chore(deps): bump the github-actions group across 1 directory with 2 updates

[dependabot]

Bumps the github-actions group with 2 updates in the / directory: taiki-e/install-action and houseabsolute/actions-rust-release.

Updates taiki-e/install-action from 2.83.4 to 2.85.2

Release notes

Sourced from taiki-e/install-action's releases.

2.85.2

• Update prek@latest to 0.4.11.

• Update mise@latest to 2026.7.13.

• Update kingfisher@latest to 1.109.0.

2.85.1

• Update vacuum@latest to 0.30.0.

• Update uv@latest to 0.11.32.

• Update mise@latest to 2026.7.12.

• Update cyclonedx@latest to 0.33.1.

• Update cargo-neat@latest to 0.5.2.

2.85.0

• Support wild (alias: wild-linker). (#1949)

• Support bpf-linker. (#1950)

• Support rafn. (#1935, thanks @​DarkWanderer)

• Update cargo-neat@latest to 0.5.1.

• Update zizmor@latest to 1.28.0.

• Update wasmtime@latest to 47.0.2.

• Update uv@latest to 0.11.31.

• Update syft@latest to 1.49.0.

2.84.1

• Update wasmtime@latest to 47.0.1.

• Update wasm-tools@latest to 1.254.0.

• Update uv@latest to 0.11.30.

• Update mise@latest to 2026.7.11.

• Update cargo-neat@latest to 0.5.0.

• Update cargo-crap@latest to 0.3.1.

• Update biome@latest to 2.5.5.

... (truncated)

Changelog

Sourced from taiki-e/install-action's changelog.

Changelog

All notable changes to this project will be documented in this file.

This project adheres to Semantic Versioning.

[Unreleased]

[2.85.7] - 2026-08-02

• Update wasmtime@latest to 47.0.3.

• Update uv@latest to 0.12.1.

• Update rclone@latest to 1.75.0.

• Update kingfisher@latest to 1.110.0.

[2.85.6] - 2026-08-01

• Update wasm-tools@latest to 1.255.0.

• Update tombi@latest to 1.2.5.

• Update mise@latest to 2026.7.18.

• Update cargo-neat@latest to 0.5.3.

• Update cargo-crap@latest to 0.4.0.

[2.85.5] - 2026-07-30

• Update uv@latest to 0.12.0.

• Update syft@latest to 1.50.0.

• Update sccache@latest to 0.17.0.

• Update mise@latest to 2026.7.16.

[2.85.4] - 2026-07-29

• Update uv@latest to 0.11.33.

• Update mise@latest to 2026.7.15.

... (truncated)

Commits

• 41049aa Release 2.85.2
• dfcf365 Update prek@latest to 0.4.11
• eea03cc Update mise@latest to 2026.7.13
• 81ca2fe Update martin manifest
• cc90ed0 Update kingfisher@latest to 1.109.0
• 55639a3 Update cargo-shear manifest
• 3d7d7cd Release 2.85.1
• d09ccb4 Update vacuum@latest to 0.30.0
• ac43dee Update uv@latest to 0.11.32
• 49b1697 Update prek manifest
• Additional commits viewable in compare view

Updates houseabsolute/actions-rust-release from 0.0.8 to 0.0.9

Release notes

Sourced from houseabsolute/actions-rust-release's releases.

v0.0.9

• The input validation step passed inputs.executable_name instead of inputs.executable-name, so the executable-name value never reached the validator and the check that it was set could never fire. Similarly, the extra-files value was passed in an environment variable named INPUTS_extra-files, which the validator never looked at, so extra-files was never validated.
• The validator checked whether inputs were present rather than whether they had a value. Since the action always sets every one of these environment variables, even for inputs the caller omitted, none of those checks could ever fail. They now check the value.
• The validation of the extra-files input resolved relative paths against the repo root, but the packaging step resolves them against the working-directory input. With a working-directory other than ., this meant validation checked different files than were actually packaged, so it could reject files that exist or accept files that don't. Relative extra-files paths are now resolved against the working directory, matching the packaging step.
• The extra-files input is documented as accepting globs, and validation accepted them, but the packaging step passed each line through as a literal path. Passing a glob would pass validation and then fail the release with a FileNotFoundError. Globs in extra-files are now expanded when packaging.

Changelog

Sourced from houseabsolute/actions-rust-release's changelog.

0.0.9 - 2026-07-26

• The input validation step passed inputs.executable_name instead of inputs.executable-name, so the executable-name value never reached the validator and the check that it was set could never fire. Similarly, the extra-files value was passed in an environment variable named INPUTS_extra-files, which the validator never looked at, so extra-files was never validated.
• The validator checked whether inputs were present rather than whether they had a value. Since the action always sets every one of these environment variables, even for inputs the caller omitted, none of those checks could ever fail. They now check the value.
• The validation of the extra-files input resolved relative paths against the repo root, but the packaging step resolves them against the working-directory input. With a working-directory other than ., this meant validation checked different files than were actually packaged, so it could reject files that exist or accept files that don't. Relative extra-files paths are now resolved against the working directory, matching the packaging step.
• The extra-files input is documented as accepting globs, and validation accepted them, but the packaging step passed each line through as a literal path. Passing a glob would pass validation and then fail the release with a FileNotFoundError. Globs in extra-files are now expanded when packaging.

0.0.8 - 2026-06-21

• Update all actions used by this action to get rid of Node.js deprecation warnings. GH #19. Reported by @​simonhollingshead (Simon Hollingshead).

0.0.7 - 2026-03-15

• Updated various actions used by this action so that it no longer triggers warnings about Node.js 20 deprecation.

0.0.6 - 2025-02-15

• Added validation for all input parameters. This should provide better errors when a required parameter is missing or a parameter is invalid (like referring to a path which does not exist).
• Added a new action-gh-release-parameters input parameter. This takes a JSON string which can contain most parameters accepted by the the softprops/action-gh-release@v2 action action.

0.0.5 - 2025-02-09

• Trying to do an actual release with changes-file set to an empty string caused the softprops/action-gh-release action to fail with an error like EISDIR: illegal operation on a directory, read. Fixed by @​xen (yksen). GH PR #6. Fixes GH #7.

0.0.4 - 2024-12-08

• The changes-file parameter can be set to an empty string. If you do this, then the action will not look for a changelog file to include in the release. Based on a bug report by @​magick93. GH #5.

... (truncated)

Commits

• e47c661 Make input validation agree with what packaging actually does
• 71dbbcf Fix input names passed to the validation step
• See full diff in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
• @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
• @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
• @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
• @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

[codecov]

Codecov Report

✅ All modified and coverable lines are covered by tests.
✅ Project coverage is 97.32%. Comparing base (b69f97d) to head (b88b2e9).

Additional details and impacted files

@@           Coverage Diff           @@
##             main      #60   +/-   ##
=======================================
  Coverage   97.32%   97.32%           
=======================================
  Files          58       58           
  Lines       13304    13304           
=======================================
  Hits        12948    12948           
  Misses        356      356           

☔ View full report in Codecov by Harness.
📢 Have feedback on the report? Share it here.

🚀 New features to boost your workflow:

• ❄️ Test Analytics: Detect flaky tests, report on failures, and find test suite problems.