Bump the github-actions group across 1 directory with 4 updates

[dependabot]

Bumps the github-actions group with 4 updates in the / directory: Swatinem/rust-cache, actions/upload-artifact, msys2/setup-msys2 and zizmorcore/zizmor-action.

Updates Swatinem/rust-cache from 2.8.2 to 2.9.1

Release notes

Sourced from Swatinem/rust-cache's releases.

v2.9.1

Fix regression in hash calculation

Full Changelog: Swatinem/rust-cache@v2.9.0...v2.9.1

v2.9.0

What's Changed

• Add support for running rust-cache commands from within a Nix shell by @​marc0246 in Swatinem/rust-cache#290
• Bump taiki-e/install-action from 2.62.57 to 2.62.60 in the actions group by @​dependabot[bot] in Swatinem/rust-cache#291
• Bump the actions group across 1 directory with 5 updates by @​dependabot[bot] in Swatinem/rust-cache#296
• Bump the prd-major group with 3 updates by @​dependabot[bot] in Swatinem/rust-cache#294
• Bump @​types/node from 24.10.1 to 25.0.2 in the dev-major group by @​dependabot[bot] in Swatinem/rust-cache#295
• Consider all installed toolchains in cache key by @​tamird in Swatinem/rust-cache#293
• Compare case-insenitively for full cache key match by @​kbriggs in Swatinem/rust-cache#303
• Migrate to node24 runner by @​rhysd in Swatinem/rust-cache#314
• Bump the actions group across 1 directory with 7 updates by @​dependabot[bot] in Swatinem/rust-cache#312
• Bump the prd-minor group across 1 directory with 2 updates by @​dependabot[bot] in Swatinem/rust-cache#307
• Bump @​types/node from 25.0.2 to 25.2.2 in the dev-minor group by @​dependabot[bot] in Swatinem/rust-cache#309

New Contributors

• @​marc0246 made their first contribution in Swatinem/rust-cache#290
• @​tamird made their first contribution in Swatinem/rust-cache#293
• @​kbriggs made their first contribution in Swatinem/rust-cache#303

Full Changelog: Swatinem/rust-cache@v2.8.2...v2.9.0

Changelog

Sourced from Swatinem/rust-cache's changelog.

Changelog

2.9.1

• Fix regression in hash calculation

2.9.0

• Update to node24
• Support running from within a nix shell
• Consider all installed toolchains for cache key
• Use case-insensitive comparison to determine exact cache hit

2.8.2

• Don't overwrite env for cargo-metadata call

2.8.1

• Set empty CARGO_ENCODED_RUSTFLAGS when retrieving metadata
• Various dependency updates

2.8.0

• Add support for warpbuild cache provider
• Add new cache-workspace-crates feature

2.7.8

• Include CPU arch in the cache key

2.7.7

• Also cache cargo install metadata

2.7.6

• Allow opting out of caching $CARGO_HOME/bin
• Add runner OS in cache key
• Adds an option to do lookup-only of the cache

2.7.5

• Support Cargo.lock format cargo-lock v4
• Only run macOsWorkaround() on macOS

2.7.3

• Work around upstream problem that causes cache saving to hang for minutes.

... (truncated)

Commits

• c193711 2.9.1
• 781e8d9 try reverting pipeline change
• 3d1fa46 add changelog
• c676846 2.9.0
• bf71d02 bump dependencies and rebuild
• 8a02ed5 Bump @​types/node from 25.0.2 to 25.2.2 in the dev-minor group (#309)
• 390157d Bump the prd-minor group across 1 directory with 2 updates (#307)
• 68500c1 Bump the actions group across 1 directory with 7 updates (#312)
• 1a83841 Migrate to node24 runner (#314)
• 11da852 Compare case-insenitively for full cache key match (#303)
• Additional commits viewable in compare view

Updates actions/upload-artifact from 6.0.0 to 7.0.0

Release notes

Sourced from actions/upload-artifact's releases.

v7.0.0

v7 What's new

Direct Uploads

Adds support for uploading single files directly (unzipped). Callers can set the new archive parameter to false to skip zipping the file during upload. Right now, we only support single files. The action will fail if the glob passed resolves to multiple files. The name parameter is also ignored with this setting. Instead, the name of the artifact will be the name of the uploaded file.

ESM

To support new versions of the @actions/* packages, we've upgraded the package to ESM.

What's Changed

• Add proxy integration test by @​Link- in actions/upload-artifact#754
• Upgrade the module to ESM and bump dependencies by @​danwkennedy in actions/upload-artifact#762
• Support direct file uploads by @​danwkennedy in actions/upload-artifact#764

New Contributors

• @​Link- made their first contribution in actions/upload-artifact#754

Full Changelog: actions/upload-artifact@v6...v7.0.0

Commits

• bbbca2d Support direct file uploads (#764)
• 589182c Upgrade the module to ESM and bump dependencies (#762)
• 47309c9 Merge pull request #754 from actions/Link-/add-proxy-integration-tests
• 02a8460 Add proxy integration test
• See full diff in compare view

Updates msys2/setup-msys2 from 2.30.0 to 2.31.0

Release notes

Sourced from msys2/setup-msys2's releases.

v2.31.0

• Update base distribution to 20260322. [#597]
• Update dependencies
• Move to node24 from node20

Changelog

Sourced from msys2/setup-msys2's changelog.

Changelog

2.31.0

• Update base distribution to 20260322. [#597]
• Update dependencies
• Move to node24 from node20

2.30.0

• Update base distribution to 20251213. [#565]
• Remove folder-hash dependency [#555]
• Update dependencies

2.29.0

• Allow installation to C:\msys64 if it doesn't exist already. Like with the new windows-11-arm image, for example. [#542]
• Update base distribution to 20250830. [#548]
• Update dependencies

2.28.0

• Update base distribution to 20250622. [#518]
• Update dependencies

2.27.0

• Update base distribution to 20250221. [#480]
• Update dependencies
• Drop support for CLANG32

2.26.0

• Update base distribution to 20241208. [#444]
• Update dependencies
• Update @​actions/cache to v4 which will be required for the GitHub cache backend migration, which is scheduled for 2025-02, see @actions/cache Package Deprecation Notice. Upgrade to the latest `4.0.0` or higher before February 1st 2025 actions/toolkit#1890 for details. There is no action required for users of this action, but old versions of this action may start to fail after the legacy cache backend is sunset.

2.25.0

• Update base distribution to 20241116. [#444]

2.24.1

• Added a new action output msys2-location to get the path to the MSYS2 installation directory. [#404]

2.24.0

... (truncated)

Commits

• cafece8 v2.31.0 1bb07685f08feb242756e4f3fe3cfd9bb7490cf0
• See full diff in compare view

Updates zizmorcore/zizmor-action from 0.5.0 to 0.5.2

Release notes

Sourced from zizmorcore/zizmor-action's releases.

v0.5.2

What's Changed

• zizmor 1.23.1 is now the default used by this action.

Full Changelog: zizmorcore/zizmor-action@v0.5.1...v0.5.2

v0.5.1

What's Changed

• zizmor 1.23.0 is now the default used by this action.

Full Changelog: zizmorcore/zizmor-action@v0.5.0...v0.5.1

Commits

• 71321a2 Sync zizmor versions (#96)
• 5ed31db Bump pins (#95)
• 195d10a Sync zizmor versions (#94)
• c65bc88 chore(deps): bump github/codeql-action in the github-actions group (#93)
• c2c887f chore(deps): bump zizmorcore/zizmor-action in the github-actions group (#91)
• 5507ab0 Bump pins in README (#90)
• See full diff in compare view

[Copilot]

Pull request overview

Updates pinned GitHub Actions used in this repository’s CI/security/release workflows to newer upstream versions, keeping the workflow supply chain current and aligned with upstream Node runtime migrations.

Changes:

• Bump Swatinem/rust-cache pins from v2.8.2 to v2.9.1 in CI and cron workflows.
• Bump actions/upload-artifact pin from v6.0.0 to v7.0.0 in CIFuzz workflow.
• Bump msys2/setup-msys2 (v2.30.0 → v2.31.0) and zizmorcore/zizmor-action (v0.5.0 → v0.5.2) pins.

Reviewed changes

Copilot reviewed 5 out of 5 changed files in this pull request and generated no comments.

Show a summary per file

File	Description
.github/workflows/zizmor.yml	Updates zizmor action pin to v0.5.2 for workflow security analysis.
.github/workflows/release.yml	Updates MSYS2 setup action pin to v2.31.0 for Windows installation/release job.
.github/workflows/cron.yml	Updates rust-cache action pin to v2.9.1 for scheduled stress job caching.
.github/workflows/cifuzz.yml	Updates upload-artifact action pin to v7.0.0 for crash artifact uploads.
.github/workflows/ci.yml	Updates rust-cache action pin to v2.9.1 across CI jobs.

[Eliah Kagan (EliahKagan)]

Dependabot (@dependabot) rebase

[Copilot]

Pull request overview

Copilot reviewed 5 out of 5 changed files in this pull request and generated no new comments.