Bump the actions group with 3 updates by dependabot[bot] · Pull Request #166 · software-mansion/cairo-annotations

dependabot · 2026-09-01T01:16:52Z

Bumps the actions group with 3 updates: Swatinem/rust-cache, crate-ci/typos and mikefarah/yq.

Updates Swatinem/rust-cache from 2.9.1 to 2.9.2

Release notes

Sourced from Swatinem/rust-cache's releases.

v2.9.2

What's Changed

Typofix by @23Skidoo in Swatinem/rust-cache#316

fix: include target names in build/ and .fingerprint/ cleanup by @eitsupi in Swatinem/rust-cache#317

fix: include cdylib/rlib/dylib/staticlib targets in build and fingerprint cleanup by @eitsupi in Swatinem/rust-cache#320

Scan content of $CARGO_HOME/bin on restore instead of relying on cargo install metadata by @clechasseur in Swatinem/rust-cache#325

docs: Update checkout action version to latest by @sondrelg in Swatinem/rust-cache#345

Fix Windows cache path validation after Rollup migration by @eitsupi in Swatinem/rust-cache#355

fix: support Cargo V2 build dir layout by @claytonwramsey in Swatinem/rust-cache#371

New Contributors

@23Skidoo made their first contribution in Swatinem/rust-cache#316

@eitsupi made their first contribution in Swatinem/rust-cache#317

@clechasseur made their first contribution in Swatinem/rust-cache#325

@sondrelg made their first contribution in Swatinem/rust-cache#345

@claytonwramsey made their first contribution in Swatinem/rust-cache#371

Full Changelog: Swatinem/rust-cache@v2.9.1...v2.9.2

Changelog

Sourced from Swatinem/rust-cache's changelog.

Changelog

2.9.2

Fix credentials.toml cleanup

Improvements to cleanup, preserving more valid targets

Improvements to cargo install handling

Correctly sort/dedupe Rust versions

2.9.1

Fix regression in hash calculation

2.9.0

Update to node24

Support running from within a nix shell

Consider all installed toolchains for cache key

Use case-insensitive comparison to determine exact cache hit

2.8.2

Don't overwrite env for cargo-metadata call

2.8.1

Set empty CARGO_ENCODED_RUSTFLAGS when retrieving metadata

Various dependency updates

2.8.0

Add support for warpbuild cache provider

Add new cache-workspace-crates feature

2.7.8

Include CPU arch in the cache key

2.7.7

Also cache cargo install metadata

2.7.6

Allow opting out of caching $CARGO_HOME/bin

Add runner OS in cache key

Adds an option to do lookup-only of the cache

2.7.5

... (truncated)

Commits

6323deb 2.9.2
b16e8d7 bump rollup and rebuild
3bf42ac invert target/profile check in cleanup
6e5b278 correctly sort and dedupe Rust versions
5adc05f Bump the actions group across 1 directory with 3 updates (#368)
66b1e95 fix: support Cargo V2 build dir layout (#371)
72d126e Merge pull request #367 from Swatinem/dependabot/npm_and_yarn/dev-patch-2b495...
48968d2 Bump the dev-patch group with 2 updates
9f151ac update dependencies, rebuild
0e24e5d Bump the actions group across 1 directory with 6 updates (#364)
Additional commits viewable in compare view

Updates crate-ci/typos from 1.48.0 to 1.50.0

Release notes

Sourced from crate-ci/typos's releases.

v1.50.0

[1.50.0] - 2026-08-28

Features

Updated the dictionary with the August 2026 changes

v1.49.1

[1.49.1] - 2026-08-27

Fixes

Don't correct the brand name HashiCorp

v1.49.0

[1.49.0] - 2026-08-03

Features

Updated the dictionary with the July 2026 changes

Changelog

Sourced from crate-ci/typos's changelog.

Change Log

All notable changes to this project will be documented in this file.

The format is based on Keep a Changelog and this project adheres to Semantic Versioning.

[Unreleased] - ReleaseDate

[1.50.0] - 2026-08-28

Features

Updated the dictionary with the August 2026 changes

[1.49.1] - 2026-08-27

Fixes

Don't correct the brand name HashiCorp

[1.49.0] - 2026-08-03

Features

Updated the dictionary with the July 2026 changes

[1.48.0] - 2026-06-30

Features

Updated the dictionary with the June 2026 changes

[1.47.2] - 2026-06-04

Fixes

Don't correct inferrable

Correct unused inferible variant

[1.47.1] - 2026-06-03

Fixes

Don't correct requestors

[1.47.0] - 2026-05-29

Features

... (truncated)

Commits

4d9c206 chore: Release
67e851f chore: Release
fed981d docs: Update changelog
30a3514 Merge pull request #1611 from epage/aug
9fcae58 feat(dict): August updates
a8168dc chore: Release
767fe42 docs: Update changelog
8863e88 Merge pull request #1609 from epage/hasi
e7a4e8a fix(dict): Don't correct the HashiCorp brand name
30dd48e test(cli): Show HashiCorp behavior
Additional commits viewable in compare view

Updates mikefarah/yq from 4.53.3 to 4.53.6

Release notes

Sourced from mikefarah/yq's releases.

v4.53.6

Fixing release build issue

Fixed line wrapping bug (#2824, #2823) Thanks @mxey

Bumped dependencies

v4.53.4

Close input files after processing each one (#2796) (#2808) Thanks @MsfPablo

Fixed non string HCL string keys (#2795)

Fixed heap allocation bug (#2809) Thanks @MsfPablo

Fix deleting commented empty list YAML output (#2765) Thanks @dpersek

Fix (has) return false for negative array indices (#2769) Thanks @maximilize

Fix (sort): avoid int64 overflow comparing large integers (#2771) Thanks @maximilize

Fix: preserve correct parent references in explode merge anchor reconstruction (#2730) Thanks @vomba

Improve Guard ExpressionParser initialization with sync.Once (#2789) Thanks @arcaven

Fix: reject negative indent instead of panicking (#2746) Thanks @StressTestor

Fix: parse signed hex and octal integers (#2749) Thanks @StressTestor

Fix: skip UTF-8 BOM when processing front matter (#2751) Thanks @StressTestor

Fix !!merge tag regression for yq (#2705) Thanks @W-Floyd

Default to yaml when a file's extension is not a recognised format (#2785) Thanks @devthedevil

Bumped dependencies

Changelog

Sourced from mikefarah/yq's changelog.

4.53.6:

Fixing release build issue

4.53.5:

Fixed line wrapping bug (#2824, #2823) Thanks mxey

Bumped dependencies

4.53.4:

Close input files after processing each one (#2796) (#2808) Thanks @MsfPablo

Fixed non string HCL string keys (#2795)

Fixed heap allocation bug (#2809) Thanks @MsfPablo

Fix deleting commented empty list YAML output (#2765) Thanks @dpersek

Fix (has) return false for negative array indices (#2769) Thanks @maximilize

Fix (sort): avoid int64 overflow comparing large integers (#2771) Thanks @maximilize

Fix: preserve correct parent references in explode merge anchor reconstruction (#2730) Thanks @vomba

Improve Guard ExpressionParser initialization with sync.Once (#2789) Thanks @arcaven

Fix: reject negative indent instead of panicking (#2746) Thanks @StressTestor

Fix: parse signed hex and octal integers (#2749) Thanks @StressTestor

Fix: skip UTF-8 BOM when processing front matter (#2751) Thanks @StressTestor

Fix !!merge tag regression for yq (#2705) Thanks @W-Floyd

Default to yaml when a file's extension is not a recognised format (#2785) Thanks @devthedevil

Bumped dependencies

4.53.3:

Add --ini-preserve-quotes flag for INI round-trip quote preservation (#2728) Thanks @toller892!

Fix: reset INI decoder state on init (#2719) Thanks @xieby1!

Fix: decode properties array bracket paths (#2693) Thanks @cyphercodes!

Fix: preserve floats with trailing zero when encoding YAML to JSON (#2701) Thanks @ChrisJr404!

Fix: JSON to TOML root scope and null handling (#2689) Thanks @LovesAsuna!

Fix: reset TOML decoder finished flag on Init for multi-doc evaluation (#2704) Thanks @terminalchai!

Fix: reset TOML decoder between files when evaluating all at once (#2685) Thanks @terminalchai!

Fix: preserve TOML inline table array scope (#2694) Thanks @cyphercodes!

Fix: preserve empty TOML arrays in tables (#2686) Thanks @cyphercodes!

Fix: TOML encoder uses inline tables for YAML FlowStyle mappings (#2687)

Fix nested inline YAML merge explode (#2699) Thanks @cyphercodes!

Fix repeatString overflow test on 32-bit platforms (#2680) Thanks @jandubois!

Bumped dependencies

4.53.2:

Fixing release process

4.53.1:

Releases and tags now signed and immutable!

Add system(command; args) operator (disabled by default) (#2640)

TOML encoder: prefer readable table sections over inline tables (#2649)

Fix TOML encoder to quote keys containing special characters (#2648)

Add string slicing support (#2639)

Fix findInArray misuse on MappingNodes in equality and contains (#2645) Thanks @jandubois!

Fix panic on negative slice indices that underflow after adjustment (#2646) Thanks @jandubois!

Fix stack overflow from circular alias in traverse (#2647) Thanks @jandubois!

... (truncated)

Commits

c14f446 Bumping version
ed4125b Fixing release build
e95064c Bumping version
1f5d6e6 Release notes
b1d6df4 build(deps): bump docker/setup-buildx-action from 4.1.0 to 4.3.0 (#2829)
8dc5ae1 build(deps): bump golang.org/x/mod from 0.38.0 to 0.40.0 (#2831)
8a95461 build(deps): bump golang from 1.26.5 to 1.26.6 (#2832)
ce31317 Pr 2825 (#2836)
ce7026e Bumping version
62ac0c6 Release notes
Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR
@dependabot recreate will recreate this PR, overwriting any edits that have been made to it
@dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
@dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
@dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
@dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
@dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
@dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

Bumps the actions group with 3 updates: [Swatinem/rust-cache](https://github.com/swatinem/rust-cache), [crate-ci/typos](https://github.com/crate-ci/typos) and [mikefarah/yq](https://github.com/mikefarah/yq). Updates `Swatinem/rust-cache` from 2.9.1 to 2.9.2 - [Release notes](https://github.com/swatinem/rust-cache/releases) - [Changelog](https://github.com/Swatinem/rust-cache/blob/master/CHANGELOG.md) - [Commits](Swatinem/rust-cache@c193711...6323deb) Updates `crate-ci/typos` from 1.48.0 to 1.50.0 - [Release notes](https://github.com/crate-ci/typos/releases) - [Changelog](https://github.com/crate-ci/typos/blob/master/CHANGELOG.md) - [Commits](crate-ci/typos@bee27e3...4d9c206) Updates `mikefarah/yq` from 4.53.3 to 4.53.6 - [Release notes](https://github.com/mikefarah/yq/releases) - [Changelog](https://github.com/mikefarah/yq/blob/master/release_notes.txt) - [Commits](mikefarah/yq@1b9b4ac...c14f446) --- updated-dependencies: - dependency-name: Swatinem/rust-cache dependency-version: 2.9.2 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: actions - dependency-name: crate-ci/typos dependency-version: 1.50.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: actions - dependency-name: mikefarah/yq dependency-version: 4.53.6 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: actions ... Signed-off-by: dependabot[bot] <support@github.com>

dependabot Bot added dependencies Pull requests that update a dependency file github_actions Pull requests that update GitHub Actions code labels Sep 1, 2026

dependabot Bot requested a review from a team as a code owner September 1, 2026 01:16

dependabot Bot requested review from Arcticae and maciektr and removed request for a team September 1, 2026 01:16

dependabot Bot added dependencies Pull requests that update a dependency file github_actions Pull requests that update GitHub Actions code labels Sep 1, 2026

Arcticae approved these changes Sep 23, 2026

View reviewed changes

Arcticae merged commit 404e7ba into main Sep 23, 2026
3 checks passed

Arcticae deleted the dependabot/github_actions/actions-953fac4c91 branch September 23, 2026 13:57

Navigation Menu

Bump the actions group with 3 updates - #166

Bump the actions group with 3 updates#166
Arcticae merged 1 commit into
mainfrom
dependabot/github_actions/actions-953fac4c91

dependabot Bot commented on behalf of github Sep 1, 2026

Uh oh!

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant

Conversation

dependabot Bot commented on behalf of github Sep 1, 2026

v2.9.2

What's Changed

New Contributors

Changelog

2.9.2

2.9.1

2.9.0

2.8.2

2.8.1

2.8.0

2.7.8

2.7.7

2.7.6

2.7.5

v1.50.0

[1.50.0] - 2026-08-28

Features

v1.49.1

[1.49.1] - 2026-08-27

Fixes

v1.49.0

[1.49.0] - 2026-08-03

Features

Change Log

[Unreleased] - ReleaseDate

[1.50.0] - 2026-08-28

Features

[1.49.1] - 2026-08-27

Fixes

[1.49.0] - 2026-08-03

Features

[1.48.0] - 2026-06-30

Features

[1.47.2] - 2026-06-04

Fixes

[1.47.1] - 2026-06-03

Fixes

[1.47.0] - 2026-05-29

Features

v4.53.6

v4.53.4

Uh oh!

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant