Skip to content

chore(deps): bump the github-actions group across 1 directory with 7 updates - #55

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/github_actions/github-actions-40abc1d0b6
Open

dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/github_actions/github-actions-40abc1d0b6

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Oct 16, 2026 •

Copy link
Copy Markdown
Contributor

Bumps the github-actions group with 7 updates in the / directory:

Package From To
dtolnay/rust-toolchain 6c977a6ca4077a0ceb28ffbe03f59d46e9ac8772 683b588c487a69d01f6c6ddf40f036ff682cc2c8
taiki-e/install-action 2.85.14 2.87.29
actions/setup-java 5.7.0 6.1.0
actions/upload-artifact 7.0.1 7.0.2
msys2/setup-msys2 2.32.0 2.33.0
actions/setup-node 7.0.0 7.1.0
cargo-bins/cargo-binstall 1.21.1 1.26.0

Updates dtolnay/rust-toolchain from 6c977a6ca4077a0ceb28ffbe03f59d46e9ac8772 to 683b588c487a69d01f6c6ddf40f036ff682cc2c8

Commits
  • 683b588 Add 1.99.1 patch release
  • e2a55d2 Merge pull request #187 from dtolnay/pwn
  • 6af9a09 Unify flags[@] and downgrade[@]
  • 83d0610 Safely handle action inputs
  • 7e38f4b Merge pull request #186 from WaterWhisperer/feat/retry-install
  • 7645b07 Retry release-server checksum failures
  • 02cb101 Merge pull request 185 from fufesou/feat/force-non-host
  • b38a663 Pass --force-non-host unconditionally
  • a4f61a0 Document rustup non-host opt-in requirement
  • 06b350f Support force-non-host toolchains
  • Additional commits viewable in compare view

Updates taiki-e/install-action from 2.85.14 to 2.87.29

Release notes

Sourced from taiki-e/install-action's releases.

2.87.29

  • Update zizmor@latest to 1.31.0.

  • Update wasmtime@latest to 49.0.3.

  • Update wasm-tools@latest to 1.262.0.

  • Update uv@latest to 0.13.1.

  • Update trivy@latest to 0.76.0.

  • Update tombi@latest to 1.8.4.

  • Update release-plz@latest to 0.3.172.

  • Update osv-scanner@latest to 2.7.0.

  • Update mise@latest to 2026.10.11.

  • Update mdbook-d2@latest to 0.3.9.

  • Update kingfisher@latest to 2.13.0.

  • Update kache@latest to 1.2.1.

  • Update just@latest to 1.59.0.

  • Update dprint@latest to 0.63.0.

  • Update cargo-crap@latest to 0.8.0.

  • Update bpf-linker@latest to 0.12.0.

2.87.28

  • Update dprint@latest to 0.62.0.

  • Update vacuum@latest to 0.33.0.

  • Update uv@latest to 0.13.0.

  • Update tombi@latest to 1.8.1.

  • Update release-plz@latest to 0.3.171.

  • Update rclone@latest to 1.75.2.

  • Update mise@latest to 2026.10.7.

  • Update cargo-binstall@latest to 1.25.3.

... (truncated)

Changelog

Sourced from taiki-e/install-action's changelog.

Changelog

All notable changes to this project will be documented in this file.

This project adheres to Semantic Versioning.

[Unreleased]

[2.87.31] - 2026-10-23

  • Downgrade cargo-sort@latest to 2.1.3.

  • Update vacuum@latest to 0.35.0.

  • Update xh@latest to 0.26.3.

  • Update uv@latest to 0.13.5.

  • Update ubi@latest to 0.13.0.

  • Update trivy@latest to 0.76.1.

  • Update tombi@latest to 1.9.0.

  • Update release-plz@latest to 0.3.174.

  • Update prek@latest to 0.5.7.

  • Update mise@latest to 2026.10.17.

  • Update jaq@latest to 3.1.2.

  • Update espup@latest to 0.17.1.

  • Update cargo-zigbuild@latest to 0.24.0.

  • Update cargo-nextest@latest to 0.9.149.

  • Update biome@latest to 2.6.2.

[2.87.30] - 2026-10-21

  • Update zizmor@latest to 1.31.1.

  • Update wasmtime@latest to 50.0.0.

... (truncated)

Commits
  • 8cca091 Release 2.87.29
  • fc26824 Update wasmtime manifest
  • 5018b2e Update zizmor@latest to 1.31.0
  • d0e5204 Update wasmtime@latest to 49.0.3
  • 517774f Update wasm-tools@latest to 1.262.0
  • 4bc69b1 Update vacuum manifest
  • 0470a3f Update uv@latest to 0.13.1
  • 7a2b747 Update trivy@latest to 0.76.0
  • 7efb533 Update tombi@latest to 1.8.4
  • e5d37d6 Update release-plz@latest to 0.3.172
  • Additional commits viewable in compare view

Updates actions/setup-java from 5.7.0 to 6.1.0

Release notes

Sourced from actions/setup-java's releases.

v6.1.0

What's Changed

New Contributors

Full Changelog: actions/setup-java@v6.0.1...v6.1.0

v6.0.1

What's Changed

New Contributors

Full Changelog: actions/setup-java@v6.0.0...v6.0.1

v6.0.0

What's Changed

... (truncated)

Commits
  • b843ebf Support Maven plugin repositories in generated settings.xml (#1286)
  • 2a69be2 feat: support Maven server credential origins (#1282)
  • d0e6e4d chore(deps): bump the monthly-npm-updates group with 13 updates (#1276)
  • b24925b chore(deps): bump undici from 6.28.0 to 6.29.0 (#1274)
  • 47b3648 Support Temurin JEP 322 patch versions like 26.0.2.1+1 (#1270) (#1279)
  • 74920aa Prefer Zulu 4-segment hotfix builds when resolving version ranges (#1278)
  • a78ec39 Stop GPG agent before removing signature-verification home (#1273)
  • 97c5a5e Support Temurin on Linux RISC-V (#1269)
  • 1aa87b6 Preserve compound Liberica build versions from .sdkmanrc (#1268)
  • de7274f Avoid macOS GPG socket overflow on long runner paths (#1266)
  • Additional commits viewable in compare view

Updates actions/upload-artifact from 7.0.1 to 7.0.2

Release notes

Sourced from actions/upload-artifact's releases.

v7.0.2

What's Changed

  • Improves artifact download retries when the service returns HTTP 429 (rate limiting), including honoring valid Retry-After headers.
  • Updates @​actions/artifact to v6.3.1.

New Contributors

Full Changelog: actions/upload-artifact@v7.0.1...v7.0.2

Commits
  • cf430e0 Merge pull request #822 from actions/tunc-d-prepare-upload-v7-0-2
  • c2acded chore: prepare v7.0.2 release
  • 4687c1b Merge pull request #821 from actions/tunc-d-upload-artifact-package-bump
  • 8cbe1be Bump @​actions/artifact to 6.3.1
  • See full diff in compare view

Updates msys2/setup-msys2 from 2.32.0 to 2.33.0

Release notes

Sourced from msys2/setup-msys2's releases.

v2.33.0

  • Update base distribution to 20260927. [#657]
  • Due to dependency cleanups "perl" and some related libraries are no longer installed by default.
  • Add a deprecation warning for MINGW32/MINGW64. See the new suppress-deprecation-warnings option for how to silence them. [#644]
  • pacboy caching fixes [#650]
  • Update dependencies
Changelog

Sourced from msys2/setup-msys2's changelog.

Changelog

2.33.0

  • Update base distribution to 20260927. [#657]
  • Due to dependency cleanups "perl" and some related libraries are no longer installed by default.
  • Add a deprecation warning for MINGW32/MINGW64. See the new suppress-deprecation-warnings option for how to silence them. [#644]
  • pacboy caching fixes [#650]
  • Update dependencies

2.32.0

  • Update base distribution to 20260611. [#624]
  • Port from ncc to rolldown for bundling
  • Include an SBOM of the bundle
  • Update dependencies

2.31.1

  • input: allow empty input for "install" and "pacboy", meaning not packages will be installed [#589]
  • input: deprecate the special "RUNNER_TEMP" value for "location" in favor of an empty string
  • Update dependencies

