[dependabot]

Bumps the minor-and-patch group with 4 updates in the / directory: Swatinem/rust-cache, github/codeql-action/init, github/codeql-action/analyze and github/codeql-action/upload-sarif.

Updates Swatinem/rust-cache from 2.9.2 to 2.9.3

Release notes

Sourced from Swatinem/rust-cache's releases.

v2.9.3

What's Changed

• Issue-375: stop cleanup timestamp pruning after the first entry by @​TethysSvensson in Swatinem/rust-cache#377
• fix: log rustup toolchain list failure as info instead of warning by @​SDAChess in Swatinem/rust-cache#394

New Contributors

• @​TethysSvensson made their first contribution in Swatinem/rust-cache#377
• @​SDAChess made their first contribution in Swatinem/rust-cache#394

Full Changelog: Swatinem/rust-cache@v2.9.2...v2.9.3

Changelog

Sourced from Swatinem/rust-cache's changelog.

Changelog

2.9.3

• Fix timestamp based pruning
• Add missing awaits
• Do not emit warning on missing rustup

2.9.2

• Fix credentials.toml cleanup
• Improvements to cleanup, preserving more valid targets
• Improvements to cargo install handling
• Correctly sort/dedupe Rust versions

2.9.1

• Fix regression in hash calculation

2.9.0

• Update to node24
• Support running from within a nix shell
• Consider all installed toolchains for cache key
• Use case-insensitive comparison to determine exact cache hit

2.8.2

• Don't overwrite env for cargo-metadata call

2.8.1

• Set empty CARGO_ENCODED_RUSTFLAGS when retrieving metadata
• Various dependency updates

2.8.0

• Add support for warpbuild cache provider
• Add new cache-workspace-crates feature

2.7.8

• Include CPU arch in the cache key

2.7.7

• Also cache cargo install metadata

2.7.6

... (truncated)

Commits

• d1527c8 2.9.3
• f0fca6f update dependencies and rebuild
• b49b17f add missing awaits
• 6a7bc3e Bump the dev-minor group across 1 directory with 2 updates (#383)
• 4ece996 Bump the actions group across 1 directory with 6 updates (#392)
• 8103aff Bump the prd-minor group across 1 directory with 2 updates (#389)
• 0e361f3 fix: log rustup toolchain list failure as info instead of warning (#393) (#394)
• f0d9c38 Merge pull request #380 from Swatinem/dependabot/github_actions/actions-8ff58...
• ccd9742 Bump the actions group with 2 updates
• 258712b fix: stop cleanup timestamp pruning after the first entry (#377)
• Additional commits viewable in compare view

Updates github/codeql-action/init from 3.38.3 to 3.39.1

Release notes

Sourced from github/codeql-action/init's releases.

v3.39.1

• Update default CodeQL bundle version to 2.27.3. #4256

v3.39.0

• Breaking change: Bump the minimum required CodeQL bundle version to 2.20.7. #4205
• The codeql-action/analyze step now validates that a correct argument for the checkout_path input has been provided. The checkout_path input must be set to the path where the repository that is being analyzed is checked out at on the runner, if that path is something other than the workspace root. If the path does not point to a repository checkout or is different from the path that was used by codeql-action/init, then the CodeQL Action now produces a warning. #4148
• Resolved an issue with third-party caching implementations that prevented caches from being restored correctly. #4206
• The codeql-action/start-proxy step that is used in Code Scanning Default Setup now finds CodeQL releases using the same logic as codeql-action/init. This primarily benefits customers who are using GitHub instances other than github.com where the codeql-action/start-proxy step may previously have been unable to locate recent releases and ended up using outdated versions of the private registry authentication proxy as a result. #4198

Commits

• 4bfa242 Merge pull request #4259 from github/backport-v3.39.1-9b3254085
• fca87a6 Trigger workflows
• bc3fac4 Rebuild
• 2bdfb07 Update version and changelog for v3.39.1
• bfa15a2 Merge remote-tracking branch 'origin/releases/v4' into backport-v3.39.1-9b325...
• 6f8ca3e Revert "Rebuild"
• 71fd480 Revert "Update version and changelog for v3.39.0"
• 9b32540 Merge pull request #4257 from github/update-v4.39.1-c5a2f4b0f
• b5e1ed9 Trigger workflows
• 20f5ec3 Update changelog for v4.39.1
• Additional commits viewable in compare view

Updates github/codeql-action/analyze from 3.38.3 to 3.39.1

Release notes

Sourced from github/codeql-action/analyze's releases.

v3.39.1

• Update default CodeQL bundle version to 2.27.3. #4256

v3.39.0

• Breaking change: Bump the minimum required CodeQL bundle version to 2.20.7. #4205
• The codeql-action/analyze step now validates that a correct argument for the checkout_path input has been provided. The checkout_path input must be set to the path where the repository that is being analyzed is checked out at on the runner, if that path is something other than the workspace root. If the path does not point to a repository checkout or is different from the path that was used by codeql-action/init, then the CodeQL Action now produces a warning. #4148
• Resolved an issue with third-party caching implementations that prevented caches from being restored correctly. #4206
• The codeql-action/start-proxy step that is used in Code Scanning Default Setup now finds CodeQL releases using the same logic as codeql-action/init. This primarily benefits customers who are using GitHub instances other than github.com where the codeql-action/start-proxy step may previously have been unable to locate recent releases and ended up using outdated versions of the private registry authentication proxy as a result. #4198

Commits

• 4bfa242 Merge pull request #4259 from github/backport-v3.39.1-9b3254085
• fca87a6 Trigger workflows
• bc3fac4 Rebuild
• 2bdfb07 Update version and changelog for v3.39.1
• bfa15a2 Merge remote-tracking branch 'origin/releases/v4' into backport-v3.39.1-9b325...
• 6f8ca3e Revert "Rebuild"
• 71fd480 Revert "Update version and changelog for v3.39.0"
• 9b32540 Merge pull request #4257 from github/update-v4.39.1-c5a2f4b0f
• b5e1ed9 Trigger workflows
• 20f5ec3 Update changelog for v4.39.1
• Additional commits viewable in compare view

Updates github/codeql-action/upload-sarif from 3.38.3 to 3.39.1

Release notes

Sourced from github/codeql-action/upload-sarif's releases.

v3.39.1

• Update default CodeQL bundle version to 2.27.3. #4256

v3.39.0

• Breaking change: Bump the minimum required CodeQL bundle version to 2.20.7. #4205
• The codeql-action/analyze step now validates that a correct argument for the checkout_path input has been provided. The checkout_path input must be set to the path where the repository that is being analyzed is checked out at on the runner, if that path is something other than the workspace root. If the path does not point to a repository checkout or is different from the path that was used by codeql-action/init, then the CodeQL Action now produces a warning. #4148
• Resolved an issue with third-party caching implementations that prevented caches from being restored correctly. #4206
• The codeql-action/start-proxy step that is used in Code Scanning Default Setup now finds CodeQL releases using the same logic as codeql-action/init. This primarily benefits customers who are using GitHub instances other than github.com where the codeql-action/start-proxy step may previously have been unable to locate recent releases and ended up using outdated versions of the private registry authentication proxy as a result. #4198

Commits

• 4bfa242 Merge pull request #4259 from github/backport-v3.39.1-9b3254085
• fca87a6 Trigger workflows
• bc3fac4 Rebuild
• 2bdfb07 Update version and changelog for v3.39.1
• bfa15a2 Merge remote-tracking branch 'origin/releases/v4' into backport-v3.39.1-9b325...
• 6f8ca3e Revert "Rebuild"
• 71fd480 Revert "Update version and changelog for v3.39.0"
• 9b32540 Merge pull request #4257 from github/update-v4.39.1-c5a2f4b0f
• b5e1ed9 Trigger workflows
• 20f5ec3 Update changelog for v4.39.1
• Additional commits viewable in compare view

[vercel]

The latest updates on your projects. Learn more about Vercel for GitHub.

Project	Deployment	Actions	Updated
tempest-website	Ready	Preview	Oct 30, 2026 6:58pm UTC