[dependabot]

Bumps the github-actions group with 6 updates in the / directory:

Package	From	To
Swatinem/rust-cache	2.9.2	2.9.3
taiki-e/install-action	2.87.27	2.87.31
actions/setup-python	7.0.0	7.1.0
cachix/install-nix-action	31.11.1	31.11.3
rust-lang/crates-io-auth-action	1.0.5	1.0.6
pypa/gh-action-pypi-publish	1.14.2	1.14.3

Updates Swatinem/rust-cache from 2.9.2 to 2.9.3

Release notes

Sourced from Swatinem/rust-cache's releases.

v2.9.3

What's Changed

• Issue-375: stop cleanup timestamp pruning after the first entry by @​TethysSvensson in Swatinem/rust-cache#377
• fix: log rustup toolchain list failure as info instead of warning by @​SDAChess in Swatinem/rust-cache#394

New Contributors

• @​TethysSvensson made their first contribution in Swatinem/rust-cache#377
• @​SDAChess made their first contribution in Swatinem/rust-cache#394

Full Changelog: Swatinem/rust-cache@v2.9.2...v2.9.3

Changelog

Sourced from Swatinem/rust-cache's changelog.

Changelog

2.9.3

• Fix timestamp based pruning
• Add missing awaits
• Do not emit warning on missing rustup

2.9.2

• Fix credentials.toml cleanup
• Improvements to cleanup, preserving more valid targets
• Improvements to cargo install handling
• Correctly sort/dedupe Rust versions

2.9.1

• Fix regression in hash calculation

2.9.0

• Update to node24
• Support running from within a nix shell
• Consider all installed toolchains for cache key
• Use case-insensitive comparison to determine exact cache hit

2.8.2

• Don't overwrite env for cargo-metadata call

2.8.1

• Set empty CARGO_ENCODED_RUSTFLAGS when retrieving metadata
• Various dependency updates

2.8.0

• Add support for warpbuild cache provider
• Add new cache-workspace-crates feature

2.7.8

• Include CPU arch in the cache key

2.7.7

• Also cache cargo install metadata

2.7.6

... (truncated)

Commits

• d1527c8 2.9.3
• f0fca6f update dependencies and rebuild
• b49b17f add missing awaits
• 6a7bc3e Bump the dev-minor group across 1 directory with 2 updates (#383)
• 4ece996 Bump the actions group across 1 directory with 6 updates (#392)
• 8103aff Bump the prd-minor group across 1 directory with 2 updates (#389)
• 0e361f3 fix: log rustup toolchain list failure as info instead of warning (#393) (#394)
• f0d9c38 Merge pull request #380 from Swatinem/dependabot/github_actions/actions-8ff58...
• ccd9742 Bump the actions group with 2 updates
• 258712b fix: stop cleanup timestamp pruning after the first entry (#377)
• Additional commits viewable in compare view

Updates taiki-e/install-action from 2.87.27 to 2.87.31

Release notes

Sourced from taiki-e/install-action's releases.

2.87.31

• Downgrade cargo-sort@latest to 2.1.3.

• Update vacuum@latest to 0.35.0.

• Update xh@latest to 0.26.3.

• Update uv@latest to 0.13.5.

• Update ubi@latest to 0.13.0.

• Update trivy@latest to 0.76.1.

• Update tombi@latest to 1.9.0.

• Update release-plz@latest to 0.3.174.

• Update prek@latest to 0.5.7.

• Update mise@latest to 2026.10.17.

• Update jaq@latest to 3.1.2.

• Update espup@latest to 0.17.1.

• Update cargo-zigbuild@latest to 0.24.0.

• Update cargo-nextest@latest to 0.9.149.

• Update biome@latest to 2.6.2.

2.87.30

• Update zizmor@latest to 1.31.1.

• Update wasmtime@latest to 50.0.0.

• Update vacuum@latest to 0.33.2.

• Update uv@latest to 0.13.4.

• Update trunk@latest to 0.22.0.

• Update tombi@latest to 1.8.9.

• Update syft@latest to 1.55.0.

• Update release-plz@latest to 0.3.173.

• Update prek@latest to 0.5.6.

... (truncated)

Changelog

Sourced from taiki-e/install-action's changelog.

Changelog

All notable changes to this project will be documented in this file.

This project adheres to Semantic Versioning.

[Unreleased]

[2.87.32] - 2026-10-26

• Update wild@latest to 0.11.0.

• Update vacuum@latest to 0.35.2.

• Update tombi@latest to 1.9.5.

• Update sccache@latest to 0.19.0.

• Update release-plz@latest to 0.4.1.

• Update mise@latest to 2026.10.19.

• Update knope@latest to 0.23.2.

• Update dprint@latest to 0.64.3.

• Update cargo-vet@latest to 0.10.3.

• Update cargo-sort@latest to 2.1.4.

• Update cargo-binstall@latest to 1.26.1.

• Update biome@latest to 2.6.3.

[2.87.31] - 2026-10-23

• Downgrade cargo-sort@latest to 2.1.3.

• Update vacuum@latest to 0.35.0.

• Update xh@latest to 0.26.3.

• Update uv@latest to 0.13.5.

• Update ubi@latest to 0.13.0.

... (truncated)

Commits

• 1e29709 Release 2.87.31
• 30fbbdf Update cargo-sort@latest to 2.1.3
• bce00a3 Update vacuum@latest to 0.35.0
• dce055e Update tombi manifest
• 28b8d62 Update release-plz manifest
• 44d13e3 Update mise manifest
• 510b77d Update xh@latest to 0.26.3
• 601130d Update vacuum manifest
• 8e70b88 Update uv@latest to 0.13.5
• 9092880 Update ubi@latest to 0.13.0
• Additional commits viewable in compare view

Updates actions/setup-python from 7.0.0 to 7.1.0

Release notes

Sourced from actions/setup-python's releases.

v7.1.0

What's Changed

Enhancements

• Add mirror and mirror-token inputs for custom Python distribution sources by @​luhenry in actions/setup-python#1302
• Improve error message clarity by @​v-lmvysakh in actions/setup-python#1351

Dependency Upgrade

• Upgrade browserslist from 4.28.2 to 4.28.9 by @​dependabot in actions/setup-python#1353
• Upgrade @​typescript-eslint/parser from 8.62.0 to 8.70.0 by @​dependabot in actions/setup-python#1343
• Upgrade eslint-plugin-jest from 29.15.2 to 29.16.6 by @​dependabot in actions/setup-python#1342
• Upgrade @​vercel/ncc from 0.44.0 to 0.45.0 by @​dependabot in actions/setup-python#1357
• Upgrade @​types/semver from 7.7.1 to 7.8.0 by @​dependabot in actions/setup-python#1359
• Upgrade undici from 6.28.0 to 6.29.0 by @​dependabot in actions/setup-python#1364
• Upgrade ts-jest from 29.4.11 to 29.4.14 by @​dependabot in actions/setup-python#1361
• Upgrade brace-expansion from 5.0.9 to 5.0.12 by @​dependabot in actions/setup-python#1365
• Upgrade prettier from 3.8.4 to 3.9.9 and package.json from 7.0.0 to 7.1.0 by @​dependabot in actions/setup-python#1363
• Upgrade @​typescript-eslint/eslint-plugin from 8.62.0 to 8.71.1 by @​dependabot in actions/setup-python#1369
• Upgrade actions/checkout from 7.0.0 to 7.0.1 by @​dependabot in actions/setup-python#1345
• Upgrade cache to 6.3.0 by @​v-HarithaVattikuti in actions/setup-python#1370
• Resolve Basic Validation audit failures by @​v-HarithaVattikuti in actions/setup-python#1347
• Resolve npm audit failures by @​v-HarithaVattikuti in actions/setup-python#1350

New Contributors

• @​luhenry made their first contribution in actions/setup-python#1302

Full Changelog: actions/setup-python@v7.0.0...v7.1.0

Commits

• 6d4fd22 Cache upgrade to 6.3.0 (#1370)
• ec52d0a Bump @​typescript-eslint/eslint-plugin from 8.62.0 to 8.71.1 (#1369)
• ff73b24 Bump prettier from 3.8.4 to 3.9.9 and package.json from 7.0.0 to 7.1.0 (#1363)
• 0e40890 Bump brace-expansion from 5.0.9 to 5.0.12 (#1365)
• 3892123 Bump ts-jest from 29.4.11 to 29.4.14 (#1361)
• 6609657 Bump undici from 6.28.0 to 6.29.0 (#1364)
• e1be392 Bump @​types/semver from 7.7.1 to 7.8.0 (#1359)
• 06da627 Bump @​vercel/ncc from 0.44.0 to 0.45.0 (#1357)
• af9bcc7 Bump eslint-plugin-jest from 29.15.2 to 29.16.6 (#1342)
• 7aeabeb Bump @​typescript-eslint/parser from 8.62.0 to 8.70.0 (#1343)
• Additional commits viewable in compare view

Updates cachix/install-nix-action from 31.11.1 to 31.11.3

Release notes

Sourced from cachix/install-nix-action's releases.

31.11.3

This tag was incorrectly named. Prefer v31.11.3.

What's Changed

• nix: 2.35.3 -> 2.35.4 by @​xokdvium in cachix/install-nix-action#283 Security: Updates the bundled certificates shipped with the installer to remove the compromised eMudhra certificates.

Full Changelog: cachix/install-nix-action@v31.11.2...31.11.3

v31.11.3

What's Changed

• nix: 2.35.3 -> 2.35.4 by @​xokdvium in cachix/install-nix-action#283 Security: Updates the bundled certificates shipped with the installer to remove the compromised eMudhra certificates.

Re-release of 31.11.3, which was tagged incorrectly.

Full Changelog: cachix/install-nix-action@v31.11.2...v31.11.3

v31.11.2

What's Changed

• nix: 2.35.2 -> 2.35.3 by @​github-actions[bot] in cachix/install-nix-action#282 Security: Fixes a number of vulnerabilities that could be combined to achieve root priviledge escalation. See https://discourse.nixos.org/t/security-advisory-for-nix-and-lix-october-2026/80547

Full Changelog: cachix/install-nix-action@v31.11.1...v31.11.2

Commits

• 75c75c3 Merge pull request #283 from xokdvium/cacert-bump
• 3736037 nix: 2.35.3 -> 2.35.4
• 448cde7 Merge pull request #282 from cachix/create-pull-request/patch
• 280a411 nix: 2.35.2 -> 2.35.3
• See full diff in compare view

Updates rust-lang/crates-io-auth-action from 1.0.5 to 1.0.6

Release notes

Sourced from rust-lang/crates-io-auth-action's releases.

v1.0.6

What's Changed

update dependencies

Full Changelog: rust-lang/crates-io-auth-action@v1.0.5...v1.0.6

Commits

• 3268eb4 Merge pull request #278 from marcoienibot/chore/update-dependencies-2026-10
• e901356 chore(deps): update dependencies and GitHub Actions
• 9c067fc Merge pull request #277 from rust-lang/renovate/msw-3.x
• 9b55005 chore(deps): update dependency msw to v3
• 4920f09 Merge pull request #276 from rust-lang/renovate/major-github-actions
• 04dcccb chore(deps): update github actions
• 82864bf Merge pull request #274 from rust-lang/renovate/major-vitest-monorepo
• 2bd8e07 chore(deps): update dependency vitest to v5
• f14f407 Merge pull request #271 from rust-lang/renovate/github-actions
• 0205d6c chore(deps): update github actions
• Additional commits viewable in compare view

Updates pypa/gh-action-pypi-publish from 1.14.2 to 1.14.3

Release notes

Sourced from pypa/gh-action-pypi-publish's releases.

v1.14.3

[!important] 🚨 This release includes fixes for GHSA-5xjx-3w67-w9x9 patched up by @​sethmlarson💰 in #427 and in other places across the ecosystem.

Additional ecosystem and related mitigations beyond you might want to watch out for:

• https://discuss.python.org/t/information-for-python-users-regarding-emudhra-emsign-ca-certificate-security-incident/109576
• https://emudhra.we-have-a-problem.com

🛠️ Security Tightening

@​webknjaz💰 made sure the dependency tree within the action runtime uses hash-checking from now on via pypa/gh-action-pypi-publish#420.

🪞 Full Diff: pypa/gh-action-pypi-publish@v1.14.2...v1.14.3

🧔‍♂️ Release Manager: @​webknjaz 🇺🇦

💬 Discuss on Bluesky 🦋, on Mastodon 🐘 and on GitHub.

Commits

• 7245906 Merge pull request #427 from sethmlarson/certifi-sigstore
• 331eccb Upgrade certifi and sigstore
• f68fee4 💰 Sync the FUNDING config
• c0d6f8e Merge branch 'integrity/runtime/deptree' into unstable/v1
• 9090099 🧪 Make smoke test deps hash-pinned in CI
• 34e40c2 📌 Bump pip-tools managed transitive deptrees
• e800ed5 👷 Enable hash-checking in the runtime deptree 🔗
• dd8c5f4 🔧 Make pip-tools config available in container
• See full diff in compare view