chore(deps): Update compatible (actions) (#88)

This PR contains the following updates:

| Package | Type | Update | Change |
|---|---|---|---|
|
[EmbarkStudios/cargo-deny-action](https://redirect.github.com/EmbarkStudios/cargo-deny-action)
| action | minor | `v2.0.20` → `v2.1.1` |
| [actions/checkout](https://redirect.github.com/actions/checkout) |
action | minor | `v6.0.3` → `v6.1.0` |
|
[actions/upload-code-coverage](https://redirect.github.com/actions/upload-code-coverage)
| action | patch | `v1.4.0` → `v1.4.1` |
|
[github/codeql-action](https://redirect.github.com/github/codeql-action)
| action | minor | `v4.36.2` → `v4.37.4` |
| [j178/prek-action](https://redirect.github.com/j178/prek-action) |
action | patch | `v2.0.5` → `v2.0.6` |
|
[taiki-e/install-action](https://redirect.github.com/taiki-e/install-action)
| action | minor | `v2.82.7` → `v2.85.5` |
|
[zizmorcore/zizmor-action](https://redirect.github.com/zizmorcore/zizmor-action)
| action | minor | `v0.5.7` → `v0.6.1` |

---

### Release Notes

<details>
<summary>EmbarkStudios/cargo-deny-action
(EmbarkStudios/cargo-deny-action)</summary>

###
[`v2.1.1`](https://redirect.github.com/EmbarkStudios/cargo-deny-action/releases/tag/v2.1.1):
Release 2.1.1 - cargo-deny 0.20.2

[Compare
Source](https://redirect.github.com/EmbarkStudios/cargo-deny-action/compare/v2.1.0...v2.1.1)

#### Fixed

-
[PR#116](https://redirect.github.com/EmbarkStudios/cargo-deny-action/pull/116)
fixed in issue introduced in the 2.1.0 release due the deprecation of
the `use-git-cli` argument. Thanks
[@&#8203;Firestar99](https://redirect.github.com/Firestar99)!

###
[`v2.1.0`](https://redirect.github.com/EmbarkStudios/cargo-deny-action/releases/tag/v2.1.0):
Release 2.1.0 - cargo-deny 0.20.2

[Compare
Source](https://redirect.github.com/EmbarkStudios/cargo-deny-action/compare/v2.0.20...v2.1.0)

##### Changed

-
[PR#881](https://redirect.github.com/EmbarkStudios/cargo-deny/pull/881)
refactored the CLI, moving some duplicated options/flags into the root
and removing several deprecated options/flags/values. See the PR for a
full list of changes.

##### Added

-
[PR#879](https://redirect.github.com/EmbarkStudios/cargo-deny/pull/879)
resolved
[#&#8203;873](https://redirect.github.com/EmbarkStudios/cargo-deny/issues/873)
by adding a new
[`bans.std-replacements`](https://embarkstudios.github.io/cargo-deny/checks/bans/cfg.html#the-std-replacements-field-optional)
lint which checks the graph for crates.io sourced crates that have been
partially or fully replaced in `std` and/or `core`.

##### Fixed

-
[PR#880](https://redirect.github.com/EmbarkStudios/cargo-deny/pull/880)
resolved
[#&#8203;765](https://redirect.github.com/EmbarkStudios/cargo-deny/issues/765)
by respecting non-default build script paths in manifests.
-
[PR#881](https://redirect.github.com/EmbarkStudios/cargo-deny/pull/881)
resolved
[#&#8203;874](https://redirect.github.com/EmbarkStudios/cargo-deny/issues/874)
by cleaning up the CLI, deduplicating some options/flags that caused bug
in the `list` subcommand.

