[#patch](deps): Bump the actions-deps group with 11 updates

[dependabot]

Bumps the actions-deps group with 11 updates:

Package	From	To
step-security/harden-runner	2.21.0	2.21.1
docker/setup-qemu-action	4.2.0	4.4.0
docker/setup-buildx-action	4.3.0	4.4.1
docker/build-push-action	7.3.0	7.4.0
github/codeql-action/upload-sarif	4.37.8	4.38.2
reviewdog/action-actionlint	1.73.2	1.77.0
astral-sh/setup-uv	10.0.1	10.2.0
aws-actions/configure-aws-credentials	6.2.3	6.3.0
aws-actions/aws-secretsmanager-get-secrets	3.0.1	3.0.2
actions-rust-lang/setup-rust-toolchain	1.17.0	2.0.0
reviewdog/action-tflint	1.25.0	1.27.0

Updates step-security/harden-runner from 2.21.0 to 2.21.1

Release notes

Sourced from step-security/harden-runner's releases.

v2.21.1

What's Changed

• Improved performance of the disable-sudo feature.
• Fixed an issue in the Community tier where new endpoints required by the GitHub Actions runner were not being implicitly allowed in block mode.
• Fixed the Harden-Runner post step failing on Linux distributions that do not have a merged /usr filesystem layout (for example Debian 11), where /usr/bin/echo does not exist. This mainly affected self-hosted runners.
• Documentation updates: clarified which features are in the Community (free) vs Enterprise tier.

Full Changelog: step-security/harden-runner@v2.21.0...v2.21.1

Commits

• e14015d Merge pull request #690 from step-security/rc-43
• 9001249 docs: update harden-runner version pin to v2.21.0 in getting started example
• a447fba docs: expand enterprise feature list and document custom VM and ubuntu-slim l...
• b0eaf8d docs: clarify community vs enterprise tiers and add maintained actions section
• 063e8e3 Merge pull request #687 from rohan-stepsecurity/rp/fix/bin-echo-fallback
• f46bdc1 chore: bump agent-ebpf to v1.9.1 and agent to v0.16.3
• 42e6daa fix: fall back to /bin/echo for non-usr-merged distros
• See full diff in compare view

Updates docker/setup-qemu-action from 4.2.0 to 4.4.0

Release notes

Sourced from docker/setup-qemu-action's releases.

v4.4.0

• Use the shared error helper for Docker commands by @​crazy-max in docker/setup-qemu-action#345
• Bump @​docker/actions-toolkit from 0.96.0 to 0.100.0 in docker/setup-qemu-action#344
• Bump @​humanfs/node from 0.16.7 to 0.16.8 in docker/setup-qemu-action#340
• Bump js-yaml from 4.3.1 to 4.3.2 in docker/setup-qemu-action#342
• Bump postcss-selector-parser from 7.1.1 to 7.1.5 in docker/setup-qemu-action#337

Full Changelog: docker/setup-qemu-action@v4.3.0...v4.4.0

v4.3.0

• Bump @​docker/actions-toolkit from 0.92.0 to 0.96.0 in docker/setup-qemu-action#336
• Bump @​sigstore/verify from 3.1.0 to 3.1.1 in docker/setup-qemu-action#316
• Bump brace-expansion from 1.1.15 to 1.1.18 in docker/setup-qemu-action#332
• Bump js-yaml from 4.2.0 to 4.3.1 in docker/setup-qemu-action#334
• Bump postcss from 8.5.10 to 8.5.25 in docker/setup-qemu-action#331
• Bump sigstore from 4.1.0 to 4.1.1 in docker/setup-qemu-action#317
• Bump undici from 6.27.0 to 6.28.0 in docker/setup-qemu-action#333

