Skip to content

chore(ci): bump taiki-e/install-action from 2.87.26 to 2.87.27 - #599

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/github_actions/taiki-e/install-action-2.87.27
Open

dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/github_actions/taiki-e/install-action-2.87.27

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Oct 13, 2026 •

Copy link
Copy Markdown
Contributor

Bumps taiki-e/install-action from 2.87.26 to 2.87.27.

Release notes

Sourced from taiki-e/install-action's releases.

2.87.27

  • Update vacuum@latest to 0.32.0.

  • Update uv@latest to 0.12.24.

  • Update typos@latest to 1.51.1.

  • Update tombi@latest to 1.7.3.

  • Update syft@latest to 1.54.1.

  • Update release-plz@latest to 0.3.170.

  • Update mise@latest to 2026.10.4.

  • Update kingfisher@latest to 2.11.1.

  • Update hyperfine@latest to 2.0.0.

  • Update dprint@latest to 0.61.1.

  • Update cargo-nextest@latest to 0.9.148.

  • Update cargo-neat@latest to 0.6.0.

  • Update cargo-binstall@latest to 1.25.2.

Changelog

Sourced from taiki-e/install-action's changelog.

[2.87.27] - 2026-10-09

  • Update vacuum@latest to 0.32.0.

  • Update uv@latest to 0.12.24.

  • Update typos@latest to 1.51.1.

  • Update tombi@latest to 1.7.3.

  • Update syft@latest to 1.54.1.

  • Update release-plz@latest to 0.3.170.

  • Update mise@latest to 2026.10.4.

  • Update kingfisher@latest to 2.11.1.

  • Update hyperfine@latest to 2.0.0.

  • Update dprint@latest to 0.61.1.

  • Update cargo-nextest@latest to 0.9.148.

  • Update cargo-neat@latest to 0.6.0.

  • Update cargo-binstall@latest to 1.25.2.

Commits
  • ab68953 Release 2.87.27
  • 62530fd Update vacuum@latest to 0.32.0
  • f684ea4 Update uv@latest to 0.12.24
  • 8aa87a0 Update typos@latest to 1.51.1
  • 5ffcf43 Update tombi@latest to 1.7.3
  • 9926636 Update syft@latest to 1.54.1
  • 4647f42 Update release-plz@latest to 0.3.170
  • df02560 Update rclone manifest
  • d7c82f4 Update mise@latest to 2026.10.4
  • a6142d0 Update kingfisher@latest to 2.11.1
  • Additional commits viewable in compare view

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

Summary by CodeRabbit

  • Chores
    • Updated automated build and security checks. No user-facing changes.

Bumps [taiki-e/install-action](https://github.com/taiki-e/install-action) from 2.87.26 to 2.87.27.
- [Release notes](https://github.com/taiki-e/install-action/releases)
- [Changelog](https://github.com/taiki-e/install-action/blob/main/CHANGELOG.md)
- [Commits](taiki-e/install-action@v2.87.26...v2.87.27)

---
updated-dependencies:
- dependency-name: taiki-e/install-action
  dependency-version: 2.87.27
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot
dependabot Bot requested a review from doublegate as a code owner October 13, 2026 05:09
@dependabot dependabot Bot added dependencies Dependency updates github-actions GitHub Actions dependencies labels Oct 13, 2026
@coderabbitai

coderabbitai Bot commented Oct 13, 2026 •

Copy link
Copy Markdown

Review in Change Stack →

No actionable comments were generated in the recent review. 🎉

ℹ️ Recent review info
⚙️ Run configuration
  • Configuration used: Repository: doublegate/RustyNES/.coderabbit.yaml
  • Review profile: ASSERTIVE
  • Plan: Advanced
  • Run ID: 82316d19-b913-4065-bf34-9f344ebbc19a
📥 Commits

Reviewing files that changed from the base of the PR and between 67b2a6b and d10000f.

📒 Files selected for processing (2)
  • .github/workflows/ci.yml
  • .github/workflows/security.yml

Included review availability: This review used your included allowance. Your plan provides up to 10 included reviews per hour; 9 remain after this review.

📝 Walkthrough

The CI and security workflows update four jobs to use taiki-e/install-action@v2.87.27 instead of v2.87.26.

Changes: Workflow tool version update

Layer / File(s) Summary
Update workflow action version
.github/workflows/ci.yml, .github/workflows/security.yml
The fuzz, coverage, Dependency Audit, and Cargo Deny Check jobs now use taiki-e/install-action@v2.87.27.

Priority: ⬇️ Low

Estimated code review effort: 1 (Trivial) | ~5 minutes

Change: Other

Merge Risk: ⚪ Minimal · up to d1000

The CI and security jobs use the updated install-action patch version, and repository guidance permits this tag-based update. No actionable merge risk remains.

### Architecture Summary

Architecture risk: 🔵 Low · up to d1000

The changed surface does not map to a changed system, dependency edge, entrypoint, or external dependency.

Changed systems: None identified.

Architecture concerns
No architecture-level concerns identified.

Review details

Before / after behavior

  • observed — Modified behavior in .github/workflows/ci.yml: The fuzz job now uses taiki-e/install-action@v2.87.27 instead of v2.87.26.
  • observed — Modified behavior in .github/workflows/ci.yml: The coverage job now uses taiki-e/install-action@v2.87.27 instead of v2.87.26.
  • observed — Modified behavior in .github/workflows/security.yml: The Dependency Audit job now uses taiki-e/install-action@v2.87.27 instead of v2.87.26.
  • observed — Modified behavior in .github/workflows/security.yml: The Cargo Deny Check job now uses taiki-e/install-action@v2.87.27 instead of v2.87.26.
Pre-merge checks · Passed 9
Passed Passed checks (9 passed)
Check name Status Explanation
Description Check Passed Check skipped - CodeRabbit’s high-level summary is enabled.
Title check Passed The title clearly and concisely describes the main change: updating taiki-e/install-action from 2.87.26 to 2.87.27 in CI workflows.
Docstring Coverage Passed No functions found in the changed files to evaluate docstring coverage. Skipping docstring coverage check. Docstring coverage is scoped to functions touched by this diff. Analyzed 0 functions across 0…
Linked Issues check Passed Check skipped because no linked issues were found for this pull request.
Out of Scope Changes check Passed Check skipped because no linked issues were found for this pull request.
Docs-As-Spec Sync Passed The pull request changes only .github/workflows/ci.yml and .github/workflows/security.yml. It updates taiki-e/install-action from v2.87.26 to v2.87.27 and does not change code in the specifi…
Changelog Entry For User-Visible Changes Passed PASS. The reviewed diff changes only .github/workflows/ci.yml and .github/workflows/security.yml, updating taiki-e/install-action from v2.87.26 to v2.87.27. No application behavior or user-f…
No Unwrap/Expect/Panic On Untrusted Input Passed The pull request changes only four GitHub Actions references from taiki-e/install-action@v2.87.26 to @v2.87.27 in workflow YAML files. The diff adds no .unwrap(), .expect(), or panic!() call…
Safety Comment On New Unsafe Blocks Passed PASS. The pull request changes only GitHub Actions workflow references from taiki-e/install-action@v2.87.26 to @v2.87.27. The authoritative diff adds no Rust unsafe { ... } blocks or unsafe fn…
✨ Finishing Touches
🧪 Generate unit tests (beta)
  • Commit to this branch
  • Create a new PR
  • Autofix · Keep fixing CodeRabbit findings and required CI, and resolving merge conflicts

Comment @coderabbitai help to get the list of available commands.

@github-actions

Copy link
Copy Markdown

Antigravity review (Gemini via Ultra)

Updates the third-party taiki-e/install-action GitHub Action from v2.87.26 to v2.87.27 across CI and security workflows.

Blocking issues

None found. The change is trivial and consistently applied across all existing invocations.

Suggestions

  • Pin actions to immutable commit SHAs: .github/workflows/ci.yml (lines 1068, 1132) and .github/workflows/security.yml (lines 79, 95) reference mutable tags (@v2.87.27). To protect against tag mutation or upstream supply-chain compromise, consider pinning third-party actions to full commit SHAs with a version comment (e.g., uses: taiki-e/install-action@<sha> # v2.87.27).

Nitpicks

None.

Automated first-pass review by agy on a self-hosted runner -- not a human review.

This branch has not been deployed

No deployments
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Dependency updates github-actions GitHub Actions dependencies

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant