Skip to content

chore(deps): bump the ci-weekly group across 1 directory with 16 updates - #29

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/github_actions/ci-weekly-8479ab59ca
Open

chore(deps): bump the ci-weekly group across 1 directory with 16 updates#29
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/github_actions/ci-weekly-8479ab59ca

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Sep 14, 2026 •
edited
Loading

Copy link
Copy Markdown
Contributor

Bumps the ci-weekly group with 16 updates in the / directory:

Package From To
actions/checkout 7.0.0 7.0.1
dtolnay/rust-toolchain 2c7215f132e9ebf062739d9130488b56d53c060c 02cb101ec7c40f2c49e1d9714d64511d8e1b74de
actions/deploy-pages 5.0.0 5.0.1
rui314/setup-mold 9c9c13bf4c3f1adef0cc596abc155580bcb04444 10ca16bf91dc22e05ebdc935cad9c75ea248f621
Swatinem/rust-cache 2.9.1 2.9.2
mozilla-actions/sccache-action 0.0.10 0.0.11
taiki-e/install-action 2.82.9 2.87.8
re-actors/alls-green 1.2.2 1.3.0
actions/setup-go 6.5.0 7.0.0
crate-ci/typos 1.46.2 1.50.1
dprint/check 2.3 2.5
taiki-e/cache-cargo-install-action 3.0.7 3.0.8
docker/setup-buildx-action 4.2.0 4.3.0
docker/login-action 4.1.0 4.6.0
actions/attest-build-provenance 4.1.1 4.2.2
anchore/sbom-action 0.24.0 0.24.2

Updates actions/checkout from 7.0.0 to 7.0.1

Release notes

Sourced from actions/checkout's releases.

v7.0.1

What's Changed

Full Changelog: actions/checkout@v7...v7.0.1

Changelog

Sourced from actions/checkout's changelog.

Changelog

v7.0.1

v7.0.0

v6.0.3

v6.0.2

v6.0.1

v6.0.0

v5.0.1

v5.0.0

v4.3.1

v4.3.0

v4.2.2

v4.2.1

... (truncated)

Commits

Updates dtolnay/rust-toolchain from 2c7215f132e9ebf062739d9130488b56d53c060c to 02cb101ec7c40f2c49e1d9714d64511d8e1b74de

Commits
  • 02cb101 Merge pull request 185 from fufesou/feat/force-non-host
  • b38a663 Pass --force-non-host unconditionally
  • a4f61a0 Document rustup non-host opt-in requirement
  • 06b350f Support force-non-host toolchains
  • d103106 Predefine branches up to 1.120
  • 3ea7b2d Add 1.98.1 patch release
  • 6c977a6 Merge pull request #182 from dtolnay/name
  • f3510ff Render better step names
  • See full diff in compare view

Updates actions/deploy-pages from 5.0.0 to 5.0.1

Release notes

Sourced from actions/deploy-pages's releases.

v5.0.1

Changelog

See details of all code changes since previous release.

⚠️ For use with products other than GitHub.com, such as GitHub Enterprise Server, please consult the compatibility table.

Commits
  • 368f825 Merge pull request #444 from actions/yoannchaudet-deployment-polling-backoff
  • 7e97763 Validate deployment polling intervals
  • 0143e11 Add backoff and jitter to deployment polling
  • 5e98f10 Merge pull request #440 from actions/user/adwitiya
  • 8b0625a Improve deployment request test coverage
  • See full diff in compare view

Updates rui314/setup-mold from 9c9c13bf4c3f1adef0cc596abc155580bcb04444 to 10ca16bf91dc22e05ebdc935cad9c75ea248f621

Commits

Updates Swatinem/rust-cache from 2.9.1 to 2.9.2

Release notes

Sourced from Swatinem/rust-cache's releases.

v2.9.2

What's Changed

New Contributors

Full Changelog: Swatinem/rust-cache@v2.9.1...v2.9.2

Changelog

Sourced from Swatinem/rust-cache's changelog.

