Skip to content

Chore(deps): Bump the github-actions group across 1 directory with 2 updates - #476

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/github_actions/github-actions-4a51fa3926
Open

dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/github_actions/github-actions-4a51fa3926

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Oct 2, 2026 •

Copy link
Copy Markdown
Contributor

Bumps the github-actions group with 2 updates in the / directory: taiki-e/install-action and astral-sh/setup-uv.

Updates taiki-e/install-action from 2.85.3 to 2.87.28

Release notes

Sourced from taiki-e/install-action's releases.

2.87.28

  • Update dprint@latest to 0.62.0.

  • Update vacuum@latest to 0.33.0.

  • Update uv@latest to 0.13.0.

  • Update tombi@latest to 1.8.1.

  • Update release-plz@latest to 0.3.171.

  • Update rclone@latest to 1.75.2.

  • Update mise@latest to 2026.10.7.

  • Update cargo-binstall@latest to 1.25.3.

2.87.27

  • Update vacuum@latest to 0.32.0.

  • Update uv@latest to 0.12.24.

  • Update typos@latest to 1.51.1.

  • Update tombi@latest to 1.7.3.

  • Update syft@latest to 1.54.1.

  • Update release-plz@latest to 0.3.170.

  • Update mise@latest to 2026.10.4.

  • Update kingfisher@latest to 2.11.1.

  • Update hyperfine@latest to 2.0.0.

  • Update dprint@latest to 0.61.1.

  • Update cargo-nextest@latest to 0.9.148.

  • Update cargo-neat@latest to 0.6.0.

  • Update cargo-binstall@latest to 1.25.2.

2.87.26

  • Update tombi@latest to 1.7.2.

  • Update prek@latest to 0.5.5.

  • Update mise@latest to 2026.10.3.

... (truncated)

Changelog

Sourced from taiki-e/install-action's changelog.

Changelog

All notable changes to this project will be documented in this file.

This project adheres to Semantic Versioning.

[Unreleased]

[2.87.29] - 2026-10-16

  • Update zizmor@latest to 1.31.0.

  • Update wasmtime@latest to 49.0.3.

  • Update wasm-tools@latest to 1.262.0.

  • Update uv@latest to 0.13.1.

  • Update trivy@latest to 0.76.0.

  • Update tombi@latest to 1.8.4.

  • Update release-plz@latest to 0.3.172.

  • Update osv-scanner@latest to 2.7.0.

  • Update mise@latest to 2026.10.11.

  • Update mdbook-d2@latest to 0.3.9.

  • Update kingfisher@latest to 2.13.0.

  • Update kache@latest to 1.2.1.

  • Update just@latest to 1.59.0.

  • Update dprint@latest to 0.63.0.

  • Update cargo-crap@latest to 0.8.0.

  • Update bpf-linker@latest to 0.12.0.

[2.87.28] - 2026-10-12

  • Update dprint@latest to 0.62.0.

... (truncated)

Commits

Updates astral-sh/setup-uv from 10.0.1 to 10.3.0

Release notes

Sourced from astral-sh/setup-uv's releases.

v10.3.0 🌈 Add Python architecture selection

Changes

This release adds the python-arch input to select a Python architecture independently of the Python version. With uv 0.13.0 or later, set python-arch: x86_64 to use x64 Python on Windows ARM64 runners.

It also includes embedded checksums for uv releases through 0.13.0.

🚀 Enhancements

🧰 Maintenance

⬆️ Dependency updates

v10.2.0 🌈 Disable automatic cache saves for merge queues

Changes

This release contains the known-checksum of the most recent uv releases and also disabled the uploading(saving) of the cache when in a merge queue since theses caches would almost never be used.

🚀 Enhancements

🧰 Maintenance

📚 Documentation

⬆️ Dependency updates

... (truncated)

Commits

@dependabot dependabot Bot added dependencies Dependency updates, applied to every Dependabot pull request. github-actions Dependabot channel for GitHub Actions updates, batched into one pull request per run. labels Oct 2, 2026

@sourcery-ai sourcery-ai Bot left a comment

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Sorry @dependabot[bot], you've used your own review budget of 250,000 diff characters for the last 7 days.

You can request another review in 11 hours and 12 minutes by commenting @sourcery-ai review. Upgrade to get a review now.

@coderabbitai

coderabbitai Bot commented Oct 2, 2026 •

Copy link
Copy Markdown

Important

Review skipped

Bot user detected.

To trigger a single review, invoke the @coderabbitai review command.

⚙️ Run configuration
  • Configuration used: Organization UI
  • Review profile: ASSERTIVE
  • Plan: Advanced
  • Run ID: 1bc63c0e-1b26-475d-9965-68a7be929dfe

You can disable this status message by setting the reviews.review_status to false in the CodeRabbit configuration file.

Use the checkbox below for a quick retry:

  • 🔍 Trigger review
  • Autofix · Keep fixing CodeRabbit findings and required CI, and resolving merge conflicts

Comment @coderabbitai help to get the list of available commands.

codescene-access[bot]

This comment was marked as outdated.

@github-actions
github-actions Bot enabled auto-merge (squash) October 2, 2026 03:45
@dependabot dependabot Bot changed the title Chore(deps): Bump the github-actions group with 2 updates Chore(deps): Bump the github-actions group across 1 directory with 2 updates Oct 5, 2026
@dependabot
dependabot Bot force-pushed the dependabot/github_actions/github-actions-4a51fa3926 branch from 2cdf3d9 to 297a487 Compare October 5, 2026 00:54
codescene-access[bot]

This comment was marked as outdated.

@dependabot
dependabot Bot force-pushed the dependabot/github_actions/github-actions-4a51fa3926 branch from 297a487 to aca63fa Compare October 9, 2026 14:30
codescene-access[bot]

This comment was marked as outdated.

@dependabot
dependabot Bot force-pushed the dependabot/github_actions/github-actions-4a51fa3926 branch from aca63fa to 4d5d834 Compare October 9, 2026 23:58
codescene-access[bot]

This comment was marked as outdated.

@dependabot
dependabot Bot force-pushed the dependabot/github_actions/github-actions-4a51fa3926 branch from 4d5d834 to d749735 Compare October 12, 2026 02:17
codescene-access[bot]

This comment was marked as outdated.

@dependabot
dependabot Bot force-pushed the dependabot/github_actions/github-actions-4a51fa3926 branch from d749735 to 504cba7 Compare October 14, 2026 11:24
codescene-access[bot]

This comment was marked as outdated.

@dependabot
dependabot Bot force-pushed the dependabot/github_actions/github-actions-4a51fa3926 branch from 504cba7 to 880cf15 Compare October 15, 2026 00:44
codescene-access[bot]

This comment was marked as outdated.

@dependabot
dependabot Bot force-pushed the dependabot/github_actions/github-actions-4a51fa3926 branch from 880cf15 to e4bef8b Compare October 16, 2026 00:46
codescene-access[bot]

This comment was marked as outdated.

…updates

Bumps the github-actions group with 2 updates in the / directory: [taiki-e/install-action](https://github.com/taiki-e/install-action) and [astral-sh/setup-uv](https://github.com/astral-sh/setup-uv).


Updates `taiki-e/install-action` from 2.85.3 to 2.87.28
- [Release notes](https://github.com/taiki-e/install-action/releases)
- [Changelog](https://github.com/taiki-e/install-action/blob/main/CHANGELOG.md)
- [Commits](taiki-e/install-action@18b1216...1168f68)

Updates `astral-sh/setup-uv` from 10.0.1 to 10.3.0
- [Release notes](https://github.com/astral-sh/setup-uv/releases)
- [Commits](astral-sh/setup-uv@20cfd1b...1c37ad0)

---
updated-dependencies:
- dependency-name: astral-sh/setup-uv
  dependency-version: 10.2.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: github-actions
- dependency-name: taiki-e/install-action
  dependency-version: 2.87.20
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: github-actions
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot
dependabot Bot force-pushed the dependabot/github_actions/github-actions-4a51fa3926 branch from e4bef8b to fb8d6f2 Compare October 19, 2026 00:44

This branch has not been deployed

No deployments
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Dependency updates, applied to every Dependabot pull request. github-actions Dependabot channel for GitHub Actions updates, batched into one pull request per run.

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants