Build(deps): bump the shared-actions group across 1 directory with 11 updates

.github/workflows/ci.yml

@@ -272,7 +272,7 @@
       # Merman CLI 0.7.0 needs Rust 1.95+, while the project gates must keep
       # running with the supported Rust 1.85.0 toolchain below.
       - name: Install Rust toolchain for Nixie
-        uses: leynos/shared-actions/.github/actions/setup-rust@6cec89bac47a21cf756d68d638a9a510998e57f8
+        uses: leynos/shared-actions/.github/actions/setup-rust@872f59f53717b5bebe8e24b2f4a7496b089a939a
         with:
           toolchain: '1.95.0'
           cache-provider: external
@@ -294,24 +294,24 @@
       - name: Install mdtablefix
         # The shared action accepts only releases with correct multi-platform
         # metadata and fails closed instead of compiling a formatter in CI.
-        uses: leynos/shared-actions/.github/actions/install-mdtablefix@0606ca899ce2995a0c4bc78e660e80832e6e8855
+        uses: leynos/shared-actions/.github/actions/install-mdtablefix@872f59f53717b5bebe8e24b2f4a7496b089a939a
         with:
           version: ${{ env.MDTABLEFIX_VERSION }}
 
       - name: Install Nixie
-        uses: leynos/shared-actions/.github/actions/install-nixie@c4ed5ffaf0640b1907d5359a87fd1677034eec27
+        uses: leynos/shared-actions/.github/actions/install-nixie@872f59f53717b5bebe8e24b2f4a7496b089a939a
 
       # The formatter profile needs nightly-only settings. Install its pinned
       # maintenance toolchain before restoring the supported project compiler.
       - name: Install formatter Rust toolchain
-        uses: leynos/shared-actions/.github/actions/setup-rust@6cec89bac47a21cf756d68d638a9a510998e57f8
+        uses: leynos/shared-actions/.github/actions/setup-rust@872f59f53717b5bebe8e24b2f4a7496b089a939a
         with:
           toolchain: 'nightly-2026-05-28'
           cache-provider: external
           use-sccache: 'false'
 
       - name: Install project Rust toolchain
-        uses: leynos/shared-actions/.github/actions/setup-rust@6cec89bac47a21cf756d68d638a9a510998e57f8
+        uses: leynos/shared-actions/.github/actions/setup-rust@872f59f53717b5bebe8e24b2f4a7496b089a939a
         with:
           toolchain: '1.85.0'
           cache-provider: external
@@ -323,7 +323,7 @@
         uses: ./.github/actions/setup-dev-fast
 
       - name: Install Whitaker
-        uses: leynos/shared-actions/.github/actions/install-whitaker@5a99aed78ce68dcebd3052b75c31e6f173162b1e
+        uses: leynos/shared-actions/.github/actions/install-whitaker@872f59f53717b5bebe8e24b2f4a7496b089a939a
 
       - name: Validate Mermaid diagrams
         run: make nixie
@@ -631,7 +631,7 @@
 
       - name: Install Rust toolchain
         if: env.LEG_RUNS == 'true'
-        uses: leynos/shared-actions/.github/actions/setup-rust@6cec89bac47a21cf756d68d638a9a510998e57f8
+        uses: leynos/shared-actions/.github/actions/setup-rust@872f59f53717b5bebe8e24b2f4a7496b089a939a
         with:
           toolchain: '1.85.0'
           cache-provider: external
@@ -644,7 +644,7 @@
       - name: Install makeutil
         id: makeutil
         if: env.LEG_RUNS == 'true'
-        uses: leynos/shared-actions/.github/actions/install-makeutil@ebe2f3105334283441f4c915eb979a0f4b9f2c04
+        uses: leynos/shared-actions/.github/actions/install-makeutil@872f59f53717b5bebe8e24b2f4a7496b089a939a
         with:
           bin-dir: ${{ runner.temp }}/makeutil/bin
 
@@ -663,7 +663,7 @@
       # Restoring the tool cache is an optimization, not a prerequisite.
       - name: Install mdtablefix
         if: env.LEG_RUNS == 'true'
-        uses: leynos/shared-actions/.github/actions/install-mdtablefix@0606ca899ce2995a0c4bc78e660e80832e6e8855
+        uses: leynos/shared-actions/.github/actions/install-mdtablefix@872f59f53717b5bebe8e24b2f4a7496b089a939a
         with:
           version: ${{ env.MDTABLEFIX_VERSION }}
 
@@ -879,7 +879,7 @@
       # pinned toolchain the other Rust-touching jobs use rather than whatever
       # the runner image happens to ship.
       - name: Install Rust toolchain
-        uses: leynos/shared-actions/.github/actions/setup-rust@6cec89bac47a21cf756d68d638a9a510998e57f8
+        uses: leynos/shared-actions/.github/actions/setup-rust@872f59f53717b5bebe8e24b2f4a7496b089a939a
         with:
           toolchain: '1.85.0'
           cache-provider: external
@@ -1116,7 +1116,7 @@
           enable-cache: false
 
       - name: Install project Rust toolchain
-        uses: leynos/shared-actions/.github/actions/setup-rust@6cec89bac47a21cf756d68d638a9a510998e57f8
+        uses: leynos/shared-actions/.github/actions/setup-rust@872f59f53717b5bebe8e24b2f4a7496b089a939a
         with:
           toolchain: '1.85.0'
           cache-provider: external
@@ -1403,8 +1403,7 @@
         if: >-
           ${{ !(github.event.pull_request.head.repo.fork
           || github.event.pull_request.user.login == 'dependabot[bot]') }}
-        uses: "leynos/shared-actions/.github/actions/\
-          export-ubicloud-cache-credentials@dbe2e22ceaf498d85512679ccded38be9dbe7777"
+        uses: "leynos/shared-actions/.github/actions/export-ubicloud-cache-credentials@872f59f53717b5bebe8e24b2f4a7496b089a939a"
 
       - name: Set up sccache
         id: sccache
@@ -1432,7 +1431,7 @@
           enable-cache: false
 
       - name: Install Rust toolchain
-        uses: leynos/shared-actions/.github/actions/setup-rust@6cec89bac47a21cf756d68d638a9a510998e57f8
+        uses: leynos/shared-actions/.github/actions/setup-rust@872f59f53717b5bebe8e24b2f4a7496b089a939a
         with:
           toolchain: '1.85.0'
           cache-provider: external
@@ -1442,7 +1441,7 @@
       # Coverage runs the full Python suite, including native selector parity.
       # The restored tool cache is optional, so provision the pinned binary.
       - name: Install mdtablefix
-        uses: leynos/shared-actions/.github/actions/install-mdtablefix@0606ca899ce2995a0c4bc78e660e80832e6e8855
+        uses: leynos/shared-actions/.github/actions/install-mdtablefix@872f59f53717b5bebe8e24b2f4a7496b089a939a
         with:
           version: ${{ env.MDTABLEFIX_VERSION }}
 
@@ -1451,7 +1450,7 @@
       # binary goes outside `~/.local/bin`, which the tool cache archives.
       - name: Install makeutil
         id: makeutil
-        uses: leynos/shared-actions/.github/actions/install-makeutil@ebe2f3105334283441f4c915eb979a0f4b9f2c04
+        uses: leynos/shared-actions/.github/actions/install-makeutil@872f59f53717b5bebe8e24b2f4a7496b089a939a
         with:
           bin-dir: ${{ runner.temp }}/makeutil/bin
 
@@ -1482,7 +1481,7 @@
       # treats changes within one percentage point as measurement noise.
       #
       - name: Generate coverage
-        uses: leynos/shared-actions/.github/actions/generate-coverage@a5765019912a8ab6882b12db049c7cde635f3a85
+        uses: leynos/shared-actions/.github/actions/generate-coverage@872f59f53717b5bebe8e24b2f4a7496b089a939a
         env:
           # The same warnings posture and the same core budget the
           # uninstrumented run used.
@@ -1856,7 +1855,7 @@
           enable-cache: false
 
       - name: Install Rust toolchain
-        uses: leynos/shared-actions/.github/actions/setup-rust@6cec89bac47a21cf756d68d638a9a510998e57f8
+        uses: leynos/shared-actions/.github/actions/setup-rust@872f59f53717b5bebe8e24b2f4a7496b089a939a
         with:
           toolchain: '1.85.0'
           cache-provider: external

.github/workflows/coverage-main.yml

@@ -158,8 +158,7 @@
         # end of a double-quoted YAML scalar elides the break and the next
         # line's indentation, so the value is the single reference it
         # reads as, not two joined by a space.
-        uses: "leynos/shared-actions/.github/actions/\
-          export-ubicloud-cache-credentials@dbe2e22ceaf498d85512679ccded38be9dbe7777"
+        uses: "leynos/shared-actions/.github/actions/export-ubicloud-cache-credentials@872f59f53717b5bebe8e24b2f4a7496b089a939a"
 
       - name: Set up sccache
         id: sccache
@@ -184,7 +183,7 @@
       # same pinned toolchain the pull-request coverage job uses rather than
       # whatever the runner image ships.
       - name: Install Rust toolchain
-        uses: leynos/shared-actions/.github/actions/setup-rust@6cec89bac47a21cf756d68d638a9a510998e57f8
+        uses: leynos/shared-actions/.github/actions/setup-rust@872f59f53717b5bebe8e24b2f4a7496b089a939a
         with:
           toolchain: '1.85.0'
           cache-provider: external
@@ -194,7 +193,7 @@
       # Trunk coverage runs the same native selector parity test as PR coverage.
       # The restored tool cache is optional, so provision the pinned binary.
       - name: Install mdtablefix
-        uses: leynos/shared-actions/.github/actions/install-mdtablefix@0606ca899ce2995a0c4bc78e660e80832e6e8855
+        uses: leynos/shared-actions/.github/actions/install-mdtablefix@872f59f53717b5bebe8e24b2f4a7496b089a939a
         with:
           version: ${{ env.MDTABLEFIX_VERSION }}
 
@@ -203,7 +202,7 @@
       # binary goes outside `~/.local/bin`, which the tool cache archives.
       - name: Install makeutil
         id: makeutil
-        uses: leynos/shared-actions/.github/actions/install-makeutil@ebe2f3105334283441f4c915eb979a0f4b9f2c04
+        uses: leynos/shared-actions/.github/actions/install-makeutil@872f59f53717b5bebe8e24b2f4a7496b089a939a
         with:
           bin-dir: ${{ runner.temp }}/makeutil/bin
 
@@ -249,7 +248,7 @@
       # and without the check `always` would publish its coverage as the
       # authoritative baseline.
       - name: Generate coverage
-        uses: leynos/shared-actions/.github/actions/generate-coverage@a5765019912a8ab6882b12db049c7cde635f3a85
+        uses: leynos/shared-actions/.github/actions/generate-coverage@872f59f53717b5bebe8e24b2f4a7496b089a939a
         env:
           # The same warnings posture and the same core budget the
           # uninstrumented run used.
@@ -293,7 +292,7 @@
         # A dispatch may start from any branch, and CodeScene accepts uploads
         # only for the branch it analyses, so the ref is part of the guard.
         if: steps.codescene-token.outputs.available == 'true' && github.ref == 'refs/heads/main'
-        uses: leynos/shared-actions/.github/actions/upload-codescene-coverage@a5765019912a8ab6882b12db049c7cde635f3a85
+        uses: leynos/shared-actions/.github/actions/upload-codescene-coverage@872f59f53717b5bebe8e24b2f4a7496b089a939a
         with:
           format: cobertura
           mode: upload

.github/workflows/dependabot-automerge.yml

@@ -29,6 +29,6 @@ jobs:
       # The token is not used for any external cloud auth.
       id-token: write
     if: ${{ github.event_name == 'workflow_dispatch' || github.actor == 'dependabot[bot]' }}
-    uses: leynos/shared-actions/.github/workflows/dependabot-automerge.yml@4fb8eb7ad52454678a0662865d81d3cd17aa6e0e
+    uses: leynos/shared-actions/.github/workflows/dependabot-automerge.yml@872f59f53717b5bebe8e24b2f4a7496b089a939a
     with:
       pull-request-number: ${{ inputs.pull-request-number || github.event.pull_request.number }}

.github/workflows/loom.yml

@@ -99,7 +99,7 @@ jobs:
           enable-cache: false
 
       - name: Install Rust toolchain
-        uses: leynos/shared-actions/.github/actions/setup-rust@6cec89bac47a21cf756d68d638a9a510998e57f8
+        uses: leynos/shared-actions/.github/actions/setup-rust@872f59f53717b5bebe8e24b2f4a7496b089a939a
         with:
           toolchain: '1.85.0'
           cache-provider: external

.github/workflows/mutation-testing.yml

@@ -27,7 +27,7 @@ jobs:
     permissions:
       contents: read
       id-token: write  # OIDC workflow-source resolution
-    uses: leynos/shared-actions/.github/workflows/mutation-mutmut.yml@774cc5a01e457714aede66e14a97b3e257812fc2
+    uses: leynos/shared-actions/.github/workflows/mutation-mutmut.yml@872f59f53717b5bebe8e24b2f4a7496b089a939a
     with:
       # Flat layout: the mutable source is the cuprum/ package at the
       # repository root, so change detection watches it directly.

.github/workflows/release.yml

@@ -51,7 +51,7 @@ jobs:
       # `0.2.0-beta1` and any other spelling fails.
       - name: Check the Cargo manifest version against the tag
         id: cargo-version
-        uses: leynos/shared-actions/.github/actions/ensure-cargo-version@2f58fab140cc8dfe69756aaa6a3bbb987c426023
+        uses: leynos/shared-actions/.github/actions/ensure-cargo-version@872f59f53717b5bebe8e24b2f4a7496b089a939a
         with:
           manifests: rust/cuprum-rust/Cargo.toml
       # The shared validator for pyproject.toml exists only inside