ci: follow-up fixes from install-action migration review [skip changelog]

.github/workflows/README.md

@@ -28,31 +28,31 @@ cache poisoning from pull requests.
 
 ## SHA Pin Reference
 
-When updating actions, use these SHA commits (last verified: 2025-02):
+When updating actions, use these SHA commits (last verified: 2026-02):
 
 ```yaml
 # GitHub Official Actions
 actions/checkout@v4:           34e114876b0b11c390a56381ad16ebd13914f8d5
 actions/upload-artifact@v4:    ea165f8d65b6e75b540449e92b4886f43607fa02
-actions/download-artifact@v4:  d3f86a106a0bac45b974a628896c90dbdf5c8093
-actions/setup-python@v5:       a26af69be951a213d495a4c3e4e4022e16d87065
-actions/setup-node@v4:         49933ea5288caeca8642d1e84afbd3f7d6820020
+actions/download-artifact@v7.0.0: 37930b1c2abaa49bbe596cd826c3c89aef350131
+actions/setup-python@v6.2.0:    a309ff8b426b58ec0e2a45f0f869d46889d02405
+actions/setup-node@v6.2.0:      6044e13b5dc448c55e2357c09f80417699197238
 actions/configure-pages@v5:    983d7736d9b0ae728b81ab479565c72886d7745b
-actions/upload-pages-artifact@v3: 56afc609e74202658d3ffba0e8f6dda462b719fa
+actions/upload-pages-artifact@v4.0.0: 7b1f4a764d45c48632c6b24a0339c27f5614fb0b
 actions/deploy-pages@v4:       d6db90164ac5ed86f2b6aed7e0febac5b3c0c03e
 rhysd/actionlint@v1.7.1:       62dc61a45fc95efe8c800af7a557ab0b9165d63b
 
 # Rust Tooling
 dtolnay/rust-toolchain@stable: 4be9e76fd7c4901c61fb841f559994984270fce7
 Swatinem/rust-cache@v2:        779680da715d629ac1d338a641029a2f4372abb5
-taiki-e/install-action@v2:     288875dd3d64326724fa6d9593062d9f8ba0b131
+taiki-e/install-action@v2.67.30:     288875dd3d64326724fa6d9593062d9f8ba0b131
 taiki-e/install-action@nextest: cd05dcd6eb73067dda063b97a15b7060049dacd9
 
 # Security
 github/codeql-action@v3:       2588666de8825e1e9dc4e2329a4c985457d55b32
 
 # Coverage
-codecov/codecov-action@v5:     671740ac38dd9b0130fbe1cec585b89eea48d3de
+codecov/codecov-action@v5.5.2:  671740ac38dd9b0130fbe1cec585b89eea48d3de
 
 # Release
 softprops/action-gh-release@v2: a06a81a03ee405af7f2048a818ed3f03bbf83c7b

.github/workflows/ci.yml

@@ -69,7 +69,7 @@ jobs:
       - uses: Swatinem/rust-cache@779680da715d629ac1d338a641029a2f4372abb5 # v2
         with:
           save-if: ${{ github.ref == 'refs/heads/main' }}
-      - uses: taiki-e/install-action@288875dd3d64326724fa6d9593062d9f8ba0b131 # v2
+      - uses: taiki-e/install-action@288875dd3d64326724fa6d9593062d9f8ba0b131 # v2.67.30
         with:
           tool: cargo-machete@0.9.1
       - run: cargo machete
@@ -98,9 +98,9 @@ jobs:
         with:
           key: ${{ matrix.os }}-${{ matrix.rust }}
           save-if: ${{ github.ref == 'refs/heads/main' }}
-      - uses: taiki-e/install-action@288875dd3d64326724fa6d9593062d9f8ba0b131 # v2
+      - uses: taiki-e/install-action@288875dd3d64326724fa6d9593062d9f8ba0b131 # v2.67.30
         with:
-          tool: cargo-nextest
+          tool: cargo-nextest@0.9.128
       - run: cargo nextest run --workspace
       - run: cargo test --doc --workspace
 
@@ -116,12 +116,12 @@ jobs:
       - uses: Swatinem/rust-cache@779680da715d629ac1d338a641029a2f4372abb5 # v2
         with:
           save-if: ${{ github.ref == 'refs/heads/main' }}
