Skip to content

chore(deps): Update compatible (actions) - #88

Merged
renovate[bot] merged 1 commit into
mainfrom
renovate/compatible-(actions)
Nov 1, 2026
Merged

renovate[bot] merged 1 commit into
mainfrom
renovate/compatible-(actions)

Conversation

@renovate

@renovate renovate Bot commented Nov 1, 2026 •

Copy link
Copy Markdown
Contributor

This PR contains the following updates:

Package Type Update Change Pending
Swatinem/rust-cache action patch v2.9.2 → v2.9.3
actions/upload-code-coverage action patch v1.4.2 → v1.4.4
crate-ci/typos action minor v1.50.0 → v1.51.1
github/codeql-action action minor v4.37.9 → v4.39.1
j178/prek-action action minor v3.0.0 → v3.1.0
taiki-e/install-action action minor v2.87.0 → v2.88.0 v2.88.1
zizmorcore/zizmor-action action minor v0.6.2 → v0.8.0

Release Notes

Swatinem/rust-cache

v2.9.3

Compare Source

What's Changed
New Contributors

Full Changelog: Swatinem/rust-cache@v2.9.2...v2.9.3

actions/upload-code-coverage

v1.4.4

Compare Source

Fixed
  • Non-default branch pushes no longer associate coverage with an unrelated fork pull request that uses the same branch name.
  • When a pushed branch has multiple open pull requests, the action prefers the pull request targeting the default branch. If no unique default-branch target exists, the upload skips successfully instead of selecting arbitrarily or failing CI.

v1.4.3

Compare Source

Fixed
  • Non-default branch pushes without an open pull request now skip successfully instead of attempting an upload that the API rejects.
  • GitHub CLI failures during pull request discovery now produce an actionable error instead of being silently treated as no matching pull request.
crate-ci/typos

v1.51.1

Compare Source

[1.51.1] - 2026-10-06

Features
  • Add ARM Windows builds

v1.51.0

Compare Source

[1.51.0] - 2026-10-06

Fixes
  • Don't correct bimap
Features

v1.50.3

Compare Source

[1.50.3] - 2026-09-25

Fixes
  • Don'y panicwhen case-converting non-ASCII corrections

v1.50.2

Compare Source

[1.50.2] - 2026-09-15

Fixes
  • Don't panic when files being examined are removed

v1.50.1

Compare Source

[1.50.1] - 2026-09-01

Fixes
  • Don't correct asend in Python code
github/codeql-action

v4.39.1

Compare Source

v4.39.0

Compare Source

  • Breaking change: Bump the minimum required CodeQL bundle version to 2.20.7. #​4205
  • The codeql-action/analyze step now validates that a correct argument for the checkout_path input has been provided. The checkout_path input must be set to the path where the repository that is being analyzed is checked out at on the runner, if that path is something other than the workspace root. If the path does not point to a repository checkout or is different from the path that was used by codeql-action/init, then the CodeQL Action now produces a warning. #​4148
  • Resolved an issue with third-party caching implementations that prevented caches from being restored correctly. #​4206
  • The codeql-action/start-proxy step that is used in Code Scanning Default Setup now finds CodeQL releases using the same logic as codeql-action/init. This primarily benefits customers who are using GitHub instances other than github.com where the codeql-action/start-proxy step may previously have been unable to locate recent releases and ended up using outdated versions of the private registry authentication proxy as a result. #​4198

v4.38.3

Compare Source

  • Upcoming breaking change: CodeQL version 2.21.2 and earlier were discontinued on 24 September 2026 alongside GitHub Enterprise Server 3.17, and will be unsupported by the next minor release of the CodeQL Action. Added a deprecation warning for customers using these versions of CodeQL. #​4188
  • Update default CodeQL bundle version to 2.27.2. #​4203
  • Fixed a bug where the decision of whether to use a per-language bundle did not account for custom configurations that reference queries outside of compiled CodeQL packs. This issue was caught during internal testing and did not affect any customer repositories. We will resume the roll out of per-language bundles in the coming weeks. #​4184

v4.38.2

Compare Source

v4.38.1

Compare Source

  • The CodeQL Action now has experimental support for CodeQL releases for which per-language bundles are available. Per-language bundles support analysis for a single language and are therefore smaller than the combined bundles that allow analysis for all supported languages. As a result, per-language bundles take up less space on disk and are faster to download. We expect to roll this change out to everyone in the coming weeks. #​4146

v4.38.0

Compare Source

  • On GitHub-hosted runners, the CodeQL Action now deletes unused CodeQL bundles from the toolcache before downloading a different bundle, which frees up disk space for the analysis. We expect to roll this change out to everyone in September. #​4124
  • The CodeQL Action now supports CodeQL releases that are compatible with Linux Arm64 and downloads the native linux-arm64 CodeQL bundle when available. #​4072
  • Update default CodeQL bundle version to 2.27.0. #​4129
j178/prek-action

v3.1.0

Compare Source

What's Changed

Full Changelog: j178/prek-action@v3.0.2...v3.1.0

v3.0.2

Compare Source

What's Changed

New Contributors

Full Changelog: j178/prek-action@v3.0.1...v3.0.2

v3.0.1

Compare Source

What's Changed

Full Changelog: j178/prek-action@v3.0.0...v3.0.1

taiki-e/install-action

v2.88.0: 2.88.0

Compare Source

v2.87.33: 2.87.33

Compare Source

  • Update vacuum@latest to 0.35.4.

  • Update uv@latest to 0.13.6.

  • Update trunk@latest to 0.22.1.

  • Update tombi@latest to 1.9.6.

  • Update release-plz@latest to 0.4.2.

  • Update mise@latest to 2026.10.21.

  • Update cargo-nextest@latest to 0.9.150.

  • Update cargo-about@latest to 0.9.3.

v2.87.32: 2.87.32

Compare Source

  • Update wild@latest to 0.11.0.

  • Update vacuum@latest to 0.35.2.

  • Update tombi@latest to 1.9.5.

  • Update sccache@latest to 0.19.0.

  • Update release-plz@latest to 0.4.1.

  • Update mise@latest to 2026.10.19.

  • Update knope@latest to 0.23.2.

  • Update dprint@latest to 0.64.3.

  • Update cargo-vet@latest to 0.10.3.

  • Update cargo-sort@latest to 2.1.4.

  • Update cargo-binstall@latest to 1.26.1.

  • Update biome@latest to 2.6.3.

v2.87.31: 2.87.31

Compare Source

  • Downgrade cargo-sort@latest to 2.1.3.

  • Update vacuum@latest to 0.35.0.

  • Update xh@latest to 0.26.3.

  • Update uv@latest to 0.13.5.

  • Update ubi@latest to 0.13.0.

  • Update trivy@latest to 0.76.1.

  • Update tombi@latest to 1.9.0.

  • Update release-plz@latest to 0.3.174.

  • Update prek@latest to 0.5.7.

  • Update mise@latest to 2026.10.17.

  • Update jaq@latest to 3.1.2.

  • Update espup@latest to 0.17.1.

  • Update cargo-zigbuild@latest to 0.24.0.

  • Update cargo-nextest@latest to 0.9.149.

  • Update biome@latest to 2.6.2.

v2.87.30: 2.87.30

Compare Source

  • Update zizmor@latest to 1.31.1.

  • Update wasmtime@latest to 50.0.0.

  • Update vacuum@latest to 0.33.2.

  • Update uv@latest to 0.13.4.

  • Update trunk@latest to 0.22.0.

  • Update tombi@latest to 1.8.9.

  • Update syft@latest to 1.55.0.

  • Update release-plz@latest to 0.3.173.

  • Update prek@latest to 0.5.6.

  • Update mise@latest to 2026.10.15.

  • Update knope@latest to 0.23.1.

  • Update kingfisher@latest to 2.14.0.