Full Changelog: docker/setup-qemu-action@v4.2.0...v4.3.0

Commits

• 9901266 Merge pull request #342 from docker/dependabot/npm_and_yarn/js-yaml-4.3.2
• 9364d8b Merge pull request #340 from docker/dependabot/npm_and_yarn/humanfs/node-0.16.8
• 95c3240 Merge pull request #337 from docker/dependabot/npm_and_yarn/postcss-selector-...
• c24671a Merge pull request #338 from docker/dependabot/github_actions/codeql-actions-...
• fa83965 Merge pull request #345 from crazy-max/shared-error-helpers
• f396a65 build(deps): bump the codeql-actions group across 1 directory with 2 updates
• a63df2f chore: update generated content
• 3e4165f use the shared error helper for Docker commands
• 18c52d9 Merge pull request #344 from docker/dependabot/npm_and_yarn/docker/actions-to...
• 896cbed [dependabot skip] chore: update generated content
• Additional commits viewable in compare view

Updates docker/setup-buildx-action from 4.3.0 to 4.4.1

Release notes

Sourced from docker/setup-buildx-action's releases.

v4.4.1

• Skip BuildKit image pre-pulls for explicit endpoints by @​crazy-max in docker/setup-buildx-action#624

Full Changelog: docker/setup-buildx-action@v4.4.0...v4.4.1

v4.4.0

• Use official Buildx releases for cloud driver by @​crazy-max in docker/setup-buildx-action#606
• Pull BuildKit image before builder creation by @​crazy-max in docker/setup-buildx-action#609
• Use shared error helpers for Buildx and Docker commands by @​crazy-max in docker/setup-buildx-action#620
• Bump @​docker/actions-toolkit from 0.95.0 to 0.100.0 in docker/setup-buildx-action#610 docker/setup-buildx-action#618 docker/setup-buildx-action#619
• Bump @​humanfs/node from 0.16.7 to 0.16.8 in docker/setup-buildx-action#614
• Bump js-yaml from 5.3.0 to 5.4.2 in docker/setup-buildx-action#608 docker/setup-buildx-action#617
• Bump postcss-selector-parser from 7.1.1 to 7.1.5 in docker/setup-buildx-action#611

Full Changelog: docker/setup-buildx-action@v4.3.0...v4.4.0

Commits

• f87e599 Merge pull request #624 from crazy-max/skip-pull-with-endpoint
• e700274 chore: update generated content
• 3061c91 skip BuildKit image pre-pulls for explicit endpoints
• 594f3bf Merge pull request #609 from crazy-max/pull-buildkit-image-before-create
• bd6e702 chore: update generated content
• 6268c9d pull BuildKit image before builder creation
• e823525 Merge pull request #621 from docker/dependabot/github_actions/codeql-actions-...
• 533ed8e build(deps): bump the codeql-actions group with 2 updates
• bedaf13 Merge pull request #620 from crazy-max/shared-error-helpers
• d5079fb chore: update generated content
• Additional commits viewable in compare view

Updates docker/build-push-action from 7.3.0 to 7.4.0

Release notes

Sourced from docker/build-push-action's releases.

v7.4.0

• Use the shared error helper for Buildx commands by @​crazy-max in docker/build-push-action#1620
• Prevent workflow command injection in metadata logs by @​crazy-max in docker/build-push-action#1617
• Bump @​docker/actions-toolkit from 0.92.0 to 0.100.0 in docker/build-push-action#1614 docker/build-push-action#1618 docker/build-push-action#1621
• Bump @​humanfs/node from 0.16.7 to 0.16.8 in docker/build-push-action#1609
• Bump brace-expansion from 1.1.13 to 1.1.18 in docker/build-push-action#1592
• Bump csv-parse from 7.0.0 to 7.0.2 in docker/build-push-action#1613
• Bump js-yaml from 4.3.0 to 4.3.2 in docker/build-push-action#1605 docker/build-push-action#1615
• Bump nanoid from 3.3.16 to 3.3.18 in docker/build-push-action#1611
• Bump postcss from 8.5.10 to 8.5.25 in docker/build-push-action#1590
• Bump postcss-selector-parser from 7.1.1 to 7.1.5 in docker/build-push-action#1606
• Bump sigstore from 4.1.0 to 4.1.1 in docker/build-push-action#1577
• Bump undici from 6.27.0 to 6.28.0 in docker/build-push-action#1594

