safely handle action inputs
7e38f4b Merge pull request #186 from WaterWhisperer/feat/retry-install
7645b07 Retry release-server checksum failures
02cb101 Merge pull request 185 from fufesou/feat/force-non-host
b38a663 Pass --force-non-host unconditionally
a4f61a0 Document rustup non-host opt-in requirement
06b350f Support force-non-host toolchains
Additional commits viewable in compare view

Updates Swatinem/rust-cache from e18b497796c12c097a38f9edb9d0641fb99eee32 to c8037a86dde8214a8310e9f54a8fc61ab362aa31

Changelog

Sourced from Swatinem/rust-cache's changelog.

Changelog

2.9.3

Fix timestamp based pruning

Add missing awaits

Do not emit warning on missing rustup

2.9.2

Fix credentials.toml cleanup

Improvements to cleanup, preserving more valid targets

Improvements to cargo install handling

Correctly sort/dedupe Rust versions

2.9.1

Fix regression in hash calculation

2.9.0

Update to node24

Support running from within a nix shell

Consider all installed toolchains for cache key

Use case-insensitive comparison to determine exact cache hit

2.8.2

Don't overwrite env for cargo-metadata call

2.8.1

Set empty CARGO_ENCODED_RUSTFLAGS when retrieving metadata

Various dependency updates

2.8.0

Add support for warpbuild cache provider

Add new cache-workspace-crates feature

2.7.8

Include CPU arch in the cache key

2.7.7

Also cache cargo install metadata

2.7.6

... (truncated)

Commits

c8037a8 fix: include a virtual workspace's root Cargo.toml in the cache key (#395)
d1527c8 2.9.3
f0fca6f update dependencies and rebuild
b49b17f add missing awaits
6a7bc3e Bump the dev-minor group across 1 directory with 2 updates (#383)
4ece996 Bump the actions group across 1 directory with 6 updates (#392)
8103aff Bump the prd-minor group across 1 directory with 2 updates (#389)
0e361f3 fix: log rustup toolchain list failure as info instead of warning (#393) (#394)
f0d9c38 Merge pull request #380 from Swatinem/dependabot/github_actions/actions-8ff58...
ccd9742 Bump the actions group with 2 updates
Additional commits viewable in compare view

Updates taiki-e/install-action from 2.84.1 to 2.87.32

Release notes

Sourced from taiki-e/install-action's releases.

2.87.32

Update wild@latest to 0.11.0.

Update vacuum@latest to 0.35.2.

Update tombi@latest to 1.9.5.

Update sccache@latest to 0.19.0.

Update release-plz@latest to 0.4.1.

Update mise@latest to 2026.10.19.

Update knope@latest to 0.23.2.

Update dprint@latest to 0.64.3.

Update cargo-vet@latest to 0.10.3.

Update cargo-sort@latest to 2.1.4.

Update cargo-binstall@latest to 1.26.1.

Update biome@latest to 2.6.3.

2.87.31

Downgrade cargo-sort@latest to 2.1.3.

Update vacuum@latest to 0.35.0.

Update xh@latest to 0.26.3.

Update uv@latest to 0.13.5.

Update ubi@latest to 0.13.0.

Update trivy@latest to 0.76.1.

Update tombi@latest to 1.9.0.

Update release-plz@latest to 0.3.174.

Update prek@latest to 0.5.7.

Update mise@latest to 2026.10.17.

Update jaq@latest to 3.1.2.

Update espup@latest to 0.17.1.

... (truncated)

Changelog

Sourced from taiki-e/install-action's changelog.

Changelog

All notable changes to this project will be documented in this file.

This project adheres to Semantic Versioning.

[Unreleased]

Update parse-dockerfile@latest to 0.1.9.

Update parse-changelog@latest to 0.6.18.

Update cargo-minimal-versions@latest to 0.1.38.

Update cargo-hack@latest to 0.6.46.

[2.89.0] - 2026-11-01

Support yq. (#2036, thanks @FirelightFlagboy)

Support mold. (#2044, thanks @FirelightFlagboy)

Fix an error when old cargo-binstall had already been installed at non-standard location. (#2048)

Update wasm-tools@latest to 1.263.0.

Update wasm-pack@latest to 0.15.1.

Update wasm-bindgen@latest to 0.2.130.

Update vacuum@latest to 0.36.1.

Update prek@latest to 0.5.9.

Update mise@latest to 2026.10.25.

Update kingfisher@latest to 2.16.0.

Update cargo-binstall@latest to 1.26.2.

[2.88.1] - 2026-10-30

Update wasmtime@latest to 50.0.1.

Update vacuum@latest to 0.36.0.

