fix(deps): update github-actions

[renovate]

This PR contains the following updates:

Package	Type	Update	Change
actions/checkout	action	patch	v6.0.2 → v6.0.3
anolilab/workflows	action	pinDigest	→ d7d8471
github/codeql-action	action	minor	v4.35.5 → v4.36.2
lewagon/wait-on-check-action	action	minor	v1.7.0 → v1.8.0
oxc-project/setup-rust	action	patch	v1.0.16 → v1.0.17
taiki-e/install-action	action	minor	v2.78.1 → v2.81.10
taiki-e/install-action	action	minor	v2.79.3 → v2.81.10

---

Warning

Some dependencies could not be looked up. Check the Dependency Dashboard for more information.

---

Release Notes

actions/checkout (actions/checkout)

v6.0.3

Compare Source

• Fix checkout init for SHA-256 repositories by @​yaananth in #​2439
• fix: expand merge commit SHA regex and add SHA-256 test cases by @​yaananth in #​2414

github/codeql-action (github/codeql-action)

v4.36.2

Compare Source

v4.36.1

Compare Source

v4.36.0

Compare Source

• Breaking change: Bump the minimum required CodeQL bundle version to 2.19.4. #​3894
• Add support for SHA-256 Git object IDs. #​3893
• Update default CodeQL bundle version to 2.25.5. #​3926

lewagon/wait-on-check-action (lewagon/wait-on-check-action)

v1.8.0

Compare Source

Added

• Add a wait-for-duplicates option to require every check with a duplicate name to succeed

oxc-project/setup-rust (oxc-project/setup-rust)

v1.0.17

Compare Source

taiki-e/install-action (taiki-e/install-action)

v2.81.10: 2.81.10

Compare Source

• Update tombi@latest to 1.1.3.

• Update release-plz@latest to 0.3.159.

• Update cosign@latest to 3.1.1.

v2.81.9: 2.81.9

Compare Source

• Update wasm-bindgen@latest to 0.2.123.

• Update tombi@latest to 1.1.2.

• Update parse-changelog@latest to 0.6.17.

• Update just@latest to 1.52.0.

• Update gungraun-runner@latest to 0.19.2.

• Update cargo-binstall@latest to 1.20.0.

v2.81.8: 2.81.8

Compare Source

• Update vacuum@latest to 0.29.2.

• Update parse-dockerfile@latest to 0.1.7.

• Update mise@latest to 2026.6.1.

• Update cargo-shear@latest to 1.13.1.

v2.81.7: 2.81.7

Compare Source

• Update wasmtime@latest to 45.0.1.

• Update vacuum@latest to 0.29.1.

• Update syft@latest to 1.45.1.

• Update rclone@latest to 1.74.3.

• Update cargo-audit@latest to 0.22.2.

v2.81.6: 2.81.6

Compare Source

• Update prek@latest to 0.4.4.

• Update cargo-shear@latest to 1.13.0.

v2.81.5: 2.81.5

Compare Source

• Update vacuum@latest to 0.29.0.

• Update uv@latest to 0.11.19.

• Update typos@latest to 1.47.2.

• Update mise@latest to 2026.6.0.

v2.81.4: 2.81.4

Compare Source

• Update vacuum@latest to 0.28.4.

• Update typos@latest to 1.47.1.

• Update syft@latest to 1.45.0.

• Update cargo-neat@latest to 0.4.0.

• Update cargo-mutants@latest to 27.1.0.

v2.81.3: 2.81.3

Compare Source

• Update vacuum@latest to 0.28.3.

• Update uv@latest to 0.11.18.

• Update trivy@latest to 0.71.0.

v2.81.2: 2.81.2

Compare Source

• Update mise@latest to 2026.5.18.

• Update cargo-semver-checks@latest to 0.48.0.

v2.81.1: 2.81.1

Compare Source

• Update cargo-no-dev-deps@latest to 0.2.24.

• Update cargo-hack@latest to 0.6.45.

v2.81.0: 2.81.0

Compare Source

• Support convco. (#​1831, thanks @​graelo)

• Support docgarden (#​1830, thanks @​jesse-black)

• Update vacuum@latest to 0.28.0.

• Update cargo-binstall@latest to 1.19.1.

v2.80.0: 2.80.0

Compare Source

• Support kingfisher. (#​1874, thanks @​SAY-5)

v2.79.15: 2.79.15

Compare Source

• Update typos@latest to 1.47.0.

