Bump the actions group across 1 directory with 6 updates by dependabot[bot] · Pull Request #311 · Swatinem/rust-cache

dependabot · 2026-02-16T21:47:38Z

Bumps the actions group with 6 updates in the / directory:

Package	From	To
actions/checkout	`6.0.1`	`6.0.2`
actions/setup-node	`6.1.0`	`6.2.0`
taiki-e/install-action	`2.63.3`	`2.68.0`
dependabot/fetch-metadata	`2.4.0`	`2.5.0`
cachix/install-nix-action	`31.9.0`	`31.9.1`
zizmorcore/zizmor-action	`0.3.0`	`0.5.0`

Updates actions/checkout from 6.0.1 to 6.0.2

Release notes

Sourced from actions/checkout's releases.

v6.0.2

What's Changed

Add orchestration_id to git user-agent when ACTIONS_ORCHESTRATION_ID is set by @TingluoHuang in actions/checkout#2355

Fix tag handling: preserve annotations and explicit fetch-tags by @ericsciple in actions/checkout#2356

Full Changelog: actions/checkout@v6.0.1...v6.0.2

Changelog

Sourced from actions/checkout's changelog.

Changelog

v6.0.2

Fix tag handling: preserve annotations and explicit fetch-tags by @ericsciple in actions/checkout#2356

v6.0.1

Add worktree support for persist-credentials includeIf by @ericsciple in actions/checkout#2327

v6.0.0

Persist creds to a separate file by @ericsciple in actions/checkout#2286

Update README to include Node.js 24 support details and requirements by @salmanmkc in actions/checkout#2248

v5.0.1

Port v6 cleanup to v5 by @ericsciple in actions/checkout#2301

v5.0.0

Update actions checkout to use node 24 by @salmanmkc in actions/checkout#2226

v4.3.1

Port v6 cleanup to v4 by @ericsciple in actions/checkout#2305

v4.3.0

docs: update README.md by @motss in actions/checkout#1971

Add internal repos for checking out multiple repositories by @mouismail in actions/checkout#1977

Documentation update - add recommended permissions to Readme by @benwells in actions/checkout#2043

Adjust positioning of user email note and permissions heading by @joshmgross in actions/checkout#2044

Update README.md by @nebuk89 in actions/checkout#2194

Update CODEOWNERS for actions by @TingluoHuang in actions/checkout#2224

Update package dependencies by @salmanmkc in actions/checkout#2236

v4.2.2

url-helper.ts now leverages well-known environment variables by @jww3 in actions/checkout#1941

Expand unit test coverage for isGhes by @jww3 in actions/checkout#1946

v4.2.1

Check out other refs/* by commit if provided, fall back to ref by @orhantoy in actions/checkout#1924

v4.2.0

Add Ref and Commit outputs by @lucacome in actions/checkout#1180

Dependency updates by @dependabot- actions/checkout#1777, actions/checkout#1872

v4.1.7

Bump the minor-npm-dependencies group across 1 directory with 4 updates by @dependabot in actions/checkout#1739

Bump actions/checkout from 3 to 4 by @dependabot in actions/checkout#1697

Check out other refs/* by commit by @orhantoy in actions/checkout#1774

Pin actions/checkout's own workflows to a known, good, stable version. by @jww3 in actions/checkout#1776

v4.1.6

Check platform to set archive extension appropriately by @cory-miller in actions/checkout#1732

... (truncated)

Commits

de0fac2 Fix tag handling: preserve annotations and explicit fetch-tags (#2356)
064fe7f Add orchestration_id to git user-agent when ACTIONS_ORCHESTRATION_ID is set (...
See full diff in compare view

Updates actions/setup-node from 6.1.0 to 6.2.0

Release notes

Sourced from actions/setup-node's releases.

v6.2.0

What's Changed

Documentation

Documentation update related to absence of Lockfile by @mahabaleshwars in actions/setup-node#1454

Correct mirror option typos by @MikeMcC399 in actions/setup-node#1442

Readme update on checkout version v6 by @deining in actions/setup-node#1446

Readme typo fixes @munyari in actions/setup-node#1226

Advanced document update on checkout version v6 by @aparnajyothi-y in actions/setup-node#1468

Dependency updates:

Upgrade @actions/cache to v5.0.1 by @salmanmkc in actions/setup-node#1449

New Contributors

@mahabaleshwars made their first contribution in actions/setup-node#1454

@MikeMcC399 made their first contribution in actions/setup-node#1442

@deining made their first contribution in actions/setup-node#1446

@munyari made their first contribution in actions/setup-node#1226

Full Changelog: actions/setup-node@v6...v6.2.0

Commits

6044e13 Docs: bump actions/checkout from v5 to v6 (#1468)
8e49463 Fix README typo (#1226)
621ac41 README.md: bump to latest released checkout version v6 (#1446)
2951748 Bump @actions/cache to v5.0.1 (#1449)
21ddc7b Correct mirror option typos (#1442)
65d868f Update Documentation for Lockfile (#1454)
See full diff in compare view

Updates taiki-e/install-action from 2.63.3 to 2.68.0

Release notes

Sourced from taiki-e/install-action's releases.