... (truncated)

Commits

5488ac5 Release 2.87.32
688322d ci: Mark cargo-vet as glibc_pre_2_34_incompat
cebf56e Update wild@latest to 0.11.0
84f1fb1 Update vacuum@latest to 0.35.2
22b4d72 Update trunk manifest
4aa26a3 Update tombi@latest to 1.9.5
354bf5e Update sccache@latest to 0.19.0
89eb201 Update release-plz@latest to 0.4.1
304ba0d Update mise@latest to 2026.10.19
104910e Update knope@latest to 0.23.2
Additional commits viewable in compare view

Updates actions/upload-artifact from 7.0.1 to 7.0.2

Release notes

Sourced from actions/upload-artifact's releases.

v7.0.2

What's Changed

Improves artifact download retries when the service returns HTTP 429 (rate limiting), including honoring valid Retry-After headers.

Updates @actions/artifact to v6.3.1.

New Contributors

@tunc-d made their first contribution in actions/upload-artifact#821

Full Changelog: actions/upload-artifact@v7.0.1...v7.0.2

Commits

cf430e0 Merge pull request #822 from actions/tunc-d-prepare-upload-v7-0-2
c2acded chore: prepare v7.0.2 release
4687c1b Merge pull request #821 from actions/tunc-d-upload-artifact-package-bump
8cbe1be Bump @actions/artifact to 6.3.1
See full diff in compare view

Updates zizmorcore/zizmor-action from 0.6.2 to 0.8.0

Release notes

Sourced from zizmorcore/zizmor-action's releases.

v0.8.0

The action now supports prereleases.

The default has not changed, but you can pass a prerelease version of zizmor or version: prerelease to get whatever latest prerelease the action knows about.

What's Changed

Support prereleases by @woodruffw in zizmorcore/zizmor-action#182

Sync zizmor versions by @github-actions[bot] in zizmorcore/zizmor-action#184

Full Changelog: zizmorcore/zizmor-action@v0.7.1...v0.8.0

v0.7.1

zizmor changes

Bug Fixes 🐛🔗

Fixed a regression in 1.31.0 where some ignore comments/configurations would no longer apply to the dangerous-triggers audit

action changes

The default version of zizmor is now 1.31.1.

What's Changed

Sync zizmor versions by @github-actions[bot] in zizmorcore/zizmor-action#178

Full Changelog: zizmorcore/zizmor-action@v0.7.0...v0.7.1

v0.7.0

Sponsorship is appreciated!

zizmor notes

Enhancements 🌱🔗

The typosquat-uses audit now supports pre-commit config inputs (#2437)

The self-hosted-runner audit is now significantly more precise (#2350)

Many thanks to @ubiratansoares for proposing and implementing this enhancement!

The dangerous-triggers audit now considers the issue_comment trigger fundamentally dangerous (#2396)

zizmor is now aware of the image_version workflow trigger (#2397)

The dangerous-triggers audit now produces more precise finding/diagnostic spans (#2402)

... (truncated)

Commits

53290ba Sync zizmor versions (#184)
76da2ee Support prereleases (#182)
fb1d87b chore(deps): bump the github-actions group with 2 updates (#180)
be36601 README: bump pins (#179)
85b2b9f Sync zizmor versions (#178)
38c745a README: bump pins (#177)
f9597c8 Sync zizmor versions (#175)
2181e51 Bump sync-zizmor-versions.py to Python 3.11 for locking (#174)
27d989b chore(deps): bump the github-actions group with 2 updates (#173)
a91218c Bootstrap zizmor without Docker (#169)
Additional commits viewable in compare view

Updates actions/setup-python from 7.0.0 to 7.1.0

Release notes

Sourced from actions/setup-python's releases.

v7.1.0

What's Changed

Enhancements

Add mirror and mirror-token inputs for custom Python distribution sources by @luhenry in actions/setup-python#1302

Improve error message clarity by @v-lmvysakh in actions/setup-python#1351

Dependency Upgrade

Upgrade browserslist from 4.28.2 to 4.28.9 by @dependabot in actions/setup-python#1353

Upgrade @typescript-eslint/parser from 8.62.0 to 8.70.0 by @dependabot in actions/setup-python#1343

Upgrade eslint-plugin-jest from 29.15.2 to 29.16.6 by @dependabot in actions/setup-python#1342

Upgrade @vercel/ncc from 0.44.0 to 0.45.0 by @dependabot in actions/setup-python#1357

Upgrade @types/semver from 7.7.1 to 7.8.0 by @dependabot in actions/setup-python#1359

Upgrade undici from 6.28.0 to 6.29.0 by @dependabot in actions/setup-python#1364

Upgrade ts-jest from 29.4.11 to 29.4.14 by @dependabot in actions/setup-python#1361

Upgrade brace-expansion from 5.0.9 to 5.0.12 by @dependabot in actions/setup-python#1365

