chore(deps)(deps): bump the all-dependencies group with 5 updates by dependabot[bot] · Pull Request #12 · alpenlabs/rust-template

dependabot · 2025-10-01T00:29:57Z

Bumps the all-dependencies group with 5 updates:

Package	From	To
astral-sh/setup-uv	`6.6.0`	`6.8.0`
github/codeql-action	`3.29.11`	`3.30.5`
Swatinem/rust-cache	`2.8.0`	`2.8.1`
ncipollo/release-action	`1.18.0`	`1.20.0`
taiki-e/install-action	`2.58.29`	`2.62.14`

Updates astral-sh/setup-uv from 6.6.0 to 6.8.0

Release notes

Sourced from astral-sh/setup-uv's releases.

v6.7.0 🌈 New inputs restore-cache and save-cache

Changes

This release adds fine-grained control over the caching steps.

The input restore-cache (true by default) can be set to false to skip restoring the cache while still allowing to save the cache.

The input save-cache (true by default) can be set to false to skip saving the cache.

Skipping cache saving can be useful if you know, that you will never use this version of the cache again and don't want to waste storage space:
- name: Save cache only on main branch
  uses: astral-sh/setup-uv@v6
  with:
    enable-cache: true
    save-cache: ${{ github.ref == 'refs/heads/main' }}
🚀 Enhancements

Add inputs restore-cache and save-cache @eifinger (#568)

🧰 Maintenance

bump deps @eifinger (#569)

Automatically push updated known versions @eifinger (#565)

chore: update known versions for 0.8.16/0.8.17 @github-actions[bot] (#562)

chore: update known versions for 0.8.15 @github-actions[bot] (#550)

chore(ci): address CI lint findings @woodruffw (#545)

⬆️ Dependency updates

Bump github/codeql-action from 3.29.11 to 3.30.3 @dependabot[bot] (#566)

Bump actions/setup-node from 4.4.0 to 5.0.0 @dependabot[bot] (#551)

v6.6.1 🌈 Fix exclusions in cache-dependency-glob

Changes

Exclusions with a leading ! in the cache-dependency-glob did not work and got fixed with this release. Thank you @KnisterPeter for raising this!

🐛 Bug fixes

Fix exclusions in cache-dependency-glob @eifinger (#546)

🧰 Maintenance

Bump dependencies @eifinger (#547)

chore: update known versions for 0.8.14 @github-actions[bot] (#543)

chore: update known versions for 0.8.13 @github-actions[bot] (#536)

Commits

d0cc045 Always show prune cache output (#597)
2841f9f Bump zizmorcore/zizmor-action from 0.1.2 to 0.2.0 (#571)
e554b93 Add **/*.py.lock to cache-dependency-glob (#590)
c7d85d9 chore: update known versions for 0.8.20
07f2cb5 persist credentials for version update (#584)
208b0c0 README.md: Fix Python versions and update checkout action (#572)
b75a909 bump deps (#569)
ffff8aa Bump github/codeql-action from 3.29.11 to 3.30.3 (#566)
95d0e23 Bump actions/setup-node from 4.4.0 to 5.0.0 (#551)
dc724a1 Add inputs restore-cache and save-cache (#568)
Additional commits viewable in compare view

Updates github/codeql-action from 3.29.11 to 3.30.5

Release notes

Sourced from github/codeql-action's releases.

v3.30.5

CodeQL Action Changelog

See the releases page for the relevant changes to the CodeQL CLI and language packs.

3.30.5 - 26 Sep 2025

We fixed a bug that was introduced in 3.30.4 with upload-sarif which resulted in files without a .sarif extension not getting uploaded. #3160

See the full CHANGELOG.md for more information.

v3.30.4

CodeQL Action Changelog

See the releases page for the relevant changes to the CodeQL CLI and language packs.

3.30.4 - 25 Sep 2025

We have improved the CodeQL Action's ability to validate that the workflow it is used in does not use different versions of the CodeQL Action for different workflow steps. Mixing different versions of the CodeQL Action in the same workflow is unsupported and can lead to unpredictable results. A warning will now be emitted from the codeql-action/init step if different versions of the CodeQL Action are detected in the workflow file. Additionally, an error will now be thrown by the other CodeQL Action steps if they load a configuration file that was generated by a different version of the codeql-action/init step. #3099 and #3100

We added support for reducing the size of dependency caches for Java analyses, which will reduce cache usage and speed up workflows. This will be enabled automatically at a later time. #3107

You can now run the latest CodeQL nightly bundle by passing tools: nightly to the init action. In general, the nightly bundle is unstable and we only recommend running it when directed by GitHub staff. #3130

Update default CodeQL bundle version to 2.23.1. #3118

See the full CHANGELOG.md for more information.

v3.30.3

CodeQL Action Changelog

See the releases page for the relevant changes to the CodeQL CLI and language packs.

3.30.3 - 10 Sep 2025

No user facing changes.

See the full CHANGELOG.md for more information.

v3.30.2

CodeQL Action Changelog

See the releases page for the relevant changes to the CodeQL CLI and language packs.

3.30.2 - 09 Sep 2025

Fixed a bug which could cause language autodetection to fail. #3084

Experimental: The quality-queries input that was added in 3.29.2 as part of an internal experiment is now deprecated and will be removed in an upcoming version of the CodeQL Action. It has been superseded by a new analysis-kinds input, which is part of the same internal experiment. Do not use this in production as it is subject to change at any time. #3064

See the full CHANGELOG.md for more information.

v3.30.1

CodeQL Action Changelog

... (truncated)

Changelog

Sourced from github/codeql-action's changelog.

CodeQL Action Changelog

See the releases page for the relevant changes to the CodeQL CLI and language packs.

[UNRELEASED]

No user facing changes.

3.30.5 - 26 Sep 2025

We fixed a bug that was introduced in 3.30.4 with upload-sarif which resulted in files without a .sarif extension not getting uploaded. #3160

3.30.4 - 25 Sep 2025

We have improved the CodeQL Action's ability to validate that the workflow it is used in does not use different versions of the CodeQL Action for different workflow steps. Mixing different versions of the CodeQL Action in the same workflow is unsupported and can lead to unpredictable results. A warning will now be emitted from the codeql-action/init step if different versions of the CodeQL Action are detected in the workflow file. Additionally, an error will now be thrown by the other CodeQL Action steps if they load a configuration file that was generated by a different version of the codeql-action/init step. #3099 and #3100

We added support for reducing the size of dependency caches for Java analyses, which will reduce cache usage and speed up workflows. This will be enabled automatically at a later time. #3107

You can now run the latest CodeQL nightly bundle by passing tools: nightly to the init action. In general, the nightly bundle is unstable and we only recommend running it when directed by GitHub staff. #3130

Update default CodeQL bundle version to 2.23.1. #3118

3.30.3 - 10 Sep 2025

No user facing changes.

3.30.2 - 09 Sep 2025

Fixed a bug which could cause language autodetection to fail. #3084

Experimental: The quality-queries input that was added in 3.29.2 as part of an internal experiment is now deprecated and will be removed in an upcoming version of the CodeQL Action. It has been superseded by a new analysis-kinds input, which is part of the same internal experiment. Do not use this in production as it is subject to change at any time. #3064

3.30.1 - 05 Sep 2025

Update default CodeQL bundle version to 2.23.0. #3077

3.30.0 - 01 Sep 2025

Reduce the size of the CodeQL Action, speeding up workflows by approximately 4 seconds. #3054

3.29.11 - 21 Aug 2025

Update default CodeQL bundle version to 2.22.4. #3044

3.29.10 - 18 Aug 2025

No user facing changes.

3.29.9 - 12 Aug 2025

No user facing changes.

3.29.8 - 08 Aug 2025

... (truncated)

Commits

3599b3b Merge pull request #3161 from github/update-v3.30.5-0a67bd46a
2ca0085 Update changelog for v3.30.5
0a67bd4 Merge pull request #3160 from github/mbg/fix/upload-sarif
8e34f2f Add changelog
0b7fc56 Fix upload-sarif not uploading non-.sarif files
94a9b7a Merge pull request #3155 from github/mbg/node/no-install-in-actions
a0ae9ba Log what the script is doing
b27a8ef Exit if running in an Actions workflow
6592567 Merge pull request #3139 from github/henrymercer/fix-log-message
fa64a7d Merge pull request #3154 from github/mbg/node/check-up-to-date-deps
Additional commits viewable in compare view

Updates Swatinem/rust-cache from 2.8.0 to 2.8.1

Release notes

Sourced from Swatinem/rust-cache's releases.

v2.8.1

What's Changed

Set empty CARGO_ENCODED_RUSTFLAGS in workspace metadata retrieval by @ark0f in Swatinem/rust-cache#249

chore(deps): update dependencies by @reneleonhardt in Swatinem/rust-cache#251

chore: fix dependabot groups by @reneleonhardt in Swatinem/rust-cache#253

Bump the prd-patch group with 2 updates by @dependabot[bot] in Swatinem/rust-cache#254

chore(dependabot): regenerate and commit dist/ by @reneleonhardt in Swatinem/rust-cache#257

Bump @types/node from 22.16.3 to 24.2.1 in the dev-major group by @dependabot[bot] in Swatinem/rust-cache#255

Bump typescript from 5.8.3 to 5.9.2 in the dev-minor group by @dependabot[bot] in Swatinem/rust-cache#256

Bump actions/setup-node from 4 to 5 in the actions group by @dependabot[bot] in Swatinem/rust-cache#259

Update README.md by @Propfend in Swatinem/rust-cache#234

Bump @types/node from 24.2.1 to 24.3.0 in the dev-minor group by @dependabot[bot] in Swatinem/rust-cache#258

New Contributors

@ark0f made their first contribution in Swatinem/rust-cache#249

@reneleonhardt made their first contribution in Swatinem/rust-cache#251

@dependabot[bot] made their first contribution in Swatinem/rust-cache#254

@Propfend made their first contribution in Swatinem/rust-cache#234

Full Changelog: Swatinem/rust-cache@v2...v2.8.1

Changelog

Sourced from Swatinem/rust-cache's changelog.

Changelog

2.8.1

Set empty CARGO_ENCODED_RUSTFLAGS when retrieving metadata

Various dependency updates

2.8.0

Add support for warpbuild cache provider

Add new cache-workspace-crates feature

2.7.8

Include CPU arch in the cache key

2.7.7

Also cache cargo install metadata

2.7.6

Allow opting out of caching $CARGO_HOME/bin

Add runner OS in cache key

Adds an option to do lookup-only of the cache

2.7.5

Support Cargo.lock format cargo-lock v4

Only run macOsWorkaround() on macOS

2.7.3

Work around upstream problem that causes cache saving to hang for minutes.

2.7.2

Only key by Cargo.toml and Cargo.lock files of workspace members.

2.7.1

Update toml parser to fix parsing errors.

2.7.0

Properly cache trybuild tests.

2.6.2

Fix toml parsing.

... (truncated)

Commits

f13886b 2.8.1
5abb1e2 update dependencies, prepare for release
3c68c31 Bump @types/node from 24.2.1 to 24.3.0 in the dev-minor group (#258)
5467cca Update README.md (#234)
94b28bf Bump actions/setup-node from 4 to 5 in the actions group (#259)
cb8ffc2 Bump typescript from 5.8.3 to 5.9.2 in the dev-minor group (#256)
c4f0bbd Bump @types/node from 22.16.3 to 24.2.1 in the dev-major group (#255)
d8c5063 chore(dependabot): regenerate and commit dist/ (#257)
267a8a9 Merge pull request #254 from Swatinem/dependabot/npm_and_yarn/prd-patch-d0e2e...
46cb408 Bump the prd-patch group with 2 updates
Additional commits viewable in compare view

Updates ncipollo/release-action from 1.18.0 to 1.20.0

Release notes

Sourced from ncipollo/release-action's releases.

v1.20.0

What's Changed

Fixes #542 Add previous tag option by @ncipollo in ncipollo/release-action#550

Full Changelog: ncipollo/release-action@v1...v1.20.0

v1.19.2

What's Changed

Update immutableCreate's default in the documentation by @bblanchon in ncipollo/release-action#547

Fixes #548 Add support body + generated release notes by @ncipollo in ncipollo/release-action#549

New Contributors

@bblanchon made their first contribution in ncipollo/release-action#547

Full Changelog: ncipollo/release-action@v1...v1.19.2

v1.19.1

Defaults immutableCreate to false if it is omitted.

Full Changelog: ncipollo/release-action@v1.19.0...v1.19.1

v1.19.0

What's Changed

Fixes #540 Add support for immutable releases by @ncipollo in ncipollo/release-action#544

Bump actions/checkout from 4 to 5 by @dependabot[bot] in ncipollo/release-action#541

Bump glob from 11.0.2 to 11.0.3 by @dependabot[bot] in ncipollo/release-action#534

Full Changelog: ncipollo/release-action@v1...v1.19.0

Commits

b7eabc9 preparing release 1.20.0
e87de4c Fixes #542 Add previous tag option (#550)
98d25d4 preparing release 1.19.2
d360126 Fixes #548 Add support body + generated release notes (#549)
571fe81 Update immutableCreate's default in the documentation (#547)
1c89adf preparing release 1.19.1
36bf8dd References #545 Default immutable builds to false
b12185d preparing release 1.19.0
defcf13 Fixes #540 Add support for immutable releases (#544)
05013d5 Standardize on separate call to generate release notes
Additional commits viewable in compare view

Updates taiki-e/install-action from 2.58.29 to 2.62.14

Release notes

Sourced from taiki-e/install-action's releases.

2.62.14

Update trivy@latest to 0.67.0.

Update mise@latest to 2025.9.24.

2.62.13

Update zizmor@latest to 1.14.2.

2.62.12

Update mise@latest to 2025.9.23.

2.62.11

Update mise@latest to 2025.9.21.

Update just@latest to 1.43.0.

2.62.10

Update mise@latest to 2025.9.20.

Update zizmor@latest to 1.14.1.

2.62.9

Update espup@latest to 0.16.0.

Update cargo-binstall@latest to 1.15.6.

2.62.8

Update typos@latest to 1.36.3.

Update mise@latest to 2025.9.19.

2.62.7

Update mise@latest to 2025.9.18.

Update rclone@latest to 1.71.1.

2.62.6

Update wasm-bindgen@latest to 0.2.104.

Update mise@latest to 2025.9.17.

2.62.5

Update wasmtime@latest to 37.0.1.

Update uv@latest to 0.8.22.

Update uv@latest to 0.8.21.

2.62.4

Update mise@latest to 2025.9.16.

... (truncated)

Changelog

Sourced from taiki-e/install-action's changelog.

Changelog

All notable changes to this project will be documented in this file.

This project adheres to Semantic Versioning.

[Unreleased]

Update typos@latest to 1.37.0.

Update mise@latest to 2025.9.25.

[2.62.14] - 2025-09-30

Update trivy@latest to 0.67.0.

Update mise@latest to 2025.9.24.

[2.62.13] - 2025-09-29

Update zizmor@latest to 1.14.2.

[2.62.12] - 2025-09-29

Update mise@latest to 2025.9.23.

[2.62.11] - 2025-09-28

Update mise@latest to 2025.9.21.

Update just@latest to 1.43.0.

[2.62.10] - 2025-09-27

Update mise@latest to 2025.9.20.

Update zizmor@latest to 1.14.1.

[2.62.9] - 2025-09-26

Update espup@latest to 0.16.0.

Update cargo-binstall@latest to 1.15.6.

[2.62.8] - 2025-09-26

... (truncated)

Commits

3216b69 Release 2.62.14
1baf11c Update trivy@latest to 0.67.0
00c81a6 Update mise@latest to 2025.9.24
d0f4f69 Release 2.62.13
79f2c3b Update zizmor@latest to 1.14.2
1eaae0c Update .deny.toml
5ab3094 Release 2.62.12
d108ea0 Update changelog
33fea01 Update mise@latest to 2025.9.23
9473c73 Update mise@latest to 2025.9.22
Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR
@dependabot recreate will recreate this PR, overwriting any edits that have been made to it
@dependabot merge will merge this PR after your CI passes on it
@dependabot squash and merge will squash and merge this PR after your CI passes on it
@dependabot cancel merge will cancel a previously requested merge and block automerging
@dependabot reopen will reopen this PR if it is closed
@dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
@dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
@dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
@dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
@dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
@dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
@dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