Changelog

2.9.2

  • Fix credentials.toml cleanup
  • Improvements to cleanup, preserving more valid targets
  • Improvements to cargo install handling
  • Correctly sort/dedupe Rust versions

2.9.1

  • Fix regression in hash calculation

2.9.0

  • Update to node24
  • Support running from within a nix shell
  • Consider all installed toolchains for cache key
  • Use case-insensitive comparison to determine exact cache hit

2.8.2

  • Don't overwrite env for cargo-metadata call

2.8.1

  • Set empty CARGO_ENCODED_RUSTFLAGS when retrieving metadata
  • Various dependency updates

2.8.0

  • Add support for warpbuild cache provider
  • Add new cache-workspace-crates feature

2.7.8

  • Include CPU arch in the cache key

2.7.7

  • Also cache cargo install metadata

2.7.6

  • Allow opting out of caching $CARGO_HOME/bin
  • Add runner OS in cache key
  • Adds an option to do lookup-only of the cache

2.7.5

... (truncated)

Commits
  • 6323deb 2.9.2
  • b16e8d7 bump rollup and rebuild
  • 3bf42ac invert target/profile check in cleanup
  • 6e5b278 correctly sort and dedupe Rust versions
  • 5adc05f Bump the actions group across 1 directory with 3 updates (#368)
  • 66b1e95 fix: support Cargo V2 build dir layout (#371)
  • 72d126e Merge pull request #367 from Swatinem/dependabot/npm_and_yarn/dev-patch-2b495...
  • 48968d2 Bump the dev-patch group with 2 updates
  • 9f151ac update dependencies, rebuild
  • 0e24e5d Bump the actions group across 1 directory with 6 updates (#364)
  • Additional commits viewable in compare view

Updates mozilla-actions/sccache-action from 0.0.10 to 0.0.11

Release notes

Sourced from mozilla-actions/sccache-action's releases.

v0.0.11

What's Changed

New Contributors

Full Changelog: Mozilla-Actions/sccache-action@v0.0.10...v0.0.11

Commits
  • fc920bf Merge pull request #262 from sylvestre/0.0.11
  • c5764fd udpate dist files
  • ce939d5 update prettier
  • fc24157 prepare 0.0.11
  • 439ab27 README.md prepare the version 0.0.11
  • a2fac7a Merge pull request #252 from potiuk/ci-verify-dist
  • 4c2e5f0 Merge pull request #253 from Mozilla-Actions/dependabot/npm_and_yarn/actions/...
  • 772f27d ci: verify committed dist/ matches a clean rebuild
  • d270be5 Merge pull request #256 from Mozilla-Actions/dependabot/npm_and_yarn/jest-cir...
  • 52752ae Merge pull request #259 from Mozilla-Actions/dependabot/github_actions/github...
  • Additional commits viewable in compare view

Updates taiki-e/install-action from 2.82.9 to 2.87.8

Release notes

Sourced from taiki-e/install-action's releases.

2.87.8

  • Update shfmt@latest to 3.14.1.

  • Update release-plz@latest to 0.3.162.

  • Update protoc-gen-connect-openapi@latest to 0.26.0.

  • Update dprint@latest to 0.57.4.

  • Update cargo-llvm-cov@latest to 0.9.1.

  • Update cargo-crap@latest to 0.5.0.

  • Update cargo-binstall@latest to 1.23.0.

2.87.7

  • Update wasm-bindgen@latest to 0.2.128.

  • Update uv@latest to 0.12.10.

  • Update tombi@latest to 1.5.2.

  • Update rclone@latest to 1.75.1.

2.87.6

  • Update rafn@latest to 0.1.6.

  • Update editorconfig-checker@latest to 3.11.3.

  • Update dprint@latest to 0.57.1.

  • Update convco@latest to 0.7.2.

2.87.5

  • Update vacuum@latest to 0.30.3.

  • Update uv@latest to 0.12.9.

  • Update typos@latest to 1.50.1.

  • Update tombi@latest to 1.5.1.

  • Update release-plz@latest to 0.3.161.

  • Update prek@latest to 0.5.2.

  • Update oxfmt@latest to 1.81.0.

  • Update mise@latest to 2026.9.1.