2.68.0

Support gungraun-runner. (#1520, thanks @gamma0987)

Update uv@latest to 0.10.3.

Update typos@latest to 1.43.5.

Update tombi@latest to 0.7.29.

Update release-plz@latest to 0.3.156.

Update cargo-lambda@latest to 1.9.0.

Update prek@latest to 0.3.3.

Update mise@latest to 2026.2.13.

2.67.30

Update cargo-nextest@latest to 0.9.127.

2.67.29

Update mise@latest to 2026.2.11.

Update cargo-no-dev-deps@latest to 0.2.21.

Update cargo-minimal-versions@latest to 0.1.36.

Update cargo-hack@latest to 0.6.43.

Update cargo-binstall@latest to 1.17.5.

Update osv-scanner@latest to 2.3.3.

Update martin@latest to 1.3.1.

Update parse-dockerfile@latest to 0.1.4.

2.67.28

Update uv@latest to 0.10.2.

Update syft@latest to 1.42.0.

Update mise@latest to 2026.2.9.

Update cyclonedx@latest to 0.30.0.

2.67.27

Update sccache@latest to 0.14.0.

Update typos@latest to 1.43.4.

... (truncated)

Changelog

Sourced from taiki-e/install-action's changelog.

Changelog

All notable changes to this project will be documented in this file.

This project adheres to Semantic Versioning.

[Unreleased]

[2.68.0] - 2026-02-16

Support gungraun-runner. (#1520, thanks @gamma0987)

Update uv@latest to 0.10.3.

Update typos@latest to 1.43.5.

Update tombi@latest to 0.7.29.

Update release-plz@latest to 0.3.156.

Update cargo-lambda@latest to 1.9.0.

Update prek@latest to 0.3.3.

Update mise@latest to 2026.2.13.

[2.67.30] - 2026-02-13

Update cargo-nextest@latest to 0.9.127.

[2.67.29] - 2026-02-13

Update mise@latest to 2026.2.11.

Update cargo-no-dev-deps@latest to 0.2.21.

Update cargo-minimal-versions@latest to 0.1.36.

Update cargo-hack@latest to 0.6.43.

Update cargo-binstall@latest to 1.17.5.

Update osv-scanner@latest to 2.3.3.

Update martin@latest to 1.3.1.

... (truncated)

Commits

f8d25fb Release 2.68.0
27ef967 Update changelog
28a014e Add gungraun-runner (#1520)
d132751 Update uv@latest to 0.10.3
bff1ddb Update typos@latest to 1.43.5
79677b6 Update tombi@latest to 0.7.29
b78a203 Update release-plz@latest to 0.3.156
46985b6 Update cargo-lambda@latest to 1.9.0
3f08cd5 ci: Temporarily disable broken archlinux test
80e1af6 Update prek@latest to 0.3.3
Additional commits viewable in compare view

Updates dependabot/fetch-metadata from 2.4.0 to 2.5.0

Release notes

Sourced from dependabot/fetch-metadata's releases.

v2.5.0

What's Changed

Bump actions/publish-immutable-action from 0.0.3 to 0.0.4 by @dependabot[bot] in dependabot/fetch-metadata#628

Bump the dev-dependencies group with 11 updates by @dependabot[bot] in dependabot/fetch-metadata#629

Bump actions/create-github-app-token from 2.0.6 to 2.1.1 by @dependabot[bot] in dependabot/fetch-metadata#635

Bump actions/create-github-app-token from 2.1.1 to 2.1.4 by @dependabot[bot] in dependabot/fetch-metadata#638

Bump actions/checkout from 4 to 5 by @dependabot[bot] in dependabot/fetch-metadata#636

Bump actions/setup-node from 4 to 5 by @dependabot[bot] in dependabot/fetch-metadata#637

Bump actions/setup-node from 5 to 6 by @dependabot[bot] in dependabot/fetch-metadata#639

Bump actions/create-github-app-token from 2.1.4 to 2.2.0 by @dependabot[bot] in dependabot/fetch-metadata#643

Bump actions/checkout from 5 to 6 by @dependabot[bot] in dependabot/fetch-metadata#642

Bump actions/create-github-app-token from 2.2.0 to 2.2.1 by @dependabot[bot] in dependabot/fetch-metadata#648

Bump js-yaml from 3.14.1 to 3.14.2 by @dependabot[bot] in dependabot/fetch-metadata#644

Bump express from 5.1.0 to 5.2.1 by @dependabot[bot] in dependabot/fetch-metadata#645

Bump @modelcontextprotocol/sdk from 1.11.2 to 1.24.0 by @dependabot[bot] in dependabot/fetch-metadata#647

v2.5.0 by @fetch-metadata-action-automation[bot] in dependabot/fetch-metadata#631

Full Changelog: dependabot/fetch-metadata@v2...v2.5.0

Commits

21025c7 v2.5.0
252291c Merge pull request #647 from dependabot/dependabot/npm_and_yarn/modelcontextp...
fa144c9 chore: Migrate jest expectation function
33c7a0b bug: Mock PR body in test
99c27ad Bump @modelcontextprotocol/sdk from 1.11.2 to 1.24.0
3837dcc Merge pull request #645 from dependabot/dependabot/npm_and_yarn/express-5.2.1
d411582 Bump express from 5.1.0 to 5.2.1
186ccbb Merge pull request #644 from dependabot/dependabot/npm_and_yarn/js-yaml-3.14.2
84c891e Bump js-yaml from 3.14.1 to 3.14.2
4542092 Merge pull request #648 from dependabot/dependabot/github_actions/actions/cre...
Additional commits viewable in compare view

Updates cachix/install-nix-action from 31.9.0 to 31.9.1

Release notes

Sourced from cachix/install-nix-action's releases.

v31.9.1

What's Changed

nix: 2.33.0 -> 2.33.3 by @github-actions[bot] in cachix/install-nix-action#266

Full Changelog: cachix/install-nix-action@v31...v31.9.1

Commits

2126ae7 Merge pull request #266 from cachix/create-pull-request/patch
eb3d7b0 nix: 2.33.0 -> 2.33.3
See full diff in compare view

Updates zizmorcore/zizmor-action from 0.3.0 to 0.5.0

Release notes

Sourced from zizmorcore/zizmor-action's releases.

v0.5.0

What's Changed

Expose output-file as an output when advanced-security: true by @unlobito in zizmorcore/zizmor-action#87

New Contributors

@unlobito made their first contribution in zizmorcore/zizmor-action#87

Full Changelog: zizmorcore/zizmor-action@v0.4.1...v0.5.0

v0.4.1

This version fixes an error in the 0.4.0 release that prevented non-relative use of the action.

What's Changed

Fix version file path by @woodruffw in zizmorcore/zizmor-action#83

Full Changelog: zizmorcore/zizmor-action@v0.4.0...v0.4.1

v0.4.0

This new version of zizmor-action brings two major changes:

The new fail-on-no-inputs option can be used to control whether zizmor-action fails if no inputs were collected by zizmor. The default remains true, reflecting the pre-existing behavior.

The action's use of the official zizmor Docker images is now fully hash-checked internally, preventing accidental or malicious modification to the images. This also means that subsequent releases of zizmor will induce a release of this action, rather than the action always picking up the latest version by default.

What's Changed

docs: extended permissions required for internal repos by @AntoineSebert in zizmorcore/zizmor-action#61

docs: clarify description of "token" to indicate it is only used for online audits by @rmuir in zizmorcore/zizmor-action#63

Hash-check zizmor Docker images by @woodruffw in zizmorcore/zizmor-action#68

Add fail-on-no-inputs option by @woodruffw in zizmorcore/zizmor-action#67

New Contributors

@AntoineSebert made their first contribution in zizmorcore/zizmor-action#61

@rmuir made their first contribution in zizmorcore/zizmor-action#63

Full Changelog: zizmorcore/zizmor-action@v0.3.0...v0.4.0

Commits

0dce257 chore(deps): bump peter-evans/create-pull-request (#88)
fb94974 Expose output-file as an output when advanced-security: true (#87)
867562a chore(deps): bump the github-actions group with 2 updates (#85)
7462f07 Bump pins in README (#84)
1356984 Fix version file path (#83)
72469cf Bump pins in README (#80)
3aa7e2f Add fail-on-no-inputs tests (#79)
92fc377 Sync zizmor versions (#78)
5aff8ef Add fail-on-no-inputs option (#67)
4d497b9 Sync zizmor versions (#75)
Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR
@dependabot recreate will recreate this PR, overwriting any edits that have been made to it
@dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
@dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
@dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
@dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
@dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
@dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

Bumps the actions group with 6 updates in the / directory: | Package | From | To | | --- | --- | --- | | [actions/checkout](https://github.com/actions/checkout) | `6.0.1` | `6.0.2` | | [actions/setup-node](https://github.com/actions/setup-node) | `6.1.0` | `6.2.0` | | [taiki-e/install-action](https://github.com/taiki-e/install-action) | `2.63.3` | `2.68.0` | | [dependabot/fetch-metadata](https://github.com/dependabot/fetch-metadata) | `2.4.0` | `2.5.0` | | [cachix/install-nix-action](https://github.com/cachix/install-nix-action) | `31.9.0` | `31.9.1` | | [zizmorcore/zizmor-action](https://github.com/zizmorcore/zizmor-action) | `0.3.0` | `0.5.0` | Updates `actions/checkout` from 6.0.1 to 6.0.2 - [Release notes](https://github.com/actions/checkout/releases) - [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md) - [Commits](actions/checkout@8e8c483...de0fac2) Updates `actions/setup-node` from 6.1.0 to 6.2.0 - [Release notes](https://github.com/actions/setup-node/releases) - [Commits](actions/setup-node@395ad32...6044e13) Updates `taiki-e/install-action` from 2.63.3 to 2.68.0 - [Release notes](https://github.com/taiki-e/install-action/releases) - [Changelog](https://github.com/taiki-e/install-action/blob/main/CHANGELOG.md) - [Commits](taiki-e/install-action@d850aa8...f8d25fb) Updates `dependabot/fetch-metadata` from 2.4.0 to 2.5.0 - [Release notes](https://github.com/dependabot/fetch-metadata/releases) - [Commits](dependabot/fetch-metadata@08eff52...21025c7) Updates `cachix/install-nix-action` from 31.9.0 to 31.9.1 - [Release notes](https://github.com/cachix/install-nix-action/releases) - [Changelog](https://github.com/cachix/install-nix-action/blob/master/RELEASE.md) - [Commits](cachix/install-nix-action@4e002c8...2126ae7) Updates `zizmorcore/zizmor-action` from 0.3.0 to 0.5.0 - [Release notes](https://github.com/zizmorcore/zizmor-action/releases) - [Commits](zizmorcore/zizmor-action@e639db9...0dce257) --- updated-dependencies: - dependency-name: actions/checkout dependency-version: 6.0.2 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: actions - dependency-name: actions/setup-node dependency-version: 6.2.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: actions - dependency-name: taiki-e/install-action dependency-version: 2.68.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: actions - dependency-name: dependabot/fetch-metadata dependency-version: 2.5.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: actions - dependency-name: cachix/install-nix-action dependency-version: 31.9.1 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: actions - dependency-name: zizmorcore/zizmor-action dependency-version: 0.5.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: actions ... Signed-off-by: dependabot[bot] <support@github.com>

dependabot bot added dependencies Pull requests that update a dependency file github_actions Pull requests that update GitHub Actions code labels Feb 16, 2026

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Uh oh!

Bump the actions group across 1 directory with 6 updates#311

Bump the actions group across 1 directory with 6 updates#311
dependabot[bot] wants to merge 1 commit intomasterfrom
dependabot/github_actions/actions-ce2a8d9224

dependabot bot commented on behalf of github Feb 16, 2026 •

edited

Loading

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

Uh oh!

Conversation

dependabot bot commented on behalf of github Feb 16, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

v6.0.2

What's Changed

Changelog

v6.0.2

v6.0.1

v6.0.0

v5.0.1

v5.0.0

v4.3.1

v4.3.0

v4.2.2

v4.2.1

v4.2.0

v4.1.7

v4.1.6

v6.2.0

What's Changed

Documentation

Dependency updates:

New Contributors

2.68.0

2.67.30

2.67.29

2.67.28

2.67.27

Changelog

[Unreleased]

[2.68.0] - 2026-02-16

[2.67.30] - 2026-02-13

[2.67.29] - 2026-02-13

v2.5.0

What's Changed

v31.9.1

What's Changed

v0.5.0

What's Changed

New Contributors

v0.4.1

What's Changed

v0.4.0

What's Changed

New Contributors

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

dependabot bot commented on behalf of github Feb 16, 2026 •

edited

Loading