chore(deps): update github actions

[renovate]

This PR contains the following updates:

Package	Type	Update	Change	Pending
oxc-project/security-action	action	patch	v1.0.3 → v1.0.5
taiki-e/install-action	action	minor	v2.75.27 → v2.77.1	v2.77.4 (+2)
voidzero-dev/setup-vp	action	minor	v1.8.0 → v1.9.0	v1.10.0

---

Release Notes

oxc-project/security-action (oxc-project/security-action)

v1.0.5

Compare Source

v1.0.4

Compare Source

taiki-e/install-action (taiki-e/install-action)

v2.77.1: 2.77.1

Compare Source

• Support taiki-e/install-action@rust tag.

• Update tombi@latest to 0.10.3.

• Update martin@latest to 1.8.2.

v2.77.0: 2.77.0

Compare Source

• Support rust. (#​1779)

  This installs rust using rustup.

  If rustup is not yet installed, this action downloads rustup-init for the current platform using HTTPS with tlsv1.2+, verifies SHA256 checksum, and then installs rustup using it.

  This also supports installing additional components at the same time by +<additional> syntax:

  - uses: taiki-e/install-action@v2
    with:
      # Install rust stable with rustfmt component and wasm32-wasip1 target.
      tool: rust+rustfmt+wasm32-wasip1
      # When installing another rust version:
      # tool: rust@nightly + rustfmt + wasm32-wasip1

• Fix issue where x86_64 binary will be installed on AArch64 Windows even when AArch64 Windows binary available.

• Update mise@latest to 2026.5.0.

• Diagnostic improvements.

v2.76.0: 2.76.0

Compare Source

• Support mdbook-d2. (#​1737, thanks @​nhu)

• Support cargo-apple-runner. (#​1731, thanks @​madsmtm)

• Support cargo-binstall on riscv64 Linux.

• Update cargo-deb@latest to 3.7.0.

• Update tombi@latest to 0.10.2.

v2.75.30: 2.75.30

Compare Source

• Support cargo-spellcheck on AArch64 Linux/Windows.

• Update cargo-spellcheck@latest to 0.15.7.

• Update biome@latest to 2.4.14.

v2.75.29: 2.75.29

Compare Source

• Update syft@latest to 1.44.0.

• Update rclone@latest to 1.74.0.

• Update osv-scanner@latest to 2.3.6.

v2.75.28: 2.75.28

Compare Source

• Update wasmtime@latest to 44.0.1.

• Update typos@latest to 1.46.0.

• Update tombi@latest to 0.10.1.

• Update sccache@latest to 0.15.0.

• Update mise@latest to 2026.4.28.

• Update gungraun-runner@latest to 0.18.2.

• Update cyclonedx@latest to 0.31.0.

voidzero-dev/setup-vp (voidzero-dev/setup-vp)

v1.9.0

Compare Source

What's Changed

• chore(deps): update pnpm to v10.33.1 by @​renovate[bot] in #​53
• chore: add renovate preset by @​Boshen in #​56
• chore: move renovate config by @​Boshen in #​57
• chore: ignore @​void-sdk/void in renovate by @​Boshen in #​58
• ci: replace actions/checkout with taiki-e/checkout-action by @​Boshen in #​59
• feat: export PNPM_CONFIG_USERCONFIG env var for pnpm 11+ by @​siketyan in #​65

New Contributors

• @​Boshen made their first contribution in #​56
• @​siketyan made their first contribution in #​65

Full Changelog: voidzero-dev/setup-vp@v1.8.0...v1.9.0

---

Configuration

📅 Schedule: (in timezone Asia/Shanghai)

• Branch creation
  • "before 10am on monday"
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Enabled.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.

[netlify]

✅ Deploy Preview for oxc-project ready!

Name	Link
🔨 Latest commit	9becc8e
🔍 Latest deploy log	https://app.netlify.com/projects/oxc-project/deploys/6a00c574734f350008e909da
😎 Deploy Preview	https://deploy-preview-1095--oxc-project.netlify.app
📱 Preview on mobile	Toggle QR Code... Use your smartphone camera to open QR code link.
🤖 Make changes	Run an agent on this branch

---

To edit notification comments on pull requests, go to your Netlify project configuration.