  • Update kache@latest to 1.2.2.

  • Update dprint@latest to 0.64.1.

  • Update cosign@latest to 3.1.4.

  • Update cargo-crap@latest to 0.9.0.

  • Update cargo-binstall@latest to 1.26.0.

v2.87.29: 2.87.29

Compare Source

  • Update zizmor@latest to 1.31.0.

  • Update wasmtime@latest to 49.0.3.

  • Update wasm-tools@latest to 1.262.0.

  • Update uv@latest to 0.13.1.

  • Update trivy@latest to 0.76.0.

  • Update tombi@latest to 1.8.4.

  • Update release-plz@latest to 0.3.172.

  • Update osv-scanner@latest to 2.7.0.

  • Update mise@latest to 2026.10.11.

  • Update mdbook-d2@latest to 0.3.9.

  • Update kingfisher@latest to 2.13.0.

  • Update kache@latest to 1.2.1.

  • Update just@latest to 1.59.0.

  • Update dprint@latest to 0.63.0.

  • Update cargo-crap@latest to 0.8.0.

  • Update bpf-linker@latest to 0.12.0.

v2.87.28: 2.87.28

Compare Source

  • Update dprint@latest to 0.62.0.

  • Update vacuum@latest to 0.33.0.

  • Update uv@latest to 0.13.0.

  • Update tombi@latest to 1.8.1.

  • Update release-plz@latest to 0.3.171.

  • Update rclone@latest to 1.75.2.

  • Update mise@latest to 2026.10.7.

  • Update cargo-binstall@latest to 1.25.3.

v2.87.27: 2.87.27

Compare Source

  • Update vacuum@latest to 0.32.0.

  • Update uv@latest to 0.12.24.

  • Update typos@latest to 1.51.1.

  • Update tombi@latest to 1.7.3.

  • Update syft@latest to 1.54.1.

  • Update release-plz@latest to 0.3.170.

  • Update mise@latest to 2026.10.4.

  • Update kingfisher@latest to 2.11.1.

  • Update hyperfine@latest to 2.0.0.

  • Update dprint@latest to 0.61.1.

  • Update cargo-nextest@latest to 0.9.148.

  • Update cargo-neat@latest to 0.6.0.

  • Update cargo-binstall@latest to 1.25.2.

v2.87.26: 2.87.26

Compare Source

  • Update tombi@latest to 1.7.2.

  • Update prek@latest to 0.5.5.

  • Update mise@latest to 2026.10.3.

  • Update kache@latest to 1.0.0.

  • Update hyperfine@latest to 1.21.0.

v2.87.25: 2.87.25

Compare Source

  • Update uv@latest to 0.12.23.

  • Update mise@latest to 2026.10.2.

  • Update kingfisher@latest to 2.10.0.

  • Update dprint@latest to 0.60.1.

  • Update cargo-semver-checks@latest to 0.51.0.

  • Update cargo-binstall@latest to 1.25.1.

v2.87.24: 2.87.24

Compare Source

  • Update wasmtime@latest to 49.0.2.

  • Update dprint@latest to 0.59.0.

  • Update cargo-leptos@latest to 0.3.11.

  • Update cargo-insta@latest to 1.49.0.

  • Update cargo-binstall@latest to 1.25.0.

v2.87.23: 2.87.23

Compare Source

  • Update wasm-tools@latest to 1.261.0.

  • Update uv@latest to 0.12.22.

  • Update trivy@latest to 0.75.0.

  • Update tombi@latest to 1.7.1.

  • Update protoc-gen-connect-openapi@latest to 0.28.0.

  • Update mise@latest to 2026.10.0.

  • Update kingfisher@latest to 2.9.1.

  • Update kache@latest to 0.28.1.

  • Update espup@latest to 0.18.0.

  • Update dprint@latest to 0.58.0.

  • Update cargo-crap@latest to 0.6.1.

  • Update cargo-auditable@latest to 0.7.7.

  • Update biome@latest to 2.5.15.

  • Update syft@latest to 1.54.0.

v2.87.22: 2.87.22

Compare Source

  • Update typos@latest to 1.50.3.

  • Update tombi@latest to 1.5.8.

  • Update prek@latest to 0.5.4.

  • Update mise@latest to 2026.9.16.

  • Update kache@latest to 0.28.0.

  • Update gungraun-runner@latest to 0.20.0.

  • Update cargo-tarpaulin@latest to 0.37.5.

  • Update cargo-leptos@latest to 0.3.10.

  • Update cargo-binstall@latest to 1.24.0.

v2.87.21: 2.87.21

Compare Source

  • Update wasm-bindgen@latest to 0.2.129.

  • Update protoc-gen-connect-openapi@latest to 0.27.3.

  • Update wasmtime@latest to 49.0.1.

  • Update uv@latest to 0.12.19.

  • Update mise@latest to 2026.9.13.

  • Update kingfisher@latest to 2.7.0.

v2.87.20: 2.87.20

Compare Source

  • Update uv@latest to 0.12.18.

  • Update cargo-shear@latest to 1.14.0.

v2.87.19: 2.87.19

Compare Source

  • Update wasmtime@latest to 49.0.0.

  • Update cargo-shear@latest to 1.13.5.

  • Update cargo-nextest@latest to 0.9.146.

v2.87.18: 2.87.18

Compare Source

  • Update oxfmt@latest to 1.84.0.

  • Update mise@latest to 2026.9.12.

  • Update kache@latest to 0.26.3.

  • Update cargo-tarpaulin@latest to 0.37.4.

  • Update cargo-rdme@latest to 2.2.3.

v2.87.17: 2.87.17

Compare Source

  • Update uv@latest to 0.12.17.

  • Update release-plz@latest to 0.3.169.

  • Update kingfisher@latest to 2.5.0.

  • Update kache@latest to 0.25.0.

  • Update git-cliff@latest to 2.14.2.

  • Update cargo-tarpaulin@latest to 0.37.3.

  • Update cargo-leptos@latest to 0.3.9.

v2.87.16: 2.87.16

Compare Source

  • Update uv@latest to 0.12.16.

  • Update release-plz@latest to 0.3.168.

  • Update protoc@latest to 3.36.2.

  • Update mise@latest to 2026.9.11.

v2.87.15: 2.87.15

Compare Source

  • Update syft@latest to 1.52.0.

  • Update mise@latest to 2026.9.10.

  • Update kingfisher@latest to 2.4.0.

  • Update kache@latest to 0.23.1.

  • Update coreutils@latest to 0.12.0.

  • Update cargo-nextest@latest to 0.9.145.

v2.87.14: 2.87.14

Compare Source

  • Update vacuum@latest to 0.30.6.

  • Update uv@latest to 0.12.15.

  • Update typos@latest to 1.50.2.

  • Update sccache@latest to 0.18.0.

  • Update oxfmt@latest to 1.83.0.

  • Update mise@latest to 2026.9.9.

  • Update kingfisher@latest to 2.3.0.

  • Update kache@latest to 0.22.0.

  • Update biome@latest to 2.5.14.

v2.87.13: 2.87.13

Compare Source

  • Update zola@latest to 0.23.6.

  • Update vacuum@latest to 0.30.5.

  • Update tombi@latest to 1.5.5.

  • Update release-plz@latest to 0.3.167.

  • Update protoc-gen-connect-openapi@latest to 0.27.2.

  • Update prek@latest to 0.5.3.

  • Update osv-scanner@latest to 2.6.0.

  • Update mise@latest to 2026.9.7.

  • Update kache@latest to 0.21.0.

  • Update cargo-leptos@latest to 0.3.8.

  • Update cargo-auditable@latest to 0.7.6.

v2.87.12: 2.87.12

Compare Source

  • Update wasmtime@latest to 48.0.2.

  • Update wasm-tools@latest to 1.259.0.

  • Update uv@latest to 0.12.13.

  • Update release-plz@latest to 0.3.165.

  • Update protoc-gen-connect-openapi@latest to 0.27.1.

  • Update mise@latest to 2026.9.5.

  • Update cargo-nextest@latest to 0.9.144.

v2.87.11: 2.87.11

Compare Source

  • Update biome@latest to 2.5.13.

  • Update uv@latest to 0.12.12.

  • Update mise@latest to 2026.9.4.

  • Update kache@latest to 0.19.0.

v2.87.10: 2.87.10

Compare Source

  • Update zizmor@latest to 1.30.1.

  • Update uv@latest to 0.12.11.

  • Update tombi@latest to 1.5.4.

  • Update release-plz@latest to 0.3.164.

  • Update mise@latest to 2026.9.3.

  • Update kingfisher@latest to 2.2.0.

v2.87.9: 2.87.9

Compare Source

  • Update oxfmt@latest to 1.82.0.

  • Update mise@latest to 2026.9.2.

  • Update kache@latest to 0.18.0.

  • Update d2@latest to 0.9.0.

  • Update bpf-linker@latest to 0.11.1.

v2.87.8: 2.87.8

Compare Source

  • Update shfmt@latest to 3.14.1.

  • Update release-plz@latest to 0.3.162.

  • Update protoc-gen-connect-openapi@latest to 0.26.0.

  • Update dprint@latest to 0.57.4.

  • Update cargo-llvm-cov@latest to 0.9.1.

  • Update cargo-crap@latest to 0.5.0.

  • Update cargo-binstall@latest to 1.23.0.

v2.87.7: 2.87.7

Compare Source

  • Update wasm-bindgen@latest to 0.2.128.

  • Update uv@latest to 0.12.10.

  • Update tombi@latest to 1.5.2.

  • Update rclone@latest to 1.75.1.

v2.87.6: 2.87.6

Compare Source

  • Update rafn@latest to 0.1.6.

  • Update editorconfig-checker@latest to 3.11.3.

  • Update dprint@latest to 0.57.1.

  • Update convco@latest to 0.7.2.

v2.87.5: 2.87.5

Compare Source

  • Update vacuum@latest to 0.30.3.

  • Update uv@latest to 0.12.9.

  • Update typos@latest to 1.50.1.

  • Update tombi@latest to 1.5.1.

  • Update release-plz@latest to 0.3.161.

  • Update prek@latest to 0.5.2.

  • Update oxfmt@latest to 1.81.0.

  • Update mise@latest to 2026.9.1.

  • Update martin@latest to 1.15.0.

  • Update git-cliff@latest to 2.14.1.

  • Update cargo-zigbuild@latest to 0.23.4.

  • Update cargo-deb@latest to 3.8.0.

  • Update biome@latest to 2.5.12.

v2.87.4: 2.87.4

Compare Source

  • Update uv@latest to 0.12.8.

  • Update protoc@latest to 3.36.1.

  • Update coreutils@latest to 0.11.0.

v2.87.3: 2.87.3

Compare Source

  • Update zizmor@latest to 1.30.0.

  • Update ubi@latest to 0.12.0.

  • Update protoc-gen-connect-openapi@latest to 0.25.8.

  • Update mise@latest to 2026.8.16.

  • Update kingfisher@latest to 2.1.0.

  • Update dprint@latest to 0.57.0.

v2.87.2: 2.87.2

Compare Source

  • Update typos@latest to 1.50.0.

  • Update tombi@latest to 1.5.0.

  • Update shfmt@latest to 3.14.0.

v2.87.1: 2.87.1

Compare Source

  • Update uv@latest to 0.12.7.

  • Update typos@latest to 1.49.1.

  • Update syft@latest to 1.51.1.

  • Update prek@latest to 0.5.0.

  • Update d2@latest to 0.8.2.

  • Update cargo-zigbuild@latest to 0.23.3.

  • Update cargo-rdme@latest to 2.2.2.

  • Update biome@latest to 2.5.11.

zizmorcore/zizmor-action

v0.8.0

Compare Source

The action now supports prereleases.

The default has not changed, but you can pass a prerelease version
of zizmor or version: prerelease to get whatever latest
prerelease the action knows about.

What's Changed

Full Changelog: zizmorcore/zizmor-action@v0.7.1...v0.8.0

v0.7.1

Compare Source

zizmor changes
Bug Fixes 🐛🔗
  • Fixed a regression in 1.31.0 where some ignore comments/configurations would no longer apply to the dangerous-triggers audit
action changes

The default version of zizmor is now 1.31.1.

What's Changed

Full Changelog: zizmorcore/zizmor-action@v0.7.0...v0.7.1

v0.7.0

Compare Source

Sponsorship is appreciated!

zizmor notes

Enhancements 🌱🔗

  • The typosquat-uses audit now supports pre-commit config inputs (#​2437)

  • The self-hosted-runner audit is now significantly more precise (#​2350)

    Many thanks to @​ubiratansoares for proposing and implementing this enhancement!

  • The dangerous-triggers audit now considers the issue_comment trigger fundamentally dangerous (#​2396)

  • zizmor is now aware of the image_version workflow trigger (#​2397)

  • The dangerous-triggers audit now produces more precise finding/diagnostic spans (#​2402)

  • The cache-poisoning audit is now aware of pnpm/setup (#​2409)

  • The unpinned-images audit now produces more precise findings when the user's workflow contains an indirect matrix (#​2395)

    Many thanks to @​ubiratansoares for proposing and implementing this enhancement!

  • The cache-poisoning audit is now aware of GitHub's new cache-mode: setting, and will skip any findings that would occur when a job has an effective cache-mode: none (#​2418)

  • The cache-poisoning audit now flags usages of cache-mode: write and cache-mode: write-only with dangerous triggers, i.e. triggers that give an attacker privileged code execution (#​2426)

  • zizmor now uses a tree-sitter grammar for PowerShell that's more precise/capable of capturing more non-trivial PowerShell expressions (#​2444)

Bug Fixes 🐛🔗

  • Fixed a class of false positives/imprecisions in adhoc-packages that caused some pnpm and yarn invocations to be misclassified as package installations (#​2386)

    Many thanks to @​marcalexiei for implementing this improvement!

  • Fixed a bug where zizmor would fail to honor Git submodules and worktrees when discovering configuration files relative to a repo root (#​2390)

  • Fixed a bug where the ref-version-mismatch audit would crash on unusually placed version comments (#​2394)

  • Fixed a bug where zizmor would fail to handle some pre-commit inputs that use prek extensions to the language_version and default_language_version keys (#​2413)

  • Fixed a bug where the use-trusted-publishing audit would fail to detect certain true-positive patterns inside of PowerShell blocks (#​2444)

action notes

What's Changed

New Contributors

Full Changelog: zizmorcore/zizmor-action@v0.6.4...v0.7.0

v0.6.4

Compare Source

Sponsorship is appreciated!

zizmor 1.30.1 is now the default version.

Release notes: https://docs.zizmor.sh/release-notes/#​1301

v0.6.3

Compare Source

zizmor 1.30.0 is now the default version.

Release notes: https://docs.zizmor.sh/release-notes/#​1300


Configuration

📅 Schedule: (UTC)

  • Branch creation
    • "before 5am on the first day of the month"
  • Automerge
    • At any time (no schedule defined)

🚦 Automerge: Enabled.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.


  • If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

@renovate
renovate Bot enabled auto-merge (squash) November 1, 2026 00:58
@renovate
renovate Bot force-pushed the renovate/compatible-(actions) branch from 6bc8452 to 8ec27ed Compare November 1, 2026 05:02
@renovate
renovate Bot merged commit a5525ff into main Nov 1, 2026
20 of 21 checks passed
@renovate
renovate Bot deleted the renovate/compatible-(actions) branch November 1, 2026 05:04
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants