ci: bump the github-actions group across 1 directory with 7 updates

dependabot[bot] · web-flow · commit b7c7ed328a78 · 2026-05-25T05:31:50.000Z
Bumps the github-actions group with 7 updates in the / directory: | Package | From | To | | --- | --- | --- | | [actions/checkout](https://github.com/actions/checkout) | `6.0.1` | `6.0.2` | | [moonrepo/setup-rust](https://github.com/moonrepo/setup-rust) | `1.2.2` | `1.3.0` | | [taiki-e/setup-cross-toolchain-action](https://github.com/taiki-e/setup-cross-toolchain-action) | `1.32.1` | `1.41.0` | | [taiki-e/upload-rust-binary-action](https://github.com/taiki-e/upload-rust-binary-action) | `1.27.0` | `1.30.2` | | [actions/upload-artifact](https://github.com/actions/upload-artifact) | `5` | `7` | | [actions/create-github-app-token](https://github.com/actions/create-github-app-token) | `2.2.1` | `3.2.0` | | [MarcoIeni/release-plz-action](https://github.com/marcoieni/release-plz-action) | `0.5.120` | `0.5.129` | Updates `actions/checkout` from 6.0.1 to 6.0.2 - [Release notes](https://github.com/actions/checkout/releases) - [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md) - [Commits](actions/checkout@8e8c483...de0fac2) Updates `moonrepo/setup-rust` from 1.2.2 to 1.3.0 - [Release notes](https://github.com/moonrepo/setup-rust/releases) - [Changelog](https://github.com/moonrepo/setup-rust/blob/master/CHANGELOG.md) - [Commits](moonrepo/setup-rust@ede6de0...abb2d32) Updates `taiki-e/setup-cross-toolchain-action` from 1.32.1 to 1.41.0 - [Release notes](https://github.com/taiki-e/setup-cross-toolchain-action/releases) - [Changelog](https://github.com/taiki-e/setup-cross-toolchain-action/blob/main/CHANGELOG.md) - [Commits](taiki-e/setup-cross-toolchain-action@84e58a4...3d9770c) Updates `taiki-e/upload-rust-binary-action` from 1.27.0 to 1.30.2 - [Release notes](https://github.com/taiki-e/upload-rust-binary-action/releases) - [Changelog](https://github.com/taiki-e/upload-rust-binary-action/blob/main/CHANGELOG.md) - [Commits](taiki-e/upload-rust-binary-action@3962470...f0d45ae) Updates `actions/upload-artifact` from 5 to 7 - [Release notes](https://github.com/actions/upload-artifact/releases) - [Commits](actions/upload-artifact@v5...v7) Updates `actions/create-github-app-token` from 2.2.1 to 3.2.0 - [Release notes](https://github.com/actions/create-github-app-token/releases) - [Changelog](https://github.com/actions/create-github-app-token/blob/main/CHANGELOG.md) - [Commits](actions/create-github-app-token@29824e6...bcd2ba4) Updates `MarcoIeni/release-plz-action` from 0.5.120 to 0.5.129 - [Release notes](https://github.com/marcoieni/release-plz-action/releases) - [Commits](release-plz/action@487eb7b...064f4d1) --- updated-dependencies: - dependency-name: actions/checkout dependency-version: 6.0.2 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: github-actions - dependency-name: actions/create-github-app-token dependency-version: 3.0.0 dependency-type: direct:production update-type: version-update:semver-major dependency-group: github-actions - dependency-name: actions/upload-artifact dependency-version: '7' dependency-type: direct:production update-type: version-update:semver-major dependency-group: github-actions - dependency-name: MarcoIeni/release-plz-action dependency-version: 0.5.128 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: github-actions - dependency-name: moonrepo/setup-rust dependency-version: 1.3.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: github-actions - dependency-name: taiki-e/setup-cross-toolchain-action dependency-version: 1.39.1 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: github-actions - dependency-name: taiki-e/upload-rust-binary-action dependency-version: 1.29.1 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: github-actions ... Signed-off-by: dependabot[bot] <support@github.com>
diff --git a/.github/workflows/build_binaries.yml b/.github/workflows/build_binaries.yml
@@ -45,19 +45,19 @@ jobs:
     timeout-minutes: 60
     steps:
       - name: Checkout repository
-        uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8
+        uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd
       - name: Install Rust toolchain
-        uses: moonrepo/setup-rust@ede6de059f8046a5e236c94046823e2af11ca670
+        uses: moonrepo/setup-rust@abb2d32350334249b178c401e5ec5836e0cd88d3
         with:
           inherit-toolchain: true
           bins: cross
-      - uses: taiki-e/setup-cross-toolchain-action@84e58a47fc2bcd3821a2aa8c153595bbffb0e10f
+      - uses: taiki-e/setup-cross-toolchain-action@3d9770ce98eb7dbcf378563182a5e8031165f75b
         with:
           target: ${{ matrix.target }}
         if: startsWith(matrix.os, 'ubuntu') && !contains(matrix.target, '-musl')
       - run: echo "RUSTFLAGS=${RUSTFLAGS} -C target-feature=+crt-static" >> "${GITHUB_ENV}"
         if: endsWith(matrix.target, 'windows-msvc')
-      - uses: taiki-e/upload-rust-binary-action@3962470d6e7f1993108411bc3f75a135ec67fc8c
+      - uses: taiki-e/upload-rust-binary-action@f0d45ae91ee7b8ee928de7a9d04d893a08bcbec6
         with:
           bin: shpool
           target: ${{ matrix.target }}
diff --git a/.github/workflows/nightly.yml b/.github/workflows/nightly.yml
@@ -8,8 +8,8 @@ jobs:
     name: cargo deny --all-features check
     runs-on: ubuntu-22.04
     steps:
-      - uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8
-      - uses: moonrepo/setup-rust@ede6de059f8046a5e236c94046823e2af11ca670
+      - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd
+      - uses: moonrepo/setup-rust@abb2d32350334249b178c401e5ec5836e0cd88d3
         with:
           inherit-toolchain: true
           bins: cargo-deny
diff --git a/.github/workflows/presubmit.yml b/.github/workflows/presubmit.yml
@@ -10,8 +10,8 @@ jobs:
         os: [ubuntu-22.04, macos-latest]
     runs-on: ${{ matrix.os }}
     steps:
-      - uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8
-      - uses: moonrepo/setup-rust@ede6de059f8046a5e236c94046823e2af11ca670
+      - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd
+      - uses: moonrepo/setup-rust@abb2d32350334249b178c401e5ec5836e0cd88d3
         with:
           inherit-toolchain: true
       - name: Install dependencies (Linux)
@@ -23,7 +23,7 @@ jobs:
       - run: SHPOOL_LEAVE_TEST_LOGS=true RUST_BACKTRACE=full cargo test --all-features
       - name: Archive Logs
         if: always()
-        uses: actions/upload-artifact@v5
+        uses: actions/upload-artifact@v7
         id: artifact-upload-step
         with:
           name: test-logs-${{ matrix.os }}
@@ -36,7 +36,7 @@ jobs:
   #   name: cargo +nightly miri test
   #   runs-on: ubuntu-22.04
   #   steps:
-  #     - uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8
+  #     - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd
   #     - uses: moonrepo/setup-rust@b8edcc56aab474d90c7cf0bb8beeaf8334c15e9f
   #       with:
   #         components: miri
@@ -48,8 +48,8 @@ jobs:
     name: cargo +nightly fmt -- --check
     runs-on: ubuntu-22.04
     steps:
-      - uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8
-      - uses: moonrepo/setup-rust@ede6de059f8046a5e236c94046823e2af11ca670
+      - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd
+      - uses: moonrepo/setup-rust@abb2d32350334249b178c401e5ec5836e0cd88d3
         with:
           components: rustfmt
           channel: nightly
@@ -60,8 +60,8 @@ jobs:
     name: cargo +nightly cranky --all-targets -- -D warnings
     runs-on: ubuntu-22.04
     steps:
-      - uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8
-      - uses: moonrepo/setup-rust@ede6de059f8046a5e236c94046823e2af11ca670
+      - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd
+      - uses: moonrepo/setup-rust@abb2d32350334249b178c401e5ec5836e0cd88d3
         with:
           components: clippy
           bins: cargo-cranky@0.3.0
@@ -73,9 +73,9 @@ jobs:
     name: cargo deny --all-features check licenses
     runs-on: ubuntu-22.04
     steps:
-      - uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8
+      - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd
       - name: Install Rust toolchain
-        uses: moonrepo/setup-rust@ede6de059f8046a5e236c94046823e2af11ca670
+        uses: moonrepo/setup-rust@abb2d32350334249b178c401e5ec5836e0cd88d3
         with:
           inherit-toolchain: true
           bins: cargo-deny
diff --git a/.github/workflows/publish.yml b/.github/workflows/publish.yml
@@ -17,21 +17,21 @@ jobs:
       # Generating a GitHub token, so that PRs and tags created by
       # the release-plz-action can trigger actions workflows.
       - name: Generate GitHub token
-        uses: actions/create-github-app-token@29824e69f54612133e76f7eaac726eef6c875baf
+        uses: actions/create-github-app-token@bcd2ba49218906704ab6c1aa796996da409d3eb1
         id: generate-token
         with:
           app-id: ${{ secrets.RELEASE_PLZ_APP_ID }} # <-- GitHub App ID secret name
           private-key: ${{ secrets.RELEASE_PLZ_APP_PRIVATE_KEY }} # <-- GitHub App private key secret name
       - name: Checkout repository
-        uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8
+        uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd
         with:
           fetch-depth: 0
       - name: Install Rust toolchain
-        uses: moonrepo/setup-rust@ede6de059f8046a5e236c94046823e2af11ca670
+        uses: moonrepo/setup-rust@abb2d32350334249b178c401e5ec5836e0cd88d3
         with:
           bins: cross
       - name: Run release-plz
-        uses: MarcoIeni/release-plz-action@487eb7b5c085a664d5c5ca05f4159bd9b591182a
+        uses: MarcoIeni/release-plz-action@064f4d1e36c843611ddf013be726beaa4ad804db
         env:
           GITHUB_TOKEN: ${{ steps.generate-token.outputs.token }}
           CARGO_REGISTRY_TOKEN: ${{ secrets.CARGO_REGISTRY_TOKEN }}
