chore(deps): update patch updates by graelo-ci-bot[bot] · Pull Request #145 · graelo/tmux-backup

graelo-ci-bot · 2026-09-15T22:04:40Z

This PR contains the following updates:

Package	Type	Update	Change	Pending
actions/download-artifact	action	patch	`v8.0.1` → `v8.0.2`
actions/upload-artifact	action	patch	`v7.0.1` → `v7.0.2`
clap	dependencies	patch	`4.6.6` → `4.6.7`
clap_complete	dependencies	patch	`4.6.9` → `4.6.11`
si-scale	dependencies	patch	`0.3.0` → `0.3.1`
taiki-e/install-action	action	patch	`v2.87.1` → `v2.87.26`	`v2.87.27`
thiserror	dependencies	patch	`2.0.20` → `2.0.21`
zizmorcore/zizmor-action	action	patch	`v0.6.2` → `v0.6.4`

actions/download-artifact

Update the readme by @danwkennedy in #473
Improves artifact download retries when the service returns HTTP 429 (rate limiting), including honoring valid Retry-After headers.
Update @actions/artifact to 6.3.1 by @tunc-d in #492
Prepare download-artifact v8.0.2 by @tunc-d in #493

Full Changelog: actions/download-artifact@v8.0.1...v8.0.2

actions/upload-artifact

Improves artifact download retries when the service returns HTTP 429 (rate limiting), including honoring valid Retry-After headers.
Updates @actions/artifact to v6.3.1.

Full Changelog: actions/upload-artifact@v7.0.1...v7.0.2

clap-rs/clap (clap)

(derive) Add #[command(defer = <bool>)] attribute to opt-in to lazy initialisation of subcommands

graelo/si-scale (si-scale)

Add AGENTS.md with project architecture, verification, documentation, and
release guidance for coding agents
Add rumdl Markdown linting, including aligned tables and 80-column reflow

Consolidate local verification onto the Makefile, which is now the single
definition of every task: make check is the pre-push gate and
make check-all the pre-PR gate
Make README.md the canonical long-form guide; include it directly in
src/lib.rs crate documentation rather than duplicating it
Dual-license under MIT OR Apache-2.0: correct the copyright holder in both
LICENSE files (u0xy → graelo) and align the README license section

Use standard parentheses in format_args! invocations in the
format_value! macro: Clippy 1.99's nonstandard_macro_braces lint
rejected the brace form for downstream users; expansion and output are
unchanged
Remove the redundant package.homepage from Cargo.toml: the new
cargo::redundant_homepage manifest lint (warn-by-default on beta and
nightly) turned into a hard error under the
CARGO_BUILD_WARNINGS=deny default of
actions-rust-lang/setup-rust-toolchain, failing the compatibility
matrix on beta and nightly
Coverage instructions now work: make coverage builds an HTML report with
cargo-llvm-cov, replacing the obsolete nightly + grcov workflow

Harden GitHub Actions workflows: pin third-party actions to commit SHAs,
scope per-job permissions with least privilege, set persist-credentials:
false, and guard caches against PR poisoning
Apply github-actions-playbook v1.9: switch Rust toolchain setup from
dtolnay/rust-toolchain to the pinned
actions-rust-lang/setup-rust-toolchain with caching left to the explicit
actions/cache steps, and drop the now-unneeded .github/zizmor.yml
suppressions
Use GitHub's $ self-repository syntax for reusable workflow references
($/.github/workflows/... instead of ./.github/workflows/...), per the
playbook's self-repository convention
Add zizmor and poutine for workflow and CI/CD supply-chain static analysis,
extracted into reusable workflows with a twice-monthly scheduled caller
Replace ncipollo/release-action with gh CLI in release workflow

Switch test runner from cargo test to cargo-nextest with CI profile
Remove inline cargo-deny, cargo-outdated, and cargo-pants from essentials
workflow (audits moved to reusable workflow; cargo-outdated replaced by
Renovate)
Tighten release tag filter from v* to semver pattern
Add Renovate for automated dependency updates with SHA pinning and automerge
Add CODEOWNERS (@graelo)