Bumps the all-dependencies group with 5 updates: | Package | From | To | | --- | --- | --- | | [astral-sh/setup-uv](https://github.com/astral-sh/setup-uv) | `6.6.0` | `6.8.0` | | [github/codeql-action](https://github.com/github/codeql-action) | `3.29.11` | `3.30.5` | | [Swatinem/rust-cache](https://github.com/swatinem/rust-cache) | `2.8.0` | `2.8.1` | | [ncipollo/release-action](https://github.com/ncipollo/release-action) | `1.18.0` | `1.20.0` | | [taiki-e/install-action](https://github.com/taiki-e/install-action) | `2.58.29` | `2.62.14` | Updates `astral-sh/setup-uv` from 6.6.0 to 6.8.0 - [Release notes](https://github.com/astral-sh/setup-uv/releases) - [Commits](astral-sh/setup-uv@4959332...d0cc045) Updates `github/codeql-action` from 3.29.11 to 3.30.5 - [Release notes](https://github.com/github/codeql-action/releases) - [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md) - [Commits](github/codeql-action@3c3833e...3599b3b) Updates `Swatinem/rust-cache` from 2.8.0 to 2.8.1 - [Release notes](https://github.com/swatinem/rust-cache/releases) - [Changelog](https://github.com/Swatinem/rust-cache/blob/master/CHANGELOG.md) - [Commits](Swatinem/rust-cache@98c8021...f13886b) Updates `ncipollo/release-action` from 1.18.0 to 1.20.0 - [Release notes](https://github.com/ncipollo/release-action/releases) - [Commits](ncipollo/release-action@bcfe547...b7eabc9) Updates `taiki-e/install-action` from 2.58.29 to 2.62.14 - [Release notes](https://github.com/taiki-e/install-action/releases) - [Changelog](https://github.com/taiki-e/install-action/blob/main/CHANGELOG.md) - [Commits](taiki-e/install-action@14083e6...3216b69) --- updated-dependencies: - dependency-name: astral-sh/setup-uv dependency-version: 6.8.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: all-dependencies - dependency-name: github/codeql-action dependency-version: 3.30.5 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: all-dependencies - dependency-name: Swatinem/rust-cache dependency-version: 2.8.1 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: all-dependencies - dependency-name: ncipollo/release-action dependency-version: 1.20.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: all-dependencies - dependency-name: taiki-e/install-action dependency-version: 2.62.14 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: all-dependencies ... Signed-off-by: dependabot[bot] <support@github.com>

storopoli

ACK 9d9cdda

dependabot bot added dependencies Pull requests that update a dependency file github_actions Pull requests that update GitHub Actions code labels Oct 1, 2025

storopoli approved these changes Oct 1, 2025

View reviewed changes

storopoli merged commit b6cc06e into main Oct 1, 2025
10 checks passed

storopoli deleted the dependabot/github_actions/all-dependencies-5b04ca703b branch October 1, 2025 13:44

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

chore(deps)(deps): bump the all-dependencies group with 5 updates#12

chore(deps)(deps): bump the all-dependencies group with 5 updates#12
storopoli merged 1 commit intomainfrom
dependabot/github_actions/all-dependencies-5b04ca703b

dependabot bot commented on behalf of github Oct 1, 2025

Uh oh!

storopoli left a comment

Uh oh!

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant

Conversation

dependabot bot commented on behalf of github Oct 1, 2025

v6.7.0 🌈 New inputs restore-cache and save-cache

Changes

🚀 Enhancements

🧰 Maintenance

⬆️ Dependency updates

v6.6.1 🌈 Fix exclusions in cache-dependency-glob

Changes

🐛 Bug fixes

🧰 Maintenance

v3.30.5

CodeQL Action Changelog

3.30.5 - 26 Sep 2025

v3.30.4

CodeQL Action Changelog

3.30.4 - 25 Sep 2025

v3.30.3

CodeQL Action Changelog

3.30.3 - 10 Sep 2025

v3.30.2

CodeQL Action Changelog

3.30.2 - 09 Sep 2025

v3.30.1

CodeQL Action Changelog

CodeQL Action Changelog

[UNRELEASED]

3.30.5 - 26 Sep 2025

3.30.4 - 25 Sep 2025

3.30.3 - 10 Sep 2025

3.30.2 - 09 Sep 2025

3.30.1 - 05 Sep 2025

3.30.0 - 01 Sep 2025

3.29.11 - 21 Aug 2025

3.29.10 - 18 Aug 2025

3.29.9 - 12 Aug 2025

3.29.8 - 08 Aug 2025

v2.8.1

What's Changed

New Contributors

Changelog

2.8.1

2.8.0

2.7.8

2.7.7

2.7.6

2.7.5

2.7.3

2.7.2

2.7.1

2.7.0

2.6.2

v1.20.0

What's Changed

v1.19.2

What's Changed

New Contributors

v1.19.1

v1.19.0

What's Changed

2.62.14

2.62.13

2.62.12

2.62.11

2.62.10

2.62.9

2.62.8

2.62.7

2.62.6

2.62.5

2.62.4

Changelog

[Unreleased]

[2.62.14] - 2025-09-30

[2.62.13] - 2025-09-29

[2.62.12] - 2025-09-29

[2.62.11] - 2025-09-28

[2.62.10] - 2025-09-27

[2.62.9] - 2025-09-26

[2.62.8] - 2025-09-26

v6.7.0 🌈 New inputs `restore-cache` and `save-cache`