• Update wasm-tools@latest to 1.251.0.

• Update vacuum@latest to 0.27.2.

• Update uv@latest to 0.11.17.

• Update tombi@latest to 1.1.1.

• Update mise@latest to 2026.5.16.

v2.79.14: 2.79.14

Compare Source

• Update vacuum@latest to 0.27.0.

• Update cargo-deny@latest to 0.19.8.

v2.79.13: 2.79.13

Compare Source

• Update gungraun-runner@latest to 0.19.1.

• Update biome@latest to 2.4.16.

v2.79.12: 2.79.12

Compare Source

• Update prek@latest to 0.4.3.

• Remove uses of crates.io API, which potentially cases 403 error.

v2.79.11: 2.79.11

Compare Source

• Update vacuum@latest to 0.26.8.

• Update cargo-nextest@latest to 0.9.137.

v2.79.10: 2.79.10

Compare Source

• Update tombi@latest to 1.1.0.

• Update prek@latest to 0.4.2.

• Update editorconfig-checker@latest to 3.7.0.

v2.79.9: 2.79.9

Compare Source

• Update vacuum@latest to 0.26.7.

• Update tombi@latest to 1.0.0.

v2.79.8: 2.79.8

Compare Source

• Update parse-dockerfile@latest to 0.1.6.

• Update knope@latest to 0.23.0.

v2.79.7: 2.79.7

Compare Source

• Update typos@latest to 1.46.3.

• Update rclone@latest to 1.74.2.

• Update mise@latest to 2026.5.15.

• Update tombi@latest to 0.11.7.

v2.79.6: 2.79.6

Compare Source

• Update wasm-bindgen@latest to 0.2.122.

• Update mise@latest to 2026.5.14.

• Update cargo-deny@latest to 0.19.7.

• Update vacuum@latest to 0.26.6.

v2.79.5: 2.79.5

Compare Source

• Update jaq@latest to 3.0.0. (#​1861, thanks @​MusicalNinjaDad)

• Update wasmtime@latest to 45.0.0.

• Update wasm-tools@latest to 1.250.0.

• Update tombi@latest to 0.11.6.

• Update mise@latest to 2026.5.13.

v2.79.4: 2.79.4

Compare Source

• Update martin@latest to 1.10.1.

• Update prek@latest to 0.4.1.

• Update protoc@latest to 3.35.0.

• Update mdbook@latest to 0.5.3.

v2.79.3: 2.79.3

Compare Source

• Update mise@latest to 2026.5.12.

• Update martin@latest to 1.10.0.

• Update uv@latest to 0.11.15.

v2.79.2: 2.79.2

Compare Source

• Update mise@latest to 2026.5.11.

• Update vacuum@latest to 0.26.5.

• Update cargo-shear@latest to 1.12.4.

v2.79.1: 2.79.1

Compare Source

• Update tombi@latest to 0.11.5.

• Update cargo-nextest@latest to 0.9.136.

• Update typos@latest to 1.46.2.

• Update mise@latest to 2026.5.10.

v2.79.0: 2.79.0

Compare Source

• Support more host architectures. (#​1841, thanks @​Gelbpunkt)

• Deprecate mdbook-alerts because the feature now included in mdbook and the repository has been archived. (#​1844)

• Deprecate iai-callgrind-runner because it has been renamed to gungraun-runner. gungraun-runner is also supported by this action. (#​1844)

v2.78.3: 2.78.3

Compare Source

• Update zizmor@latest to 1.25.2.

• Update cargo-zigbuild@latest to 0.22.3. (#​1814, thanks @​simonhollingshead)

• Update wasm-tools@latest to 1.249.0.

• Update gungraun-runner@latest to 0.19.0.

v2.78.2: 2.78.2

Compare Source

• Update wasm-pack@latest to 0.15.0.

• Update zizmor@latest to 1.25.0.

• Update mise@latest to 2026.5.9.

• Update cargo-nextest@latest to 0.9.135.

• Update cyclonedx@latest to 0.32.0.

• Update prek@latest to 0.4.0.

---

Configuration

📅 Schedule: (in timezone Europe/Berlin)

• Branch creation
  • "after 10:00 before 19:00 every weekday except after 13:00 before 14:00"
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Enabled.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.

[prisis]

Approved: dependency update, checks not failing.