Skip to content

chore(deps): bump the github-actions group with 5 updates - #494

Open
dependabot[bot] wants to merge 1 commit into
devfrom
dependabot/github_actions/dev/github-actions-2de0f7baa8
Open

chore(deps): bump the github-actions group with 5 updates#494
dependabot[bot] wants to merge 1 commit into
devfrom
dependabot/github_actions/dev/github-actions-2de0f7baa8

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Sep 14, 2026

Copy link
Copy Markdown
Contributor

Bumps the github-actions group with 5 updates:

Package From To
actions-rust-lang/setup-rust-toolchain 1.17.0 2.0.0
Swatinem/rust-cache 2.9.1 2.9.2
mozilla-actions/sccache-action 0.0.10 0.0.11
taiki-e/install-action 2.85.1 2.87.11
actions/cache 4.3.0 6.1.0

Updates actions-rust-lang/setup-rust-toolchain from 1.17.0 to 2.0.0

Release notes

Sourced from actions-rust-lang/setup-rust-toolchain's releases.

v2.0.0

What's Changed

  • Use CARGO_BUILD_WARNINGS for enforcing warning free compilations (#98) This is a new variable supported by cargo 1.97+ and sets the build.warnings config. It allows removing the RUSTFLAGS="-D warnings" default, which will improve compatibility with target.*.rustflags and .cargo/config.toml files.

    This adds a new build-warnings input to configure the value for the build.warnings config.

  • Add error matcher for Rust panics This will highlight the location of the panic location during tests.

  • Reuse output of rustc --version --verbose calls (#103 by @​ChihweiLHBird)

New Contributors

Full Changelog: actions-rust-lang/setup-rust-toolchain@v1.17.0...v2.0.0

Changelog

Sourced from actions-rust-lang/setup-rust-toolchain's changelog.

Changelog

All notable changes to this project will be documented in this file.

The format is based on Keep a Changelog, and this project adheres to Semantic Versioning.

[Unreleased]

[2.0.0] - 2026-09-07

  • Use CARGO_BUILD_WARNINGS for enforcing warning free compilations (#98) This is a new variable supported by cargo 1.97+ and sets the build.warnings config. It allows removing the RUSTFLAGS="-D warnings" default, which will improve compatibility with target.*.rustflags and .cargo/config.toml files.

    This adds a new build-warnings input to configure the value for the build.warnings config.

  • Add error matcher for Rust panics This will highlight the location of the panic location during tests.

  • Reuse output of rustc --version --verbose calls (#103 by @​ChihweiLHBird)

[1.17.0] - 2026-06-25

  • Add new parameter cache-targets that is propagated to Swatinem/rust-cache as cache-targets (#84). This allows disabling caching of the workspace target directory, e.g. when using sccache, while keeping the rest of the cache enabled.

[1.16.1] - 2026-05-08

  • Renamed internally used variable to avoid clashes with globally existing variables. This fixes the interference of the TOOLCHAIN variable as reported in #91.

[1.16.0] - 2026-04-13

  • Add new parameter cache-save-if that is propagated to Swatinem/rust-cache as save-if (#90 by @​ChanTsune)

[1.15.4] - 2026-03-15

  • Bump Swatinem/rust-cache from 2.8.2 to 2.9.1 (#87 by @​hyperfinitism) This gets rid of the warnings about Node.js 20.

[1.15.3] - 2026-03-01

  • Bump Swatinem/rust-cache from 2.8.1 to 2.8.2

[1.15.2] - 2025-10-04

  • Fix: Run the version detection steps in the selected rust-src-dir directory. This should enable the version selection even without a default toolchain installed. Fixes #74.

[1.15.1] - 2025-09-23

... (truncated)

Commits
  • ecabd13 Prepare changelog for 2.0.0 release
  • dc00391 Add error matcher for Rust panics
  • 70de7eb Merge pull request #103 from ChihweiLHBird/reuse-rustc-verbose-output
  • c420b69 Merge pull request #105 from actions-rust-lang/use-build-warnings
  • d94d10a Use CARGO_BUILD_WARNINGS for enforcing warning free compilations
  • 34430aa Reuse rustc verbose output instead of invoking rustc three times.
  • 0267444 Merge pull request #102 from actions-rust-lang/dependabot/github_actions/Swat...
  • 5fa2882 Bump Swatinem/rust-cache from 2.9.1 to 2.9.2
  • 8439c15 Merge pull request #100 from actions-rust-lang/dependabot/github_actions/acti...
  • c8f944a Bump actions/checkout from 7.0.0 to 7.0.1
  • See full diff in compare view

Updates Swatinem/rust-cache from 2.9.1 to 2.9.2

Release notes

Sourced from Swatinem/rust-cache's releases.

v2.9.2

What's Changed

New Contributors

Full Changelog: Swatinem/rust-cache@v2.9.1...v2.9.2

Changelog

Sourced from Swatinem/rust-cache's changelog.

Changelog

2.9.2

  • Fix credentials.toml cleanup
  • Improvements to cleanup, preserving more valid targets
  • Improvements to cargo install handling
  • Correctly sort/dedupe Rust versions

2.9.1

  • Fix regression in hash calculation

2.9.0

  • Update to node24
  • Support running from within a nix shell
  • Consider all installed toolchains for cache key
  • Use case-insensitive comparison to determine exact cache hit

2.8.2

  • Don't overwrite env for cargo-metadata call

2.8.1

  • Set empty CARGO_ENCODED_RUSTFLAGS when retrieving metadata
  • Various dependency updates

2.8.0

  • Add support for warpbuild cache provider
  • Add new cache-workspace-crates feature

2.7.8

  • Include CPU arch in the cache key

2.7.7

  • Also cache cargo install metadata

2.7.6

  • Allow opting out of caching $CARGO_HOME/bin
  • Add runner OS in cache key
  • Adds an option to do lookup-only of the cache

2.7.5

... (truncated)

Commits
  • 6323deb 2.9.2
  • b16e8d7 bump rollup and rebuild
  • 3bf42ac invert target/profile check in cleanup
  • 6e5b278 correctly sort and dedupe Rust versions
  • 5adc05f Bump the actions group across 1 directory with 3 updates (#368)
  • 66b1e95 fix: support Cargo V2 build dir layout (#371)
  • 72d126e Merge pull request #367 from Swatinem/dependabot/npm_and_yarn/dev-patch-2b495...
  • 48968d2 Bump the dev-patch group with 2 updates
  • 9f151ac update dependencies, rebuild
  • 0e24e5d Bump the actions group across 1 directory with 6 updates (#364)
  • Additional commits viewable in compare view

Updates mozilla-actions/sccache-action from 0.0.10 to 0.0.11

Release notes

Sourced from mozilla-actions/sccache-action's releases.

v0.0.11

What's Changed

New Contributors

Full Changelog: Mozilla-Actions/sccache-action@v0.0.10...v0.0.11

Commits
  • fc920bf Merge pull request #262 from sylvestre/0.0.11
  • c5764fd udpate dist files
  • ce939d5 update prettier
  • fc24157 prepare 0.0.11
  • 439ab27 README.md prepare the version 0.0.11
  • a2fac7a Merge pull request #252 from potiuk/ci-verify-dist
  • 4c2e5f0 Merge pull request #253 from Mozilla-Actions/dependabot/npm_and_yarn/actions/...
  • 772f27d ci: verify committed dist/ matches a clean rebuild
  • d270be5 Merge pull request #256 from Mozilla-Actions/dependabot/npm_and_yarn/jest-cir...
  • 52752ae Merge pull request #259 from Mozilla-Actions/dependabot/github_actions/github...
  • Additional commits viewable in compare view

Updates taiki-e/install-action from 2.85.1 to 2.87.11

Release notes

Sourced from taiki-e/install-action's releases.

2.87.11

  • Update biome@latest to 2.5.13.

  • Update uv@latest to 0.12.12.

  • Update mise@latest to 2026.9.4.

  • Update kache@latest to 0.19.0.

2.87.10

  • Update zizmor@latest to 1.30.1.

  • Update uv@latest to 0.12.11.

  • Update tombi@latest to 1.5.4.

  • Update release-plz@latest to 0.3.164.

  • Update mise@latest to 2026.9.3.

  • Update kingfisher@latest to 2.2.0.

2.87.9

  • Update oxfmt@latest to 1.82.0.

  • Update mise@latest to 2026.9.2.

  • Update kache@latest to 0.18.0.

  • Update d2@latest to 0.9.0.

  • Update bpf-linker@latest to 0.11.1.

2.87.8

  • Update shfmt@latest to 3.14.1.

  • Update release-plz@latest to 0.3.162.

  • Update protoc-gen-connect-openapi@latest to 0.26.0.

  • Update dprint@latest to 0.57.4.

  • Update cargo-llvm-cov@latest to 0.9.1.

  • Update cargo-crap@latest to 0.5.0.

  • Update cargo-binstall@latest to 1.23.0.

2.87.7

  • Update wasm-bindgen@latest to 0.2.128.

... (truncated)

Changelog

Sourced from taiki-e/install-action's changelog.

Changelog

All notable changes to this project will be documented in this file.

This project adheres to Semantic Versioning.

[Unreleased]

[2.87.12] - 2026-09-12

  • Update wasmtime@latest to 48.0.2.

  • Update wasm-tools@latest to 1.259.0.

  • Update uv@latest to 0.12.13.

  • Update release-plz@latest to 0.3.165.

  • Update protoc-gen-connect-openapi@latest to 0.27.1.

  • Update mise@latest to 2026.9.5.

  • Update cargo-nextest@latest to 0.9.144.

[2.87.11] - 2026-09-11

  • Update biome@latest to 2.5.13.

  • Update uv@latest to 0.12.12.

  • Update mise@latest to 2026.9.4.

  • Update kache@latest to 0.19.0.

[2.87.10] - 2026-09-10

  • Update zizmor@latest to 1.30.1.

  • Update uv@latest to 0.12.11.

  • Update tombi@latest to 1.5.4.

  • Update release-plz@latest to 0.3.164.

  • Update mise@latest to 2026.9.3.

... (truncated)

Commits

Updates actions/cache from 4.3.0 to 6.1.0

Release notes

Sourced from actions/cache's releases.

v6.1.0

What's Changed

Full Changelog: actions/cache@v6...v6.1.0

v6.0.0

What's Changed

Full Changelog: actions/cache@v5...v6.0.0

v5.1.0

What's Changed

Full Changelog: actions/cache@v5...v5.1.0

v5.0.5

What's Changed

Full Changelog: actions/cache@v5...v5.0.5

v5.0.4

What's Changed

New Contributors

Full Changelog: actions/cache@v5...v5.0.4

v5.0.3

What's Changed

... (truncated)

Changelog

Sourced from actions/cache's changelog.

Releases

How to prepare a release

[!NOTE] Relevant for maintainers with write access only.

  1. Switch to a new branch from main.
  2. Run npm test to ensure all tests are passing.
  3. Update the version in https://github.com/actions/cache/blob/main/package.json.
  4. Run npm run build to update the compiled files.
  5. Update this https://github.com/actions/cache/blob/main/RELEASES.md with the new version and changes in the ## Changelog section.
  6. Run licensed cache to update the license report.
  7. Run licensed status and resolve any warnings by updating the https://github.com/actions/cache/blob/main/.licensed.yml file with the exceptions.
  8. Commit your changes and push your branch upstream.
  9. Open a pull request against main and get it reviewed and merged.
  10. Draft a new release https://github.com/actions/cache/releases use the same version number used in package.json
    1. Create a new tag with the version number.
    2. Auto generate release notes and update them to match the changes you made in RELEASES.md.
    3. Toggle the set as the latest release option.
    4. Publish the release.
  11. Navigate to https://github.com/actions/cache/actions/workflows/release-new-action-version.yml
    1. There should be a workflow run queued with the same version number.
    2. Approve the run to publish the new version and update the major tags for this action.

Changelog

6.1.0

6.0.0

  • Updated @actions/cache to ^6.0.1, @actions/core to ^3.0.1, @actions/exec to ^3.0.0, @actions/io to ^3.0.2
  • Migrated to ESM module system
  • Upgraded Jest to v30 and test infrastructure to be ESM compatible

5.0.4

  • Bump minimatch to v3.1.5 (fixes ReDoS via globstar patterns)
  • Bump undici to v6.24.1 (WebSocket decompression bomb protection, header validation fixes)
  • Bump fast-xml-parser to v5.5.6

5.0.3

5.0.2

... (truncated)

Commits
  • 55cc834 Merge pull request #1768 from jasongin/readonly-cache
  • d8cd72f Bump @​actions/cache to v6.1.0 - handle cache write error due to RO token
  • 2c8a9bd Merge pull request #1760 from actions/samirat/esm_migration_and_package_update
  • e9b91fd Prettier fixes
  • e4884b8 Rebuild dist
  • 10baf01 Fixed licenses
  • e39b386 Fix test mock return order
  • b692820 PR feedback
  • 6074912 Rebuild dist bundles as ESM to match type:module
  • 5a912e8 Fix lint and jest issues
  • Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

@dependabot
chore(deps): bump the github-actions group with 5 updates
78666ee 
Bumps the github-actions group with 5 updates:

| Package | From | To |
| --- | --- | --- |
| [actions-rust-lang/setup-rust-toolchain](https://github.com/actions-rust-lang/setup-rust-toolchain) | `1.17.0` | `2.0.0` |
| [Swatinem/rust-cache](https://github.com/swatinem/rust-cache) | `2.9.1` | `2.9.2` |
| [mozilla-actions/sccache-action](https://github.com/mozilla-actions/sccache-action) | `0.0.10` | `0.0.11` |
| [taiki-e/install-action](https://github.com/taiki-e/install-action) | `2.85.1` | `2.87.11` |
| [actions/cache](https://github.com/actions/cache) | `4.3.0` | `6.1.0` |


Updates `actions-rust-lang/setup-rust-toolchain` from 1.17.0 to 2.0.0
- [Release notes](https://github.com/actions-rust-lang/setup-rust-toolchain/releases)
- [Changelog](https://github.com/actions-rust-lang/setup-rust-toolchain/blob/main/CHANGELOG.md)
- [Commits](actions-rust-lang/setup-rust-toolchain@166cdcf...ecabd13)

Updates `Swatinem/rust-cache` from 2.9.1 to 2.9.2
- [Release notes](https://github.com/swatinem/rust-cache/releases)
- [Changelog](https://github.com/Swatinem/rust-cache/blob/master/CHANGELOG.md)
- [Commits](Swatinem/rust-cache@v2.9.1...6323deb)

Updates `mozilla-actions/sccache-action` from 0.0.10 to 0.0.11
- [Release notes](https://github.com/mozilla-actions/sccache-action/releases)
- [Commits](Mozilla-Actions/sccache-action@v0.0.10...fc920bf)

Updates `taiki-e/install-action` from 2.85.1 to 2.87.11
- [Release notes](https://github.com/taiki-e/install-action/releases)
- [Changelog](https://github.com/taiki-e/install-action/blob/main/CHANGELOG.md)
- [Commits](taiki-e/install-action@v2.85.1...9534c84)

Updates `actions/cache` from 4.3.0 to 6.1.0
- [Release notes](https://github.com/actions/cache/releases)
- [Changelog](https://github.com/actions/cache/blob/main/RELEASES.md)
- [Commits](actions/cache@0057852...55cc834)

---
updated-dependencies:
- dependency-name: actions-rust-lang/setup-rust-toolchain
  dependency-version: 2.0.0
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: github-actions
- dependency-name: Swatinem/rust-cache
  dependency-version: 2.9.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: github-actions
- dependency-name: mozilla-actions/sccache-action
  dependency-version: 0.0.11
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: github-actions
- dependency-name: taiki-e/install-action
  dependency-version: 2.87.11
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: github-actions
- dependency-name: actions/cache
  dependency-version: 6.1.0
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: github-actions
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file github_actions Pull requests that update GitHub Actions code labels Sep 14, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file github_actions Pull requests that update GitHub Actions code

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

0 participants