Full Changelog: docker/build-push-action@v7.3.0...v7.4.0

Commits

• c3c9e26 Merge pull request #1621 from docker/dependabot/npm_and_yarn/docker/actions-t...
• 459b674 [dependabot skip] chore: update generated content
• 4dedcb2 chore(deps): Bump @​docker/actions-toolkit from 0.99.0 to 0.100.0
• 379bf63 Merge pull request #1620 from crazy-max/buildx-error-message
• 9877975 chore: update generated content
• 7ed0556 use the shared Buildx error summary helper
• 91670ba Merge pull request #1618 from docker/dependabot/npm_and_yarn/docker/actions-t...
• 80dbc86 [dependabot skip] chore: update generated content
• 50cac3a chore(deps): Bump @​docker/actions-toolkit from 0.98.0 to 0.99.0
• 03b4d6c Merge pull request #1617 from crazy-max/fix-metadata-workflow-commands
• Additional commits viewable in compare view

Updates github/codeql-action/upload-sarif from 4.37.8 to 4.38.2

Release notes

Sourced from github/codeql-action/upload-sarif's releases.

v4.38.2

• Update default CodeQL bundle version to 2.27.1. #4160

v4.38.1

• The CodeQL Action now has experimental support for CodeQL releases for which per-language bundles are available. Per-language bundles support analysis for a single language and are therefore smaller than the combined bundles that allow analysis for all supported languages. As a result, per-language bundles take up less space on disk and are faster to download. We expect to roll this change out to everyone in the coming weeks. #4146

v4.38.0

• On GitHub-hosted runners, the CodeQL Action now deletes unused CodeQL bundles from the toolcache before downloading a different bundle, which frees up disk space for the analysis. We expect to roll this change out to everyone in September. #4124
• The CodeQL Action now supports CodeQL releases that are compatible with Linux Arm64 and downloads the native linux-arm64 CodeQL bundle when available. #4072
• Update default CodeQL bundle version to 2.27.0. #4129

v4.37.9

• Update default CodeQL bundle version to 2.26.4. #4106

Changelog

Sourced from github/codeql-action/upload-sarif's changelog.

CodeQL Action Changelog

See the releases page for the relevant changes to the CodeQL CLI and language packs.

[UNRELEASED]

No user facing changes.

4.38.2 - 24 Sept 2026

• Update default CodeQL bundle version to 2.27.1. #4160

4.38.1 - 18 Sept 2026

• The CodeQL Action now has experimental support for CodeQL releases for which per-language bundles are available. Per-language bundles support analysis for a single language and are therefore smaller than the combined bundles that allow analysis for all supported languages. As a result, per-language bundles take up less space on disk and are faster to download. We expect to roll this change out to everyone in the coming weeks. #4146

4.38.0 - 09 Sept 2026

• On GitHub-hosted runners, the CodeQL Action now deletes unused CodeQL bundles from the toolcache before downloading a different bundle, which frees up disk space for the analysis. We expect to roll this change out to everyone in September. #4124
• The CodeQL Action now supports CodeQL releases that are compatible with Linux Arm64 and downloads the native linux-arm64 CodeQL bundle when available. #4072
• Update default CodeQL bundle version to 2.27.0. #4129

4.37.9 - 26 Aug 2026

• Update default CodeQL bundle version to 2.26.4. #4106

4.37.8 - 21 Aug 2026

No user facing changes.