... (truncated)

Changelog

Sourced from taiki-e/install-action's changelog.

Changelog

All notable changes to this project will be documented in this file.

This project adheres to Semantic Versioning.

[Unreleased]

[2.87.12] - 2026-09-12

  • Update wasmtime@latest to 48.0.2.

  • Update wasm-tools@latest to 1.259.0.

  • Update uv@latest to 0.12.13.

  • Update release-plz@latest to 0.3.165.

  • Update protoc-gen-connect-openapi@latest to 0.27.1.

  • Update mise@latest to 2026.9.5.

  • Update cargo-nextest@latest to 0.9.144.

[2.87.11] - 2026-09-11

  • Update biome@latest to 2.5.13.

  • Update uv@latest to 0.12.12.

  • Update mise@latest to 2026.9.4.

  • Update kache@latest to 0.19.0.

[2.87.10] - 2026-09-10

  • Update zizmor@latest to 1.30.1.

  • Update uv@latest to 0.12.11.

  • Update tombi@latest to 1.5.4.

  • Update release-plz@latest to 0.3.164.

  • Update mise@latest to 2026.9.3.

... (truncated)

Commits
  • d438492 Release 2.87.8
  • cf1fade Update shfmt@latest to 3.14.1
  • 7161449 Update release-plz@latest to 0.3.162
  • 58df4bb Update protoc-gen-connect-openapi@latest to 0.26.0
  • 33e9ffe Update oxfmt manifest
  • 60bf882 Update kache manifest
  • 667469a Update dprint@latest to 0.57.4
  • aa52fd6 Update cargo-llvm-cov@latest to 0.9.1
  • 834d344 Update cargo-crap@latest to 0.5.0
  • 097f1f0 Update cargo-binstall@latest to 1.23.0
  • Additional commits viewable in compare view

Updates re-actors/alls-green from 1.2.2 to 1.3.0

Release notes

Sourced from re-actors/alls-green's releases.

v1.3.0

🛡️ What's Unmessed

[!caution]

There was a small command injection risk in prior versions. I consider it very low because of the specifics of the action use case. But still, do upgrade, okay?

@​illera88💰 fixed this template injection bug in #37 by passing inputs via env vars.

See GHSA-gj76-h2ch-5m76 for more detail that was first reported by @​Corbynx010💰 while I was at EuroPython.

✨ What's Improved

I did a bunch of internal refactoring including hints of what @​max-sixty💰 reported in #23. And took a small patch of @​krokofant💰 in. This involved a bunch of preparatory infra work with testing infra.

One notable improvement is that now thanks to @​tomasr8💰's and @​hugovk💰's UX suggestions in #31, the gate status output is colored in the console and should be easier to scan in the log output per line. They entries now have leading ✓/❌ acceptance marks and the actual incoming job outcomes are labeled with 🟢/🔴/⬜/⚫.

🐛 What's Fixed

The job-statuses summary could print "Some of the allowed to be skipped jobs did not succeed" based on the wrong condition — it's now tied to allowed-skips as intended, not allowed-failures.

💪 New Contributors

🪞 Full Diff: re-actors/alls-green@v1.2.2...v1.3.0

🧔‍♂️ Release Manager: @​webknjaz 🇺🇦

💬 Discuss on Bluesky 🦋, on Mastodon 🐘 and on GitHub.

GH Sponsors badge

Commits
  • b5b5b37 Merge pull request #38 from re-actors/pre-commit-ci-update-config
  • bd6edd6 [pre-commit.ci] pre-commit autoupdate
  • 3967c81 💅 Make the output easier to scan
  • e68df08 💅 Style job statuses title with a 🔮
  • 62d37b2 🧪 Unxfail 'success-of-some-allowed-to-skip-or-fail'
  • 7b5df6d 💅 Add a Codecov badge to README
  • 2410c4c 🐛 Correct reporting failed skipped jobs
  • 6457593 💅 Add a GH Sponsors badge
  • a617895 💅 Add a pre-commit.ci badge
  • 8de05dc 🧪 Force ctrace core in coveragepy
  • Additional commits viewable in compare view