2.31.0

  • Update base distribution to 20260322. [#597]
  • Update dependencies
  • Move to node24 from node20

2.30.0

  • Update base distribution to 20251213. [#565]
  • Remove folder-hash dependency [#555]
  • Update dependencies

2.29.0

  • Allow installation to C:\msys64 if it doesn't exist already. Like with the new windows-11-arm image, for example. [#542]
  • Update base distribution to 20250830. [#548]
  • Update dependencies

2.28.0

  • Update base distribution to 20250622. [#518]
  • Update dependencies

2.27.0

... (truncated)

Commits

Updates actions/setup-node from 7.0.0 to 7.1.0

Release notes

Sourced from actions/setup-node's releases.

v7.1.0

What's Changed

Enhancements:

Bug fixes:

Documentation updates:

Dependency updates:

New Contributors

Full Changelog: actions/setup-node@v7.0.0...v7.1.0

Commits
  • 949feb2 Bump eslint from 10.5.0 to 10.11.0 and package.json from 7.0.0 to 7.1.0 (#1635)
  • 7207c4f chore: update dependencies and add license files (#1642)
  • 54337e0 Bump eslint-plugin-n from 18.1.0 to 18.3.0 (#1638)
  • fb54fa8 Bump jest-each from 30.4.1 to 30.5.2 (#1636)
  • 7f84f1d Bump pnpm/action-setup from 6.0.10 to 6.1.0 (#1631)
  • 0c54c7b Bump @​typescript-eslint/parser from 8.62.0 to 8.70.0 (#1615)
  • a829419 Bump @​types/semver from 7.7.1 to 7.8.0 (#1616)
  • 680d1e4 Support absolute paths in node-version-file (#1633)
  • db0fb3a Bump baseline-browser-mapping from 2.10.38 to 2.11.22 (#1629)
  • 94196ee Bump pnpm/action-setup from 6.0.9 to 6.0.10 (#1602)
  • Additional commits viewable in compare view

Updates cargo-bins/cargo-binstall from 1.21.1 to 1.26.0

Release notes

Sourced from cargo-bins/cargo-binstall's releases.

v1.26.0

Binstall is a tool to fetch and install Rust-based executables as binaries. It aims to be a drop-in replacement for cargo install in most cases. Install it today with cargo install cargo-binstall, from the binaries below, or if you already have it, upgrade with cargo binstall cargo-binstall.

In this release:

Other changes:

  • upgrade dependencies

v1.25.3

Binstall is a tool to fetch and install Rust-based executables as binaries. It aims to be a drop-in replacement for cargo install in most cases. Install it today with cargo install cargo-binstall, from the binaries below, or if you already have it, upgrade with cargo binstall cargo-binstall.

In this release:

  • fix(git-repo-api): trim the GitHub token and ignore an invalid one (#2705 #2706)

Other changes:

  • upgrade dependencies

v1.25.2

Binstall is a tool to fetch and install Rust-based executables as binaries. It aims to be a drop-in replacement for cargo install in most cases. Install it today with cargo install cargo-binstall, from the binaries below, or if you already have it, upgrade with cargo binstall cargo-binstall.

In this release:

Other changes:

  • upgrade dependencies

v1.25.1

Binstall is a tool to fetch and install Rust-based executables as binaries. It aims to be a drop-in replacement for cargo install in most cases. Install it today with cargo install cargo-binstall, from the binaries below, or if you already have it, upgrade with cargo binstall cargo-binstall.

In this release:

  • Fix prebuilt not used by cargo binstall cargo-binstall on and Windows ARM @​rscorer (#2692)

v1.25.0

Binstall is a tool to fetch and install Rust-based executables as binaries. It aims to be a drop-in replacement for cargo install in most cases. Install it today with cargo install cargo-binstall, from the binaries below, or if you already have it, upgrade with cargo binstall cargo-binstall.