Upgrade prettier from 3.8.4 to 3.9.9 and package.json from 7.0.0 to 7.1.0 by @dependabot in actions/setup-python#1363

Upgrade @typescript-eslint/eslint-plugin from 8.62.0 to 8.71.1 by @dependabot in actions/setup-python#1369

Upgrade actions/checkout from 7.0.0 to 7.0.1 by @dependabot in actions/setup-python#1345

Upgrade cache to 6.3.0 by @v-HarithaVattikuti in actions/setup-python#1370

Resolve Basic Validation audit failures by @v-HarithaVattikuti in actions/setup-python#1347

Resolve npm audit failures by @v-HarithaVattikuti in actions/setup-python#1350

New Contributors

@luhenry made their first contribution in actions/setup-python#1302

Full Changelog: actions/setup-python@v7.0.0...v7.1.0

Commits

6d4fd22 Cache upgrade to 6.3.0 (#1370)
ec52d0a Bump @typescript-eslint/eslint-plugin from 8.62.0 to 8.71.1 (#1369)
ff73b24 Bump prettier from 3.8.4 to 3.9.9 and package.json from 7.0.0 to 7.1.0 (#1363)
0e40890 Bump brace-expansion from 5.0.9 to 5.0.12 (#1365)
3892123 Bump ts-jest from 29.4.11 to 29.4.14 (#1361)
6609657 Bump undici from 6.28.0 to 6.29.0 (#1364)
e1be392 Bump @types/semver from 7.7.1 to 7.8.0 (#1359)
06da627 Bump @vercel/ncc from 0.44.0 to 0.45.0 (#1357)
af9bcc7 Bump eslint-plugin-jest from 29.15.2 to 29.16.6 (#1342)
7aeabeb Bump @typescript-eslint/parser from 8.62.0 to 8.70.0 (#1343)
Additional commits viewable in compare view

Updates actions/download-artifact from 8.0.1 to 8.0.2

Release notes

Sourced from actions/download-artifact's releases.

v8.0.2

What's Changed

Update the readme by @danwkennedy in actions/download-artifact#473

Improves artifact download retries when the service returns HTTP 429 (rate limiting), including honoring valid Retry-After headers.

Update @actions/artifact to 6.3.1 by @tunc-d in actions/download-artifact#492

Prepare download-artifact v8.0.2 by @tunc-d in actions/download-artifact#493

New Contributors

@tunc-d made their first contribution in actions/download-artifact#492

Full Changelog: actions/download-artifact@v8.0.1...v8.0.2

Commits

9000827 Merge pull request #493 from actions/tunc-d-prepare-download-v8-0-2
e455989 Prepare download-artifact v8.0.2
a00b90c Merge pull request #492 from actions/tunc-d-download-artifact-package-bump
29bb7ce Update @actions/artifact to 6.3.1
484a0b5 Update the readme (#473)
See full diff in compare view

Updates actions/attest-build-provenance from 4.1.1 to 4.2.2

Release notes

Sourced from actions/attest-build-provenance's releases.

v4.2.2

[!NOTE] As of version 4, actions/attest-build-provenance is simply a wrapper on top of actions/attest.

Existing applications may continue to use the attest-build-provenance action, but new implementations should use actions/attest instead.

What's Changed

Bump actions/attest from 4.2.0 to 4.2.1 in the actions-minor group by @dependabot[bot] in actions/attest-build-provenance#862

Full Changelog: actions/attest-build-provenance@v4.1.1...v4.2.2

Commits

4d10147 Bump actions/attest from 4.2.0 to 4.2.1 in the actions-minor group (#862)
e3fe62e Bump the actions-minor group with 2 updates (#860)
See full diff in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR
@dependabot recreate will recreate this PR, overwriting any edits that have been made to it
@dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
@dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
@dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
@dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
@dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
@dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

…updates Bumps the github-actions group with 8 updates in the / directory: | Package | From | To | | --- | --- | --- | | [dtolnay/rust-toolchain](https://github.com/dtolnay/rust-toolchain) | `2c7215f132e9ebf062739d9130488b56d53c060c` | `683b588c487a69d01f6c6ddf40f036ff682cc2c8` | | [Swatinem/rust-cache](https://github.com/swatinem/rust-cache) | `e18b497796c12c097a38f9edb9d0641fb99eee32` | `c8037a86dde8214a8310e9f54a8fc61ab362aa31` | | [taiki-e/install-action](https://github.com/taiki-e/install-action) | `2.84.1` | `2.87.32` | | [actions/upload-artifact](https://github.com/actions/upload-artifact) | `7.0.1` | `7.0.2` | | [zizmorcore/zizmor-action](https://github.com/zizmorcore/zizmor-action) | `0.6.2` | `0.8.0` | | [actions/setup-python](https://github.com/actions/setup-python) | `7.0.0` | `7.1.0` | | [actions/download-artifact](https://github.com/actions/download-artifact) | `8.0.1` | `8.0.2` | | [actions/attest-build-provenance](https://github.com/actions/attest-build-provenance) | `4.1.1` | `4.2.2` | Updates `dtolnay/rust-toolchain` from 2c7215f132e9ebf062739d9130488b56d53c060c to 683b588c487a69d01f6c6ddf40f036ff682cc2c8 - [Release notes](https://github.com/dtolnay/rust-toolchain/releases) - [Commits](dtolnay/rust-toolchain@2c7215f...683b588) Updates `Swatinem/rust-cache` from e18b497796c12c097a38f9edb9d0641fb99eee32 to c8037a86dde8214a8310e9f54a8fc61ab362aa31 - [Release notes](https://github.com/swatinem/rust-cache/releases) - [Changelog](https://github.com/Swatinem/rust-cache/blob/master/CHANGELOG.md) - [Commits](Swatinem/rust-cache@e18b497...c8037a8) Updates `taiki-e/install-action` from 2.84.1 to 2.87.32 - [Release notes](https://github.com/taiki-e/install-action/releases) - [Changelog](https://github.com/taiki-e/install-action/blob/main/CHANGELOG.md) - [Commits](taiki-e/install-action@c44f6b0...5488ac5) Updates `actions/upload-artifact` from 7.0.1 to 7.0.2 - [Release notes](https://github.com/actions/upload-artifact/releases) - [Commits](actions/upload-artifact@043fb46...cf430e0) Updates `zizmorcore/zizmor-action` from 0.6.2 to 0.8.0 - [Release notes](https://github.com/zizmorcore/zizmor-action/releases) - [Commits](zizmorcore/zizmor-action@3dc1ecc...53290ba) Updates `actions/setup-python` from 7.0.0 to 7.1.0 - [Release notes](https://github.com/actions/setup-python/releases) - [Commits](actions/setup-python@5fda3b9...6d4fd22) Updates `actions/download-artifact` from 8.0.1 to 8.0.2 - [Release notes](https://github.com/actions/download-artifact/releases) - [Commits](actions/download-artifact@3e5f45b...9000827) Updates `actions/attest-build-provenance` from 4.1.1 to 4.2.2 - [Release notes](https://github.com/actions/attest-build-provenance/releases) - [Changelog](https://github.com/actions/attest-build-provenance/blob/main/RELEASE.md) - [Commits](actions/attest-build-provenance@0f67c3f...4d10147) --- updated-dependencies: - dependency-name: dtolnay/rust-toolchain dependency-version: 683b588c487a69d01f6c6ddf40f036ff682cc2c8 dependency-type: direct:production dependency-group: github-actions - dependency-name: Swatinem/rust-cache dependency-version: c8037a86dde8214a8310e9f54a8fc61ab362aa31 dependency-type: direct:production dependency-group: github-actions - dependency-name: taiki-e/install-action dependency-version: 2.87.32 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: github-actions - dependency-name: actions/upload-artifact dependency-version: 7.0.2 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: github-actions - dependency-name: zizmorcore/zizmor-action dependency-version: 0.8.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: github-actions - dependency-name: actions/setup-python dependency-version: 7.1.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: github-actions - dependency-name: actions/download-artifact dependency-version: 8.0.2 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: github-actions - dependency-name: actions/attest-build-provenance dependency-version: 4.2.2 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: github-actions ... Signed-off-by: dependabot[bot] <support@github.com>

dependabot Bot added dependencies Pull requests that update a dependency file github_actions Pull requests that update GitHub Actions code labels Nov 2, 2026

Navigation Menu

Repository navigation

build(deps): bump the github-actions group across 1 directory with 8 updates - #22

build(deps): bump the github-actions group across 1 directory with 8 updates#22
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/github_actions/github-actions-b7ce3d60ae

dependabot Bot commented on behalf of github Nov 2, 2026

Uh oh!

Reviewers

Uh oh!

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

Conversation

dependabot Bot commented on behalf of github Nov 2, 2026

Changelog

2.9.3

2.9.2

2.9.1

2.9.0

2.8.2

2.8.1

2.8.0

2.7.8

2.7.7

2.7.6

2.87.32

2.87.31

Changelog

[Unreleased]

[2.89.0] - 2026-11-01

[2.88.1] - 2026-10-30

v7.0.2

What's Changed

New Contributors

v0.8.0

What's Changed

v0.7.1

zizmor changes

Bug Fixes 🐛🔗

action changes

What's Changed

v0.7.0

zizmor notes

Enhancements 🌱🔗

v7.1.0

What's Changed

Enhancements

Dependency Upgrade

New Contributors

v8.0.2

What's Changed

New Contributors

v4.2.2

What's Changed

Uh oh!

Reviewers

Uh oh!

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants