chore(deps): bump the actions group with 2 updates

[dependabot]

Bumps the actions group with 2 updates: actions-rust-lang/setup-rust-toolchain and trufflesecurity/trufflehog.

Updates actions-rust-lang/setup-rust-toolchain from 1.16.0 to 1.16.1

Release notes

Sourced from actions-rust-lang/setup-rust-toolchain's releases.

v1.16.1

What's Changed

• Rename local variables to avoid conflicts with global variables by @​jonasbb in actions-rust-lang/setup-rust-toolchain#92

Full Changelog: actions-rust-lang/setup-rust-toolchain@v1.16.0...v1.16.1

Changelog

Sourced from actions-rust-lang/setup-rust-toolchain's changelog.

Changelog

All notable changes to this project will be documented in this file.

The format is based on Keep a Changelog, and this project adheres to Semantic Versioning.

[Unreleased]

[1.16.1] - 2026-05-08

• Renamed internally used variable to avoid clashes with globally existing variables. This fixes the interference of the TOOLCHAIN variable as reported in #91.

[1.16.0] - 2026-04-13

• Add new parameter cache-save-if that is propagated to Swatinem/rust-cache as save-if (#90 by @​ChanTsune)

[1.15.4] - 2026-03-15

• Bump Swatinem/rust-cache from 2.8.2 to 2.9.1 (#87 by @​hyperfinitism) This gets rid of the warnings about Node.js 20.

[1.15.3] - 2026-03-01

• Bump Swatinem/rust-cache from 2.8.1 to 2.8.2

[1.15.2] - 2025-10-04

• Fix: Run the version detection steps in the selected rust-src-dir directory. This should enable the version selection even without a default toolchain installed. Fixes #74.

[1.15.1] - 2025-09-23

• Update Swatinem/rust-cache to v2.8.1

[1.15.0] - 2025-09-14

• Add support for non-root source directory. Accept source code and rust-toolchain.toml file in subdirectories of the repository. Adds a new parameter rust-src-dir that controls the lookup for toolchain files and sets a default value for the cache-workspace input. (#69 by @​Kubaryt)

[1.14.1] - 2025-08-28

• Pin Swatinem/rust-cache action to a full commit SHA (#68 by @​JohnTitor)

[1.14.0] - 2025-08-23

• Add new parameters cache-all-crates and cache-workspace-crates that are propagated to Swatinem/rust-cache as cache-all-crates and cache-workspace-crates

... (truncated)

Commits

• 46268bd Merge pull request #92 from actions-rust-lang/rename-local-variables
• 826365c Update changelog
• 4f937ac Rename local variables to avoid conflicts with global variables
• See full diff in compare view

Updates trufflesecurity/trufflehog from 3.95.2 to 3.95.3

Release notes

Sourced from trufflesecurity/trufflehog's releases.

v3.95.3

What's Changed

• Renamed AnypointOAuth2 detector's AnalysisInfo keys to make it consistent with its Analyzer by @​MuneebUllahKhan222 in trufflesecurity/trufflehog#4906
• Rename AnalysisInfo field to SecretParts on detectors.Result by @​mcastorina in trufflesecurity/trufflehog#4911
• Document SecretParts contract in detector-authoring docs by @​mcastorina in trufflesecurity/trufflehog#4912
• Add a static check for detectors that don't set SecretParts by @​mcastorina in trufflesecurity/trufflehog#4913
• Populate SecretParts on all detectors by @​mcastorina in trufflesecurity/trufflehog#4919
• Make checksecretparts required in CI by @​mcastorina in trufflesecurity/trufflehog#4921
• Deduplicate concurrent credential verification requests via singleflight by @​kashifkhan0771 in trufflesecurity/trufflehog#4314
• log non-critical chunk errors at V(2).Info instead of Error by @​johnelliott in trufflesecurity/trufflehog#4928
• [INS-320] Cloudinary detector by @​MuneebUllahKhan222 in trufflesecurity/trufflehog#4747
• ci: bump JS actions to Node 24 majors (incl. CodeQL v4 + WIF auth v3) by @​bryanbeverly in trufflesecurity/trufflehog#4933
• chore: bump golangci-lint-action v7 → v9 (Node 24) by @​bryanbeverly in trufflesecurity/trufflehog#4936
• Add default Content-Type: application/json header for custom detector verification request by @​MuneebUllahKhan222 in trufflesecurity/trufflehog#4947
• Make detector Result.SecretParts initialization stricter by @​mcastorina in trufflesecurity/trufflehog#4948
• Add Pinecone API key detector by @​dylanTruffle in trufflesecurity/trufflehog#4917
• adding customizable successRanges and rotatedRanges to customDetector by @​jordanTunstill in trufflesecurity/trufflehog#4892

Full Changelog: trufflesecurity/trufflehog@v3.95.2...v3.95.3

Commits

• 37b7700 adding customizable successRanges and rotatedRanges to customDetector (#4892)
• ba0a524 Add Pinecone API key detector (#4917)
• ab5dd03 Make detector Result.SecretParts initialization stricter (#4948)
• 90ca685 Add default Content-Type: application/json header for custom detector verific...
• 5f47aad chore: bump golangci-lint-action v7 → v9 (Node 24) (#4936)
• a4e3016 ci: bump JS actions to Node 24 majors (checkout v6, setup-go v6, codeql v4, a...
• 8a12e8e [INS-320] Cloudinary detector (#4747)
• cf31c26 Log non-critical chunk errors at V(2).Info instead of Error (#4928)
• 99dc7bd Deduplicate concurrent credential verification requests via singleflight (#4314)
• 3fc0c2a Make checksecretparts required in CI (#4921)
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
• @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
• @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
• @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
• @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

[dependabot]

Looks like these dependencies are updatable in another way, so this is no longer needed.