4.37.7 - 13 Aug 2026

• Update default CodeQL bundle version to 2.26.3. #4085

4.37.6 - 04 Aug 2026

• Changed the default filepath for the new remote file address format that was introduced in CodeQL Action 4.37.0 / 3.37.0 to .github/codeql-config.yml to align it with the suggested path that is used elsewhere. #4070

4.37.5 - 03 Aug 2026

• Fixed a bug where a network error while streaming the download of the CodeQL bundle could terminate the init Action instead of falling back to downloading the bundle before extracting it. #4061

4.37.4 - 29 Jul 2026

• This version of the CodeQL Action adds support for the tools input for the codeql-action/init step to be specified using a github-codeql-tools repository property. This feature will gradually be rolled out following the release of this version. Once rolled out, this allows for the CodeQL CLI version that is used in GitHub-managed workflows, such as Default Setup, to be set to a custom value. For example, customers who run into issues with rate limits when a new CodeQL CLI version is released can set the value to toolcache to always use the CodeQL CLI version that is available in the runner toolcache. For Advanced Setup workflows, the value provided for tools in the workflow definition always takes precedence unless the value of the repository property starts with !. #4037
• Update default CodeQL bundle version to 2.26.2. #4051

4.37.3 - 22 Jul 2026

No user facing changes.

... (truncated)

Commits

• 2892aa5 Merge pull request #4168 from github/update-v4.38.2-a6ef2c96f
• 8ad03a3 Trigger workflows
• 98af865 Update changelog for v4.38.2
• a6ef2c9 Merge pull request #4156 from github/mario-campos/fix-validate-cmd
• 1ef28a1 Merge pull request #4166 from github/dependabot/github_actions/dot-github/wor...
• 26cb08b Merge pull request #4163 from github/mbg/fix-getCommitOid-stubs
• f035ce3 Merge pull request #4165 from github/dependabot/npm_and_yarn/npm-minor-8eaed9...
• 5e4e255 Rebuild
• b13f5f4 Bump ruby/setup-ruby
• c87fe57 Rebuild
• Additional commits viewable in compare view

Updates reviewdog/action-actionlint from 1.73.2 to 1.77.0

Release notes

Sourced from reviewdog/action-actionlint's releases.

Release v1.77.0

What's Changed

• chore(deps): update dependency pyflakes to v4 by @​renovate[bot] in reviewdog/action-actionlint#244

Full Changelog: reviewdog/action-actionlint@v1.76.3...v1.77.0

Release v1.76.3

What's Changed

• fix: preserve quoted spaces in actionlint/reviewdog flags by @​shogo82148 in reviewdog/action-actionlint#243

Full Changelog: reviewdog/action-actionlint@v1.76.2...v1.76.3

Release v1.76.2

What's Changed

• fix: preserve actionlint operational exit codes (2, 3) by @​shogo82148 in reviewdog/action-actionlint#242

Full Changelog: reviewdog/action-actionlint@v1.76.1...v1.76.2

Release v1.76.1

What's Changed

• chore(deps): update python:3.14.7-alpine3.24 docker digest to 9e9fde4 by @​renovate[bot] in reviewdog/action-actionlint#241

Full Changelog: reviewdog/action-actionlint@v1.76.0...v1.76.1

Release v1.76.0

What's Changed

• chore(deps): update reviewdog to 0.21.2 by @​github-actions[bot] in reviewdog/action-actionlint#239

Full Changelog: reviewdog/action-actionlint@v1.75.3...v1.76.0

Release v1.75.3

What's Changed

• chore(deps): update python:3.14.7-alpine3.24 docker digest to 016508b by @​renovate[bot] in reviewdog/action-actionlint#238

Full Changelog: reviewdog/action-actionlint@v1.75.2...v1.75.3

Release v1.75.2

What's Changed

• chore(deps): update python:3.14.7-alpine3.24 docker digest to 6f945b4 by @​renovate[bot] in reviewdog/action-actionlint#237

Full Changelog: reviewdog/action-actionlint@v1.75.1...v1.75.2

Release v1.75.1

... (truncated)

Commits

• 2085657 bump v1.77.0
• 6532460 Merge branch 'main' into releases/v1
• ee28dc7 Merge pull request #244 from reviewdog/renovate/pyflakes-4.x
• 09ae7fd chore(deps): update dependency pyflakes to v4
• 23bcc6a bump v1.76.3
• 861ed9d Merge branch 'main' into releases/v1
• d338e49 Merge pull request #243 from reviewdog/fix-flags-quoting
• 4db1873 fix: preserve quoted spaces in actionlint/reviewdog flags
• 74dceca bump v1.76.2
• f87ecf3 Merge branch 'main' into releases/v1
• Additional commits viewable in compare view

Updates astral-sh/setup-uv from 10.0.1 to 10.2.0

Release notes

Sourced from astral-sh/setup-uv's releases.

v10.2.0 🌈 Disable automatic cache saves for merge queues

Changes

This release contains the known-checksum of the most recent uv releases and also disabled the uploading(saving) of the cache when in a merge queue since theses caches would almost never be used.

🚀 Enhancements

• Disable automatic cache saves for merge queues @​eifinger (#1056)

🧰 Maintenance

• chore: update known checksums for 0.12.17 @github-actions[bot] (#1058)
• chore: update known checksums for 0.12.16 @github-actions[bot] (#1057)
• chore: update known checksums for 0.12.15 @github-actions[bot] (#1054)
• chore: update known checksums for 0.12.14 @github-actions[bot] (#1053)
• chore: update known checksums for 0.12.13 @github-actions[bot] (#1045)

📚 Documentation

• docs: update version references to v10.1.0 @github-actions[bot] (#1044)

⬆️ Dependency updates

• chore(deps): roll up Dependabot updates @​eifinger (#1059)

v10.1.0 🌈 New output python-runtime-idand respect NO_PROXY

Changes

This release adds more bheind the scene security improvements and also 2 small improvements.

NO_PROXY

This action now respects no_proxy/NO_PROXY environment variables which were previously ignored.

New output python-runtime-id

The new output python-runtime-id can be used to know which python version exactly was installed if you use activate-environment. See pyca/cryptography#15572 for details on why this can be useful.

🐛 Bug fixes

• fix: respect no proxy directive @​mj0nez (#1037)
• Use JSON + a typed wrapper instead of TS codegen @​woodruffw (#1025)

🚀 Enhancements

• Expose a Python "identity" output @​woodruffw (#1036)
• Verify downloads with astral-sh/versions checksums @​zaniebot (#1033)

🧰 Maintenance

... (truncated)

Commits

• c18668a chore(deps): roll up Dependabot updates (#1059)
• ffe1476 chore: update known checksums for 0.12.17 (#1058)
• f5548c5 chore: update known checksums for 0.12.16 (#1057)
• a761a4e Disable automatic cache saves for merge queues (#1056)
• 3377a30 chore: update known checksums for 0.12.15 (#1054)
• dfb5f38 chore: update known checksums for 0.12.14 (#1053)
• 45c121f chore: update known checksums for 0.12.13 (#1045)
• 8073452 docs: update version references to v10.1.0 (#1044)
• bec219d chore(deps-dev): roll up Dependabot updates (#1043)
• b90ec40 fix: respect no proxy directive (#1037)
• Additional commits viewable in compare view

Updates aws-actions/configure-aws-credentials from 6.2.3 to 6.3.0

Release notes

Sourced from aws-actions/configure-aws-credentials's releases.

v6.3.0

6.3.0 (2026-09-11)

Features

• add translate-env-variables option (#1961) (57b8365)

v6.2.4

6.2.4 (2026-08-31)

Bug Fixes

• account-ids handling, mask proxy as secret in logs (#1943) (aa65264)
• skip backoff sleep after the final retryAndBackoff attempt (#1937) (3852440)

Changelog

Sourced from aws-actions/configure-aws-credentials's changelog.

Changelog

All notable changes to this project will be documented in this file. See standard-version for commit guidelines.