In this release:

... (truncated)

Commits

@dependabot dependabot Bot added dependencies Pull requests that update a dependency file github_actions Pull requests that update GitHub Actions code labels Oct 16, 2026
@dependabot
dependabot Bot force-pushed the dependabot/github_actions/github-actions-40abc1d0b6 branch from 378592f to cff507f Compare October 19, 2026 09:38
…updates

Bumps the github-actions group with 7 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| [dtolnay/rust-toolchain](https://github.com/dtolnay/rust-toolchain) | `6c977a6ca4077a0ceb28ffbe03f59d46e9ac8772` | `683b588c487a69d01f6c6ddf40f036ff682cc2c8` |
| [taiki-e/install-action](https://github.com/taiki-e/install-action) | `2.85.14` | `2.87.29` |
| [actions/setup-java](https://github.com/actions/setup-java) | `5.7.0` | `6.1.0` |
| [actions/upload-artifact](https://github.com/actions/upload-artifact) | `7.0.1` | `7.0.2` |
| [msys2/setup-msys2](https://github.com/msys2/setup-msys2) | `2.32.0` | `2.33.0` |
| [actions/setup-node](https://github.com/actions/setup-node) | `7.0.0` | `7.1.0` |
| [cargo-bins/cargo-binstall](https://github.com/cargo-bins/cargo-binstall) | `1.21.1` | `1.26.0` |



Updates `dtolnay/rust-toolchain` from 6c977a6ca4077a0ceb28ffbe03f59d46e9ac8772 to 683b588c487a69d01f6c6ddf40f036ff682cc2c8
- [Release notes](https://github.com/dtolnay/rust-toolchain/releases)
- [Commits](dtolnay/rust-toolchain@6c977a6...683b588)

Updates `taiki-e/install-action` from 2.85.14 to 2.87.29
- [Release notes](https://github.com/taiki-e/install-action/releases)
- [Changelog](https://github.com/taiki-e/install-action/blob/main/CHANGELOG.md)
- [Commits](taiki-e/install-action@decb84f...8cca091)

Updates `actions/setup-java` from 5.7.0 to 6.1.0
- [Release notes](https://github.com/actions/setup-java/releases)
- [Commits](actions/setup-java@b6effb0...b843ebf)

Updates `actions/upload-artifact` from 7.0.1 to 7.0.2
- [Release notes](https://github.com/actions/upload-artifact/releases)
- [Commits](actions/upload-artifact@043fb46...cf430e0)

Updates `msys2/setup-msys2` from 2.32.0 to 2.33.0
- [Release notes](https://github.com/msys2/setup-msys2/releases)
- [Changelog](https://github.com/msys2/setup-msys2/blob/main/CHANGELOG.md)
- [Commits](msys2/setup-msys2@66cd2cc...ec48f7c)

Updates `actions/setup-node` from 7.0.0 to 7.1.0
- [Release notes](https://github.com/actions/setup-node/releases)
- [Commits](actions/setup-node@8207627...949feb2)

Updates `cargo-bins/cargo-binstall` from 1.21.1 to 1.26.0
- [Release notes](https://github.com/cargo-bins/cargo-binstall/releases)
- [Changelog](https://github.com/cargo-bins/cargo-binstall/blob/main/release-plz.toml)
- [Commits](cargo-bins/cargo-binstall@e00d2c9...8a20456)

---
updated-dependencies:
- dependency-name: actions/setup-java
  dependency-version: 6.0.1
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: github-actions
- dependency-name: actions/setup-node
  dependency-version: 7.1.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: github-actions
- dependency-name: actions/upload-artifact
  dependency-version: 7.0.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: github-actions
- dependency-name: cargo-bins/cargo-binstall
  dependency-version: 1.25.2
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: github-actions
- dependency-name: dtolnay/rust-toolchain
  dependency-version: 683b588c487a69d01f6c6ddf40f036ff682cc2c8
  dependency-type: direct:production
  dependency-group: github-actions
- dependency-name: msys2/setup-msys2
  dependency-version: 2.33.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: github-actions
- dependency-name: taiki-e/install-action
  dependency-version: 2.87.27
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: github-actions
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot
dependabot Bot force-pushed the dependabot/github_actions/github-actions-40abc1d0b6 branch from cff507f to afc7a30 Compare October 26, 2026 09:41
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file github_actions Pull requests that update GitHub Actions code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants