From 86aec9eda3a1034906dc80f087db87c302c8001e Mon Sep 17 00:00:00 2001 From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com> Date: Thu, 25 Jun 2026 10:24:53 +0000 Subject: [PATCH] ci: bump taiki-e/install-action from 2.82.0 to 2.82.3 Bumps [taiki-e/install-action](https://github.com/taiki-e/install-action) from 2.82.0 to 2.82.3. - [Release notes](https://github.com/taiki-e/install-action/releases) - [Changelog](https://github.com/taiki-e/install-action/blob/main/CHANGELOG.md) - [Commits](https://github.com/taiki-e/install-action/compare/b8cecb83565409bcc297b2df6e77f030b2a468d5...ace6ebe54a6a0c86dfb5f7764b17f793b6925bc3) --- updated-dependencies: - dependency-name: taiki-e/install-action dependency-version: 2.82.3 dependency-type: direct:production update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] --- .github/workflows/gates.yml | 2 +- .github/workflows/release-plz.yml | 4 ++-- .github/workflows/release-verify.yml | 2 +- .github/workflows/release.yml | 4 ++-- 4 files changed, 6 insertions(+), 6 deletions(-) diff --git a/.github/workflows/gates.yml b/.github/workflows/gates.yml index 7e1800d..9da45c9 100644 --- a/.github/workflows/gates.yml +++ b/.github/workflows/gates.yml @@ -140,7 +140,7 @@ jobs: uses: dtolnay/rust-toolchain@29eef336d9b2848a0b548edc03f92a220660cdb8 # stable - name: Install cargo-audit + cargo-deny (pinned, prebuilt) # Prebuilt, version-pinned installs (AD-003) — no source compile. - uses: taiki-e/install-action@b8cecb83565409bcc297b2df6e77f030b2a468d5 # v2.82.0 + uses: taiki-e/install-action@ace6ebe54a6a0c86dfb5f7764b17f793b6925bc3 # v2.82.3 with: tool: cargo-audit@0.22.2,cargo-deny@0.19.4 - name: cargo audit diff --git a/.github/workflows/release-plz.yml b/.github/workflows/release-plz.yml index 4323371..84337f1 100644 --- a/.github/workflows/release-plz.yml +++ b/.github/workflows/release-plz.yml @@ -90,7 +90,7 @@ jobs: # Installed via the already-SHA-pinned taiki-e/install-action so NO new # un-pinnable GitHub Action is introduced (T018). Versions are pinned for # reproducibility (Dependabot/maintainer bumps the tool versions). - uses: taiki-e/install-action@b8cecb83565409bcc297b2df6e77f030b2a468d5 # v2.82.0 + uses: taiki-e/install-action@ace6ebe54a6a0c86dfb5f7764b17f793b6925bc3 # v2.82.3 with: tool: release-plz@0.3.135,cargo-semver-checks@0.48.0 # --- BLOCKING semver gate (OR-004 / T015 / [COMPLETES OR-004]): run @@ -174,7 +174,7 @@ jobs: uses: dtolnay/rust-toolchain@29eef336d9b2848a0b548edc03f92a220660cdb8 # stable - name: Install release-plz (pinned, prebuilt) # Same pinned install path as the release-pr job (T018) — no new action. - uses: taiki-e/install-action@b8cecb83565409bcc297b2df6e77f030b2a468d5 # v2.82.0 + uses: taiki-e/install-action@ace6ebe54a6a0c86dfb5f7764b17f793b6925bc3 # v2.82.3 with: tool: release-plz@0.3.135 # --- THE SINGLE crates.io PUBLISH STEP (OR-005 / T019 — exactly one). diff --git a/.github/workflows/release-verify.yml b/.github/workflows/release-verify.yml index c003809..4975c8e 100644 --- a/.github/workflows/release-verify.yml +++ b/.github/workflows/release-verify.yml @@ -91,7 +91,7 @@ jobs: - name: Install cargo-dist (matches dist-workspace.toml cargo-dist-version 0.30.0) run: cargo install cargo-dist@0.30.0 --locked - name: Install cargo-semver-checks + cargo-cyclonedx (pinned action) - uses: taiki-e/install-action@b8cecb83565409bcc297b2df6e77f030b2a468d5 # v2.82.0 + uses: taiki-e/install-action@ace6ebe54a6a0c86dfb5f7764b17f793b6925bc3 # v2.82.3 with: tool: cargo-semver-checks@0.48.0,cargo-cyclonedx@0.5.7 diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml index 39c0c86..8451a68 100644 --- a/.github/workflows/release.yml +++ b/.github/workflows/release.yml @@ -172,7 +172,7 @@ jobs: - name: Cache cargo registry + target uses: Swatinem/rust-cache@c19371144df3bb44fab255c43d04cbc2ab54d1c4 # v2.9.1 - name: Install cargo-auditable (pinned, prebuilt) - uses: taiki-e/install-action@b8cecb83565409bcc297b2df6e77f030b2a468d5 # v2.82.0 + uses: taiki-e/install-action@ace6ebe54a6a0c86dfb5f7764b17f793b6925bc3 # v2.82.3 with: # cargo-auditable embeds dependency metadata in the binary (OR-007). tool: cargo-auditable@0.7.5 @@ -262,7 +262,7 @@ jobs: - name: Install Rust toolchain uses: dtolnay/rust-toolchain@29eef336d9b2848a0b548edc03f92a220660cdb8 # stable - name: Install cargo-cyclonedx (pinned, prebuilt) - uses: taiki-e/install-action@b8cecb83565409bcc297b2df6e77f030b2a468d5 # v2.82.0 + uses: taiki-e/install-action@ace6ebe54a6a0c86dfb5f7764b17f793b6925bc3 # v2.82.3 with: # cargo-cyclonedx generates the single CycloneDX SBOM (OR-007 / T022). tool: cargo-cyclonedx@0.5.7