</details>

<details>
<summary>actions/checkout (actions/checkout)</summary>

###
[`v6.1.0`](https://redirect.github.com/actions/checkout/compare/v6.0.3...v6.1.0)

[Compare
Source](https://redirect.github.com/actions/checkout/compare/v6.0.3...v6.1.0)

</details>

<details>
<summary>actions/upload-code-coverage
(actions/upload-code-coverage)</summary>

###
[`v1.4.1`](https://redirect.github.com/actions/upload-code-coverage/compare/v1.4.0...v1.4.1)

[Compare
Source](https://redirect.github.com/actions/upload-code-coverage/compare/v1.4.0...v1.4.1)

</details>

<details>
<summary>github/codeql-action (github/codeql-action)</summary>

###
[`v4.37.4`](https://redirect.github.com/github/codeql-action/compare/v4.37.3...v4.37.4)

[Compare
Source](https://redirect.github.com/github/codeql-action/compare/v4.37.3...v4.37.4)

###
[`v4.37.3`](https://redirect.github.com/github/codeql-action/releases/tag/v4.37.3)

[Compare
Source](https://redirect.github.com/github/codeql-action/compare/v4.37.2...v4.37.3)

No user facing changes.

###
[`v4.37.2`](https://redirect.github.com/github/codeql-action/releases/tag/v4.37.2)

[Compare
Source](https://redirect.github.com/github/codeql-action/compare/v4.37.1...v4.37.2)

- The new address format for the `config-file` input that was introduced
in CodeQL Action 4.37.0 is now enabled by default. In addition to the
format described there, the `remote=` prefix can now be used to
explicitly indicate that the input refers to a remote file. All previous
input formats continue to be accepted as well.
[#&#8203;4023](https://redirect.github.com/github/codeql-action/pull/4023)
- The CodeQL Action can now make use of [configured private
registries](https://docs.github.com/en/code-security/how-tos/secure-at-scale/configure-organization-security/manage-usage-and-access/giving-org-access-private-registries)
in Default Setup to retrieve CodeQL configuration files from remote
repositories that require authentication. This will allow customers to
store their CodeQL configuration in a single repository that can then be
referenced by Default Setup workflows in other repositories. We expect
to roll this and other, related changes out to everyone in July.
[#&#8203;4007](https://redirect.github.com/github/codeql-action/pull/4007)

###
[`v4.37.1`](https://redirect.github.com/github/codeql-action/releases/tag/v4.37.1)

[Compare
Source](https://redirect.github.com/github/codeql-action/compare/v4.37.0...v4.37.1)

- *Upcoming breaking change*: Add a deprecation warning for customers
using CodeQL version 2.20.6 and earlier. These versions of CodeQL were
discontinued on 1 July 2026 alongside GitHub Enterprise Server 3.16, and
will be unsupported by the next minor release of the CodeQL Action.
[#&#8203;3956](https://redirect.github.com/github/codeql-action/pull/3956)
- Update default CodeQL bundle version to
[2.26.1](https://redirect.github.com/github/codeql-action/releases/tag/codeql-bundle-v2.26.1).
[#&#8203;4019](https://redirect.github.com/github/codeql-action/pull/4019)

###
[`v4.37.0`](https://redirect.github.com/github/codeql-action/releases/tag/v4.37.0)

[Compare
Source](https://redirect.github.com/github/codeql-action/compare/v4.36.3...v4.37.0)

- Update default CodeQL bundle version to
[2.26.0](https://redirect.github.com/github/codeql-action/releases/tag/codeql-bundle-v2.26.0).
[#&#8203;3995](https://redirect.github.com/github/codeql-action/pull/3995)
- In addition to the existing input format, the `config-file` input for
the `codeql-action/init` step will soon support a new
`[owner/]repo[@&#8203;ref][:path]` format. All components except the
repository name are optional. If omitted, `owner` defaults to the same
owner as the repository the analysis is running for, `ref` to `main`,
and `path` to `.github/codeql-action.yaml`. Support for this format
ships in this version of the CodeQL Action, but will only be enabled
over the coming weeks.
[#&#8203;3973](https://redirect.github.com/github/codeql-action/pull/3973)

###
[`v4.36.3`](https://redirect.github.com/github/codeql-action/releases/tag/v4.36.3)

[Compare
Source](https://redirect.github.com/github/codeql-action/compare/v4.36.2...v4.36.3)

No user facing changes.

</details>

<details>
<summary>j178/prek-action (j178/prek-action)</summary>

###
[`v2.0.6`](https://redirect.github.com/j178/prek-action/releases/tag/v2.0.6)

[Compare
Source](https://redirect.github.com/j178/prek-action/compare/v2.0.5...v2.0.6)

#### What's Changed

- Update known versions for prek 0.4.6 by
[@&#8203;j178](https://redirect.github.com/j178) in
[#&#8203;159](https://redirect.github.com/j178/prek-action/pull/159)
- Update known versions for prek 0.4.8 by
[@&#8203;j178](https://redirect.github.com/j178) in
[#&#8203;162](https://redirect.github.com/j178/prek-action/pull/162)
- Update known versions for prek 0.4.9 by
[@&#8203;j178](https://redirect.github.com/j178) in
[#&#8203;163](https://redirect.github.com/j178/prek-action/pull/163)
- Update known versions for prek 0.4.10 by
[@&#8203;j178](https://redirect.github.com/j178) in
[#&#8203;167](https://redirect.github.com/j178/prek-action/pull/167)
- Disable color in `prek cache dir` output by
[@&#8203;KSmanis](https://redirect.github.com/KSmanis) in
[#&#8203;168](https://redirect.github.com/j178/prek-action/pull/168)

#### New Contributors

- [@&#8203;KSmanis](https://redirect.github.com/KSmanis) made their
first contribution in
[#&#8203;168](https://redirect.github.com/j178/prek-action/pull/168)

**Full Changelog**:
<https://github.com/j178/prek-action/compare/v2...v2.0.6>

</details>

<details>
<summary>taiki-e/install-action (taiki-e/install-action)</summary>

###
[`v2.85.5`](https://redirect.github.com/taiki-e/install-action/compare/v2.85.4...v2.85.5)

[Compare
Source](https://redirect.github.com/taiki-e/install-action/compare/v2.85.4...v2.85.5)

###
[`v2.85.4`](https://redirect.github.com/taiki-e/install-action/releases/tag/v2.85.4):
2.85.4

[Compare
Source](https://redirect.github.com/taiki-e/install-action/compare/v2.85.3...v2.85.4)

- Update `uv@latest` to 0.11.33.

- Update `mise@latest` to 2026.7.15.

- Update `biome@latest` to 2.5.6.

###
[`v2.85.3`](https://redirect.github.com/taiki-e/install-action/releases/tag/v2.85.3):
2.85.3

[Compare
Source](https://redirect.github.com/taiki-e/install-action/compare/v2.85.2...v2.85.3)

- Update `xh@latest` to 0.26.2.

- Update `ubi@latest` to 0.10.0.

- Update `mise@latest` to 2026.7.14.

- Update `martin@latest` to 1.13.0.

- Update `cargo-shear@latest` to 1.13.3.

- Update `cargo-binstall@latest` to 1.21.1.

###
[`v2.85.2`](https://redirect.github.com/taiki-e/install-action/releases/tag/v2.85.2):
2.85.2

[Compare
Source](https://redirect.github.com/taiki-e/install-action/compare/v2.85.1...v2.85.2)

- Update `prek@latest` to 0.4.11.

- Update `mise@latest` to 2026.7.13.

- Update `kingfisher@latest` to 1.109.0.

###
[`v2.85.1`](https://redirect.github.com/taiki-e/install-action/releases/tag/v2.85.1):
2.85.1

[Compare
Source](https://redirect.github.com/taiki-e/install-action/compare/v2.85.0...v2.85.1)

- Update `vacuum@latest` to 0.30.0.

- Update `uv@latest` to 0.11.32.

- Update `mise@latest` to 2026.7.12.

- Update `cyclonedx@latest` to 0.33.1.

- Update `cargo-neat@latest` to 0.5.2.

###
[`v2.85.0`](https://redirect.github.com/taiki-e/install-action/releases/tag/v2.85.0):
2.85.0

[Compare
Source](https://redirect.github.com/taiki-e/install-action/compare/v2.84.1...v2.85.0)

- Support `wild` (alias: `wild-linker`).
([#&#8203;1949](https://redirect.github.com/taiki-e/install-action/pull/1949))

- Support `bpf-linker`.
([#&#8203;1950](https://redirect.github.com/taiki-e/install-action/pull/1950))

- Support `rafn`.
([#&#8203;1935](https://redirect.github.com/taiki-e/install-action/pull/1935),
thanks [@&#8203;DarkWanderer](https://redirect.github.com/DarkWanderer))

- Update `cargo-neat@latest` to 0.5.1.

