chore(deps): bump dtolnay/rust-toolchain from f7ccc83f9ed1e5b9c81d8a67d7ad1a747e22a561 to efa25f7f19611383d5b0ccf2d1c8914531636bf9 in /.github/actions/rust #19

	name: Lint GitHub Actions workflows
	on:
	pull_request:
	branches: ["main"]
	paths: [".github/**"]
	merge_group:

	concurrency:
	group: ${{ github.workflow }}-${{ github.event.pull_request.number \|\| github.ref }}
	cancel-in-progress: true

	permissions:
	contents: read

	jobs:
	actionlint:
	name: actionlint 🛠️
	runs-on: ubuntu-24.04
	defaults:
	run:
	shell: bash
	steps:
	- uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
	with:
	persist-credentials: false

	- name: Download actionlint
	id: get_actionlint
	run: bash <(curl https://raw.githubusercontent.com/rhysd/actionlint/main/scripts/download-actionlint.bash)

	- name: Check workflow files
	env:
	ACTIONLINT: ${{ steps.get_actionlint.outputs.executable }}
	run: \|
	echo "::add-matcher::.github/actionlint-matcher.json"
	$ACTIONLINT -color

	zizmor:
	name: zizmor 🌈
	runs-on: ubuntu-24.04
	permissions:
	security-events: write # This permission is required to upload SARIF files.
	steps:
	- uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
	with:
	persist-credentials: false

	- uses: astral-sh/setup-uv@61cb8a9741eeb8a550a1b8544337180c0fc8476b # v7.2.0

	- run: uvx zizmor --persona auditor --format sarif . > results.sarif
	env:
	GH_TOKEN: ${{ secrets.GITHUB_TOKEN }}

	- uses: github/codeql-action/upload-sarif@5d4e8d1aca955e8d8589aabd499c5cae939e33c7 # v4.31.9
	with:
	sarif_file: results.sarif
	category: zizmor

Provide feedback