6.3.0 (2026-09-11)

Features

• add translate-env-variables option (#1961) (57b8365)

6.2.4 (2026-08-31)

Bug Fixes

• account-ids handling, mask proxy as secret in logs (#1943) (aa65264)
• skip backoff sleep after the final retryAndBackoff attempt (#1937) (3852440)

6.2.3 (2026-07-22)

Bug Fixes

• attach git credentials before Tag Major Version push (#1877) (9ae780b)
• PackedPolicyTooLarge detection in STS tags (#1899) (fa8d6a5)

6.2.2 (2026-07-07)

Miscellaneous Chores

• release 6.2.2 (d01d678)

6.2.1 (2026-06-26)

Bug Fixes

• enforce allowed-account-ids on all auth paths (#1847) (4d281fb)

6.2.0 (2026-06-01)

Features

• add additional session tags by default (#1775) (e0ba768)
• add more retry logic and better logging (#1764) (540d0c1)
• add regex validation to role-session-name (#1765) (e354499)
• Allow custom session tags to be passed when assuming a role (#1759) (61f50f6)
• expose run id in STS client user-agent (#1774) (29d1be3)

... (truncated)

Commits

• e125382 chore(main): release 6.3.0 (#1963)
• 438100a chore: add link to GH security docs (#1962)
• e92ebcc chore: Update dist
• 57b8365 feat: add translate-env-variables option (#1961)
• cc49fa7 chore(docs): README main branch guidance (#1960)
• 866cb16 chore(deps-dev): bump smol-toml from 1.7.0 to 1.7.2 (#1958)
• 6782cb1 chore(deps-dev): bump generate-license-file from 4.2.4 to 4.2.5 (#1951)
• c20509a chore: Update dist
• 7a41fc6 chore(deps): bump @​aws-sdk/client-sts from 3.1121.0 to 3.1127.0 (#1954)
• 726b713 chore(deps-dev): bump @​biomejs/biome from 2.5.11 to 2.5.12 (#1957)
• Additional commits viewable in compare view

Updates aws-actions/aws-secretsmanager-get-secrets from 3.0.1 to 3.0.2

Release notes

Sourced from aws-actions/aws-secretsmanager-get-secrets's releases.

v3.0.2

What's Changed

• docs(readme): Update AWS Secrets Manager action version to v3 by @​kishaningithub in aws-actions/aws-secretsmanager-get-secrets#309
• Bump fast-xml-builder from 1.1.4 to 1.2.0 by @​dependabot[bot] in aws-actions/aws-secretsmanager-get-secrets#305
• fix: bump undici, fast-xml-parser, and brace-expansion to resolve CVEs by @​reyhankoyun in aws-actions/aws-secretsmanager-get-secrets#317
• Bump @​humanfs/node from 0.16.7 to 0.16.8 by @​dependabot[bot] in aws-actions/aws-secretsmanager-get-secrets#318
• Add missing types for TypeScript 6.0, move mock import from source to tests by @​simonmarty in aws-actions/aws-secretsmanager-get-secrets#320

New Contributors

• @​kishaningithub made their first contribution in aws-actions/aws-secretsmanager-get-secrets#309

Full Changelog: aws-actions/aws-secretsmanager-get-secrets@v3.0.1...v3.0.2

Commits

• 2297f9a Add missing types for TypeScript 6.0, move mock import from source to tests (...
• bcbef04 Bump @​humanfs/node from 0.16.7 to 0.16.8 (#318)
• 33da984 fix: bump undici, fast-xml-parser, and brace-expansion to resolve CVEs (#317)
• 42007fc Bump fast-xml-builder from 1.1.4 to 1.2.0 (#305)
• 495b9b8 docs(readme): Update AWS Secrets Manager action version to v3 (#309)
• See full diff in compare view

Updates actions-rust-lang/setup-rust-toolchain from 1.17.0 to 2.0.0

Release notes

Sourced from actions-rust-lang/setup-rust-toolchain's releases.

v2.0.0

What's Changed

• Use CARGO_BUILD_WARNINGS for enforcing warning free compilations (#98) This is a new variable supported by cargo 1.97+ and sets the build.warnings config. It allows removing the RUSTFLAGS="-D warnings" default, which will improve compatibility with target.*.rustflags and .cargo/config.toml files.

  This adds a new build-warnings input to configure the value for the build.warnings config.

• Add error matcher for Rust panics This will highlight the location of the panic location during tests.

• Reuse output of rustc --version --verbose calls (#103 by @​ChihweiLHBird)

New Contributors

• @​ChihweiLHBird made their first contribution in actions-rust-lang/setup-rust-toolchain#103

Full Changelog: actions-rust-lang/setup-rust-toolchain@v1.17.0...v2.0.0

Changelog

Sourced from actions-rust-lang/setup-rust-toolchain's changelog.

Changelog

All notable changes to this project will be documented in this file.

The format is based on Keep a Changelog, and this project adheres to Semantic Versioning.

[Unreleased]

[2.0.0] - 2026-09-07

• Use CARGO_BUILD_WARNINGS for enforcing warning free compilations (#98) This is a new variable supported by cargo 1.97+ and sets the build.warnings config. It allows removing the RUSTFLAGS="-D warnings" default, which will improve compatibility with target.*.rustflags and .cargo/config.toml files.

  This adds a new build-warnings input to configure the value for the build.warnings config.

• Add error matcher for Rust panics This will highlight the location of the panic location during tests.

• Reuse output of rustc --version --verbose calls (#103 by @​ChihweiLHBird)

[1.17.0] - 2026-06-25

• Add new parameter cache-targets that is propagated to Swatinem/rust-cache as cache-targets (#84). This allows disabling caching of the workspace target directory, e.g. when using sccache, while keeping the rest of the cache enabled.

[1.16.1] - 2026-05-08

• Renamed internally used variable to avoid clashes with globally existing variables. This fixes the interference of the TOOLCHAIN variable as reported in #91.

[1.16.0] - 2026-04-13

• Add new parameter cache-save-if that is propagated to Swatinem/rust-cache as save-if (#90 by @​ChanTsune)

[1.15.4] - 2026-03-15

• Bump Swatinem/rust-cache from 2.8.2 to 2.9.1 (#87 by @​hyperfinitism) This gets rid of the warnings about Node.js 20.

[1.15.3] - 2026-03-01

• Bump Swatinem/rust-cache from 2.8.1 to 2.8.2

[1.15.2] - 2025-10-04

• Fix: Run the version detection steps in the selected rust-src-dir directory. This should enable the version selection even without a default toolchain installed. Fixes #74.

[1.15.1] - 2025-09-23

... (truncated)

Commits

• ecabd13 Prepare changelog for 2.0.0 release
• dc00391 Add error matcher for Rust panics
• 70de7eb Merge pull request #103 from ChihweiLHBird/reuse-rustc-verbose-output
• c420b69 Merge pull request #105 from actions-rust-lang/use-build-warnings
• d94d10a Use CARGO_BUILD_WARNINGS for enforcing warning free compilations
• 34430aa Reuse rustc verbose output instead of invoking rustc three times.
• 0267444 Merge pull request #102 from actions-rust-lang/dependabot/github_actions/Swat...
• 5fa2882 Bump Swatinem/rust-cache from 2.9.1 to 2.9.2
• 8439c15 Merge pull request #100 from actions-rust-lang/dependabot/github_actions/acti...
• c8f944a Bump actions/checkout from 7.0.0 to 7.0.1
• See full diff in compare view

Updates reviewdog/action-tflint from 1.25.0 to 1.27.0

Release notes

Sourced from reviewdog/action-tflint's releases.

Release v1.27.0

What's Changed

• chore(deps): update reviewdog/action-misspell action to v1.29.0 by @​renovate[bot] in reviewdog/action-tflint#128
• chore(deps): update reviewdog/action-shellcheck action to v1.33.0 by @​renovate[bot] in reviewdog/action-tflint#129
• chore(deps): update reviewdog/reviewdog to 0.21.2 by @​github-actions[bot] in reviewdog/action-tflint#131

Description has been truncated

[github-actions]

KICS version: v2.1.20

Category Results CRITICAL 0 HIGH 0 MEDIUM 0 LOW 0 INFO 0 TRACE 0 TOTAL 0	Metric Values Files scanned 14 Files parsed 14 Files failed to scan 0 Total executed queries 52 Queries failed to execute 0 Execution time 0

Queries Results

| |