-      - uses: taiki-e/install-action@288875dd3d64326724fa6d9593062d9f8ba0b131 # v2
+      - uses: taiki-e/install-action@288875dd3d64326724fa6d9593062d9f8ba0b131 # v2.67.30
         with:
           tool: cargo-llvm-cov@0.6.16
-      - uses: taiki-e/install-action@288875dd3d64326724fa6d9593062d9f8ba0b131 # v2
+      - uses: taiki-e/install-action@288875dd3d64326724fa6d9593062d9f8ba0b131 # v2.67.30
         with:
-          tool: cargo-nextest
+          tool: cargo-nextest@0.9.128
       - name: Generate coverage
         run: cargo llvm-cov nextest --workspace --lcov --output-path lcov.info
       - name: Upload to Codecov
@@ -145,7 +145,8 @@ jobs:
       - name: Install Valgrind
         run: sudo apt-get update && sudo apt-get install -y valgrind
       - name: Install iai-callgrind-runner
-        uses: taiki-e/install-action@288875dd3d64326724fa6d9593062d9f8ba0b131 # v2
+        if: runner.os == 'Linux'
+        uses: taiki-e/install-action@288875dd3d64326724fa6d9593062d9f8ba0b131 # v2.67.30
         with:
           tool: iai-callgrind-runner@0.16.1
       - name: Run iai-callgrind benchmarks
@@ -170,7 +171,7 @@ jobs:
         run: cargo check -p agnix-core --no-default-features
       - name: Check agnix-wasm compiles for wasm32
         run: cargo check -p agnix-wasm --target wasm32-unknown-unknown
-      - uses: taiki-e/install-action@288875dd3d64326724fa6d9593062d9f8ba0b131 # v2
+      - uses: taiki-e/install-action@288875dd3d64326724fa6d9593062d9f8ba0b131 # v2.67.30
         with:
           tool: wasm-pack@0.13.1
       - name: Run WASM tests

.github/workflows/docs-site.yml

@@ -61,7 +61,7 @@ jobs:
       - uses: Swatinem/rust-cache@779680da715d629ac1d338a641029a2f4372abb5 # v2
         with:
           save-if: ${{ github.ref == 'refs/heads/main' }}
-      - uses: taiki-e/install-action@288875dd3d64326724fa6d9593062d9f8ba0b131 # v2
+      - uses: taiki-e/install-action@288875dd3d64326724fa6d9593062d9f8ba0b131 # v2.67.30
         with:
           tool: wasm-pack@0.13.1
       - name: Install website dependencies

.github/workflows/fuzz.yml

@@ -48,9 +48,10 @@ jobs:
           toolchain: nightly
 
       - name: Install cargo-fuzz
-        uses: taiki-e/install-action@288875dd3d64326724fa6d9593062d9f8ba0b131 # v2
+        uses: taiki-e/install-action@288875dd3d64326724fa6d9593062d9f8ba0b131 # v2.67.30
         with:
           tool: cargo-fuzz@0.13.1
+          fallback: cargo-install
 
       - name: Determine fuzzing duration
         id: duration

.github/workflows/release.yml

@@ -58,7 +58,7 @@ jobs:
 
       - name: Install cross
         if: matrix.cross
-        uses: taiki-e/install-action@288875dd3d64326724fa6d9593062d9f8ba0b131 # v2
+        uses: taiki-e/install-action@288875dd3d64326724fa6d9593062d9f8ba0b131 # v2.67.30
         with:
           tool: cross@0.2.5
 

.github/workflows/security.yml

@@ -48,7 +48,7 @@ jobs:
         with:
           save-if: ${{ github.ref == 'refs/heads/main' }}
       - name: Install cargo-audit
-        uses: taiki-e/install-action@288875dd3d64326724fa6d9593062d9f8ba0b131 # v2
+        uses: taiki-e/install-action@288875dd3d64326724fa6d9593062d9f8ba0b131 # v2.67.30
         with:
           tool: cargo-audit@0.22.1
       - name: Run security audit