chore(deps): bump the actions group across 1 directory with 8 updates (#21)

dependabot[bot] · web-flow · commit fcfd0c8d7db0 · 2026-02-18T20:06:31.000Z
Updates the requirements on
[actions/checkout](https://github.com/actions/checkout),
[github/codeql-action](https://github.com/github/codeql-action),
[erlef/setup-beam](https://github.com/erlef/setup-beam),
[actions/github-script](https://github.com/actions/github-script),
[dtolnay/rust-toolchain](https://github.com/dtolnay/rust-toolchain),
[trufflesecurity/trufflehog](https://github.com/trufflesecurity/trufflehog),
[Swatinem/rust-cache](https://github.com/swatinem/rust-cache) and
[codecov/codecov-action](https://github.com/codecov/codecov-action) to
permit the latest version.
Updates `actions/checkout` from 4.1.1 to 6.0.2
&lt;details&gt;
&lt;summary&gt;Release notes&lt;/summary&gt;
&lt;p&gt;&lt;em&gt;Sourced from &lt;a
href="https://github.com/actions/checkout/releases"&gt;actions/checkout's
releases&lt;/a&gt;.&lt;/em&gt;&lt;/p&gt;
&lt;blockquote&gt;
&lt;h2&gt;v6.0.2&lt;/h2&gt;
&lt;h2&gt;What's Changed&lt;/h2&gt;
&lt;ul&gt;
&lt;li&gt;Add orchestration_id to git user-agent when ACTIONS_ORCHESTRATION_ID
is set by &lt;a
href="https://github.com/TingluoHuang"&gt;&lt;code&gt;@​TingluoHuang&lt;/code&gt;&lt;/a&gt;
in &lt;a
href="https://redirect.github.com/actions/checkout/pull/2355"&gt;actions/checkout#2355&lt;/a&gt;&lt;/li&gt;
&lt;li&gt;Fix tag handling: preserve annotations and explicit fetch-tags by &lt;a
href="https://github.com/ericsciple"&gt;&lt;code&gt;@​ericsciple&lt;/code&gt;&lt;/a&gt; in &lt;a
href="https://redirect.github.com/actions/checkout/pull/2356"&gt;actions/checkout#2356&lt;/a&gt;&lt;/li&gt;
&lt;/ul&gt;
&lt;p&gt;&lt;strong&gt;Full Changelog&lt;/strong&gt;: &lt;a
href="https://github.com/actions/checkout/compare/v6.0.1...v6.0.2"&gt;https://github.com/actions/checkout/compare/v6.0.1...v6.0.2&lt;/a&gt;&lt;/p&gt;
&lt;h2&gt;v6.0.1&lt;/h2&gt;
&lt;h2&gt;What's Changed&lt;/h2&gt;
&lt;ul&gt;
&lt;li&gt;Update all references from v5 and v4 to v6 by &lt;a
href="https://github.com/ericsciple"&gt;&lt;code&gt;@​ericsciple&lt;/code&gt;&lt;/a&gt; in &lt;a
href="https://redirect.github.com/actions/checkout/pull/2314"&gt;actions/checkout#2314&lt;/a&gt;&lt;/li&gt;
&lt;li&gt;Add worktree support for persist-credentials includeIf by &lt;a
href="https://github.com/ericsciple"&gt;&lt;code&gt;@​ericsciple&lt;/code&gt;&lt;/a&gt; in &lt;a
href="https://redirect.github.com/actions/checkout/pull/2327"&gt;actions/checkout#2327&lt;/a&gt;&lt;/li&gt;
&lt;li&gt;Clarify v6 README by &lt;a
href="https://github.com/ericsciple"&gt;&lt;code&gt;@​ericsciple&lt;/code&gt;&lt;/a&gt; in &lt;a
href="https://redirect.github.com/actions/checkout/pull/2328"&gt;actions/checkout#2328&lt;/a&gt;&lt;/li&gt;
&lt;/ul&gt;
&lt;p&gt;&lt;strong&gt;Full Changelog&lt;/strong&gt;: &lt;a
href="https://github.com/actions/checkout/compare/v6...v6.0.1"&gt;https://github.com/actions/checkout/compare/v6...v6.0.1&lt;/a&gt;&lt;/p&gt;
&lt;h2&gt;v6.0.0&lt;/h2&gt;
&lt;h2&gt;What's Changed&lt;/h2&gt;
&lt;ul&gt;
&lt;li&gt;Update README to include Node.js 24 support details and requirements
by &lt;a href="https://github.com/salmanmkc"&gt;&lt;code&gt;@​salmanmkc&lt;/code&gt;&lt;/a&gt;
in &lt;a
href="https://redirect.github.com/actions/checkout/pull/2248"&gt;actions/checkout#2248&lt;/a&gt;&lt;/li&gt;
&lt;li&gt;Persist creds to a separate file by &lt;a
href="https://github.com/ericsciple"&gt;&lt;code&gt;@​ericsciple&lt;/code&gt;&lt;/a&gt; in &lt;a
href="https://redirect.github.com/actions/checkout/pull/2286"&gt;actions/checkout#2286&lt;/a&gt;&lt;/li&gt;
&lt;li&gt;v6-beta by &lt;a
href="https://github.com/ericsciple"&gt;&lt;code&gt;@​ericsciple&lt;/code&gt;&lt;/a&gt; in &lt;a
href="https://redirect.github.com/actions/checkout/pull/2298"&gt;actions/checkout#2298&lt;/a&gt;&lt;/li&gt;
&lt;li&gt;update readme/changelog for v6 by &lt;a
href="https://github.com/ericsciple"&gt;&lt;code&gt;@​ericsciple&lt;/code&gt;&lt;/a&gt; in &lt;a
href="https://redirect.github.com/actions/checkout/pull/2311"&gt;actions/checkout#2311&lt;/a&gt;&lt;/li&gt;
&lt;/ul&gt;
&lt;p&gt;&lt;strong&gt;Full Changelog&lt;/strong&gt;: &lt;a
href="https://github.com/actions/checkout/compare/v5.0.0...v6.0.0"&gt;https://github.com/actions/checkout/compare/v5.0.0...v6.0.0&lt;/a&gt;&lt;/p&gt;
&lt;h2&gt;v6-beta&lt;/h2&gt;
&lt;h2&gt;What's Changed&lt;/h2&gt;
&lt;p&gt;Updated persist-credentials to store the credentials under
&lt;code&gt;$RUNNER_TEMP&lt;/code&gt; instead of directly in the local git
config.&lt;/p&gt;
&lt;p&gt;This requires a minimum Actions Runner version of &lt;a
href="https://github.com/actions/runner/releases/tag/v2.329.0"&gt;v2.329.0&lt;/a&gt;
to access the persisted credentials for &lt;a
href="https://docs.github.com/en/actions/tutorials/use-containerized-services/create-a-docker-container-action"&gt;Docker
container action&lt;/a&gt; scenarios.&lt;/p&gt;
&lt;h2&gt;v5.0.1&lt;/h2&gt;
&lt;h2&gt;What's Changed&lt;/h2&gt;
&lt;ul&gt;
&lt;li&gt;Port v6 cleanup to v5 by &lt;a
href="https://github.com/ericsciple"&gt;&lt;code&gt;@​ericsciple&lt;/code&gt;&lt;/a&gt; in &lt;a
href="https://redirect.github.com/actions/checkout/pull/2301"&gt;actions/checkout#2301&lt;/a&gt;&lt;/li&gt;
&lt;/ul&gt;
&lt;p&gt;&lt;strong&gt;Full Changelog&lt;/strong&gt;: &lt;a
href="https://github.com/actions/checkout/compare/v5...v5.0.1"&gt;https://github.com/actions/checkout/compare/v5...v5.0.1&lt;/a&gt;&lt;/p&gt;
&lt;h2&gt;v5.0.0&lt;/h2&gt;
&lt;h2&gt;What's Changed&lt;/h2&gt;
&lt;ul&gt;
&lt;li&gt;Update actions checkout to use node 24 by &lt;a
href="https://github.com/salmanmkc"&gt;&lt;code&gt;@​salmanmkc&lt;/code&gt;&lt;/a&gt; in &lt;a
href="https://redirect.github.com/actions/checkout/pull/2226"&gt;actions/checkout#2226&lt;/a&gt;&lt;/li&gt;
&lt;li&gt;Prepare v5.0.0 release by &lt;a
href="https://github.com/salmanmkc"&gt;&lt;code&gt;@​salmanmkc&lt;/code&gt;&lt;/a&gt; in &lt;a
href="https://redirect.github.com/actions/checkout/pull/2238"&gt;actions/checkout#2238&lt;/a&gt;&lt;/li&gt;
&lt;/ul&gt;
&lt;h2&gt;⚠️ Minimum Compatible Runner Version&lt;/h2&gt;
&lt;p&gt;&lt;strong&gt;v2.327.1&lt;/strong&gt;&lt;br /&gt;
&lt;a
href="https://github.com/actions/runner/releases/tag/v2.327.1"&gt;Release
Notes&lt;/a&gt;&lt;/p&gt;
&lt;!-- raw HTML omitted --&gt;
&lt;/blockquote&gt;
&lt;p&gt;... (truncated)&lt;/p&gt;
&lt;/details&gt;
&lt;details&gt;
&lt;summary&gt;Commits&lt;/summary&gt;
&lt;ul&gt;
&lt;li&gt;&lt;a
href="https://github.com/actions/checkout/commit/de0fac2e4500dabe0009e67214ff5f5447ce83dd"&gt;&lt;code&gt;de0fac2&lt;/code&gt;&lt;/a&gt;
Fix tag handling: preserve annotations and explicit fetch-tags (&lt;a
href="https://redirect.github.com/actions/checkout/issues/2356"&gt;#2356&lt;/a&gt;)&lt;/li&gt;
&lt;li&gt;&lt;a
href="https://github.com/actions/checkout/commit/064fe7f3312418007dea2b49a19844a9ee378f49"&gt;&lt;code&gt;064fe7f&lt;/code&gt;&lt;/a&gt;
Add orchestration_id to git user-agent when ACTIONS_ORCHESTRATION_ID is
set (...&lt;/li&gt;
&lt;li&gt;&lt;a
href="https://github.com/actions/checkout/commit/8e8c483db84b4bee98b60c0593521ed34d9990e8"&gt;&lt;code&gt;8e8c483&lt;/code&gt;&lt;/a&gt;
Clarify v6 README (&lt;a
href="https://redirect.github.com/actions/checkout/issues/2328"&gt;#2328&lt;/a&gt;)&lt;/li&gt;
&lt;li&gt;&lt;a
href="https://github.com/actions/checkout/commit/033fa0dc0b82693d8986f1016a0ec2c5e7d9cbb1"&gt;&lt;code&gt;033fa0d&lt;/code&gt;&lt;/a&gt;
Add worktree support for persist-credentials includeIf (&lt;a
href="https://redirect.github.com/actions/checkout/issues/2327"&gt;#2327&lt;/a&gt;)&lt;/li&gt;
&lt;li&gt;&lt;a
href="https://github.com/actions/checkout/commit/c2d88d3ecc89a9ef08eebf45d9637801dcee7eb5"&gt;&lt;code&gt;c2d88d3&lt;/code&gt;&lt;/a&gt;
Update all references from v5 and v4 to v6 (&lt;a
href="https://redirect.github.com/actions/checkout/issues/2314"&gt;#2314&lt;/a&gt;)&lt;/li&gt;
&lt;li&gt;&lt;a
href="https://github.com/actions/checkout/commit/1af3b93b6815bc44a9784bd300feb67ff0d1eeb3"&gt;&lt;code&gt;1af3b93&lt;/code&gt;&lt;/a&gt;
update readme/changelog for v6 (&lt;a
href="https://redirect.github.com/actions/checkout/issues/2311"&gt;#2311&lt;/a&gt;)&lt;/li&gt;
&lt;li&gt;&lt;a
href="https://github.com/actions/checkout/commit/71cf2267d89c5cb81562390fa70a37fa40b1305e"&gt;&lt;code&gt;71cf226&lt;/code&gt;&lt;/a&gt;
v6-beta (&lt;a
href="https://redirect.github.com/actions/checkout/issues/2298"&gt;#2298&lt;/a&gt;)&lt;/li&gt;
&lt;li&gt;&lt;a
href="https://github.com/actions/checkout/commit/069c6959146423d11cd0184e6accf28f9d45f06e"&gt;&lt;code&gt;069c695&lt;/code&gt;&lt;/a&gt;
Persist creds to a separate file (&lt;a
href="https://redirect.github.com/actions/checkout/issues/2286"&gt;#2286&lt;/a&gt;)&lt;/li&gt;
&lt;li&gt;&lt;a
href="https://github.com/actions/checkout/commit/ff7abcd0c3c05ccf6adc123a8cd1fd4fb30fb493"&gt;&lt;code&gt;ff7abcd&lt;/code&gt;&lt;/a&gt;
Update README to include Node.js 24 support details and requirements (&lt;a
href="https://redirect.github.com/actions/checkout/issues/2248"&gt;#2248&lt;/a&gt;)&lt;/li&gt;
&lt;li&gt;&lt;a
href="https://github.com/actions/checkout/commit/08c6903cd8c0fde910a37f88322edcfb5dd907a8"&gt;&lt;code&gt;08c6903&lt;/code&gt;&lt;/a&gt;
Prepare v5.0.0 release (&lt;a
href="https://redirect.github.com/actions/checkout/issues/2238"&gt;#2238&lt;/a&gt;)&lt;/li&gt;
&lt;li&gt;Additional commits viewable in &lt;a
href="https://github.com/actions/checkout/compare/v4.1.1...v6.0.2"&gt;compare
view&lt;/a&gt;&lt;/li&gt;
&lt;/ul&gt;
&lt;/details&gt;
&lt;br /&gt;

Updates `github/codeql-action` from 4.31.10 to 4.32.0
&lt;details&gt;
&lt;summary&gt;Release notes&lt;/summary&gt;
&lt;p&gt;&lt;em&gt;Sourced from &lt;a
href="https://github.com/github/codeql-action/releases"&gt;github/codeql-action's
releases&lt;/a&gt;.&lt;/em&gt;&lt;/p&gt;
&lt;blockquote&gt;
&lt;h2&gt;v4.32.0&lt;/h2&gt;
&lt;ul&gt;
&lt;li&gt;Update default CodeQL bundle version to &lt;a
href="https://github.com/github/codeql-action/releases/tag/codeql-bundle-v2.24.0"&gt;2.24.0&lt;/a&gt;.
&lt;a
href="https://redirect.github.com/github/codeql-action/pull/3425"&gt;#3425&lt;/a&gt;&lt;/li&gt;
&lt;/ul&gt;
&lt;h2&gt;v4.31.11&lt;/h2&gt;
&lt;ul&gt;
&lt;li&gt;When running a Default Setup workflow with &lt;a
href="https://docs.github.com/en/actions/how-tos/monitor-workflows/enable-debug-logging"&gt;Actions
debugging enabled&lt;/a&gt;, the CodeQL Action will now use more unique names
when uploading logs from the Dependabot authentication proxy as workflow
artifacts. This ensures that the artifact names do not clash between
multiple jobs in a build matrix. &lt;a
href="https://redirect.github.com/github/codeql-action/pull/3409"&gt;#3409&lt;/a&gt;&lt;/li&gt;
&lt;li&gt;Improved error handling throughout the CodeQL Action. &lt;a
href="https://redirect.github.com/github/codeql-action/pull/3415"&gt;#3415&lt;/a&gt;&lt;/li&gt;
&lt;li&gt;Added experimental support for automatically excluding &lt;a
href="https://docs.github.com/en/repositories/working-with-files/managing-files/customizing-how-changed-files-appear-on-github"&gt;generated
files&lt;/a&gt; from the analysis. This feature is not currently enabled for
any analysis. In the future, it may be enabled by default for some
GitHub-managed analyses. &lt;a
href="https://redirect.github.com/github/codeql-action/pull/3318"&gt;#3318&lt;/a&gt;&lt;/li&gt;
&lt;li&gt;The changelog extracts that are included with releases of the CodeQL
Action are now shorter to avoid duplicated information from appearing in
Dependabot PRs. &lt;a
href="https://redirect.github.com/github/codeql-action/pull/3403"&gt;#3403&lt;/a&gt;&lt;/li&gt;
&lt;/ul&gt;
&lt;/blockquote&gt;
&lt;/details&gt;
&lt;details&gt;
&lt;summary&gt;Changelog&lt;/summary&gt;
&lt;p&gt;&lt;em&gt;Sourced from &lt;a
href="https://github.com/github/codeql-action/blob/main/CHANGELOG.md"&gt;github/codeql-action's
changelog&lt;/a&gt;.&lt;/em&gt;&lt;/p&gt;
&lt;blockquote&gt;
&lt;h1&gt;CodeQL Action Changelog&lt;/h1&gt;
&lt;p&gt;See the &lt;a
href="https://github.com/github/codeql-action/releases"&gt;releases
page&lt;/a&gt; for the relevant changes to the CodeQL CLI and language
packs.&lt;/p&gt;
&lt;h2&gt;[UNRELEASED]&lt;/h2&gt;
&lt;p&gt;No user facing changes.&lt;/p&gt;
&lt;h2&gt;4.32.0 - 26 Jan 2026&lt;/h2&gt;
&lt;ul&gt;
&lt;li&gt;Update default CodeQL bundle version to &lt;a
href="https://github.com/github/codeql-action/releases/tag/codeql-bundle-v2.24.0"&gt;2.24.0&lt;/a&gt;.
&lt;a
href="https://redirect.github.com/github/codeql-action/pull/3425"&gt;#3425&lt;/a&gt;&lt;/li&gt;
&lt;/ul&gt;
&lt;h2&gt;4.31.11 - 23 Jan 2026&lt;/h2&gt;
&lt;ul&gt;
&lt;li&gt;When running a Default Setup workflow with &lt;a
href="https://docs.github.com/en/actions/how-tos/monitor-workflows/enable-debug-logging"&gt;Actions
debugging enabled&lt;/a&gt;, the CodeQL Action will now use more unique names
when uploading logs from the Dependabot authentication proxy as workflow
artifacts. This ensures that the artifact names do not clash between
multiple jobs in a build matrix. &lt;a
href="https://redirect.github.com/github/codeql-action/pull/3409"&gt;#3409&lt;/a&gt;&lt;/li&gt;
&lt;li&gt;Improved error handling throughout the CodeQL Action. &lt;a
href="https://redirect.github.com/github/codeql-action/pull/3415"&gt;#3415&lt;/a&gt;&lt;/li&gt;
&lt;li&gt;Added experimental support for automatically excluding &lt;a
href="https://docs.github.com/en/repositories/working-with-files/managing-files/customizing-how-changed-files-appear-on-github"&gt;generated
files&lt;/a&gt; from the analysis. This feature is not currently enabled for
any analysis. In the future, it may be enabled by default for some
GitHub-managed analyses. &lt;a
href="https://redirect.github.com/github/codeql-action/pull/3318"&gt;#3318&lt;/a&gt;&lt;/li&gt;
&lt;li&gt;The changelog extracts that are included with releases of the CodeQL
Action are now shorter to avoid duplicated information from appearing in
Dependabot PRs. &lt;a
href="https://redirect.github.com/github/codeql-action/pull/3403"&gt;#3403&lt;/a&gt;&lt;/li&gt;
&lt;/ul&gt;
&lt;h2&gt;4.31.10 - 12 Jan 2026&lt;/h2&gt;
&lt;ul&gt;
&lt;li&gt;Update default CodeQL bundle version to 2.23.9. &lt;a
href="https://redirect.github.com/github/codeql-action/pull/3393"&gt;#3393&lt;/a&gt;&lt;/li&gt;
&lt;/ul&gt;
&lt;h2&gt;4.31.9 - 16 Dec 2025&lt;/h2&gt;
&lt;p&gt;No user facing changes.&lt;/p&gt;
&lt;h2&gt;4.31.8 - 11 Dec 2025&lt;/h2&gt;
&lt;ul&gt;
&lt;li&gt;Update default CodeQL bundle version to 2.23.8. &lt;a
href="https://redirect.github.com/github/codeql-action/pull/3354"&gt;#3354&lt;/a&gt;&lt;/li&gt;
&lt;/ul&gt;
&lt;h2&gt;4.31.7 - 05 Dec 2025&lt;/h2&gt;
&lt;ul&gt;
&lt;li&gt;Update default CodeQL bundle version to 2.23.7. &lt;a
href="https://redirect.github.com/github/codeql-action/pull/3343"&gt;#3343&lt;/a&gt;&lt;/li&gt;
&lt;/ul&gt;
&lt;h2&gt;4.31.6 - 01 Dec 2025&lt;/h2&gt;
&lt;p&gt;No user facing changes.&lt;/p&gt;
&lt;h2&gt;4.31.5 - 24 Nov 2025&lt;/h2&gt;
&lt;ul&gt;
&lt;li&gt;Update default CodeQL bundle version to 2.23.6. &lt;a
href="https://redirect.github.com/github/codeql-action/pull/3321"&gt;#3321&lt;/a&gt;&lt;/li&gt;
&lt;/ul&gt;
&lt;h2&gt;4.31.4 - 18 Nov 2025&lt;/h2&gt;
&lt;p&gt;No user facing changes.&lt;/p&gt;
&lt;h2&gt;4.31.3 - 13 Nov 2025&lt;/h2&gt;
&lt;ul&gt;
&lt;li&gt;CodeQL Action v3 will be deprecated in December 2026. The Action now
logs a warning for customers who are running v3 but could be running v4.
For more information, see &lt;a
href="https://github.blog/changelog/2025-10-28-upcoming-deprecation-of-codeql-action-v3/"&gt;Upcoming
deprecation of CodeQL Action v3&lt;/a&gt;.&lt;/li&gt;
&lt;/ul&gt;
&lt;!-- raw HTML omitted --&gt;
&lt;/blockquote&gt;
&lt;p&gt;... (truncated)&lt;/p&gt;
&lt;/details&gt;
&lt;details&gt;
&lt;summary&gt;Commits&lt;/summary&gt;
&lt;ul&gt;
&lt;li&gt;&lt;a
href="https://github.com/github/codeql-action/commit/b20883b0cd1f46c72ae0ba6d1090936928f9fa30"&gt;&lt;code&gt;b20883b&lt;/code&gt;&lt;/a&gt;
Merge pull request &lt;a
href="https://redirect.github.com/github/codeql-action/issues/3428"&gt;#3428&lt;/a&gt;
from github/update-v4.32.0-e3b8227a2&lt;/li&gt;
&lt;li&gt;&lt;a
href="https://github.com/github/codeql-action/commit/c9aa45dd0f8ba0b0433386779eb4798c2545156b"&gt;&lt;code&gt;c9aa45d&lt;/code&gt;&lt;/a&gt;
Update changelog for v4.32.0&lt;/li&gt;
&lt;li&gt;&lt;a
href="https://github.com/github/codeql-action/commit/e3b8227a28dee88b8eaf5597d892a0cea497e634"&gt;&lt;code&gt;e3b8227&lt;/code&gt;&lt;/a&gt;
Merge pull request &lt;a
href="https://redirect.github.com/github/codeql-action/issues/3427"&gt;#3427&lt;/a&gt;
from github/henrymercer/bump-for-new-minor-series&lt;/li&gt;
&lt;li&gt;&lt;a
href="https://github.com/github/codeql-action/commit/8a01181ce209b3e3f51c6add1b9e1e744bdf0064"&gt;&lt;code&gt;8a01181&lt;/code&gt;&lt;/a&gt;
Compare minor version number&lt;/li&gt;
&lt;li&gt;&lt;a
href="https://github.com/github/codeql-action/commit/80e142568fc335997bbf78abac097448213bd9ae"&gt;&lt;code&gt;80e1425&lt;/code&gt;&lt;/a&gt;
Bump minor version for CLI v2.24.0&lt;/li&gt;
&lt;li&gt;&lt;a
href="https://github.com/github/codeql-action/commit/b748848f27bc46a97bbb965c606bbc298e760a9a"&gt;&lt;code&gt;b748848&lt;/code&gt;&lt;/a&gt;
Bump the Action minor version number on new CodeQL minor version
series&lt;/li&gt;
&lt;li&gt;&lt;a
href="https://github.com/github/codeql-action/commit/5e767eff5aa6e2b719f353611ff3c363d6225d18"&gt;&lt;code&gt;5e767ef&lt;/code&gt;&lt;/a&gt;
Merge pull request &lt;a
href="https://redirect.github.com/github/codeql-action/issues/3425"&gt;#3425&lt;/a&gt;
from github/update-bundle/codeql-bundle-v2.24.0&lt;/li&gt;
&lt;li&gt;&lt;a
href="https://github.com/github/codeql-action/commit/975286947045be7e8b204a16b36b1b04b9feef86"&gt;&lt;code&gt;9752869&lt;/code&gt;&lt;/a&gt;
Add changelog note&lt;/li&gt;
&lt;li&gt;&lt;a
href="https://github.com/github/codeql-action/commit/c62c214723e7c0cdfb907bede6988df3a0640c7e"&gt;&lt;code&gt;c62c214&lt;/code&gt;&lt;/a&gt;
Update default bundle to codeql-bundle-v2.24.0&lt;/li&gt;
&lt;li&gt;&lt;a
href="https://github.com/github/codeql-action/commit/25a224b8085c21d4d61b7fc051468805fc3ac490"&gt;&lt;code&gt;25a224b&lt;/code&gt;&lt;/a&gt;
Merge pull request &lt;a
href="https://redirect.github.com/github/codeql-action/issues/3423"&gt;#3423&lt;/a&gt;
from github/mbg/ci/yq-windows&lt;/li&gt;
&lt;li&gt;Additional commits viewable in &lt;a
href="https://github.com/github/codeql-action/compare/cdefb33c0f6224e58673d9004f47f7cb3e328b89...b20883b0cd1f46c72ae0ba6d1090936928f9fa30"&gt;compare
view&lt;/a&gt;&lt;/li&gt;
&lt;/ul&gt;
&lt;/details&gt;
&lt;br /&gt;

Updates `erlef/setup-beam` from 1.17.5 to 1.20.4
&lt;details&gt;
&lt;summary&gt;Release notes&lt;/summary&gt;
&lt;p&gt;&lt;em&gt;Sourced from &lt;a
href="https://github.com/erlef/setup-beam/releases"&gt;erlef/setup-beam's
releases&lt;/a&gt;.&lt;/em&gt;&lt;/p&gt;
&lt;blockquote&gt;
&lt;h2&gt;v1.20.4&lt;/h2&gt;
&lt;h2&gt;What's Changed&lt;/h2&gt;
&lt;ul&gt;
&lt;li&gt;Fix: more versioning around &lt;code&gt;nightly&lt;/code&gt; and
&lt;code&gt;maint&lt;/code&gt;/&lt;code&gt;main&lt;/code&gt; by &lt;a
href="https://github.com/paulo-ferraz-oliveira"&gt;&lt;code&gt;@​paulo-ferraz-oliveira&lt;/code&gt;&lt;/a&gt;
in &lt;a
href="https://redirect.github.com/erlef/setup-beam/pull/359"&gt;erlef/setup-beam#359&lt;/a&gt;&lt;/li&gt;
&lt;/ul&gt;
&lt;h2&gt;Dependabot updates&lt;/h2&gt;
&lt;ul&gt;
&lt;li&gt;Bump eslint from 9.30.0 to 9.30.1 by &lt;a
href="https://github.com/dependabot"&gt;&lt;code&gt;@​dependabot&lt;/code&gt;&lt;/a&gt; in &lt;a
href="https://redirect.github.com/erlef/setup-beam/pull/362"&gt;erlef/setup-beam#362&lt;/a&gt;&lt;/li&gt;
&lt;li&gt;Bump &lt;code&gt;@​eslint/js&lt;/code&gt; from 9.30.0 to 9.30.1 by &lt;a
href="https://github.com/dependabot"&gt;&lt;code&gt;@​dependabot&lt;/code&gt;&lt;/a&gt; in &lt;a
href="https://redirect.github.com/erlef/setup-beam/pull/360"&gt;erlef/setup-beam#360&lt;/a&gt;&lt;/li&gt;
&lt;li&gt;Bump globals from 16.2.0 to 16.3.0 by &lt;a
href="https://github.com/dependabot"&gt;&lt;code&gt;@​dependabot&lt;/code&gt;&lt;/a&gt; in &lt;a
href="https://redirect.github.com/erlef/setup-beam/pull/361"&gt;erlef/setup-beam#361&lt;/a&gt;&lt;/li&gt;
&lt;/ul&gt;
&lt;p&gt;&lt;strong&gt;Full Changelog&lt;/strong&gt;: &lt;a
href="https://github.com/erlef/setup-beam/compare/v1.20.3...v1.20.4"&gt;https://github.com/erlef/setup-beam/compare/v1.20.3...v1.20.4&lt;/a&gt;&lt;/p&gt;
&lt;h2&gt;v1.20.3&lt;/h2&gt;
&lt;h2&gt;What's Changed&lt;/h2&gt;
&lt;ul&gt;
&lt;li&gt;Handle &lt;code&gt;.tool-versions&lt;/code&gt;' line break on Windows by &lt;a
href="https://github.com/paulo-ferraz-oliveira"&gt;&lt;code&gt;@​paulo-ferraz-oliveira&lt;/code&gt;&lt;/a&gt;
in &lt;a
href="https://redirect.github.com/erlef/setup-beam/pull/357"&gt;erlef/setup-beam#357&lt;/a&gt;&lt;/li&gt;
&lt;/ul&gt;
&lt;p&gt;&lt;strong&gt;Full Changelog&lt;/strong&gt;: &lt;a
href="https://github.com/erlef/setup-beam/compare/v1.20...v1.20.3"&gt;https://github.com/erlef/setup-beam/compare/v1.20...v1.20.3&lt;/a&gt;&lt;/p&gt;
&lt;h2&gt;v1.20.2&lt;/h2&gt;
&lt;h2&gt;What's Changed&lt;/h2&gt;
&lt;ul&gt;
&lt;li&gt;Test for updated doc. on &lt;code&gt;latest&lt;/code&gt; / ranges /
&lt;code&gt;-rc&lt;/code&gt; by &lt;a
href="https://github.com/paulo-ferraz-oliveira"&gt;&lt;code&gt;@​paulo-ferraz-oliveira&lt;/code&gt;&lt;/a&gt;
in &lt;a
href="https://redirect.github.com/erlef/setup-beam/pull/349"&gt;erlef/setup-beam#349&lt;/a&gt;&lt;/li&gt;
&lt;li&gt;Bump eslint from 9.29.0 to 9.30.0 by &lt;a
href="https://github.com/dependabot"&gt;&lt;code&gt;@​dependabot&lt;/code&gt;&lt;/a&gt; in &lt;a
href="https://redirect.github.com/erlef/setup-beam/pull/354"&gt;erlef/setup-beam#354&lt;/a&gt;&lt;/li&gt;
&lt;li&gt;Bump prettier from 3.6.0 to 3.6.2 by &lt;a
href="https://github.com/dependabot"&gt;&lt;code&gt;@​dependabot&lt;/code&gt;&lt;/a&gt; in &lt;a
href="https://redirect.github.com/erlef/setup-beam/pull/353"&gt;erlef/setup-beam#353&lt;/a&gt;&lt;/li&gt;
&lt;li&gt;Bump &lt;code&gt;@​eslint/js&lt;/code&gt; from 9.29.0 to 9.30.0 by &lt;a
href="https://github.com/dependabot"&gt;&lt;code&gt;@​dependabot&lt;/code&gt;&lt;/a&gt; in &lt;a
href="https://redirect.github.com/erlef/setup-beam/pull/352"&gt;erlef/setup-beam#352&lt;/a&gt;&lt;/li&gt;
&lt;li&gt;Fix calculating &lt;code&gt;-otp-&lt;/code&gt; major for Elixir by &lt;a
href="https://github.com/paulo-ferraz-oliveira"&gt;&lt;code&gt;@​paulo-ferraz-oliveira&lt;/code&gt;&lt;/a&gt;
in &lt;a
href="https://redirect.github.com/erlef/setup-beam/pull/351"&gt;erlef/setup-beam#351&lt;/a&gt;&lt;/li&gt;
&lt;/ul&gt;
&lt;p&gt;&lt;strong&gt;Full Changelog&lt;/strong&gt;: &lt;a
href="https://github.com/erlef/setup-beam/compare/v1.20...v1.20.2"&gt;https://github.com/erlef/setup-beam/compare/v1.20...v1.20.2&lt;/a&gt;&lt;/p&gt;
&lt;h2&gt;v1.20.1&lt;/h2&gt;
&lt;h2&gt;What's Changed&lt;/h2&gt;
&lt;ul&gt;
&lt;li&gt;Add back deprecated runners with warning by &lt;a
href="https://github.com/paulo-ferraz-oliveira"&gt;&lt;code&gt;@​paulo-ferraz-oliveira&lt;/code&gt;&lt;/a&gt;
in &lt;a
href="https://redirect.github.com/erlef/setup-beam/pull/348"&gt;erlef/setup-beam#348&lt;/a&gt;&lt;/li&gt;
&lt;/ul&gt;
&lt;p&gt;&lt;strong&gt;Full Changelog&lt;/strong&gt;: &lt;a
href="https://github.com/erlef/setup-beam/compare/v1...v1.20.1"&gt;https://github.com/erlef/setup-beam/compare/v1...v1.20.1&lt;/a&gt;&lt;/p&gt;
&lt;h2&gt;v1.20.0&lt;/h2&gt;
&lt;h2&gt;What's Changed&lt;/h2&gt;
&lt;ul&gt;
&lt;li&gt;Fix broken link in &lt;code&gt;CODE_OF_CONDUCT.md&lt;/code&gt; by &lt;a
href="https://github.com/vkatsuba"&gt;&lt;code&gt;@​vkatsuba&lt;/code&gt;&lt;/a&gt; in &lt;a
href="https://redirect.github.com/erlef/setup-beam/pull/335"&gt;erlef/setup-beam#335&lt;/a&gt;&lt;/li&gt;
&lt;li&gt;Improve output when failing to get a version from &amp;quot;a
place&amp;quot; by &lt;a
href="https://github.com/paulo-ferraz-oliveira"&gt;&lt;code&gt;@​paulo-ferraz-oliveira&lt;/code&gt;&lt;/a&gt;
in &lt;a
href="https://redirect.github.com/erlef/setup-beam/pull/334"&gt;erlef/setup-beam#334&lt;/a&gt;&lt;/li&gt;
&lt;li&gt;Support macOS via &lt;a
href="https://github.com/erlef/otp_builds"&gt;https://github.com/erlef/otp_builds&lt;/a&gt;
by &lt;a
href="https://github.com/paulo-ferraz-oliveira"&gt;&lt;code&gt;@​paulo-ferraz-oliveira&lt;/code&gt;&lt;/a&gt;
in &lt;a
href="https://redirect.github.com/erlef/setup-beam/pull/332"&gt;erlef/setup-beam#332&lt;/a&gt;&lt;/li&gt;
&lt;li&gt;Minor maintenance updates by &lt;a
href="https://github.com/paulo-ferraz-oliveira"&gt;&lt;code&gt;@​paulo-ferraz-oliveira&lt;/code&gt;&lt;/a&gt;
in &lt;a
href="https://redirect.github.com/erlef/setup-beam/pull/336"&gt;erlef/setup-beam#336&lt;/a&gt;&lt;/li&gt;
&lt;li&gt;Update 3rd party licenses (automation) by &lt;a
href="https://github.com/github-actions"&gt;&lt;code&gt;@​github-actions&lt;/code&gt;&lt;/a&gt;
in &lt;a
href="https://redirect.github.com/erlef/setup-beam/pull/337"&gt;erlef/setup-beam#337&lt;/a&gt;&lt;/li&gt;
&lt;li&gt;Act on CodeQL's suggestions for tightening security / improving
performance by &lt;a
href="https://github.com/paulo-ferraz-oliveira"&gt;&lt;code&gt;@​paulo-ferraz-oliveira&lt;/code&gt;&lt;/a&gt;
in &lt;a
href="https://redirect.github.com/erlef/setup-beam/pull/338"&gt;erlef/setup-beam#338&lt;/a&gt;&lt;/li&gt;
&lt;li&gt;Dependabot version updates by &lt;a
href="https://github.com/paulo-ferraz-oliveira"&gt;&lt;code&gt;@​paulo-ferraz-oliveira&lt;/code&gt;&lt;/a&gt;
in &lt;a
href="https://redirect.github.com/erlef/setup-beam/pull/340"&gt;erlef/setup-beam#340&lt;/a&gt;&lt;/li&gt;
&lt;li&gt;Match only on what we know should match (versions start with
numbers, after OTP-) by &lt;a
href="https://github.com/paulo-ferraz-oliveira"&gt;&lt;code&gt;@​paulo-ferraz-oliveira&lt;/code&gt;&lt;/a&gt;
in &lt;a
href="https://redirect.github.com/erlef/setup-beam/pull/341"&gt;erlef/setup-beam#341&lt;/a&gt;&lt;/li&gt;
&lt;/ul&gt;
&lt;h3&gt;&lt;a
href="https://github.com/dependabot"&gt;&lt;code&gt;@​dependabot&lt;/code&gt;&lt;/a&gt;&lt;/h3&gt;
&lt;ul&gt;
&lt;li&gt;Bump eslint from 9.27.0 to 9.28.0 in &lt;a
href="https://redirect.github.com/erlef/setup-beam/pull/343"&gt;erlef/setup-beam#343&lt;/a&gt;&lt;/li&gt;
&lt;li&gt;Bump &lt;code&gt;@​eslint/js&lt;/code&gt; from 9.27.0 to 9.28.0 in &lt;a
href="https://redirect.github.com/erlef/setup-beam/pull/342"&gt;erlef/setup-beam#342&lt;/a&gt;&lt;/li&gt;
&lt;/ul&gt;
&lt;!-- raw HTML omitted --&gt;
&lt;/blockquote&gt;
&lt;p&gt;... (truncated)&lt;/p&gt;
&lt;/details&gt;
&lt;details&gt;
&lt;summary&gt;Commits&lt;/summary&gt;
&lt;ul&gt;
&lt;li&gt;&lt;a
href="https://github.com/erlef/setup-beam/commit/e6d7c94229049569db56a7ad5a540c051a010af9"&gt;&lt;code&gt;e6d7c94&lt;/code&gt;&lt;/a&gt;
Automation: update setup-beam version output to fceaea9&lt;/li&gt;
&lt;li&gt;&lt;a
href="https://github.com/erlef/setup-beam/commit/fceaea9f54d3e1728dcde37c9a0915bb4cfffeae"&gt;&lt;code&gt;fceaea9&lt;/code&gt;&lt;/a&gt;
Fix: more versioning around &lt;code&gt;nightly&lt;/code&gt; and
&lt;code&gt;maint&lt;/code&gt;/&lt;code&gt;main&lt;/code&gt; (&lt;a
href="https://redirect.github.com/erlef/setup-beam/issues/359"&gt;#359&lt;/a&gt;)&lt;/li&gt;
&lt;li&gt;&lt;a
href="https://github.com/erlef/setup-beam/commit/2bb5b653d0dc50a139d649c97f117eb9afe7a2be"&gt;&lt;code&gt;2bb5b65&lt;/code&gt;&lt;/a&gt;
Automation: update setup-beam version output to 1d4efdd&lt;/li&gt;
&lt;li&gt;&lt;a
href="https://github.com/erlef/setup-beam/commit/1d4efdd2e925d87a724996fcb24daf76e8a6e79f"&gt;&lt;code&gt;1d4efdd&lt;/code&gt;&lt;/a&gt;
Bump globals from 16.2.0 to 16.3.0 (&lt;a
href="https://redirect.github.com/erlef/setup-beam/issues/361"&gt;#361&lt;/a&gt;)&lt;/li&gt;
&lt;li&gt;&lt;a
href="https://github.com/erlef/setup-beam/commit/73f047e3287cd08b822367defd635d37a0da60d3"&gt;&lt;code&gt;73f047e&lt;/code&gt;&lt;/a&gt;
Automation: update setup-beam version output to 6dd8a1a&lt;/li&gt;
&lt;li&gt;&lt;a
href="https://github.com/erlef/setup-beam/commit/6dd8a1a852cab582718c385599c7cb9c22f5d5af"&gt;&lt;code&gt;6dd8a1a&lt;/code&gt;&lt;/a&gt;
Bump &lt;code&gt;@​eslint/js&lt;/code&gt; from 9.30.0 to 9.30.1 (&lt;a
href="https://redirect.github.com/erlef/setup-beam/issues/360"&gt;#360&lt;/a&gt;)&lt;/li&gt;
&lt;li&gt;&lt;a
href="https://github.com/erlef/setup-beam/commit/fd9a2e183fe60ca9731ee821a94a6a878cf63cb5"&gt;&lt;code&gt;fd9a2e1&lt;/code&gt;&lt;/a&gt;
Automation: update setup-beam version output to 65085e3&lt;/li&gt;
&lt;li&gt;&lt;a
href="https://github.com/erlef/setup-beam/commit/65085e37bcd79d7f8065964f111366eabf6f5be0"&gt;&lt;code&gt;65085e3&lt;/code&gt;&lt;/a&gt;
Bump eslint from 9.30.0 to 9.30.1 (&lt;a
href="https://redirect.github.com/erlef/setup-beam/issues/362"&gt;#362&lt;/a&gt;)&lt;/li&gt;
&lt;li&gt;&lt;a
href="https://github.com/erlef/setup-beam/commit/80c16595164d4aee66fe8c2a6beca905a73d0381"&gt;&lt;code&gt;80c1659&lt;/code&gt;&lt;/a&gt;
Automation: update setup-beam version output to 8e7fdef&lt;/li&gt;
&lt;li&gt;&lt;a
href="https://github.com/erlef/setup-beam/commit/8e7fdef09ffa3ea54328b5000c170a3b9b20ca96"&gt;&lt;code&gt;8e7fdef&lt;/code&gt;&lt;/a&gt;
Automation: update setup-beam version output to 1fe9179&lt;/li&gt;
&lt;li&gt;Additional commits viewable in &lt;a
href="https://github.com/erlef/setup-beam/compare/2f0cc07b4b9bea248ae098aba9e1a8a1de5ec24c...e6d7c94229049569db56a7ad5a540c051a010af9"&gt;compare
view&lt;/a&gt;&lt;/li&gt;
&lt;/ul&gt;
&lt;/details&gt;
&lt;br /&gt;

Updates `actions/github-script` from 7.0.1 to 8.0.0
&lt;details&gt;
&lt;summary&gt;Release notes&lt;/summary&gt;
&lt;p&gt;&lt;em&gt;Sourced from &lt;a
href="https://github.com/actions/github-script/releases"&gt;actions/github-script's
releases&lt;/a&gt;.&lt;/em&gt;&lt;/p&gt;
&lt;blockquote&gt;
&lt;h2&gt;v8.0.0&lt;/h2&gt;
&lt;h2&gt;What's Changed&lt;/h2&gt;
&lt;ul&gt;
&lt;li&gt;Update Node.js version support to 24.x by &lt;a
href="https://github.com/salmanmkc"&gt;&lt;code&gt;@​salmanmkc&lt;/code&gt;&lt;/a&gt; in &lt;a
href="https://redirect.github.com/actions/github-script/pull/637"&gt;actions/github-script#637&lt;/a&gt;&lt;/li&gt;
&lt;li&gt;README for updating actions/github-script from v7 to v8 by &lt;a
href="https://github.com/sneha-krip"&gt;&lt;code&gt;@​sneha-krip&lt;/code&gt;&lt;/a&gt; in &lt;a
href="https://redirect.github.com/actions/github-script/pull/653"&gt;actions/github-script#653&lt;/a&gt;&lt;/li&gt;
&lt;/ul&gt;
&lt;h2&gt;⚠️ Minimum Compatible Runner Version&lt;/h2&gt;
&lt;p&gt;&lt;strong&gt;v2.327.1&lt;/strong&gt;&lt;br /&gt;
&lt;a
href="https://github.com/actions/runner/releases/tag/v2.327.1"&gt;Release
Notes&lt;/a&gt;&lt;/p&gt;
&lt;p&gt;Make sure your runner is updated to this version or newer to use this
release.&lt;/p&gt;
&lt;h2&gt;New Contributors&lt;/h2&gt;
&lt;ul&gt;
&lt;li&gt;&lt;a href="https://github.com/salmanmkc"&gt;&lt;code&gt;@​salmanmkc&lt;/code&gt;&lt;/a&gt;
made their first contribution in &lt;a
href="https://redirect.github.com/actions/github-script/pull/637"&gt;actions/github-script#637&lt;/a&gt;&lt;/li&gt;
&lt;li&gt;&lt;a
href="https://github.com/sneha-krip"&gt;&lt;code&gt;@​sneha-krip&lt;/code&gt;&lt;/a&gt; made
their first contribution in &lt;a
href="https://redirect.github.com/actions/github-script/pull/653"&gt;actions/github-script#653&lt;/a&gt;&lt;/li&gt;
&lt;/ul&gt;
&lt;p&gt;&lt;strong&gt;Full Changelog&lt;/strong&gt;: &lt;a
href="https://github.com/actions/github-script/compare/v7.1.0...v8.0.0"&gt;https://github.com/actions/github-script/compare/v7.1.0...v8.0.0&lt;/a&gt;&lt;/p&gt;
&lt;h2&gt;v7.1.0&lt;/h2&gt;
&lt;h2&gt;What's Changed&lt;/h2&gt;
&lt;ul&gt;
&lt;li&gt;Upgrade husky to v9 by &lt;a
href="https://github.com/benelan"&gt;&lt;code&gt;@​benelan&lt;/code&gt;&lt;/a&gt; in &lt;a
href="https://redirect.github.com/actions/github-script/pull/482"&gt;actions/github-script#482&lt;/a&gt;&lt;/li&gt;
&lt;li&gt;Add workflow file for publishing releases to immutable action
package by &lt;a
href="https://github.com/Jcambass"&gt;&lt;code&gt;@​Jcambass&lt;/code&gt;&lt;/a&gt; in &lt;a
href="https://redirect.github.com/actions/github-script/pull/485"&gt;actions/github-script#485&lt;/a&gt;&lt;/li&gt;
&lt;li&gt;Upgrade IA Publish by &lt;a
href="https://github.com/Jcambass"&gt;&lt;code&gt;@​Jcambass&lt;/code&gt;&lt;/a&gt; in &lt;a
href="https://redirect.github.com/actions/github-script/pull/486"&gt;actions/github-script#486&lt;/a&gt;&lt;/li&gt;
&lt;li&gt;Fix workflow status badges by &lt;a
href="https://github.com/joshmgross"&gt;&lt;code&gt;@​joshmgross&lt;/code&gt;&lt;/a&gt; in &lt;a
href="https://redirect.github.com/actions/github-script/pull/497"&gt;actions/github-script#497&lt;/a&gt;&lt;/li&gt;
&lt;li&gt;Update usage of &lt;code&gt;actions/upload-artifact&lt;/code&gt; by &lt;a
href="https://github.com/joshmgross"&gt;&lt;code&gt;@​joshmgross&lt;/code&gt;&lt;/a&gt; in &lt;a
href="https://redirect.github.com/actions/github-script/pull/512"&gt;actions/github-script#512&lt;/a&gt;&lt;/li&gt;
&lt;li&gt;Clear up package name confusion by &lt;a
href="https://github.com/joshmgross"&gt;&lt;code&gt;@​joshmgross&lt;/code&gt;&lt;/a&gt; in &lt;a
href="https://redirect.github.com/actions/github-script/pull/514"&gt;actions/github-script#514&lt;/a&gt;&lt;/li&gt;
&lt;li&gt;Update dependencies with &lt;code&gt;npm audit fix&lt;/code&gt; by &lt;a
href="https://github.com/joshmgross"&gt;&lt;code&gt;@​joshmgross&lt;/code&gt;&lt;/a&gt; in &lt;a
href="https://redirect.github.com/actions/github-script/pull/515"&gt;actions/github-script#515&lt;/a&gt;&lt;/li&gt;
&lt;li&gt;Specify that the used script is JavaScript by &lt;a
href="https://github.com/timotk"&gt;&lt;code&gt;@​timotk&lt;/code&gt;&lt;/a&gt; in &lt;a
href="https://redirect.github.com/actions/github-script/pull/478"&gt;actions/github-script#478&lt;/a&gt;&lt;/li&gt;
&lt;li&gt;chore: Add Dependabot for NPM and Actions by &lt;a
href="https://github.com/nschonni"&gt;&lt;code&gt;@​nschonni&lt;/code&gt;&lt;/a&gt; in &lt;a
href="https://redirect.github.com/actions/github-script/pull/472"&gt;actions/github-script#472&lt;/a&gt;&lt;/li&gt;
&lt;li&gt;Define &lt;code&gt;permissions&lt;/code&gt; in workflows and update actions by
&lt;a href="https://github.com/joshmgross"&gt;&lt;code&gt;@​joshmgross&lt;/code&gt;&lt;/a&gt; in
&lt;a
href="https://redirect.github.com/actions/github-script/pull/531"&gt;actions/github-script#531&lt;/a&gt;&lt;/li&gt;
&lt;li&gt;chore: Add Dependabot for .github/actions/install-dependencies by &lt;a
href="https://github.com/nschonni"&gt;&lt;code&gt;@​nschonni&lt;/code&gt;&lt;/a&gt; in &lt;a
href="https://redirect.github.com/actions/github-script/pull/532"&gt;actions/github-script#532&lt;/a&gt;&lt;/li&gt;
&lt;li&gt;chore: Remove .vscode settings by &lt;a
href="https://github.com/nschonni"&gt;&lt;code&gt;@​nschonni&lt;/code&gt;&lt;/a&gt; in &lt;a
href="https://redirect.github.com/actions/github-script/pull/533"&gt;actions/github-script#533&lt;/a&gt;&lt;/li&gt;
&lt;li&gt;ci: Use github/setup-licensed by &lt;a
href="https://github.com/nschonni"&gt;&lt;code&gt;@​nschonni&lt;/code&gt;&lt;/a&gt; in &lt;a
href="https://redirect.github.com/actions/github-script/pull/473"&gt;actions/github-script#473&lt;/a&gt;&lt;/li&gt;
&lt;li&gt;make octokit instance available as octokit on top of github, to make
it easier to seamlessly copy examples from GitHub rest api or octokit
documentations by &lt;a
href="https://github.com/iamstarkov"&gt;&lt;code&gt;@​iamstarkov&lt;/code&gt;&lt;/a&gt; in &lt;a
href="https://redirect.github.com/actions/github-script/pull/508"&gt;actions/github-script#508&lt;/a&gt;&lt;/li&gt;
&lt;li&gt;Remove &lt;code&gt;octokit&lt;/code&gt; README updates for v7 by &lt;a
href="https://github.com/joshmgross"&gt;&lt;code&gt;@​joshmgross&lt;/code&gt;&lt;/a&gt; in &lt;a
href="https://redirect.github.com/actions/github-script/pull/557"&gt;actions/github-script#557&lt;/a&gt;&lt;/li&gt;
&lt;li&gt;docs: add &amp;quot;exec&amp;quot; usage examples by &lt;a
href="https://github.com/neilime"&gt;&lt;code&gt;@​neilime&lt;/code&gt;&lt;/a&gt; in &lt;a
href="https://redirect.github.com/actions/github-script/pull/546"&gt;actions/github-script#546&lt;/a&gt;&lt;/li&gt;
&lt;li&gt;Bump ruby/setup-ruby from 1.213.0 to 1.222.0 by &lt;a
href="https://github.com/dependabot"&gt;&lt;code&gt;@​dependabot&lt;/code&gt;&lt;/a&gt;[bot]
in &lt;a
href="https://redirect.github.com/actions/github-script/pull/563"&gt;actions/github-script#563&lt;/a&gt;&lt;/li&gt;
&lt;li&gt;Bump ruby/setup-ruby from 1.222.0 to 1.229.0 by &lt;a
href="https://github.com/dependabot"&gt;&lt;code&gt;@​dependabot&lt;/code&gt;&lt;/a&gt;[bot]
in &lt;a
href="https://redirect.github.com/actions/github-script/pull/575"&gt;actions/github-script#575&lt;/a&gt;&lt;/li&gt;
&lt;li&gt;Clearly document passing inputs to the &lt;code&gt;script&lt;/code&gt; by &lt;a
href="https://github.com/joshmgross"&gt;&lt;code&gt;@​joshmgross&lt;/code&gt;&lt;/a&gt; in &lt;a
href="https://redirect.github.com/actions/github-script/pull/603"&gt;actions/github-script#603&lt;/a&gt;&lt;/li&gt;
&lt;li&gt;Update README.md by &lt;a
href="https://github.com/nebuk89"&gt;&lt;code&gt;@​nebuk89&lt;/code&gt;&lt;/a&gt; in &lt;a
href="https://redirect.github.com/actions/github-script/pull/610"&gt;actions/github-script#610&lt;/a&gt;&lt;/li&gt;
&lt;/ul&gt;
&lt;h2&gt;New Contributors&lt;/h2&gt;
&lt;ul&gt;
&lt;li&gt;&lt;a href="https://github.com/benelan"&gt;&lt;code&gt;@​benelan&lt;/code&gt;&lt;/a&gt; made
their first contribution in &lt;a
href="https://redirect.github.com/actions/github-script/pull/482"&gt;actions/github-script#482&lt;/a&gt;&lt;/li&gt;
&lt;li&gt;&lt;a href="https://github.com/Jcambass"&gt;&lt;code&gt;@​Jcambass&lt;/code&gt;&lt;/a&gt;
made their first contribution in &lt;a
href="https://redirect.github.com/actions/github-script/pull/485"&gt;actions/github-script#485&lt;/a&gt;&lt;/li&gt;
&lt;li&gt;&lt;a href="https://github.com/timotk"&gt;&lt;code&gt;@​timotk&lt;/code&gt;&lt;/a&gt; made
their first contribution in &lt;a
href="https://redirect.github.com/actions/github-script/pull/478"&gt;actions/github-script#478&lt;/a&gt;&lt;/li&gt;
&lt;li&gt;&lt;a
href="https://github.com/iamstarkov"&gt;&lt;code&gt;@​iamstarkov&lt;/code&gt;&lt;/a&gt; made
their first contribution in &lt;a
href="https://redirect.github.com/actions/github-script/pull/508"&gt;actions/github-script#508&lt;/a&gt;&lt;/li&gt;
&lt;li&gt;&lt;a href="https://github.com/neilime"&gt;&lt;code&gt;@​neilime&lt;/code&gt;&lt;/a&gt; made
their first contribution in &lt;a
href="https://redirect.github.com/actions/github-script/pull/546"&gt;actions/github-script#546&lt;/a&gt;&lt;/li&gt;
&lt;li&gt;&lt;a href="https://github.com/nebuk89"&gt;&lt;code&gt;@​nebuk89&lt;/code&gt;&lt;/a&gt; made
their first contribution in &lt;a
href="https://redirect.github.com/actions/github-script/pull/610"&gt;actions/github-script#610&lt;/a&gt;&lt;/li&gt;
&lt;/ul&gt;
&lt;p&gt;&lt;strong&gt;Full Changelog&lt;/strong&gt;: &lt;a
href="https://github.com/actions/github-script/compare/v7...v7.1.0"&gt;https://github.com/actions/github-script/compare/v7...v7.1.0&lt;/a&gt;&lt;/p&gt;
&lt;/blockquote&gt;
&lt;/details&gt;
&lt;details&gt;
&lt;summary&gt;Commits&lt;/summary&gt;
&lt;ul&gt;
&lt;li&gt;&lt;a
href="https://github.com/actions/github-script/commit/ed597411d8f924073f98dfc5c65a23a2325f34cd"&gt;&lt;code&gt;ed59741&lt;/code&gt;&lt;/a&gt;
Merge pull request &lt;a
href="https://redirect.github.com/actions/github-script/issues/653"&gt;#653&lt;/a&gt;
from actions/sneha-krip/readme-for-v8&lt;/li&gt;
&lt;li&gt;&lt;a
href="https://github.com/actions/github-script/commit/2dc352e4baefd91bec0d06f6ae2f1045d1687ca3"&gt;&lt;code&gt;2dc352e&lt;/code&gt;&lt;/a&gt;
Bold minimum Actions Runner version in README&lt;/li&gt;
&lt;li&gt;&lt;a
href="https://github.com/actions/github-script/commit/01e118c8d0d22115597e46514b5794e7bc3d56f1"&gt;&lt;code&gt;01e118c&lt;/code&gt;&lt;/a&gt;
Update README for Node 24 runtime requirements&lt;/li&gt;
&lt;li&gt;&lt;a
href="https://github.com/actions/github-script/commit/8b222ac82eda86dcad7795c9d49b839f7bf5b18b"&gt;&lt;code&gt;8b222ac&lt;/code&gt;&lt;/a&gt;
Apply suggestion from &lt;a
href="https://github.com/salmanmkc"&gt;&lt;code&gt;@​salmanmkc&lt;/code&gt;&lt;/a&gt;&lt;/li&gt;
&lt;li&gt;&lt;a
href="https://github.com/actions/github-script/commit/adc0eeac992408a7b276994ca87edde1c8ce4d25"&gt;&lt;code&gt;adc0eea&lt;/code&gt;&lt;/a&gt;
README for updating actions/github-script from v7 to v8&lt;/li&gt;
&lt;li&gt;&lt;a
href="https://github.com/actions/github-script/commit/20fe497b3fe0c7be8aae5c9df711ac716dc9c425"&gt;&lt;code&gt;20fe497&lt;/code&gt;&lt;/a&gt;
Merge pull request &lt;a
href="https://redirect.github.com/actions/github-script/issues/637"&gt;#637&lt;/a&gt;
from actions/node24&lt;/li&gt;
&lt;li&gt;&lt;a
href="https://github.com/actions/github-script/commit/e7b7f222b11a03e8b695c4c7afba89a02ea20164"&gt;&lt;code&gt;e7b7f22&lt;/code&gt;&lt;/a&gt;
update licenses&lt;/li&gt;
&lt;li&gt;&lt;a
href="https://github.com/actions/github-script/commit/2c81ba05f308415d095291e6eeffe983d822345b"&gt;&lt;code&gt;2c81ba0&lt;/code&gt;&lt;/a&gt;
Update Node.js version support to 24.x&lt;/li&gt;
&lt;li&gt;&lt;a
href="https://github.com/actions/github-script/commit/f28e40c7f34bde8b3046d885e986cb6290c5673b"&gt;&lt;code&gt;f28e40c&lt;/code&gt;&lt;/a&gt;
Merge pull request &lt;a
href="https://redirect.github.com/actions/github-script/issues/610"&gt;#610&lt;/a&gt;
from actions/nebuk89-patch-1&lt;/li&gt;
&lt;li&gt;&lt;a
href="https://github.com/actions/github-script/commit/1ae9958572fde544457e4d51aed5ea044e8936f3"&gt;&lt;code&gt;1ae9958&lt;/code&gt;&lt;/a&gt;
Update README.md&lt;/li&gt;
&lt;li&gt;Additional commits viewable in &lt;a
href="https://github.com/actions/github-script/compare/60a0d83039c74a4aee543508d2ffcb1c3799cdea...ed597411d8f924073f98dfc5c65a23a2325f34cd"&gt;compare
view&lt;/a&gt;&lt;/li&gt;
&lt;/ul&gt;
&lt;/details&gt;
&lt;br /&gt;

Updates `dtolnay/rust-toolchain` to
f7ccc83f9ed1e5b9c81d8a67d7ad1a747e22a561
&lt;details&gt;
&lt;summary&gt;Commits&lt;/summary&gt;
&lt;ul&gt;
&lt;li&gt;See full diff in &lt;a
href="https://github.com/dtolnay/rust-toolchain/commits/f7ccc83f9ed1e5b9c81d8a67d7ad1a747e22a561"&gt;compare
view&lt;/a&gt;&lt;/li&gt;
&lt;/ul&gt;
&lt;/details&gt;
&lt;br /&gt;

Updates `trufflesecurity/trufflehog` from 3.92.4 to 3.92.5
&lt;details&gt;
&lt;summary&gt;Release notes&lt;/summary&gt;
&lt;p&gt;&lt;em&gt;Sourced from &lt;a
href="https://github.com/trufflesecurity/trufflehog/releases"&gt;trufflesecurity/trufflehog's
releases&lt;/a&gt;.&lt;/em&gt;&lt;/p&gt;
&lt;blockquote&gt;
&lt;h2&gt;v3.92.5&lt;/h2&gt;
&lt;h2&gt;What's Changed&lt;/h2&gt;
&lt;ul&gt;
&lt;li&gt;[INS-206] Store Gitlab Project ID in secret location metadata by &lt;a
href="https://github.com/mustansir14"&gt;&lt;code&gt;@​mustansir14&lt;/code&gt;&lt;/a&gt; in
&lt;a
href="https://redirect.github.com/trufflesecurity/trufflehog/pull/4601"&gt;trufflesecurity/trufflehog#4601&lt;/a&gt;&lt;/li&gt;
&lt;li&gt;[INS-242] Add more validations to Custom Detector config by &lt;a
href="https://github.com/mustansir14"&gt;&lt;code&gt;@​mustansir14&lt;/code&gt;&lt;/a&gt; in
&lt;a
href="https://redirect.github.com/trufflesecurity/trufflehog/pull/4642"&gt;trufflesecurity/trufflehog#4642&lt;/a&gt;&lt;/li&gt;
&lt;li&gt;Fix syslog test failing due to hardcoded timestamp by &lt;a
href="https://github.com/MuneebUllahKhan222"&gt;&lt;code&gt;@​MuneebUllahKhan222&lt;/code&gt;&lt;/a&gt;
in &lt;a
href="https://redirect.github.com/trufflesecurity/trufflehog/pull/4646"&gt;trufflesecurity/trufflehog#4646&lt;/a&gt;&lt;/li&gt;
&lt;li&gt;[INS-120] Increase code coverage for Postman's source scanItem
function by &lt;a
href="https://github.com/MuneebUllahKhan222"&gt;&lt;code&gt;@​MuneebUllahKhan222&lt;/code&gt;&lt;/a&gt;
in &lt;a
href="https://redirect.github.com/trufflesecurity/trufflehog/pull/4648"&gt;trufflesecurity/trufflehog#4648&lt;/a&gt;&lt;/li&gt;
&lt;li&gt;[INS-232] Fix S3 Source &amp;quot;panic: runtime error: index out of
range&amp;quot; bug by &lt;a
href="https://github.com/mustansir14"&gt;&lt;code&gt;@​mustansir14&lt;/code&gt;&lt;/a&gt; in
&lt;a
href="https://redirect.github.com/trufflesecurity/trufflehog/pull/4610"&gt;trufflesecurity/trufflehog#4610&lt;/a&gt;&lt;/li&gt;
&lt;li&gt;[INS-170] Unify JDBC URL Parsing Across Detector and Analyzer
(Continued) by &lt;a
href="https://github.com/mustansir14"&gt;&lt;code&gt;@​mustansir14&lt;/code&gt;&lt;/a&gt; in
&lt;a
href="https://redirect.github.com/trufflesecurity/trufflehog/pull/4606"&gt;trufflesecurity/trufflehog#4606&lt;/a&gt;&lt;/li&gt;
&lt;li&gt;Add exponential backoff retry logic in Twilio detector by &lt;a
href="https://github.com/shahzadhaider1"&gt;&lt;code&gt;@​shahzadhaider1&lt;/code&gt;&lt;/a&gt;
in &lt;a
href="https://redirect.github.com/trufflesecurity/trufflehog/pull/4652"&gt;trufflesecurity/trufflehog#4652&lt;/a&gt;&lt;/li&gt;
&lt;li&gt;Fix typo in help description for Postman API metric by &lt;a
href="https://github.com/shahzadhaider1"&gt;&lt;code&gt;@​shahzadhaider1&lt;/code&gt;&lt;/a&gt;
in &lt;a
href="https://redirect.github.com/trufflesecurity/trufflehog/pull/4656"&gt;trufflesecurity/trufflehog#4656&lt;/a&gt;&lt;/li&gt;
&lt;li&gt;Rework JWT detector to better block local IPs by &lt;a
href="https://github.com/bradlarsen"&gt;&lt;code&gt;@​bradlarsen&lt;/code&gt;&lt;/a&gt; in &lt;a
href="https://redirect.github.com/trufflesecurity/trufflehog/pull/4607"&gt;trufflesecurity/trufflehog#4607&lt;/a&gt;&lt;/li&gt;
&lt;li&gt;Gitlab Source: Backoff from Scan2 which is experimental to legacy
pagination API call by &lt;a
href="https://github.com/kashifkhan0771"&gt;&lt;code&gt;@​kashifkhan0771&lt;/code&gt;&lt;/a&gt;
in &lt;a
href="https://redirect.github.com/trufflesecurity/trufflehog/pull/4608"&gt;trufflesecurity/trufflehog#4608&lt;/a&gt;&lt;/li&gt;
&lt;li&gt;fix: git commit date parsing for non-English locales by &lt;a
href="https://github.com/GLEF1X"&gt;&lt;code&gt;@​GLEF1X&lt;/code&gt;&lt;/a&gt; in &lt;a
href="https://redirect.github.com/trufflesecurity/trufflehog/pull/4653"&gt;trufflesecurity/trufflehog#4653&lt;/a&gt;&lt;/li&gt;
&lt;li&gt;fix: report accurate line numbers for chunked file scanning (&lt;a
href="https://redirect.github.com/trufflesecurity/trufflehog/issues/1876"&gt;#1876&lt;/a&gt;)
by &lt;a href="https://github.com/GLEF1X"&gt;&lt;code&gt;@​GLEF1X&lt;/code&gt;&lt;/a&gt; in &lt;a
href="https://redirect.github.com/trufflesecurity/trufflehog/pull/4615"&gt;trufflesecurity/trufflehog#4615&lt;/a&gt;&lt;/li&gt;
&lt;li&gt;Add Postman API monthly request limit metric by &lt;a
href="https://github.com/shahzadhaider1"&gt;&lt;code&gt;@​shahzadhaider1&lt;/code&gt;&lt;/a&gt;
in &lt;a
href="https://redirect.github.com/trufflesecurity/trufflehog/pull/4667"&gt;trufflesecurity/trufflehog#4667&lt;/a&gt;&lt;/li&gt;
&lt;li&gt;[INS-243] Fix jdbc detector detecting incomplete connection string
and fixed invalid… by &lt;a
href="https://github.com/MuneebUllahKhan222"&gt;&lt;code&gt;@​MuneebUllahKhan222&lt;/code&gt;&lt;/a&gt;
in &lt;a
href="https://redirect.github.com/trufflesecurity/trufflehog/pull/4636"&gt;trufflesecurity/trufflehog#4636&lt;/a&gt;&lt;/li&gt;
&lt;/ul&gt;
&lt;h2&gt;New Contributors&lt;/h2&gt;
&lt;ul&gt;
&lt;li&gt;&lt;a href="https://github.com/GLEF1X"&gt;&lt;code&gt;@​GLEF1X&lt;/code&gt;&lt;/a&gt; made
their first contribution in &lt;a
href="https://redirect.github.com/trufflesecurity/trufflehog/pull/4653"&gt;trufflesecurity/trufflehog#4653&lt;/a&gt;&lt;/li&gt;
&lt;/ul&gt;
&lt;p&gt;&lt;strong&gt;Full Changelog&lt;/strong&gt;: &lt;a
href="https://github.com/trufflesecurity/trufflehog/compare/v3.92.4...v3.92.5"&gt;https://github.com/trufflesecurity/trufflehog/compare/v3.92.4...v3.92.5&lt;/a&gt;&lt;/p&gt;
&lt;/blockquote&gt;
&lt;/details&gt;
&lt;details&gt;
&lt;summary&gt;Commits&lt;/summary&gt;
&lt;ul&gt;
&lt;li&gt;&lt;a
href="https://github.com/trufflesecurity/trufflehog/commit/116e7171542d2f1dad8810f00dcfacbe0b809183"&gt;&lt;code&gt;116e717&lt;/code&gt;&lt;/a&gt;
[INS-243] Fix jdbc detector detecting incomplete connection string and
fixed ...&lt;/li&gt;
&lt;li&gt;&lt;a
href="https://github.com/trufflesecurity/trufflehog/commit/b924c0bfbe821e54144a6172e4d4c0eb996c4cb5"&gt;&lt;code&gt;b924c0b&lt;/code&gt;&lt;/a&gt;
added monthly requests limit to postman api request metrics collection
(&lt;a
href="https://redirect.github.com/trufflesecurity/trufflehog/issues/4667"&gt;#4667&lt;/a&gt;)&lt;/li&gt;
&lt;li&gt;&lt;a
href="https://github.com/trufflesecurity/trufflehog/commit/f3eff52825b46da019dc3f68d7c3efb0d12fbd25"&gt;&lt;code&gt;f3eff52&lt;/code&gt;&lt;/a&gt;
fix: report accurate line numbers for chunked file scanning (&lt;a
href="https://redirect.github.com/trufflesecurity/trufflehog/issues/1876"&gt;#1876&lt;/a&gt;)
(&lt;a
href="https://redirect.github.com/trufflesecurity/trufflehog/issues/4615"&gt;#4615&lt;/a&gt;)&lt;/li&gt;
&lt;li&gt;&lt;a
href="https://github.com/trufflesecurity/trufflehog/commit/6a0bc788d2cadadc82df0a0d462c2c074f203790"&gt;&lt;code&gt;6a0bc78&lt;/code&gt;&lt;/a&gt;
fix(git): use &lt;code&gt;--iso-strict&lt;/code&gt; git arg to prevent locale issue
(&lt;a
href="https://redirect.github.com/trufflesecurity/trufflehog/issues/4653"&gt;#4653&lt;/a&gt;)&lt;/li&gt;
&lt;li&gt;&lt;a
href="https://github.com/trufflesecurity/trufflehog/commit/fc3f35cedd93016c9458ef836c1b31f13d494fd7"&gt;&lt;code&gt;fc3f35c&lt;/code&gt;&lt;/a&gt;
Gitlab Source: Backoff from Scan2 which is experimental to legacy
pagination ...&lt;/li&gt;
&lt;li&gt;&lt;a
href="https://github.com/trufflesecurity/trufflehog/commit/728d71fbb3a928e64f29ee19c823aa679b33b028"&gt;&lt;code&gt;728d71f&lt;/code&gt;&lt;/a&gt;
Rework JWT detector to better block local IPs; add HTTP instrumentation
(&lt;a
href="https://redirect.github.com/trufflesecurity/trufflehog/issues/4607"&gt;#4607&lt;/a&gt;)&lt;/li&gt;
&lt;li&gt;&lt;a
href="https://github.com/trufflesecurity/trufflehog/commit/89cc34b8c42a503813ec4c15042900cf1bee0f2d"&gt;&lt;code&gt;89cc34b&lt;/code&gt;&lt;/a&gt;
Fix typo in help description for Postman API metric (&lt;a
href="https://redirect.github.com/trufflesecurity/trufflehog/issues/4656"&gt;#4656&lt;/a&gt;)&lt;/li&gt;
&lt;li&gt;&lt;a
href="https://github.com/trufflesecurity/trufflehog/commit/69045956f12223eecaffbae2d9c59468893dad9c"&gt;&lt;code&gt;6904595&lt;/code&gt;&lt;/a&gt;
detectors/twilio: add exponential backoff retry logic (&lt;a
href="https://redirect.github.com/trufflesecurity/trufflehog/issues/4652"&gt;#4652&lt;/a&gt;)&lt;/li&gt;
&lt;li&gt;&lt;a
href="https://github.com/trufflesecurity/trufflehog/commit/4e02afb0159d0de9be6ceaa2064177f1b16f5033"&gt;&lt;code&gt;4e02afb&lt;/code&gt;&lt;/a&gt;
[INS-170] Unify JDBC URL Parsing Across Detector and Analyzer
(Continued) (&lt;a
href="https://redirect.github.com/trufflesecurity/trufflehog/issues/4"&gt;#4&lt;/a&gt;...&lt;/li&gt;
&lt;li&gt;&lt;a
href="https://github.com/trufflesecurity/trufflehog/commit/964eab023ff111a9e4278296a5c4dc2ff083d61e"&gt;&lt;code&gt;964eab0&lt;/code&gt;&lt;/a&gt;
[INS-232] Fix S3 Source &amp;quot;panic: runtime error: index out of
range&amp;quot; bug (&lt;a
href="https://redirect.github.com/trufflesecurity/trufflehog/issues/4610"&gt;#4610&lt;/a&gt;)&lt;/li&gt;
&lt;li&gt;Additional commits viewable in &lt;a
href="https://github.com/trufflesecurity/trufflehog/compare/ef6e76c3c4023279497fab4721ffa071a722fd05...116e7171542d2f1dad8810f00dcfacbe0b809183"&gt;compare
view&lt;/a&gt;&lt;/li&gt;
&lt;/ul&gt;
&lt;/details&gt;
&lt;br /&gt;

Updates `Swatinem/rust-cache` from 2.7.8 to 2.8.2
&lt;details&gt;
&lt;summary&gt;Release notes&lt;/summary&gt;
&lt;p&gt;&lt;em&gt;Sourced from &lt;a
href="https://github.com/swatinem/rust-cache/releases"&gt;Swatinem/rust-cache's
releases&lt;/a&gt;.&lt;/em&gt;&lt;/p&gt;
&lt;blockquote&gt;
&lt;h2&gt;v2.8.2&lt;/h2&gt;
&lt;h2&gt;What's Changed&lt;/h2&gt;
&lt;ul&gt;
&lt;li&gt;ci: address lint findings, add zizmor workflow by &lt;a
href="https://github.com/woodruffw"&gt;&lt;code&gt;@​woodruffw&lt;/code&gt;&lt;/a&gt; in &lt;a
href="https://redirect.github.com/Swatinem/rust-cache/pull/262"&gt;Swatinem/rust-cache#262&lt;/a&gt;&lt;/li&gt;
&lt;li&gt;feat: Implement ability to disable adding job ID + rust environment
hashes to cache names by &lt;a
href="https://github.com/Ryan-Brice"&gt;&lt;code&gt;@​Ryan-Brice&lt;/code&gt;&lt;/a&gt; in &lt;a
href="https://redirect.github.com/Swatinem/rust-cache/pull/279"&gt;Swatinem/rust-cache#279&lt;/a&gt;&lt;/li&gt;
&lt;li&gt;Don't overwrite env for cargo-metadata call by &lt;a
href="https://github.com/MaeIsBad"&gt;&lt;code&gt;@​MaeIsBad&lt;/code&gt;&lt;/a&gt; in &lt;a
href="https://redirect.github.com/Swatinem/rust-cache/pull/285"&gt;Swatinem/rust-cache#285&lt;/a&gt;&lt;/li&gt;
&lt;/ul&gt;
&lt;h2&gt;New Contributors&lt;/h2&gt;
&lt;ul&gt;
&lt;li&gt;&lt;a href="https://github.com/woodruffw"&gt;&lt;code&gt;@​woodruffw&lt;/code&gt;&lt;/a&gt;
made their first contribution in &lt;a
href="https://redirect.github.com/Swatinem/rust-cache/pull/262"&gt;Swatinem/rust-cache#262&lt;/a&gt;&lt;/li&gt;
&lt;li&gt;&lt;a
href="https://github.com/Ryan-Brice"&gt;&lt;code&gt;@​Ryan-Brice&lt;/code&gt;&lt;/a&gt; made
their first contribution in &lt;a
href="https://redirect.github.com/Swatinem/rust-cache/pull/279"&gt;Swatinem/rust-cache#279&lt;/a&gt;&lt;/li&gt;
&lt;li&gt;&lt;a href="https://github.com/MaeIsBad"&gt;&lt;code&gt;@​MaeIsBad&lt;/code&gt;&lt;/a&gt;
made their first contribution in &lt;a
href="https://redirect.github.com/Swatinem/rust-cache/pull/285"&gt;Swatinem/rust-cache#285&lt;/a&gt;&lt;/li&gt;
&lt;/ul&gt;
&lt;p&gt;&lt;strong&gt;Full Changelog&lt;/strong&gt;: &lt;a
href="https://github.com/Swatinem/rust-cache/compare/v2.8.1...v2.8.2"&gt;https://github.com/Swatinem/rust-cache/compare/v2.8.1...v2.8.2&lt;/a&gt;&lt;/p&gt;
&lt;h2&gt;v2.8.1&lt;/h2&gt;
&lt;h2&gt;What's Changed&lt;/h2&gt;
&lt;ul&gt;
&lt;li&gt;Set empty &lt;code&gt;CARGO_ENCODED_RUSTFLAGS&lt;/code&gt; in workspace metadata
retrieval by &lt;a href="https://github.com/ark0f"&gt;&lt;code&gt;@​ark0f&lt;/code&gt;&lt;/a&gt;
in &lt;a
href="https://redirect.github.com/Swatinem/rust-cache/pull/249"&gt;Swatinem/rust-cache#249&lt;/a&gt;&lt;/li&gt;
&lt;li&gt;chore(deps): update dependencies by &lt;a
href="https://github.com/reneleonhardt"&gt;&lt;code&gt;@​reneleonhardt&lt;/code&gt;&lt;/a&gt;
in &lt;a
href="https://redirect.github.com/Swatinem/rust-cache/pull/251"&gt;Swatinem/rust-cache#251&lt;/a&gt;&lt;/li&gt;
&lt;li&gt;chore: fix dependabot groups by &lt;a
href="https://github.com/reneleonhardt"&gt;&lt;code&gt;@​reneleonhardt&lt;/code&gt;&lt;/a&gt;
in &lt;a
href="https://redirect.github.com/Swatinem/rust-cache/pull/253"&gt;Swatinem/rust-cache#253&lt;/a&gt;&lt;/li&gt;
&lt;li&gt;Bump the prd-patch group with 2 updates by &lt;a
href="https://github.com/dependabot"&gt;&lt;code&gt;@​dependabot&lt;/code&gt;&lt;/a&gt;[bot]
in &lt;a
href="https://redirect.github.com/Swatinem/rust-cache/pull/254"&gt;Swatinem/rust-cache#254&lt;/a&gt;&lt;/li&gt;
&lt;li&gt;chore(dependabot): regenerate and commit dist/ by &lt;a
href="https://github.com/reneleonhardt"&gt;&lt;code&gt;@​reneleonhardt&lt;/code&gt;&lt;/a&gt;
in &lt;a
href="https://redirect.github.com/Swatinem/rust-cache/pull/257"&gt;Swatinem/rust-cache#257&lt;/a&gt;&lt;/li&gt;
&lt;li&gt;Bump &lt;code&gt;@​types/node&lt;/code&gt; from 22.16.3 to 24.2.1 in the
dev-major group by &lt;a
href="https://github.com/dependabot"&gt;&lt;code&gt;@​dependabot&lt;/code&gt;&lt;/a&gt;[bot]
in &lt;a
href="https://redirect.github.com/Swatinem/rust-cache/pull/255"&gt;Swatinem/rust-cache#255&lt;/a&gt;&lt;/li&gt;
&lt;li&gt;Bump typescript from 5.8.3 to 5.9.2 in the dev-minor group by &lt;a
href="https://github.com/dependabot"&gt;&lt;code&gt;@​dependabot&lt;/code&gt;&lt;/a&gt;[bot]
in &lt;a
href="https://redirect.github.com/Swatinem/rust-cache/pull/256"&gt;Swatinem/rust-cache#256&lt;/a&gt;&lt;/li&gt;
&lt;li&gt;Bump actions/setup-node from 4 to 5 in the actions group by &lt;a
href="https://github.com/dependabot"&gt;&lt;code&gt;@​dependabot&lt;/code&gt;&lt;/a&gt;[bot]
in &lt;a
href="https://redirect.github.com/Swatinem/rust-cache/pull/259"&gt;Swatinem/rust-cache#259&lt;/a&gt;&lt;/li&gt;
&lt;li&gt;Update README.md by &lt;a
href="https://github.com/Propfend"&gt;&lt;code&gt;@​Propfend&lt;/code&gt;&lt;/a&gt; in &lt;a
href="https://redirect.github.com/Swatinem/rust-cache/pull/234"&gt;Swatinem/rust-cache#234&lt;/a&gt;&lt;/li&gt;
&lt;li&gt;Bump &lt;code&gt;@​types/node&lt;/code&gt; from 24.2.1 to 24.3.0 in the
dev-minor group by &lt;a
href="https://github.com/dependabot"&gt;&lt;code&gt;@​dependabot&lt;/code&gt;&lt;/a&gt;[bot]
in &lt;a
href="https://redirect.github.com/Swatinem/rust-cache/pull/258"&gt;Swatinem/rust-cache#258&lt;/a&gt;&lt;/li&gt;
&lt;/ul&gt;
&lt;h2&gt;New Contributors&lt;/h2&gt;
&lt;ul&gt;
&lt;li&gt;&lt;a href="https://github.com/ark0f"&gt;&lt;code&gt;@​ark0f&lt;/code&gt;&lt;/a&gt; made
their first contribution in &lt;a
href="https://redirect.github.com/Swatinem/rust-cache/pull/249"&gt;Swatinem/rust-cache#249&lt;/a&gt;&lt;/li&gt;
&lt;li&gt;&lt;a
href="https://github.com/reneleonhardt"&gt;&lt;code&gt;@​reneleonhardt&lt;/code&gt;&lt;/a&gt;
made their first contribution in &lt;a
href="https://redirect.github.com/Swatinem/rust-cache/pull/251"&gt;Swatinem/rust-cache#251&lt;/a&gt;&lt;/li&gt;
&lt;li&gt;&lt;a
href="https://github.com/dependabot"&gt;&lt;code&gt;@​dependabot&lt;/code&gt;&lt;/a&gt;[bot]
made their first contribution in &lt;a
href="https://redirect.github.com/Swatinem/rust-cache/pull/254"&gt;Swatinem/rust-cache#254&lt;/a&gt;&lt;/li&gt;
&lt;li&gt;&lt;a href="https://github.com/Propfend"&gt;&lt;code&gt;@​Propfend&lt;/code&gt;&lt;/a&gt;
made their first contribution in &lt;a
href="https://redirect.github.com/Swatinem/rust-cache/pull/234"&gt;Swatinem/rust-cache#234&lt;/a&gt;&lt;/li&gt;
&lt;/ul&gt;
&lt;p&gt;&lt;strong&gt;Full Changelog&lt;/strong&gt;: &lt;a
href="https://github.com/Swatinem/rust-cache/compare/v2...v2.8.1"&gt;https://github.com/Swatinem/rust-cache/compare/v2...v2.8.1&lt;/a&gt;&lt;/p&gt;
&lt;h2&gt;v2.8.0&lt;/h2&gt;
&lt;h2&gt;What's Changed&lt;/h2&gt;
&lt;ul&gt;
&lt;li&gt;Add cache-workspace-crates feature by &lt;a
href="https://github.com/jbransen"&gt;&lt;code&gt;@​jbransen&lt;/code&gt;&lt;/a&gt; in &lt;a
href="https://redirect.github.com/Swatinem/rust-cache/pull/246"&gt;Swatinem/rust-cache#246&lt;/a&gt;&lt;/li&gt;
&lt;li&gt;Feat: support warpbuild cache provider by &lt;a
href="https://github.com/stegaBOB"&gt;&lt;code&gt;@​stegaBOB&lt;/code&gt;&lt;/a&gt; in &lt;a
href="https://redirect.github.com/Swatinem/rust-cache/pull/247"&gt;Swatinem/rust-cache#247&lt;/a&gt;&lt;/li&gt;
&lt;/ul&gt;
&lt;h2&gt;New Contributors&lt;/h2&gt;
&lt;ul&gt;
&lt;li&gt;&lt;a href="https://github.com/jbransen"&gt;&lt;code&gt;@​jbransen&lt;/code&gt;&lt;/a&gt;
made their first contribution in &lt;a
href="https://redirect.github.com/Swatinem/rust-cache/pull/246"&gt;Swatinem/rust-cache#246&lt;/a&gt;&lt;/li&gt;
&lt;li&gt;&lt;a href="https://github.com/stegaBOB"&gt;&lt;code&gt;@​stegaBOB&lt;/code&gt;&lt;/a&gt;
made their first contribution in &lt;a
href="https://redirect.github.com/Swatinem/rust-cache/pull/247"&gt;Swatinem/rust-cache#247&lt;/a&gt;&lt;/li&gt;
&lt;/ul&gt;
&lt;p&gt;&lt;strong&gt;Full Changelog&lt;/strong&gt;: &lt;a
href="https://github.com/Swatinem/rust-cache/compare/v2.7.8...v2.8.0"&gt;https://github.com/Swatinem/rust-cache/compare/v2.7.8...v2.8.0&lt;/a&gt;&lt;/p&gt;
&lt;/blockquote&gt;
&lt;/details&gt;
&lt;details&gt;
&lt;summary&gt;Changelog&lt;/summary&gt;
&lt;p&gt;&lt;em&gt;Sourced from &lt;a
href="https://github.com/Swatinem/rust-cache/blob/master/CHANGELOG.md"&gt;Swatinem/rust-cache's
changelog&lt;/a&gt;.&lt;/em&gt;&lt;/p&gt;
&lt;blockquote&gt;
&lt;h1&gt;Changelog&lt;/h1&gt;
&lt;h2&gt;2.8.2&lt;/h2&gt;
&lt;ul&gt;
&lt;li&gt;Don't overwrite env for cargo-metadata call&lt;/li&gt;
&lt;/ul&gt;
&lt;h2&gt;2.8.1&lt;/h2&gt;
&lt;ul&gt;
&lt;li&gt;Set empty &lt;code&gt;CARGO_ENCODED_RUSTFLAGS&lt;/code&gt; when retrieving
metadata&lt;/li&gt;
&lt;li&gt;Various dependency updates&lt;/li&gt;
&lt;/ul&gt;
&lt;h2&gt;2.8.0&lt;/h2&gt;
&lt;ul&gt;
&lt;li&gt;Add support for &lt;code&gt;warpbuild&lt;/code&gt; cache provider&lt;/li&gt;
&lt;li&gt;Add new &lt;code&gt;cache-workspace-crates&lt;/code&gt; feature&lt;/li&gt;
&lt;/ul&gt;
&lt;h2&gt;2.7.8&lt;/h2&gt;
&lt;ul&gt;
&lt;li&gt;Include CPU arch in the cache key&lt;/li&gt;
&lt;/ul&gt;
&lt;h2&gt;2.7.7&lt;/h2&gt;
&lt;ul&gt;
&lt;li&gt;Also cache &lt;code&gt;cargo install&lt;/code&gt; metadata&lt;/li&gt;
&lt;/ul&gt;
&lt;h2&gt;2.7.6&lt;/h2&gt;
&lt;ul&gt;
&lt;li&gt;Allow opting out of caching $CARGO_HOME/bin&lt;/li&gt;
&lt;li&gt;Add runner OS in cache key&lt;/li&gt;
&lt;li&gt;Adds an option to do lookup-only of the cache&lt;/li&gt;
&lt;/ul&gt;
&lt;h2&gt;2.7.5&lt;/h2&gt;
&lt;ul&gt;
&lt;li&gt;Support Cargo.lock format cargo-lock v4&lt;/li&gt;
&lt;li&gt;Only run macOsWorkaround() on macOS&lt;/li&gt;
&lt;/ul&gt;
&lt;h2&gt;2.7.3&lt;/h2&gt;
&lt;ul&gt;
&lt;li&gt;Work around upstream problem that causes cache saving to hang for
minutes.&lt;/li&gt;
&lt;/ul&gt;
&lt;h2&gt;2.7.2&lt;/h2&gt;
&lt;ul&gt;
&lt;li&gt;Only key by &lt;code&gt;Cargo.toml&lt;/code&gt; and &lt;code&gt;Cargo.lock&lt;/code&gt;
files of workspace members.&lt;/li&gt;
&lt;/ul&gt;
&lt;h2&gt;2.7.1&lt;/h2&gt;
&lt;ul&gt;
&lt;li&gt;Update toml parser to fix parsing errors.&lt;/li&gt;
&lt;/ul&gt;
&lt;h2&gt;2.7.0&lt;/h2&gt;
&lt;ul&gt;
&lt;li&gt;Properly cache &lt;code&gt;trybuild&lt;/code&gt; tests.&lt;/li&gt;
&lt;/ul&gt;
&lt;!-- raw HTML omitted --&gt;
&lt;/blockquote&gt;
&lt;p&gt;... (truncated)&lt;/p&gt;
&lt;/details&gt;
&lt;details&gt;
&lt;summary&gt;Commits&lt;/summary&gt;
&lt;ul&gt;
&lt;li&gt;&lt;a
href="https://github.com/Swatinem/rust-cache/commit/779680da715d629ac1d338a641029a2f4372abb5"&gt;&lt;code&gt;779680d&lt;/code&gt;&lt;/a&gt;
2.8.2&lt;/li&gt;
&lt;li&gt;&lt;a
href="https://github.com/Swatinem/rust-cache/commit/2ea64efb2551baf97fd9611d09c8af70b088ceae"&gt;&lt;code&gt;2ea64ef&lt;/code&gt;&lt;/a&gt;
Bump smol-toml from 1.4.2 to 1.5.2 in the prd-minor group (&lt;a
href="https://redirect.github.com/swatinem/rust-cache/issues/287"&gt;#287&lt;/a&gt;)&lt;/li&gt;
&lt;li&gt;&lt;a
href="https://github.com/Swatinem/rust-cache/commit/8930d9c33e314043c13794316986491e42a060d9"&gt;&lt;code&gt;8930d9c&lt;/code&gt;&lt;/a&gt;
Bump the actions group with 3 updates (&lt;a
href="https://redirect.github.com/swatinem/rust-cache/issues/288"&gt;#288&lt;/a&gt;)&lt;/li&gt;
&lt;li&gt;&lt;a
href="https://github.com/Swatinem/rust-cache/commit/c071727fc96109277f0135b3f13503db23b6cc1b"&gt;&lt;code&gt;c071727&lt;/code&gt;&lt;/a&gt;
Bump &lt;code&gt;@​actions/io&lt;/code&gt; from 1.1.3 to 2.0.0 in the prd-major
group (&lt;a
href="https://redirect.github.com/swatinem/rust-cache/issues/281"&gt;#281&lt;/a&gt;)&lt;/li&gt;
&lt;li&gt;&lt;a
href="https://github.com/Swatinem/rust-cache/commit/f2a41b7c112cd43711cfd57f0a59eca88ec14a64"&gt;&lt;code&gt;f2a41b7&lt;/code&gt;&lt;/a&gt;
Bump &lt;code&gt;@​types/node&lt;/code&gt; from 24.9.0 to 24.10.0 in the dev-minor
group (&lt;a
href="https://redirect.github.com/swatinem/rust-cache/issues/282"&gt;#282&lt;/a&gt;)&lt;/li&gt;
&lt;li&gt;&lt;a
href="https://github.com/Swatinem/rust-cache/commit/e306f83d219f81032ad45ba2a7b1af20cc228e62"&gt;&lt;code&gt;e306f83&lt;/code&gt;&lt;/a&gt;
Don't overwrite env for cargo-metadata call (&lt;a
href="https://redirect.github.com/swatinem/rust-cache/issues/285"&gt;#285&lt;/a&gt;)&lt;/li&gt;
&lt;li&gt;&lt;a
href="https://github.com/Swatinem/rust-cache/commit/c9119007a19252f0981aef1785db9b0dd6f373c0"&gt;&lt;code&gt;c911900&lt;/code&gt;&lt;/a&gt;
Merge pull request &lt;a
href="https://redirect.github.com/swatinem/rust-cache/issues/284"&gt;#284&lt;/a&gt;
from Swatinem/dependabot/github_actions/actions-baeb0...&lt;/li&gt;
&lt;li&gt;&lt;a
href="https://github.com/Swatinem/rust-cache/commit/3aaed5547eb4ccbf48b9a4d7dd62a50e04f7019d"&gt;&lt;code&gt;3aaed55&lt;/code&gt;&lt;/a&gt;
Bump the actions group with 2 updates&lt;/li&gt;
&lt;li&gt;&lt;a
href="https://github.com/Swatinem/rust-cache/commit/972b315a8225e8594dddc2b92e6333d1d1d3059c"&gt;&lt;code&gt;972b315&lt;/code&gt;&lt;/a&gt;
Merge pull request &lt;a
href="https://redirect.github.com/swatinem/rust-cache/issues/283"&gt;#283&lt;/a&gt;
from Swatinem/dependabot/github_actions/actions-b360d...&lt;/li&gt;
&lt;li&gt;&lt;a
href="https://github.com/Swatinem/rust-cache/commit/07caf06f7a4b787ad36bd267269f3c0dfa29744b"&gt;&lt;code&gt;07caf06&lt;/code&gt;&lt;/a&gt;
Bump taiki-e/install-action from 2.62.45 to 2.62.49 in the actions
group&lt;/li&gt;
&lt;li&gt;Additional commits viewable in &lt;a
href="https://github.com/swatinem/rust-cache/compare/9d47c6ad4b02e050fd481d890b2ea34778fd09d6...779680da715d629ac1d338a641029a2f4372abb5"&gt;compare
view&lt;/a&gt;&lt;/li&gt;
&lt;/ul&gt;
&lt;/details&gt;
&lt;br /&gt;

Updates `codecov/codecov-action` from 5.4.2 to 5.5.2
&lt;details&gt;
&lt;summary&gt;Release notes&lt;/summary&gt;
&lt;p&gt;&lt;em&gt;Sourced from &lt;a
href="https://github.com/codecov/codecov-action/releases"&gt;codecov/codecov-action's
releases&lt;/a&gt;.&lt;/em&gt;&lt;/p&gt;
&lt;blockquote&gt;
&lt;h2&gt;v5.5.2&lt;/h2&gt;
&lt;h2&gt;What's Changed&lt;/h2&gt;
&lt;ul&gt;
&lt;li&gt;check gpg only when skip-validation = false by &lt;a
href="https://github.com/maxweng-sentry"&gt;&lt;code&gt;@​maxweng-sentry&lt;/code&gt;&lt;/a&gt;
in &lt;a
href="https://redirect.github.com/codecov/codecov-action/pull/1894"&gt;codecov/codecov-action#1894&lt;/a&gt;&lt;/li&gt;
&lt;li&gt;chore: &lt;code&gt;disable_search&lt;/code&gt; alignment by &lt;a
href="https://github.com/freemanzMrojo"&gt;&lt;code&gt;@​freemanzMrojo&lt;/code&gt;&lt;/a&gt;
in &lt;a
href="https://redirect.github.com/codecov/codecov-action/pull/1881"&gt;codecov/codecov-action#1881&lt;/a&gt;&lt;/li&gt;
&lt;li&gt;chore(release): 5.5.2 by &lt;a
href="https://github.com/thomasrockhu-codecov"&gt;&lt;code&gt;@​thomasrockhu-codecov&lt;/code&gt;&lt;/a&gt;
in &lt;a
href="https://redirect.github.com/codecov/codecov-action/pull/1902"&gt;codecov/codecov-action#1902&lt;/a&gt;&lt;/li&gt;
&lt;/ul&gt;
&lt;h2&gt;New Contributors&lt;/h2&gt;
&lt;ul&gt;
&lt;li&gt;&lt;a
href="https://github.com/maxweng-sentry"&gt;&lt;code&gt;@​maxweng-sentry&lt;/code&gt;&lt;/a&gt;
made their first contribution in &lt;a
href="https://redirect.github.com/codecov/codecov-action/pull/1894"&gt;codecov/codecov-action#1894&lt;/a&gt;&lt;/li&gt;
&lt;li&gt;&lt;a
href="https://github.com/freemanzMrojo"&gt;&lt;code&gt;@​freemanzMrojo&lt;/code&gt;&lt;/a&gt;
made their first contribution in &lt;a
href="https://redirect.github.com/codecov/codecov-action/pull/1881"&gt;codecov/codecov-action#1881&lt;/a&gt;&lt;/li&gt;
&lt;/ul&gt;
&lt;p&gt;&lt;strong&gt;Full Changelog&lt;/strong&gt;: &lt;a
href="https://github.com/codecov/codecov-action/compare/v5.5.1...v5.5.2"&gt;https://github.com/codecov/codecov-action/compare/v5.5.1...v5.5.2&lt;/a&gt;&lt;/p&gt;
&lt;h2&gt;v5.5.1&lt;/h2&gt;
&lt;h2&gt;What's Changed&lt;/h2&gt;
&lt;ul&gt;
&lt;li&gt;build(deps): bump ossf/scorecard-action from 2.4.1 to 2.4.2 by &lt;a
href="https://github.com/dependabot"&gt;&lt;code&gt;@​dependabot&lt;/code&gt;&lt;/a&gt;[bot]
in &lt;a
href="https://redirect.github.com/codecov/codecov-action/pull/1833"&gt;codecov/codecov-action#1833&lt;/a&gt;&lt;/li&gt;
&lt;li&gt;build(deps): bump github/codeql-action from 3.28.18 to 3.29.9 by &lt;a
href="https://github.com/dependabot"&gt;&lt;code&gt;@​dependabot&lt;/code&gt;&lt;/a&gt;[bot]
in &lt;a
href="https://redirect.github.com/codecov/codecov-action/pull/1861"&gt;codecov/codecov-action#1861&lt;/a&gt;&lt;/li&gt;
&lt;li&gt;Document a &lt;code&gt;codecov-cli&lt;/code&gt; version reference example by &lt;a
href="https://github.com/webknjaz"&gt;&lt;code&gt;@​webknjaz&lt;/code&gt;&lt;/a&gt; in &lt;a
href="https://redirect.github.com/codecov/codecov-action/pull/1774"&gt;codecov/codecov-action#1774&lt;/a&gt;&lt;/li&gt;
&lt;li&gt;docs: fix typo in README by &lt;a
href="https://github.com/datalater"&gt;&lt;code&gt;@​datalater&lt;/code&gt;&lt;/a&gt; in &lt;a
href="https://redirect.github.com/codecov/codecov-action/pull/1866"&gt;codecov/codecov-action#1866&lt;/a&gt;&lt;/li&gt;
&lt;li&gt;fix: update to use local app/ dir by &lt;a
href="https://github.com/thomasrockhu-codecov"&gt;&lt;code&gt;@​thomasrockhu-codecov&lt;/code&gt;&lt;/a&gt;
in &lt;a
href="https://redirect.github.com/codecov/codecov-action/pull/1872"&gt;codecov/codecov-action#1872&lt;/a&gt;&lt;/li&gt;
&lt;li&gt;build(deps): bump github/codeql-action from 3.29.9 to 3.29.11 by &lt;a
href="https://github.com/dependabot"&gt;&lt;code&gt;@​dependabot&lt;/code&gt;&lt;/a&gt;[bot]
in &lt;a
href="https://redirect.github.com/codecov/codecov-action/pull/1867"&gt;codecov/codecov-action#1867&lt;/a&gt;&lt;/li&gt;
&lt;li&gt;build(deps): bump actions/checkout from 4.2.2 to 5.0.0 by &lt;a
href="https://github.com/dependabot"&gt;&lt;code&gt;@​dependabot&lt;/code&gt;&lt;/a&gt;[bot]
in &lt;a
href="https://redirect.github.com/codecov/codecov-action/pull/1868"&gt;codecov/codecov-action#1868&lt;/a&gt;&lt;/li&gt;
&lt;li&gt;fix: overwrite pr number on fork by &lt;a
href="https://github.com/thomasrockhu-codecov"&gt;&lt;code&gt;@​thomasrockhu-codecov&lt;/code&gt;&lt;/a&gt;
in &lt;a
href="https://redirect.github.com/codecov/codecov-action/pull/1871"&gt;codecov/codecov-action#1871&lt;/a&gt;&lt;/li&gt;
&lt;li&gt;chore(release): 5.5.1 by &lt;a
href="https://github.com/thomasrockhu-codecov"&gt;&lt;code&gt;@​thomasrockhu-codecov&lt;/code&gt;&lt;/a&gt;
in &lt;a
href="https://redirect.github.com/codecov/codecov-action/pull/1873"&gt;codecov/codecov-action#1873&lt;/a&gt;&lt;/li&gt;
&lt;/ul&gt;
&lt;h2&gt;New Contributors&lt;/h2&gt;
&lt;ul&gt;
&lt;li&gt;&lt;a href="https://github.com/datalater"&gt;&lt;code&gt;@​datalater&lt;/code&gt;&lt;/a&gt;
made their first contribution in &lt;a
href="https://redirect.github.com/codecov/codecov-action/pull/1866"&gt;codecov/codecov-action#1866&lt;/a&gt;&lt;/li&gt;
&lt;/ul&gt;
&lt;p&gt;&lt;strong&gt;Full Changelog&lt;/strong&gt;: &lt;a
href="https://github.com/codecov/codecov-action/compare/v5.5.0...v5.5.1"&gt;https://github.com/codecov/codecov-action/compare/v5.5.0...v5.5.1&lt;/a&gt;&lt;/p&gt;
&lt;h2&gt;v5.5.0&lt;/h2&gt;
&lt;h2&gt;What's Changed&lt;/h2&gt;
&lt;ul&gt;
&lt;li&gt;build(deps): bump github/codeql-action from 3.28.17 to 3.28.18 by &lt;a
href="https://github.com/dependabot"&gt;&lt;code&gt;@​dependabot&lt;/code&gt;&lt;/a&gt;[bot]
in &lt;a
href="https://redirect.github.com/codecov/codecov-action/pull/1829"&gt;codecov/codecov-action#1829&lt;/a&gt;&lt;/li&gt;
&lt;li&gt;docs: Refine OIDC docs by &lt;a
href="https://github.com/spalmurray"&gt;&lt;code&gt;@​spalmurray&lt;/code&gt;&lt;/a&gt; in &lt;a
href="https://redirect.github.com/codecov/codecov-action/pull/1837"&gt;codecov/codecov-action#1837&lt;/a&gt;&lt;/li&gt;
&lt;li&gt;fix: Typo in README by &lt;a
href="https://github.com/spalmurray"&gt;&lt;code&gt;@​spalmurray&lt;/code&gt;&lt;/a&gt; in &lt;a
href="https://redirect.github.com/codecov/codecov-action/pull/1838"&gt;codecov/codecov-action#1838&lt;/a&gt;&lt;/li&gt;
&lt;li&gt;fix: check reqs exist by &lt;a
href="https://github.com/joseph-sentry"&gt;&lt;code&gt;@​joseph-sentry&lt;/code&gt;&lt;/a&gt;
in &lt;a
href="https://redirect.github.com/codecov/codecov-action/pull/1835"&gt;codecov/codecov-action#1835&lt;/a&gt;&lt;/li&gt;
&lt;li&gt;Pin actions/github-script by Git SHA by &lt;a
href="https://github.com/martincostello"&gt;&lt;code&gt;@​martincostello&lt;/code&gt;&lt;/a&gt;
in &lt;a
href="https://redirect.github.com/codecov/codecov-action/pull/1859"&gt;codecov/codecov-action#1859&lt;/a&gt;&lt;/li&gt;
&lt;li&gt;feat: upgrade wrapper to 0.2.4 by &lt;a
href="https://github.com/jviall"&gt;&lt;code&gt;@​jviall&lt;/code&gt;&lt;/a&gt; in &lt;a
href="https://redirect.github.com/codecov/codecov-action/pull/1864"&gt;codecov/codecov-action#1864&lt;/a&gt;&lt;/li&gt;
&lt;li&gt;chore(release): 5.5.0 by &lt;a
href="https://github.com/thomasrockhu-codecov"&gt;&lt;code&gt;@​thomasrockhu-codecov&lt;/code&gt;&lt;/a&gt;
in &lt;a
href="https://redirect.github.com/codecov/codecov-action/pull/1865"&gt;codecov/codecov-action#1865&lt;/a&gt;&lt;/li&gt;
&lt;/ul&gt;
&lt;h2&gt;New Contributors&lt;/h2&gt;
&lt;ul&gt;
&lt;li&gt;&lt;a
href="https://github.com/spalmurray"&gt;&lt;code&gt;@​spalmurray&lt;/code&gt;&lt;/a&gt; made
their first contribution in &lt;a
href="https://redirect.github.com/codecov/codecov-action/pull/1837"&gt;codecov/codecov-action#1837&lt;/a&gt;&lt;/li&gt;
&lt;li&gt;&lt;a
href="https://github.com/martincostello"&gt;&lt;code&gt;@​martincostello&lt;/code&gt;&lt;/a&gt;
made their first contribution in &lt;a
href="https://redirect.github.com/codecov/codecov-action/pull/1859"&gt;codecov/codecov-action#1859&lt;/a&gt;&lt;/li&gt;
&lt;li&gt;&lt;a href="https://github.com/jviall"&gt;&lt;code&gt;@​jviall&lt;/code&gt;&lt;/a&gt; made
their first contribution in &lt;a
href="https://redirect.github.com/codecov/codecov-action/pull/1864"&gt;codecov/codecov-action#1864&lt;/a&gt;&lt;/li&gt;
&lt;/ul&gt;
&lt;p&gt;&lt;strong&gt;Full Changelog&lt;/strong&gt;: &lt;a
href="https://github.com/codecov/codecov-action/compare/v5.4.3...v5.5.0"&gt;https://github.com/codecov/codecov-action/compare/v5.4.3...v5.5.0&lt;/a&gt;&lt;/p&gt;
&lt;h2&gt;v5.4.3&lt;/h2&gt;
&lt;h2&gt;What's Changed&lt;/h2&gt;
&lt;ul&gt;
&lt;li&gt;fix: OIDC on forks by &lt;a
href="https://github.com/joseph-sentry"&gt;&lt;code&gt;@​joseph-sentry&lt;/code&gt;&lt;/a&gt;
in &lt;a
href="https://redirect.github.com/codecov/codecov-action/pull/1823"&gt;codecov/codecov-action#1823&lt;/a&gt;&lt;/li&gt;
&lt;li&gt;build(deps): bump github/codeql-action from 3.28.13 to 3.28.17 by &lt;a
href="https://github.com/dependabot"&gt;&lt;code&gt;@​dependabot&lt;/code&gt;&lt;/a&gt; in &lt;a
href="https://redirect.github.com/codecov/codecov-action/pull/1822"&gt;codecov/codecov-action#1822&lt;/a&gt;&lt;/li&gt;
&lt;/ul&gt;
&lt;!-- raw HTML omitted --&gt;
&lt;/blockquote&gt;
&lt;p&gt;... (truncated)&lt;/p&gt;
&lt;/details&gt;
&lt;details&gt;
&lt;summary&gt;Changelog&lt;/summary&gt;
&lt;p&gt;&lt;em&gt;Sourced from &lt;a
href="https://github.com/codecov/codecov-action/blob/main/CHANGELOG.md"&gt;codecov/codecov-action's
changelog&lt;/a&gt;.&lt;/em&gt;&lt;/p&gt;
&lt;blockquote&gt;
&lt;h2&gt;v5.5.2&lt;/h2&gt;
&lt;h3&gt;What's Changed&lt;/h3&gt;
&lt;p&gt;&lt;strong&gt;Full Changelog&lt;/strong&gt;: &lt;a
href="https://github.com/codecov/codecov-action/compare/v5.5.1..v5.5.2"&gt;https://github.com/codecov/codecov-action/compare/v5.5.1..v5.5.2&lt;/a&gt;&lt;/p&gt;
&lt;h2&gt;v5.5.1&lt;/h2&gt;
&lt;h3&gt;What's Changed&lt;/h3&gt;
&lt;ul&gt;
&lt;li&gt;fix: overwrite pr number on fork by &lt;a
href="https://github.com/thomasrockhu-codecov"&gt;&lt;code&gt;@​thomasrockhu-codecov&lt;/code&gt;&lt;/a&gt;
in &lt;a
href="https://redirect.github.com/codecov/codecov-action/pull/1871"&gt;codecov/codecov-action#1871&lt;/a&gt;&lt;/li&gt;
&lt;li&gt;build(deps): bump actions/checkout from 4.2.2 to 5.0.0 by
&lt;code&gt;@​app/dependabot&lt;/code&gt; in &lt;a
href="https://redirect.github.com/codecov/codecov-action/pull/1868"&gt;codecov/codecov-action#1868&lt;/a&gt;&lt;/li&gt;
&lt;li&gt;build(deps): bump github/codeql-action from 3.29.9 to 3.29.11 by
&lt;code&gt;@​app/dependabot&lt;/code&gt; in &lt;a
href="https://redirect.github.com/codecov/codecov-action/pull/1867"&gt;codecov/codecov-action#1867&lt;/a&gt;&lt;/li&gt;
&lt;li&gt;fix: update to use local app/ dir by &lt;a
href="https://github.com/thomasrockhu-codecov"&gt;&lt;code&gt;@​thomasrockhu-codecov&lt;/code&gt;&lt;/a&gt;
in &lt;a
href="https://redirect.github.com/codecov/codecov-action/pull/1872"&gt;codecov/codecov-action#1872&lt;/a&gt;&lt;/li&gt;
&lt;li&gt;docs: fix typo in README by &lt;a
href="https://github.com/datalater"&gt;&lt;code&gt;@​datalater&lt;/code&gt;&lt;/a&gt; in &lt;a
href="https://redirect.github.com/codecov/codecov-action/pull/1866"&gt;codecov/codecov-action#1866&lt;/a&gt;&lt;/li&gt;
&lt;li&gt;Document a &lt;code&gt;codecov-cli&lt;/code&gt; version reference example by &lt;a
href="https://github.com/webknjaz"&gt;&lt;code&gt;@​webknjaz&lt;/code&gt;&lt;/a&gt; in &lt;a
href="https://redirect.github.com/codecov/codecov-action/pull/1774"&gt;codecov/codecov-action#1774&lt;/a&gt;&lt;/li&gt;
&lt;li&gt;build(deps): bump github/codeql-action from 3.28.18 to 3.29.9 by
&lt;code&gt;@​app/dependabot&lt;/code&gt; in &lt;a
href="https://redirect.github.com/codecov/codecov-action/pull/1861"&gt;codecov/codecov-action#1861&lt;/a&gt;&lt;/li&gt;
&lt;li&gt;build(deps): bump ossf/scorecard-action from 2.4.1 to 2.4.2 by
&lt;code&gt;@​app/dependabot&lt;/code&gt; in &lt;a
href="https://redirect.github.com/codecov/codecov-action/pull/1833"&gt;codecov/codecov-action#1833&lt;/a&gt;&lt;/li&gt;
&lt;/ul&gt;
&lt;p&gt;&lt;strong&gt;Full Changelog&lt;/strong&gt;: &lt;a
href="https://github.com/codecov/codecov-action/compare/v5.5.0..v5.5.1"&gt;https://github.com/codecov/codecov-action/compare/v5.5.0..v5.5.1&lt;/a&gt;&lt;/p&gt;
&lt;h2&gt;v5.5.0&lt;/h2&gt;
&lt;h3&gt;What's Changed&lt;/h3&gt;
&lt;ul&gt;
&lt;li&gt;feat: upgrade wrapper to 0.2.4 by &lt;a
href="https://github.com/jviall"&gt;&lt;code&gt;@​jviall&lt;/code&gt;&lt;/a&gt; in &lt;a
href="https://redirect.github.com/codecov/codecov-action/pull/1864"&gt;codecov/codecov-action#1864&lt;/a&gt;&lt;/li&gt;
&lt;li&gt;Pin actions/github-script by Git SHA by &lt;a
href="https://github.com/martincostello"&gt;&lt;code&gt;@​martincostello&lt;/code&gt;&lt;/a&gt;
in &lt;a
href="https://redirect.github.com/codecov/codecov-action/pull/1859"&gt;codecov/codecov-action#1859&lt;/a&gt;&lt;/li&gt;
&lt;li&gt;fix: check reqs exist by &lt;a
href="https://github.com/joseph-sentry"&gt;&lt;code&gt;@​joseph-sentry&lt;/code&gt;&lt;/a&gt;
in &lt;a
href="https://redirect.github.com/codecov/codecov-action/pull/1835"&gt;codecov/codecov-action#1835&lt;/a&gt;&lt;/li&gt;
&lt;li&gt;fix: Typo in README by &lt;a
href="https://github.com/spalmurray"&gt;&lt;code&gt;@​spalmurray&lt;/code&gt;&lt;/a&gt; in &lt;a
href="https://redirect.github.com/codecov/codecov-action/pull/1838"&gt;codecov/codecov-action#1838&lt;/a&gt;&lt;/li&gt;
&lt;li&gt;docs: Refine OIDC docs by &lt;a
href="https://github.com/spalmurray"&gt;&lt;code&gt;@​spalmurray&lt;/code&gt;&lt;/a&gt; in &lt;a
href="https://redirect.github.com/codecov/codecov-action/pull/1837"&gt;codecov/codecov-action#1837&lt;/a&gt;&lt;/li&gt;
&lt;li&gt;build(deps): bump github/codeql-action from 3.28.17 to 3.28.18 by
&lt;code&gt;@​app/dependabot&lt;/code&gt; in &lt;a
href="https://redirect.github.com/codecov/codecov-action/pull/1829"&gt;codecov/codecov-action#1829&lt;/a&gt;&lt;/li&gt;
&lt;/ul&gt;
&lt;p&gt;&lt;strong&gt;Full Changelog&lt;/strong&gt;: &lt;a
href="https://github.com/codecov/codecov-action/compare/v5.4.3..v5.5.0"&gt;https://github.com/codecov/codecov-action/compare/v5.4.3..v5.5.0&lt;/a&gt;&lt;/p&gt;
&lt;h2&gt;v5.4.3&lt;/h2&gt;
&lt;h3&gt;What's Changed&lt;/h3&gt;
&lt;ul&gt;
&lt;li&gt;build(deps): bump github/codeql-action from 3.28.13 to 3.28.17 by
&lt;code&gt;@​app/dependabot&lt;/code&gt; in &lt;a
href="https://redirect.github.com/codecov/codecov-action/pull/1822"&gt;codecov/codecov-action#1822&lt;/a&gt;&lt;/li&gt;
&lt;li&gt;fix: OIDC on forks by &lt;a
href="https://github.com/joseph-sentry"&gt;&lt;code&gt;@​joseph-sentry&lt;/code&gt;&lt;/a&gt;
in &lt;a
href="https://redirect.github.com/codecov/codecov-action/pull/1823"&gt;codecov/codecov-action#1823&lt;/a&gt;&lt;/li&gt;
&lt;/ul&gt;
&lt;p&gt;&lt;strong&gt;Full Changelog&lt;/strong&gt;: &lt;a
href="https://github.com/codecov/codecov-action/compare/v5.4.2..v5.4.3"&gt;https://github.com/codecov/codecov-action/compare/v5.4.2..v5.4.3&lt;/a&gt;&lt;/p&gt;
&lt;h2&gt;v5.4.2&lt;/h2&gt;
&lt;!-- raw HTML omitted --&gt;
&lt;/blockquote&gt;
&lt;p&gt;... (truncated)&lt;/p&gt;
&lt;/details&gt;
&lt;details&gt;
&lt;summary&gt;Commits&lt;/summary&gt;
&lt;ul&gt;
&lt;li&gt;&lt;a
href="https://github.com/codecov/codecov-action/commit/671740ac38dd9b0130fbe1cec585b89eea48d3de"&gt;&lt;code&gt;671740a&lt;/code&gt;&lt;/a&gt;
chore(release): 5.5.2 (&lt;a
href="https://redirect.github.com/codecov/codecov-action/issues/1902"&gt;#1902&lt;/a&gt;)&lt;/li&gt;
&lt;li&gt;&lt;a
href="https://github.com/codecov/codecov-action/commit/96b38e9e60ee60a8c3911f4612407bba2f9195fb"&gt;&lt;code&gt;96b38e9&lt;/code&gt;&lt;/a&gt;
chore: &lt;code&gt;disable_search&lt;/code&gt; alignment (&lt;a
href="h…
diff --git a/.github/workflows/cflite_batch.yml b/.github/workflows/cflite_batch.yml
@@ -8,7 +8,7 @@ jobs:
   fuzz:
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@93cb6efe18208431cddfb8368fd83d5badbf9bfd # v5
+      - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
       - uses: google/clusterfuzzlite/actions/build_fuzzers@884713a6c30a92e5e8544c39945cd7cb630abcd1 # v1
         with:
           language: rust
diff --git a/.github/workflows/cflite_pr.yml b/.github/workflows/cflite_pr.yml
@@ -11,7 +11,7 @@ jobs:
   fuzz:
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@93cb6efe18208431cddfb8368fd83d5badbf9bfd # v5
+      - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
       - uses: google/clusterfuzzlite/actions/build_fuzzers@884713a6c30a92e5e8544c39945cd7cb630abcd1 # v1
         with:
           language: rust
diff --git a/.github/workflows/codeql.yml b/.github/workflows/codeql.yml
@@ -26,15 +26,15 @@ jobs:
 
     steps:
       - name: Checkout
-        uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8 # v6.0.1
+        uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
 
       - name: Initialize CodeQL
-        uses: github/codeql-action/init@cdefb33c0f6224e58673d9004f47f7cb3e328b89 # v3.28.1
+        uses: github/codeql-action/init@9e907b5e64f6b83e7804b09294d44122997950d6 # v3.28.1
         with:
           languages: ${{ matrix.language }}
           build-mode: ${{ matrix.build-mode }}
 
       - name: Perform CodeQL Analysis
-        uses: github/codeql-action/analyze@cdefb33c0f6224e58673d9004f47f7cb3e328b89 # v3.28.1
+        uses: github/codeql-action/analyze@9e907b5e64f6b83e7804b09294d44122997950d6 # v3.28.1
         with:
           category: "/language:${{ matrix.language }}"
diff --git a/.github/workflows/guix-nix-policy.yml b/.github/workflows/guix-nix-policy.yml
@@ -10,7 +10,7 @@ jobs:
     permissions:
       contents: read
     steps:
-      - uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8 # v6.0.1
+      - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
       - name: Enforce Guix primary / Nix fallback
         run: |
           # Check for package manager files
diff --git a/.github/workflows/hypatia-scan.yml b/.github/workflows/hypatia-scan.yml
@@ -20,12 +20,12 @@ jobs:
 
     steps:
       - name: Checkout repository
-        uses: actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11 # v4
+        uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v4
         with:
           fetch-depth: 0  # Full history for better pattern analysis
 
       - name: Setup Elixir for Hypatia scanner
-        uses: erlef/setup-beam@2f0cc07b4b9bea248ae098aba9e1a8a1de5ec24c # v1.18.2
+        uses: erlef/setup-beam@e6d7c94229049569db56a7ad5a540c051a010af9 # v1.18.2
         with:
           elixir-version: '1.19.4'
           otp-version: '28.3'
@@ -146,7 +146,7 @@ jobs:
 
       - name: Comment on PR with findings
         if: github.event_name == 'pull_request' && steps.scan.outputs.findings_count > 0
-        uses: actions/github-script@60a0d83039c74a4aee543508d2ffcb1c3799cdea # v7
+        uses: actions/github-script@ed597411d8f924073f98dfc5c65a23a2325f34cd # v7
         with:
           script: |
             const fs = require('fs');
diff --git a/.github/workflows/language-policy.yml b/.github/workflows/language-policy.yml
@@ -5,7 +5,7 @@ jobs:
   check:
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v6.0.1
+      - uses: actions/checkout@v6.0.2
       - name: Enforce language policies
         run: |
           # Block new Python files (except SaltStack)
diff --git a/.github/workflows/mirror.yml b/.github/workflows/mirror.yml
@@ -14,7 +14,7 @@ jobs:
     runs-on: ubuntu-latest
     if: vars.GITLAB_MIRROR_ENABLED == 'true'
     steps:
-      - uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8 # v4
+      - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v4
         with:
           fetch-depth: 0
 
@@ -32,7 +32,7 @@ jobs:
     runs-on: ubuntu-latest
     if: vars.BITBUCKET_MIRROR_ENABLED == 'true'
     steps:
-      - uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8 # v4
+      - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v4
         with:
           fetch-depth: 0
 
@@ -50,7 +50,7 @@ jobs:
     runs-on: ubuntu-latest
     if: vars.CODEBERG_MIRROR_ENABLED == 'true'
     steps:
-      - uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8 # v4
+      - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v4
         with:
           fetch-depth: 0
 
@@ -68,7 +68,7 @@ jobs:
     runs-on: ubuntu-latest
     if: vars.SOURCEHUT_MIRROR_ENABLED == 'true'
     steps:
-      - uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8 # v4
+      - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v4
         with:
           fetch-depth: 0
 
@@ -86,7 +86,7 @@ jobs:
     runs-on: ubuntu-latest
     if: vars.DISROOT_MIRROR_ENABLED == 'true'
     steps:
-      - uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8 # v4
+      - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v4
         with:
           fetch-depth: 0
 
@@ -104,7 +104,7 @@ jobs:
     runs-on: ubuntu-latest
     if: vars.GITEA_MIRROR_ENABLED == 'true'
     steps:
-      - uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8 # v4
+      - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v4
         with:
           fetch-depth: 0
 
@@ -122,12 +122,12 @@ jobs:
     runs-on: ubuntu-latest
     if: vars.RADICLE_MIRROR_ENABLED == 'true'
     steps:
-      - uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8 # v4
+      - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v4
         with:
           fetch-depth: 0
 
       - name: Setup Rust
-        uses: dtolnay/rust-toolchain@f7ccc83f9ed1e5b9c81d8a67d7ad1a747e22a561 # stable
+        uses: dtolnay/rust-toolchain@efa25f7f19611383d5b0ccf2d1c8914531636bf9 # stable
         with:
           toolchain: stable
 
diff --git a/.github/workflows/quality.yml b/.github/workflows/quality.yml
@@ -11,14 +11,14 @@ jobs:
     permissions:
       contents: read
     steps:
-      - uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8 # v6.0.1
+      - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
       
       - name: Check file permissions
         run: |
           find . -type f -perm /111 -name "*.sh" | head -10 || true
       
       - name: Check for secrets
-        uses: trufflesecurity/trufflehog@ef6e76c3c4023279497fab4721ffa071a722fd05 # v3.92.4
+        uses: trufflesecurity/trufflehog@6961f2bace57ab32b23b3ba40f8f420f6bc7e004 # v3.93.3
         with:
           path: ./
           base: ${{ github.event.pull_request.base.sha || github.event.before }}
@@ -43,7 +43,7 @@ jobs:
     permissions:
       contents: read
     steps:
-      - uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8 # v6.0.1
+      - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
       - name: Check documentation
         run: |
           MISSING=""
diff --git a/.github/workflows/rsr-antipattern.yml b/.github/workflows/rsr-antipattern.yml
@@ -22,7 +22,7 @@ jobs:
     permissions:
       contents: read
     steps:
-      - uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8 # v6.0.1
+      - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
 
       - name: Check for TypeScript
         run: |
diff --git a/.github/workflows/rust-ci.yml b/.github/workflows/rust-ci.yml
@@ -12,11 +12,11 @@ jobs:
   test:
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8 # v6.0.1
-      - uses: dtolnay/rust-toolchain@b3b07ba8b418998c39fb20f53e8b695cdcc8de1b # stable
+      - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
+      - uses: dtolnay/rust-toolchain@efa25f7f19611383d5b0ccf2d1c8914531636bf9 # stable
         with:
           components: rustfmt, clippy
-      - uses: Swatinem/rust-cache@9d47c6ad4b02e050fd481d890b2ea34778fd09d6 # v2.7.8
+      - uses: Swatinem/rust-cache@779680da715d629ac1d338a641029a2f4372abb5 # v2.8.2
 
       - name: Check formatting
         run: cargo fmt --all -- --check
@@ -33,8 +33,8 @@ jobs:
   security:
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8 # v6.0.1
-      - uses: dtolnay/rust-toolchain@b3b07ba8b418998c39fb20f53e8b695cdcc8de1b # stable
+      - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
+      - uses: dtolnay/rust-toolchain@efa25f7f19611383d5b0ccf2d1c8914531636bf9 # stable
       - name: Install cargo-audit
         run: cargo install cargo-audit
       - name: Security audit
@@ -45,12 +45,12 @@ jobs:
   coverage:
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8 # v6.0.1
-      - uses: dtolnay/rust-toolchain@b3b07ba8b418998c39fb20f53e8b695cdcc8de1b # stable
+      - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
+      - uses: dtolnay/rust-toolchain@efa25f7f19611383d5b0ccf2d1c8914531636bf9 # stable
       - name: Install tarpaulin
         run: cargo install cargo-tarpaulin
       - name: Generate coverage
         run: cargo tarpaulin --out Xml
-      - uses: codecov/codecov-action@ad3126e916f78f00edff4ed0317cf185271ccc2d # v5.4.2
+      - uses: codecov/codecov-action@671740ac38dd9b0130fbe1cec585b89eea48d3de # v5.5.2
         with:
           files: cobertura.xml
diff --git a/.github/workflows/scorecard-enforcer.yml b/.github/workflows/scorecard-enforcer.yml
@@ -18,7 +18,7 @@ jobs:
       security-events: write
       id-token: write  # For OIDC
     steps:
-      - uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8 # v4
+      - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v4
         with:
           persist-credentials: false
 
@@ -30,7 +30,7 @@ jobs:
           publish_results: true
 
       - name: Upload SARIF
-        uses: github/codeql-action/upload-sarif@cdefb33c0f6224e58673d9004f47f7cb3e328b89 # v3
+        uses: github/codeql-action/upload-sarif@9e907b5e64f6b83e7804b09294d44122997950d6 # v3
         with:
           sarif_file: results.sarif
 
@@ -53,7 +53,7 @@ jobs:
   check-critical:
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8 # v4
+      - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v4
 
       - name: Check SECURITY.md exists
         run: |
diff --git a/.github/workflows/scorecard.yml b/.github/workflows/scorecard.yml
@@ -16,7 +16,7 @@ jobs:
       security-events: write
       id-token: write
     steps:
-      - uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8 # v6.0.1
+      - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
         with:
           persist-credentials: false
 
@@ -27,6 +27,6 @@ jobs:
           results_format: sarif
 
       - name: Upload results
-        uses: github/codeql-action/upload-sarif@cdefb33c0f6224e58673d9004f47f7cb3e328b89 # v3.31.8
+        uses: github/codeql-action/upload-sarif@9e907b5e64f6b83e7804b09294d44122997950d6 # v3.31.8
         with:
           sarif_file: results.sarif
diff --git a/.github/workflows/secret-scanner.yml b/.github/workflows/secret-scanner.yml
@@ -13,19 +13,19 @@ jobs:
   trufflehog:
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8 # v4
+      - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v4
         with:
           fetch-depth: 0  # Full history for scanning
 
       - name: TruffleHog Secret Scan
-        uses: trufflesecurity/trufflehog@ef6e76c3c4023279497fab4721ffa071a722fd05 # v3
+        uses: trufflesecurity/trufflehog@6961f2bace57ab32b23b3ba40f8f420f6bc7e004 # v3
         with:
           extra_args: --only-verified --fail
 
   gitleaks:
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8 # v4
+      - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v4
         with:
           fetch-depth: 0
 
@@ -39,7 +39,7 @@ jobs:
     runs-on: ubuntu-latest
     if: hashFiles('**/Cargo.toml') != ''
     steps:
-      - uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8 # v4
+      - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v4
 
       - name: Check for hardcoded secrets in Rust
         run: |
diff --git a/.github/workflows/security-policy.yml b/.github/workflows/security-policy.yml
@@ -10,7 +10,7 @@ jobs:
     permissions:
       contents: read
     steps:
-      - uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8 # v6.0.1
+      - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
       - name: Security checks
         run: |
           FAILED=false
diff --git a/.github/workflows/wellknown-enforcement.yml b/.github/workflows/wellknown-enforcement.yml
@@ -23,7 +23,7 @@ jobs:
     permissions:
       contents: read
     steps:
-      - uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8 # v6.0.1
+      - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
       
       - name: RFC 9116 security.txt validation
         run: |
diff --git a/.github/workflows/workflow-linter.yml b/.github/workflows/workflow-linter.yml
@@ -22,7 +22,7 @@ jobs:
 
     steps:
       - name: Checkout
-        uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8 # v6.0.1
+        uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
 
       - name: Check SPDX Headers
         run: |
@@ -72,7 +72,7 @@ jobs:
             echo "$unpinned"
             echo ""
             echo "Replace version tags with SHA pins, e.g.:"
-            echo "  uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8 # v4.1.1"
+            echo "  uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v4.1.1"
             exit 1
           fi
           echo "All actions are SHA-pinned"