- Update `zizmor@latest` to 1.28.0.

- Update `wasmtime@latest` to 47.0.2.

- Update `uv@latest` to 0.11.31.

- Update `syft@latest` to 1.49.0.

###
[`v2.84.1`](https://redirect.github.com/taiki-e/install-action/releases/tag/v2.84.1):
2.84.1

[Compare
Source](https://redirect.github.com/taiki-e/install-action/compare/v2.84.0...v2.84.1)

- Update `wasmtime@latest` to 47.0.1.

- Update `wasm-tools@latest` to 1.254.0.

- Update `uv@latest` to 0.11.30.

- Update `mise@latest` to 2026.7.11.

- Update `cargo-neat@latest` to 0.5.0.

- Update `cargo-crap@latest` to 0.3.1.

- Update `biome@latest` to 2.5.5.

###
[`v2.84.0`](https://redirect.github.com/taiki-e/install-action/releases/tag/v2.84.0):
2.84.0

[Compare
Source](https://redirect.github.com/taiki-e/install-action/compare/v2.83.4...v2.84.0)

- Support `d2`.
([#&#8203;1944](https://redirect.github.com/taiki-e/install-action/pull/1944))

- Support `protoc-gen-connect-openapi`.
([#&#8203;1922](https://redirect.github.com/taiki-e/install-action/pull/1922),
thanks [@&#8203;JasterV](https://redirect.github.com/JasterV))

- Update `convco@latest` to 0.7.0.
([#&#8203;1941](https://redirect.github.com/taiki-e/install-action/pull/1941),
thanks [@&#8203;graelo](https://redirect.github.com/graelo))

- Update `just@latest` to 1.57.0.

- Update `cargo-semver-checks@latest` to 0.49.0.

- Update `tombi@latest` to 1.2.4.

- Update `cosign@latest` to 3.1.2.

###
[`v2.83.4`](https://redirect.github.com/taiki-e/install-action/releases/tag/v2.83.4):
2.83.4

[Compare
Source](https://redirect.github.com/taiki-e/install-action/compare/v2.83.3...v2.83.4)

- Update `vacuum@latest` to 0.29.10.

- Update `uv@latest` to 0.11.29.

- Update `syft@latest` to 1.48.0.

- Update `prek@latest` to 0.4.10.

- Update `mise@latest` to 2026.7.7.

- Update `cargo-shear@latest` to 1.13.2.

###
[`v2.83.3`](https://redirect.github.com/taiki-e/install-action/releases/tag/v2.83.3):
2.83.3

[Compare
Source](https://redirect.github.com/taiki-e/install-action/compare/v2.83.2...v2.83.3)

- Update `release-plz@latest` to 0.3.160.

- Update `prek@latest` to 0.4.9.

- Update `mise@latest` to 2026.7.6.

- Update `dprint@latest` to 0.55.2.

- Update `cargo-dinghy@latest` to 0.8.5.

- Update `cargo-binstall@latest` to 1.21.0.

- Update `biome@latest` to 2.5.4.

###
[`v2.83.2`](https://redirect.github.com/taiki-e/install-action/releases/tag/v2.83.2):
2.83.2

[Compare
Source](https://redirect.github.com/taiki-e/install-action/compare/v2.83.1...v2.83.2)

- Update `parse-dockerfile@latest` to 0.1.8.

- Update `mise@latest` to 2026.7.5.

- Update `just@latest` to 1.56.0.

- Update `gungraun-runner@latest` to 0.19.4.

- Update `cargo-neat@latest` to 0.4.1.

###
[`v2.83.1`](https://redirect.github.com/taiki-e/install-action/releases/tag/v2.83.1):
2.83.1

[Compare
Source](https://redirect.github.com/taiki-e/install-action/compare/v2.83.0...v2.83.1)

- Update `rclone@latest` to 1.74.4.

- Update `mise@latest` to 2026.7.4.

- Update `cargo-deny@latest` to 0.20.2.

###
[`v2.83.0`](https://redirect.github.com/taiki-e/install-action/releases/tag/v2.83.0):
2.83.0

[Compare
Source](https://redirect.github.com/taiki-e/install-action/compare/v2.82.11...v2.83.0)

- Support `cargo-about`.
([#&#8203;1924](https://redirect.github.com/taiki-e/install-action/pull/1924),
thanks [@&#8203;ruffsl](https://redirect.github.com/ruffsl))

- Update `uv@latest` to 0.11.28.

- Update `martin@latest` to 1.12.0.

- Update `kingfisher@latest` to 1.106.0.

- Update `biome@latest` to 2.5.3.

###
[`v2.82.11`](https://redirect.github.com/taiki-e/install-action/releases/tag/v2.82.11):
2.82.11

[Compare
Source](https://redirect.github.com/taiki-e/install-action/compare/v2.82.10...v2.82.11)

- Update `wasm-tools@latest` to 1.253.0.

- Update `uv@latest` to 0.11.27.

- Update `mise@latest` to 2026.7.2.

- Update `mdbook@latest` to 0.5.4.

###
[`v2.82.10`](https://redirect.github.com/taiki-e/install-action/releases/tag/v2.82.10):
2.82.10

[Compare
Source](https://redirect.github.com/taiki-e/install-action/compare/v2.82.9...v2.82.10)

- Update `tombi@latest` to 1.2.0.

- Update `cargo-nextest@latest` to 0.9.140.

###
[`v2.82.9`](https://redirect.github.com/taiki-e/install-action/releases/tag/v2.82.9):
2.82.9

[Compare
Source](https://redirect.github.com/taiki-e/install-action/compare/v2.82.8...v2.82.9)

- Update `vacuum@latest` to 0.29.9.

- Update `prek@latest` to 0.4.8.

- Update `cargo-tarpaulin@latest` to 0.37.0.

- Update `cargo-leptos@latest` to 0.3.7.

###
[`v2.82.8`](https://redirect.github.com/taiki-e/install-action/releases/tag/v2.82.8):
2.82.8

[Compare
Source](https://redirect.github.com/taiki-e/install-action/compare/v2.82.7...v2.82.8)

- Update `vacuum@latest` to 0.29.8.

- Update `uv@latest` to 0.11.26.

- Update `typos@latest` to 1.48.0.

- Update `trivy@latest` to 0.72.0.

- Update `tombi@latest` to 1.1.7.

- Update `prek@latest` to 0.4.6.

- Update `mise@latest` to 2026.7.0.

- Update `just@latest` to 1.55.1.

- Update `biome@latest` to 2.5.2.

</details>

<details>
<summary>zizmorcore/zizmor-action (zizmorcore/zizmor-action)</summary>

###
[`v0.6.1`](https://redirect.github.com/zizmorcore/zizmor-action/releases/tag/v0.6.1)

[Compare
Source](https://redirect.github.com/zizmorcore/zizmor-action/compare/v0.6.0...v0.6.1)

zizmor 1.28.0 is now the default version used by the action.

###
[`v0.6.0`](https://redirect.github.com/zizmorcore/zizmor-action/releases/tag/v0.6.0)

[Compare
Source](https://redirect.github.com/zizmorcore/zizmor-action/compare/v0.5.7...v0.6.0)

zizmor 1.27.0 is now the default version used by the action.

#### What's Changed

- Fold Docker image pull output into a collapsed Actions log group by
[@&#8203;woodruffw](https://redirect.github.com/woodruffw) with
[@&#8203;Copilot](https://redirect.github.com/Copilot) in
[#&#8203;132](https://redirect.github.com/zizmorcore/zizmor-action/pull/132)
- Readme: document missing inputs by
[@&#8203;staabm](https://redirect.github.com/staabm) in
[#&#8203;130](https://redirect.github.com/zizmorcore/zizmor-action/pull/130)
- ci: block version sync workflow on forks by
[@&#8203;shaanmajid](https://redirect.github.com/shaanmajid) in
[#&#8203;129](https://redirect.github.com/zizmorcore/zizmor-action/pull/129)
- Sync zizmor versions by
[@&#8203;github-actions](https://redirect.github.com/github-actions)\[bot]
in
[#&#8203;137](https://redirect.github.com/zizmorcore/zizmor-action/pull/137)
- Add `collect` input by
[@&#8203;woodruffw](https://redirect.github.com/woodruffw) in
[#&#8203;139](https://redirect.github.com/zizmorcore/zizmor-action/pull/139)

#### New Contributors

- [@&#8203;woodruffw](https://redirect.github.com/woodruffw) with
[@&#8203;Copilot](https://redirect.github.com/Copilot) made their first
contribution in
[#&#8203;132](https://redirect.github.com/zizmorcore/zizmor-action/pull/132)
- [@&#8203;staabm](https://redirect.github.com/staabm) made their first
contribution in
[#&#8203;130](https://redirect.github.com/zizmorcore/zizmor-action/pull/130)
- [@&#8203;shaanmajid](https://redirect.github.com/shaanmajid) made
their first contribution in
[#&#8203;129](https://redirect.github.com/zizmorcore/zizmor-action/pull/129)

**Full Changelog**:
<https://github.com/zizmorcore/zizmor-action/compare/v0.5.7...v0.6.0>

</details>

---

### Configuration

📅 **Schedule**: (UTC)

- Branch creation
  - "before 5am on the first day of the month"
- Automerge
  - At any time (no schedule defined)

🚦 **Automerge**: Enabled.

♻ **Rebasing**: Whenever PR is behind base branch, or you tick the
rebase/retry checkbox.

👻 **Immortal**: This PR will be recreated if closed unmerged. Get
[config
help](https://redirect.github.com/renovatebot/renovate/discussions) if
that's undesired.

---

- [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check
this box

---

This PR was generated by [Mend Renovate](https://mend.io/renovate/).
View the [repository job
log](https://developer.mend.io/github/epage/_rust).

<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0NC4zLjIiLCJ1cGRhdGVkSW5WZXIiOiI0NC4zLjIiLCJ0YXJnZXRCcmFuY2giOiJtYWluIiwibGFiZWxzIjpbXX0=-->

Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>

.github/workflows/audit.yml

@@ -43,11 +43,11 @@ jobs:
           - advisories
     steps:
     - name: Checkout repository
-      uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6.0.3
+      uses: actions/checkout@d23441a48e516b6c34aea4fa41551a30e30af803 # v6.1.0
       with:
         persist-credentials: false
     - name: Lint advisories
-      uses: EmbarkStudios/cargo-deny-action@bb137d7af7e4fb67e5f82a49c4fce4fad40782fe # v2.0.20
+      uses: EmbarkStudios/cargo-deny-action@3c6349835b2b7b196a839186cb8b78e02f7b5f25 # v2.1.1
       with:
         command: check ${{ matrix.checks }}
         rust-version: stable
@@ -63,11 +63,11 @@ jobs:
           - bans licenses sources
     steps:
     - name: Checkout repository
-      uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6.0.3
+      uses: actions/checkout@d23441a48e516b6c34aea4fa41551a30e30af803 # v6.1.0
       with:
         persist-credentials: false
     - name: Lint bans
-      uses: EmbarkStudios/cargo-deny-action@bb137d7af7e4fb67e5f82a49c4fce4fad40782fe # v2.0.20
+      uses: EmbarkStudios/cargo-deny-action@3c6349835b2b7b196a839186cb8b78e02f7b5f25 # v2.1.1
       with:
         command: check ${{ matrix.checks }}
         rust-version: stable
@@ -80,8 +80,8 @@ jobs:
       actions: read # only needed for private or internal repos
     steps:
     - name: Checkout repository
-      uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6.0.3
+      uses: actions/checkout@d23441a48e516b6c34aea4fa41551a30e30af803 # v6.1.0
       with:
         persist-credentials: false
     - name: Run zizmor
-      uses: zizmorcore/zizmor-action@192e21d79ab29983730a13d1382995c2307fbcaa # v0.5.7
+      uses: zizmorcore/zizmor-action@6fc4b006235f201fdab3722e17240ab420d580e5 # v0.6.1

.github/workflows/ci.yml

@@ -43,7 +43,7 @@ jobs:
       CARGO_PROFILE_DEV_DEBUG: line-tables-only
     steps:
     - name: Checkout repository
-      uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6.0.3
+      uses: actions/checkout@d23441a48e516b6c34aea4fa41551a30e30af803 # v6.1.0
       with:
         persist-credentials: false
     - name: Install Rust
@@ -53,7 +53,7 @@ jobs:
     - name: Initialize cache
       uses: Swatinem/rust-cache@c19371144df3bb44fab255c43d04cbc2ab54d1c4 # v2.9.1
     - name: Install cargo-hack
-      uses: taiki-e/install-action@16b05812d776ae1dfaabc8277e421fb6d2506419  # v2.82.7
+      uses: taiki-e/install-action@6a1bd70eaac3c8bdf093356838d7ee09fda951cf  # v2.85.5
       with:
         tool: cargo-hack
     - name: Build
@@ -68,7 +68,7 @@ jobs:
     runs-on: ${{ matrix.os }}
     steps:
     - name: Checkout repository
-      uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6.0.3
+      uses: actions/checkout@d23441a48e516b6c34aea4fa41551a30e30af803 # v6.1.0
       with:
         persist-credentials: false
     - name: Install Rust
@@ -78,7 +78,7 @@ jobs:
     - name: Initialize cache
       uses: Swatinem/rust-cache@c19371144df3bb44fab255c43d04cbc2ab54d1c4 # v2.9.1
     - name: Install cargo-hack
-      uses: taiki-e/install-action@16b05812d776ae1dfaabc8277e421fb6d2506419  # v2.82.7
+      uses: taiki-e/install-action@6a1bd70eaac3c8bdf093356838d7ee09fda951cf  # v2.85.5
       with:
         tool: cargo-hack
     - name: Default features
@@ -91,7 +91,7 @@ jobs:
     runs-on: ${{ matrix.os }}
     steps:
     - name: Checkout repository
-      uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6.0.3
+      uses: actions/checkout@d23441a48e516b6c34aea4fa41551a30e30af803 # v6.1.0
       with:
         persist-credentials: false
     - name: Install stable Rust
@@ -110,7 +110,7 @@ jobs:
     runs-on: ubuntu-latest
     steps:
     - name: Checkout repository
-      uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6.0.3
+      uses: actions/checkout@d23441a48e516b6c34aea4fa41551a30e30af803 # v6.1.0
       with:
         persist-credentials: false
     - name: Install Rust
@@ -126,7 +126,7 @@ jobs:
     runs-on: ubuntu-latest
     steps:
     - name: Checkout repository
-      uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6.0.3
+      uses: actions/checkout@d23441a48e516b6c34aea4fa41551a30e30af803 # v6.1.0
       with:
         persist-credentials: false
     - name: Install Rust
@@ -144,7 +144,7 @@ jobs:
     runs-on: ubuntu-latest
     steps:
     - name: Checkout repository
-      uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6.0.3
+      uses: actions/checkout@d23441a48e516b6c34aea4fa41551a30e30af803 # v6.1.0
       with:
         persist-credentials: false
     - name: Install Rust
@@ -163,7 +163,7 @@ jobs:
       security-events: write # to upload sarif results
     steps:
     - name: Checkout repository
-      uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6.0.3
+      uses: actions/checkout@d23441a48e516b6c34aea4fa41551a30e30af803 # v6.1.0
       with:
         persist-credentials: false
     - name: Install Rust
@@ -185,7 +185,7 @@ jobs:
         | sarif-fmt
       continue-on-error: true
     - name: Upload
-      uses: github/codeql-action/upload-sarif@8aad20d150bbac5944a9f9d289da16a4b0d87c1e # v4.36.2
+      uses: github/codeql-action/upload-sarif@f205ea1c3313d32999d8d6a48b4f6530d4437b38 # v4.37.4
       with:
         sarif_file: clippy-results.sarif
         wait-for-processing: true
@@ -200,7 +200,7 @@ jobs:
       code-quality: write
     steps:
     - name: Checkout repository
-      uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6.0.3
+      uses: actions/checkout@d23441a48e516b6c34aea4fa41551a30e30af803 # v6.1.0
       with:
         persist-credentials: false
     - name: Install Rust
@@ -215,7 +215,7 @@ jobs:
       run: cargo tarpaulin --out xml
     - name: Upload coverage report
       if: github.event_name != 'pull_request' || github.event.pull_request.head.repo.full_name == github.repository
-      uses: actions/upload-code-coverage@a72ab75b4dee0e479386fb9bf33c8dcf64b9c772 # v1.4.0
+      uses: actions/upload-code-coverage@1c15be36fc3733ba839b1dd643bd9556e4426dc1 # v1.4.1
       with:
         file: cobertura.xml
         language: Rust

.github/workflows/committed.yml

@@ -21,7 +21,7 @@ jobs:
     runs-on: ubuntu-latest
     steps:
     - name: Checkout repository
-      uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6.0.3
+      uses: actions/checkout@d23441a48e516b6c34aea4fa41551a30e30af803 # v6.1.0
       with:
         fetch-depth: 0
         persist-credentials: false

.github/workflows/pre-commit.yml

@@ -23,10 +23,10 @@ jobs:
     runs-on: ubuntu-latest
     steps:
     - name: Checkout repository
-      uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6.0.3
+      uses: actions/checkout@d23441a48e516b6c34aea4fa41551a30e30af803 # v6.1.0
       with:
         persist-credentials: false
     - name: prek
-      uses: j178/prek-action@e98a699c41eb69ab013a45817a0406469a748f8d # v2.0.5
+      uses: j178/prek-action@5337cb91e0fa35a7ff31b9ca345126d8bbbcdf16 # v2.0.6
       with:
         prek-version: '0.4.11'

.github/workflows/rust-next.yml

@@ -33,7 +33,7 @@ jobs:
       CARGO_PROFILE_DEV_DEBUG: line-tables-only
     steps:
     - name: Checkout repository
-      uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6.0.3
+      uses: actions/checkout@d23441a48e516b6c34aea4fa41551a30e30af803 # v6.1.0
       with:
         persist-credentials: false
     - name: Install Rust
@@ -43,7 +43,7 @@ jobs:
     - name: Initialize cache
       uses: Swatinem/rust-cache@c19371144df3bb44fab255c43d04cbc2ab54d1c4 # v2.9.1
     - name: Install cargo-hack
-      uses: taiki-e/install-action@16b05812d776ae1dfaabc8277e421fb6d2506419  # v2.82.7
+      uses: taiki-e/install-action@6a1bd70eaac3c8bdf093356838d7ee09fda951cf  # v2.85.5
       with:
         tool: cargo-hack
     - name: Build
@@ -60,7 +60,7 @@ jobs:
       CARGO_RESOLVER_INCOMPATIBLE_RUST_VERSIONS: allow
     steps:
     - name: Checkout repository
-      uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6.0.3
+      uses: actions/checkout@d23441a48e516b6c34aea4fa41551a30e30af803 # v6.1.0
       with:
         persist-credentials: false
     - name: Install Rust
@@ -70,7 +70,7 @@ jobs:
     - name: Initialize cache
       uses: Swatinem/rust-cache@c19371144df3bb44fab255c43d04cbc2ab54d1c4 # v2.9.1
     - name: Install cargo-hack
-      uses: taiki-e/install-action@16b05812d776ae1dfaabc8277e421fb6d2506419  # v2.82.7
+      uses: taiki-e/install-action@6a1bd70eaac3c8bdf093356838d7ee09fda951cf  # v2.85.5
       with:
         tool: cargo-hack
     - name: Update dependencies

.github/workflows/spelling.yml

@@ -20,7 +20,7 @@ jobs:
     runs-on: ubuntu-latest
     steps:
     - name: Checkout Actions Repository
-      uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6.0.3
+      uses: actions/checkout@d23441a48e516b6c34aea4fa41551a30e30af803 # v6.1.0
       with:
         persist-credentials: false
     - name: Spell Check Repo

.github/workflows/template.yml

@@ -28,7 +28,7 @@ jobs:
     runs-on: ubuntu-latest
     steps:
     - name: Checkout repository
-      uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6.0.3
+      uses: actions/checkout@d23441a48e516b6c34aea4fa41551a30e30af803 # v6.1.0
       with:
         fetch-depth: 0
         persist-credentials: true # to push the branch and create PR