Updates actions/setup-go from 6.5.0 to 7.0.0

Release notes

Sourced from actions/setup-go's releases.

v7.0.0

What's Changed

New Contributors

Full Changelog: actions/setup-go@v6...v7.0.0

Commits

Updates crate-ci/typos from 1.46.2 to 1.50.1

Release notes

Sourced from crate-ci/typos's releases.

v1.50.1

[1.50.1] - 2026-09-01

Fixes

  • Don't correct asend in Python code

v1.50.0

[1.50.0] - 2026-08-28

Features

v1.49.1

[1.49.1] - 2026-08-27

Fixes

  • Don't correct the brand name HashiCorp

v1.49.0

[1.49.0] - 2026-08-03

Features

  • Updated the dictionary with the July 2026 changes

v1.48.0

[1.48.0] - 2026-06-30

Features

  • Updated the dictionary with the June 2026 changes

v1.47.2

[1.47.2] - 2026-06-04

Fixes

  • Don't correct inferrable
  • Correct unused inferible variant

v1.47.1

[1.47.1] - 2026-06-03

Fixes

  • Don't correct requestors

... (truncated)

Changelog

Sourced from crate-ci/typos's changelog.

Change Log

All notable changes to this project will be documented in this file.

The format is based on Keep a Changelog and this project adheres to Semantic Versioning.

[Unreleased] - ReleaseDate

[1.50.1] - 2026-09-01

Fixes

  • Don't correct asend in Python code

[1.50.0] - 2026-08-28

Features

[1.49.1] - 2026-08-27

Fixes

  • Don't correct the brand name HashiCorp

[1.49.0] - 2026-08-03

Features

  • Updated the dictionary with the July 2026 changes

[1.48.0] - 2026-06-30

Features

  • Updated the dictionary with the June 2026 changes

[1.47.2] - 2026-06-04

Fixes

  • Don't correct inferrable
  • Correct unused inferible variant

[1.47.1] - 2026-06-03

Fixes

... (truncated)

Commits

Updates dprint/check from 2.3 to 2.5

Release notes

Sourced from dprint/check's releases.

v2.5

What's Changed

Full Changelog: dprint/check@v2.4...v2.5

v2.4

What's Changed

  • feat: add opt-in cache input for caching plugins and incremental state dprint/check#23
  • feat: only save the cache when the check changed it dprint/check#25
  • feat: emit an annotation for each file that isn't formatted dprint/check#26
  • feat: download dprint from GitHub releases and verify its attestation dprint/check#27
  • feat: cache the verified dprint download when caching is enabled dprint/check#28
  • feat: summarize diffs that only change line endings dprint/check#29
  • Releases are now immutable.

Full Changelog: dprint/check@v2.3...v2.4

Commits
  • 7dc032d feat: add working-directory input (#34)
  • 7c97667 feat: add unformatted-count and unformatted-files outputs (#33)
  • e2de17c fix: list the remaining files when there are more than GitHub's annotation li...
  • de1d638 fix: annotate only the changed lines (#31)
  • 06e1a58 docs: update README.md for latest version (#30)
  • fe900a7 feat: summarize diffs that only change line endings (#29)
  • d833cf2 feat: cache the verified dprint download when caching is enabled (#28)
  • 5f069db feat: download dprint from GitHub releases and verify its attestation (#27)
  • 510eb9c feat: emit an annotation for each file that isn't formatted (#26)
  • 3c88cd7 feat: only save the cache when the check changed it (#25)
  • Additional commits viewable in compare view

Updates taiki-e/cache-cargo-install-action from 3.0.7 to 3.0.8

Release notes

Sourced from taiki-e/cache-cargo-install-action's releases.

3.0.8

  • Update actions/cache to 6.1.0.
Changelog

Sourced from taiki-e/cache-cargo-install-action's changelog.

Changelog

All notable changes to this project will be documented in this file.

This project adheres to Semantic Versioning.

[Unreleased]

[3.0.8] - 2026-08-02

  • Update actions/cache to 6.1.0.

[3.0.7] - 2026-05-02

  • Update actions/cache to 5.0.5.

[3.0.6] - 2026-04-08

  • Improve robustness for network failure.

[3.0.5] - 2026-04-04

  • Implement workaround for windows-11-arm runner bug which may causes issue that the action successfully completes but the crate is not installed.

    We have not yet received any reports of this issue occurring with this action, but given the nature of the problem, it is possible that it could be affected.

[3.0.4] - 2026-03-28

  • Pin actions/cache action with commit hash.

[3.0.3] - 2026-03-08

  • Avoid triggering zizmor ref-confusion when using this action in form of uses: taiki-e/cache-cargo-install-action@v3.

[3.0.2] - 2026-02-14

  • Improve support for Linux systems without tar is installed.

  • Work around issue where cache doesn't work with "/bin/tar: unrecognized option: posix" warning on Alpine-based image.

[3.0.1] - 2026-01-11

... (truncated)

Commits
  • 9ee83da Release 3.0.8
  • 55295f2 Update changelog
  • 17c27fb Bump actions/cache from 5.0.5 to 6.1.0 (#24)
  • e56a277 Bump taiki-e/install-action from 2.82.0 to 2.83.4 (#23)
  • 85d4dbd Bump taiki-e/install-action from 2.79.3 to 2.82.0 (#22)
  • 65e50ef ci: Update taiki-e/github-actions workflows
  • c6dec0d ci: Test GitHub-hosted ubuntu 26.04 runners
  • 3fdebbc Bump taiki-e/install-action from 2.77.6 to 2.79.3 (#21)
  • f7132a4 Tweak action.yml
  • 18e1a6a Bump taiki-e/install-action from 2.77.0 to 2.77.6 (#20)
  • Additional commits viewable in compare view

Updates docker/setup-buildx-action from 4.2.0 to 4.3.0

Release notes

Sourced from docker/setup-buildx-action's releases.

v4.3.0

Full Changelog: docker/setup-buildx-action@v4.2.0...v4.3.0

Commits
  • 37fe631 Merge pull request #595 from docker/dependabot/npm_and_yarn/docker/actions-to...
  • b5c4f91 [dependabot skip] chore: update generated content
  • 3e93b63 build(deps): bump @​docker/actions-toolkit from 0.92.0 to 0.95.0
  • e527031 Merge pull request #600 from docker/dependabot/npm_and_yarn/brace-expansion-1...
  • c68814b [dependabot skip] chore: update generated content
  • 3f891b0 build(deps): bump brace-expansion from 1.1.13 to 1.1.18
  • 787db26 Merge pull request #585 from docker/dependabot/npm_and_yarn/js-yaml-5.2.1
  • f779368 [dependabot skip] chore: update generated content
  • 7d5e604 build(deps): bump js-yaml from 5.2.0 to 5.3.0
  • 292c2fb Merge pull request #590 from docker/dependabot/github_actions/actions/setup-n...
  • Additional commits viewable in compare view

Updates docker/login-action from 4.1.0 to 4.6.0

Release notes

Sourced from docker/login-action's releases.

