chore(deps): bump the minor-and-patch group across 1 directory with 6 updates

.github/workflows/admin-shell-e2e.yml

@@ -105,7 +105,7 @@ jobs:
         with:
           toolchain: 1.95
       - name: Cache cargo
-        uses: actions/cache@1bd1e32a3bdc45362d1e726936510720a7c30a57 # v4
+        uses: actions/cache@0057852bfaa89a56745cba8c7296529d2fc39830 # v4
         with:
           path: |
             ~/.cargo/registry
@@ -144,7 +144,7 @@ jobs:
           toolchain: 1.95
 
       - name: Cache cargo
-        uses: actions/cache@1bd1e32a3bdc45362d1e726936510720a7c30a57 # v4
+        uses: actions/cache@0057852bfaa89a56745cba8c7296529d2fc39830 # v4
         with:
           path: |
             ~/.cargo/registry

.github/workflows/cargo-public-api.yml

@@ -60,7 +60,7 @@ jobs:
         # ~120s for `cargo install --locked cargo-public-api` from
         # source. Pin to the action SHA + tool name; cargo-public-api
         # versioning is the tool's own.
-        uses: taiki-e/install-action@e1c4cd42111751368541a7cb5db3522bd1f846a4 # v2
+        uses: taiki-e/install-action@7a79fe8c3a13344501c80d99cae481c1c9085912 # v2
         with:
           tool: cargo-public-api
 

.github/workflows/cargo-vet.yml

@@ -48,7 +48,7 @@ jobs:
       - name: Install cargo-vet (prebuilt)
         # taiki-e/install-action installs prebuilt cargo-vet (~3s
         # vs ~60s for `cargo install --locked cargo-vet`).
-        uses: taiki-e/install-action@e1c4cd42111751368541a7cb5db3522bd1f846a4 # v2
+        uses: taiki-e/install-action@7a79fe8c3a13344501c80d99cae481c1c9085912 # v2
         with:
           tool: cargo-vet
 

.github/workflows/ci.yml

@@ -126,7 +126,7 @@ jobs:
           key: ${{ matrix.leg }}-${{ matrix.rust }}
 
       - name: Install cargo-nextest
-        uses: taiki-e/install-action@e1c4cd42111751368541a7cb5db3522bd1f846a4 # v2
+        uses: taiki-e/install-action@7a79fe8c3a13344501c80d99cae481c1c9085912 # v2
         with:
           tool: cargo-nextest
 

.github/workflows/cite-drift.yml

@@ -66,7 +66,7 @@ jobs:
         uses: dtolnay/rust-toolchain@29eef336d9b2848a0b548edc03f92a220660cdb8 # stable
 
       - name: Cache cargo build artifacts
-        uses: actions/cache@1bd1e32a3bdc45362d1e726936510720a7c30a57 # v4
+        uses: actions/cache@0057852bfaa89a56745cba8c7296529d2fc39830 # v4
         with:
           path: |
             ~/.cargo/registry

.github/workflows/codeql.yml

@@ -70,7 +70,7 @@ jobs:
       - name: Initialize CodeQL
         # github/codeql-action/init@v3 → resolved 2026-04-25
         # (v3 tag → commit ce64ddcb0d8d890d2df4a9d1c04ff297367dea2a)
-        uses: github/codeql-action/init@7fd177fa680c9881b53cdab4d346d32574c9f7f4
+        uses: github/codeql-action/init@dd903d2e4f5405488e5ef1422510ee31c8b32357
         with:
           languages: ${{ matrix.language }}
           # Repo-wide CodeQL config. `paths-ignore` excludes test/bench/
@@ -91,6 +91,6 @@ jobs:
       - name: Perform CodeQL Analysis
         # github/codeql-action/analyze@v3 → resolved 2026-04-25
         # (v3 tag → commit ce64ddcb0d8d890d2df4a9d1c04ff297367dea2a)
-        uses: github/codeql-action/analyze@7fd177fa680c9881b53cdab4d346d32574c9f7f4
+        uses: github/codeql-action/analyze@dd903d2e4f5405488e5ef1422510ee31c8b32357
         with:
           category: /language:${{ matrix.language }}

.github/workflows/coverage.yml

@@ -73,7 +73,7 @@ jobs:
           shared-key: coverage
 
       - name: Install cargo-llvm-cov
-        uses: taiki-e/install-action@e1c4cd42111751368541a7cb5db3522bd1f846a4 # v2
+        uses: taiki-e/install-action@7a79fe8c3a13344501c80d99cae481c1c9085912 # v2
         with:
           tool: cargo-llvm-cov
 
@@ -115,7 +115,7 @@ jobs:
         # comments + historical trend charts from codecov for free. Wire-
         # up decision recorded in .addl/phase-2a/ci-decisions-2026-04-22.md
         # §4 open-question #2.
-        uses: codecov/codecov-action@75cd11691c0faa626561e295848008c8a7dddffe # v5
+        uses: codecov/codecov-action@0fb7174895f61a3b6b78fc075e0cd60383518dac # v5
         with:
           files: coverage.lcov
           fail_ci_if_error: false

.github/workflows/cross-process-graph.yml

@@ -48,7 +48,7 @@ jobs:
         uses: Swatinem/rust-cache@e18b497796c12c097a38f9edb9d0641fb99eee32 # v2
 
       - name: Install cargo-nextest
-        uses: taiki-e/install-action@e1c4cd42111751368541a7cb5db3522bd1f846a4 # v2
+        uses: taiki-e/install-action@7a79fe8c3a13344501c80d99cae481c1c9085912 # v2
         with:
           tool: cargo-nextest
 

.github/workflows/host-error-wire-safety.yml

@@ -67,7 +67,7 @@ jobs:
           key: host-error-wire-safety
 
       - name: Install cargo-nextest
-        uses: taiki-e/install-action@e1c4cd42111751368541a7cb5db3522bd1f846a4 # v2
+        uses: taiki-e/install-action@7a79fe8c3a13344501c80d99cae481c1c9085912 # v2
         with:
           tool: cargo-nextest
 

.github/workflows/multi-arch-cargo-check.yml

@@ -111,7 +111,7 @@ jobs:
           key: aarch64-sandbox-runtime
 
       - name: Install cargo-nextest
-        uses: taiki-e/install-action@e1c4cd42111751368541a7cb5db3522bd1f846a4 # v2
+        uses: taiki-e/install-action@7a79fe8c3a13344501c80d99cae481c1c9085912 # v2
         with:
           tool: cargo-nextest
 

.github/workflows/mutants.yml

@@ -56,7 +56,7 @@ jobs:
       - name: Install cargo-mutants
         # Prebuilt binary via taiki-e — avoids the ~60s source compile of
         # `cargo install cargo-mutants --locked`.
-        uses: taiki-e/install-action@e1c4cd42111751368541a7cb5db3522bd1f846a4 # v2
+        uses: taiki-e/install-action@7a79fe8c3a13344501c80d99cae481c1c9085912 # v2
         with:
           tool: cargo-mutants
 

.github/workflows/phase-2a-exit-criteria.yml

@@ -73,7 +73,7 @@ jobs:
         with:
           key: phase-2a-wait
       - name: Install cargo-nextest
-        uses: taiki-e/install-action@e1c4cd42111751368541a7cb5db3522bd1f846a4 # v2
+        uses: taiki-e/install-action@7a79fe8c3a13344501c80d99cae481c1c9085912 # v2
         with:
           tool: cargo-nextest
       - name: Run WAIT-resume integration tests
@@ -118,7 +118,7 @@ jobs:
         with:
           key: phase-2a-invariants
       - name: Install cargo-nextest
-        uses: taiki-e/install-action@e1c4cd42111751368541a7cb5db3522bd1f846a4 # v2
+        uses: taiki-e/install-action@7a79fe8c3a13344501c80d99cae481c1c9085912 # v2
         with:
           tool: cargo-nextest
       - name: Run invariants test modules
@@ -150,7 +150,7 @@ jobs:
         with:
           key: phase-2a-option-c
       - name: Install cargo-nextest
-        uses: taiki-e/install-action@e1c4cd42111751368541a7cb5db3522bd1f846a4 # v2
+        uses: taiki-e/install-action@7a79fe8c3a13344501c80d99cae481c1c9085912 # v2
         with:
           tool: cargo-nextest
       - name: Run Option C flanking + end-to-end tests

.github/workflows/supply-chain-seeded-test.yml

@@ -50,7 +50,7 @@ jobs:
         uses: dtolnay/rust-toolchain@29eef336d9b2848a0b548edc03f92a220660cdb8 # stable
 
       - name: Install cargo-deny
-        uses: taiki-e/install-action@e1c4cd42111751368541a7cb5db3522bd1f846a4 # v2
+        uses: taiki-e/install-action@7a79fe8c3a13344501c80d99cae481c1c9085912 # v2
         with:
           tool: cargo-deny
 
@@ -119,7 +119,7 @@ jobs:
         uses: dtolnay/rust-toolchain@29eef336d9b2848a0b548edc03f92a220660cdb8 # stable
 
       - name: Install cargo-audit
-        uses: taiki-e/install-action@e1c4cd42111751368541a7cb5db3522bd1f846a4 # v2
+        uses: taiki-e/install-action@7a79fe8c3a13344501c80d99cae481c1c9085912 # v2
         with:
           tool: cargo-audit
 

.github/workflows/supply-chain.yml

@@ -35,7 +35,7 @@ jobs:
         uses: dtolnay/rust-toolchain@29eef336d9b2848a0b548edc03f92a220660cdb8 # stable
 
       - name: Run cargo-deny
-        uses: EmbarkStudios/cargo-deny-action@6c8f9facfa5047ec02d8485b6bf52b587b7777d1 # v2
+        uses: EmbarkStudios/cargo-deny-action@bb137d7af7e4fb67e5f82a49c4fce4fad40782fe # v2
         with:
           command: check
           arguments: --all-features
@@ -71,7 +71,7 @@ jobs:
         # Prebuilt binary via taiki-e install-action — ~3s instead of ~45s
         # for `cargo install --locked cargo-audit` (which compiles from
         # source).
-        uses: taiki-e/install-action@e1c4cd42111751368541a7cb5db3522bd1f846a4 # v2
+        uses: taiki-e/install-action@7a79fe8c3a13344501c80d99cae481c1c9085912 # v2
         with:
           tool: cargo-audit
 
@@ -146,7 +146,7 @@ jobs:
         uses: dtolnay/rust-toolchain@29eef336d9b2848a0b548edc03f92a220660cdb8 # stable
 
       - name: Install cargo-audit
-        uses: taiki-e/install-action@e1c4cd42111751368541a7cb5db3522bd1f846a4 # v2
+        uses: taiki-e/install-action@7a79fe8c3a13344501c80d99cae481c1c9085912 # v2
         with:
           tool: cargo-audit
 

.github/workflows/ts-public-api.yml

@@ -65,7 +65,7 @@ jobs:
           node-version: '20'
 
       - name: Install pnpm
-        uses: pnpm/action-setup@a7487c7e89a18df4991f7f222e4898a00d66ddda # v4
+        uses: pnpm/action-setup@fc06bc1257f339d1d5d8b3a19a8cae5388b55320 # v4
         with:
           version: 9
 

.github/workflows/wasm-conformance.yml

@@ -87,7 +87,7 @@ jobs:
         # The 2 globals-touching tests (`sandbox_module_cache_avoids_recompilation_on_repeated_call`
         # + `wait_signal_shape_defaults_untyped_accepts_any_value`) flake
         # under cargo test's default in-binary parallelism.
-        uses: taiki-e/install-action@e1c4cd42111751368541a7cb5db3522bd1f846a4 # v2
+        uses: taiki-e/install-action@7a79fe8c3a13344501c80d99cae481c1c9085912 # v2
         with:
           tool: cargo-nextest