v4.6.0

Full Changelog: docker/login-action@v4.5.2...v4.6.0

v4.5.2

Full Changelog: docker/login-action@v4.5.1...v4.5.2

v4.5.1

Full Changelog: docker/login-action@v4.5.0...v4.5.1

v4.5.0

Full Changelog: docker/login-action@v4.4.0...v4.5.0

v4.4.0

Full Changelog: docker/login-action@v4.3.0...v4.4.0

v4.3.0

@dependabot
chore(deps): bump the ci-weekly group across 1 directory with 16 updates
a1d42e9 
Bumps the ci-weekly group with 16 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| [actions/checkout](https://github.com/actions/checkout) | `7.0.0` | `7.0.1` |
| [dtolnay/rust-toolchain](https://github.com/dtolnay/rust-toolchain) | `2c7215f132e9ebf062739d9130488b56d53c060c` | `02cb101ec7c40f2c49e1d9714d64511d8e1b74de` |
| [actions/deploy-pages](https://github.com/actions/deploy-pages) | `5.0.0` | `5.0.1` |
| [rui314/setup-mold](https://github.com/rui314/setup-mold) | `9c9c13bf4c3f1adef0cc596abc155580bcb04444` | `10ca16bf91dc22e05ebdc935cad9c75ea248f621` |
| [Swatinem/rust-cache](https://github.com/swatinem/rust-cache) | `2.9.1` | `2.9.2` |
| [mozilla-actions/sccache-action](https://github.com/mozilla-actions/sccache-action) | `0.0.10` | `0.0.11` |
| [taiki-e/install-action](https://github.com/taiki-e/install-action) | `2.82.9` | `2.87.8` |
| [re-actors/alls-green](https://github.com/re-actors/alls-green) | `1.2.2` | `1.3.0` |
| [actions/setup-go](https://github.com/actions/setup-go) | `6.5.0` | `7.0.0` |
| [crate-ci/typos](https://github.com/crate-ci/typos) | `1.46.2` | `1.50.1` |
| [dprint/check](https://github.com/dprint/check) | `2.3` | `2.5` |
| [taiki-e/cache-cargo-install-action](https://github.com/taiki-e/cache-cargo-install-action) | `3.0.7` | `3.0.8` |
| [docker/setup-buildx-action](https://github.com/docker/setup-buildx-action) | `4.2.0` | `4.3.0` |
| [docker/login-action](https://github.com/docker/login-action) | `4.1.0` | `4.6.0` |
| [actions/attest-build-provenance](https://github.com/actions/attest-build-provenance) | `4.1.1` | `4.2.2` |
| [anchore/sbom-action](https://github.com/anchore/sbom-action) | `0.24.0` | `0.24.2` |



Updates `actions/checkout` from 7.0.0 to 7.0.1
- [Release notes](https://github.com/actions/checkout/releases)
- [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md)
- [Commits](actions/checkout@9c091bb...3d3c42e)

Updates `dtolnay/rust-toolchain` from 2c7215f132e9ebf062739d9130488b56d53c060c to 02cb101ec7c40f2c49e1d9714d64511d8e1b74de
- [Release notes](https://github.com/dtolnay/rust-toolchain/releases)
- [Commits](dtolnay/rust-toolchain@2c7215f...02cb101)

Updates `actions/deploy-pages` from 5.0.0 to 5.0.1
- [Release notes](https://github.com/actions/deploy-pages/releases)
- [Commits](actions/deploy-pages@cd2ce8f...368f825)

Updates `rui314/setup-mold` from 9c9c13bf4c3f1adef0cc596abc155580bcb04444 to 10ca16bf91dc22e05ebdc935cad9c75ea248f621
- [Commits](rui314/setup-mold@9c9c13b...10ca16b)

Updates `Swatinem/rust-cache` from 2.9.1 to 2.9.2
- [Release notes](https://github.com/swatinem/rust-cache/releases)
- [Changelog](https://github.com/Swatinem/rust-cache/blob/master/CHANGELOG.md)
- [Commits](Swatinem/rust-cache@c193711...6323deb)

Updates `mozilla-actions/sccache-action` from 0.0.10 to 0.0.11
- [Release notes](https://github.com/mozilla-actions/sccache-action/releases)
- [Commits](Mozilla-Actions/sccache-action@9e7fa8a...fc920bf)

Updates `taiki-e/install-action` from 2.82.9 to 2.87.8
- [Release notes](https://github.com/taiki-e/install-action/releases)
- [Changelog](https://github.com/taiki-e/install-action/blob/main/CHANGELOG.md)
- [Commits](taiki-e/install-action@4684b84...d438492)

Updates `re-actors/alls-green` from 1.2.2 to 1.3.0
- [Release notes](https://github.com/re-actors/alls-green/releases)
- [Commits](re-actors/alls-green@05ac938...b5b5b37)

Updates `actions/setup-go` from 6.5.0 to 7.0.0
- [Release notes](https://github.com/actions/setup-go/releases)
- [Commits](actions/setup-go@924ae3a...b7ad1da)

Updates `crate-ci/typos` from 1.46.2 to 1.50.1
- [Release notes](https://github.com/crate-ci/typos/releases)
- [Changelog](https://github.com/crate-ci/typos/blob/master/CHANGELOG.md)
- [Commits](crate-ci/typos@aca895b...d43b6c0)

Updates `dprint/check` from 2.3 to 2.5
- [Release notes](https://github.com/dprint/check/releases)
- [Commits](dprint/check@9cb3a2b...7dc032d)

Updates `taiki-e/cache-cargo-install-action` from 3.0.7 to 3.0.8
- [Release notes](https://github.com/taiki-e/cache-cargo-install-action/releases)
- [Changelog](https://github.com/taiki-e/cache-cargo-install-action/blob/main/CHANGELOG.md)
- [Commits](taiki-e/cache-cargo-install-action@417450f...9ee83da)

Updates `docker/setup-buildx-action` from 4.2.0 to 4.3.0
- [Release notes](https://github.com/docker/setup-buildx-action/releases)
- [Commits](docker/setup-buildx-action@bb05f3f...37fe631)

Updates `docker/login-action` from 4.1.0 to 4.6.0
- [Release notes](https://github.com/docker/login-action/releases)
- [Commits](docker/login-action@4907a6d...dbcb813)

Updates `actions/attest-build-provenance` from 4.1.1 to 4.2.2
- [Release notes](https://github.com/actions/attest-build-provenance/releases)
- [Changelog](https://github.com/actions/attest-build-provenance/blob/main/RELEASE.md)
- [Commits](actions/attest-build-provenance@0f67c3f...4d10147)

Updates `anchore/sbom-action` from 0.24.0 to 0.24.2
- [Release notes](https://github.com/anchore/sbom-action/releases)
- [Changelog](https://github.com/anchore/sbom-action/blob/main/RELEASE.md)
- [Commits](anchore/sbom-action@e22c389...3ad7283)

---
updated-dependencies:
- dependency-name: actions/checkout
  dependency-version: 7.0.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: ci-weekly
- dependency-name: dtolnay/rust-toolchain
  dependency-version: 02cb101ec7c40f2c49e1d9714d64511d8e1b74de
  dependency-type: direct:production
  dependency-group: ci-weekly
- dependency-name: actions/deploy-pages
  dependency-version: 5.0.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: ci-weekly
- dependency-name: rui314/setup-mold
  dependency-version: 10ca16bf91dc22e05ebdc935cad9c75ea248f621
  dependency-type: direct:production
  dependency-group: ci-weekly
- dependency-name: Swatinem/rust-cache
  dependency-version: 2.9.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: ci-weekly
- dependency-name: mozilla-actions/sccache-action
  dependency-version: 0.0.11
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: ci-weekly
- dependency-name: taiki-e/install-action
  dependency-version: 2.87.8
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: ci-weekly
- dependency-name: re-actors/alls-green
  dependency-version: 1.3.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: ci-weekly
- dependency-name: actions/setup-go
  dependency-version: 7.0.0
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: ci-weekly
- dependency-name: crate-ci/typos
  dependency-version: 1.50.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: ci-weekly
- dependency-name: dprint/check
  dependency-version: '2.5'
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: ci-weekly
- dependency-name: taiki-e/cache-cargo-install-action
  dependency-version: 3.0.8
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: ci-weekly
- dependency-name: docker/setup-buildx-action
  dependency-version: 4.3.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: ci-weekly
- dependency-name: docker/login-action
  dependency-version: 4.6.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: ci-weekly
- dependency-name: actions/attest-build-provenance
  dependency-version: 4.2.2
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: ci-weekly
- dependency-name: anchore/sbom-action
  dependency-version: 0.24.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: ci-weekly
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file github_actions Pull requests that update GitHub Actions code labels Sep 14, 2026
@dependabot
dependabot Bot requested review from a team and TheJudii as code owners September 14, 2026 09:29
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file github_actions Pull requests that update GitHub Actions code labels Sep 14, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

@TheJudii TheJudii Awaiting requested review from TheJudii TheJudii is a code owner

At least 2 approving reviews are required to merge this pull request.

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file github_actions Pull requests that update GitHub Actions code

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

0 participants