Skip to content

chore: Update from _rust template - #122

Merged
epage merged 26 commits into
cobalt-org:masterfrom
epage:template
Aug 25, 2026
Merged

chore: Update from _rust template#122
epage merged 26 commits into
cobalt-org:masterfrom
epage:template

Conversation

@epage

@epage epage commented Aug 25, 2026

Copy link
Copy Markdown
Member
  • Tests created for any new feature or regression tests for bugfixes.

renovate Bot and others added 26 commits July 16, 2026 16:48
This PR contains the following updates:

| Package | Update | Change |
|---|---|---|
| [prek](https://redirect.github.com/j178/prek) | patch | `0.4.9` →
`0.4.10` |

---

### Release Notes

<details>
<summary>j178/prek (prek)</summary>

###
[`v0.4.10`](https://redirect.github.com/j178/prek/blob/HEAD/CHANGELOG.md#0410)

[Compare
Source](https://redirect.github.com/j178/prek/compare/v0.4.9...v0.4.10)

Released on 2026-07-16.

##### Enhancements

- Add PHP language support
([#&#8203;2314](https://redirect.github.com/j178/prek/pull/2314))
- Add freeze option to update settings
([#&#8203;2323](https://redirect.github.com/j178/prek/pull/2323))
- Add tag filters to update configuration
([#&#8203;2354](https://redirect.github.com/j178/prek/pull/2354))
- Identify 'mts' and 'cts' as TypeScript files
([#&#8203;2209](https://redirect.github.com/j178/prek/pull/2209))
- Publish Alpine Docker images
([#&#8203;2352](https://redirect.github.com/j178/prek/pull/2352))
- Support builtin and meta in try-repo
([#&#8203;2350](https://redirect.github.com/j178/prek/pull/2350))

##### Bug fixes

- Fix Python discovery order
([#&#8203;2348](https://redirect.github.com/j178/prek/pull/2348))
- Fix Windows progress rendering
([#&#8203;2328](https://redirect.github.com/j178/prek/pull/2328))
- Preserve configured repo values for updates
([#&#8203;2324](https://redirect.github.com/j178/prek/pull/2324))
- Scope synthetic `GIT_WORK_TREE` to git commands
([#&#8203;2356](https://redirect.github.com/j178/prek/pull/2356))

##### Documentation

- Expand common workflows guide
([#&#8203;2351](https://redirect.github.com/j178/prek/pull/2351))

##### Contributors

- [@&#8203;j178](https://redirect.github.com/j178)

</details>

---

### Configuration

📅 **Schedule**: (UTC)

- Branch creation
  - Every minute (`* * * * *`)
- Automerge
  - At any time (no schedule defined)

🚦 **Automerge**: Enabled.

♻ **Rebasing**: Whenever PR is behind base branch, or you tick the
rebase/retry checkbox.

🔕 **Ignore**: Close this PR and you won't be reminded about this update
again.

---

- [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check
this box

---

This PR was generated by [Mend Renovate](https://mend.io/renovate/).
View the [repository job
log](https://developer.mend.io/github/epage/_rust).

<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0My4yNjUuMSIsInVwZGF0ZWRJblZlciI6IjQzLjI2NS4xIiwidGFyZ2V0QnJhbmNoIjoibWFpbiIsImxhYmVscyI6W119-->

Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
…balt-org#47)

This PR contains the following updates:

| Package | Type | Update | Change |
|---|---|---|---|
| [crate-ci/committed](https://redirect.github.com/crate-ci/committed) |
repository | patch | `v1.1.10` → `v1.1.11` |

Note: The `pre-commit` manager in Renovate is not supported by the
`pre-commit` maintainers or community. Please do not report any problems
there, instead [create a Discussion in the Renovate
repository](https://redirect.github.com/renovatebot/renovate/discussions/new)
if you have any questions.

---

### Release Notes

<details>
<summary>crate-ci/committed (crate-ci/committed)</summary>

###
[`v1.1.11`](https://redirect.github.com/crate-ci/committed/releases/tag/v1.1.11)

[Compare
Source](https://redirect.github.com/crate-ci/committed/compare/v1.1.10...v1.1.11)

#### \[1.1.11] - 2026-02-24

##### Features

- Add Linux aarch64 binaries

</details>

---

### Configuration

📅 **Schedule**: (UTC)

- Branch creation
  - "before 5am on the first day of the month"
- Automerge
  - At any time (no schedule defined)

🚦 **Automerge**: Disabled by config. Please merge this manually once you
are satisfied.

♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the
rebase/retry checkbox.

🔕 **Ignore**: Close this PR and you won't be reminded about this update
again.

---

- [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check
this box

---

This PR was generated by [Mend Renovate](https://mend.io/renovate/).
View the [repository job
log](https://developer.mend.io/github/epage/_rust).

<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0My40My4yIiwidXBkYXRlZEluVmVyIjoiNDMuMjcyLjQiLCJ0YXJnZXRCcmFuY2giOiJtYWluIiwibGFiZWxzIjpbXX0=-->
This PR contains the following updates:

| Package | Update | Change |
|---|---|---|
| [prek](https://redirect.github.com/j178/prek) | patch | `0.4.10` →
`0.4.11` |

---

### Release Notes

<details>
<summary>j178/prek (prek)</summary>

###
[`v0.4.11`](https://redirect.github.com/j178/prek/blob/HEAD/CHANGELOG.md#0411)

[Compare
Source](https://redirect.github.com/j178/prek/compare/v0.4.10...v0.4.11)

Released on 2026-07-25.

##### Highlights

- This release adds two new builtin hooks, `deny-pattern` and
`require-pattern`,
as native alternatives for `pygrep` use cases. `deny-pattern` fails when
a
configured pattern is found, while `require-pattern` ensures every
selected
  file contains a match. By matching natively without spawning a Python
subprocess, they run over 4x faster than `pygrep` in benchmarks. Note
that
  they use
[Rust `regex` syntax](https://docs.rs/regex/latest/regex/#syntax), which
does
  not support look-around features such as negative lookbehind.

- `prek run` now supports `--glob <PATTERN>` to run hooks on tracked
files
  matching a glob. It can be repeated or combined with `--files` and
  `--directory`.

- Hook priorities now support reusable aliases:

  ```toml
  [priorities]
  checks = 10

  [[repos]]
  repo = "builtin"
  hooks = [
    { id = "check-json", priority = "checks" },
    { id = "check-yaml", priority = "checks" },
  ]
  ```

  This makes parallel scheduling easier to read and maintain.

##### Enhancements

- Add `deny-pattern` and `require-pattern` builtin hooks
([#&#8203;2359](https://redirect.github.com/j178/prek/pull/2359))
- Support `--glob` patterns in `prek run`
([#&#8203;2381](https://redirect.github.com/j178/prek/pull/2381))
- Support reusable aliases for hook priorities
([#&#8203;2331](https://redirect.github.com/j178/prek/pull/2331))
- Implement `requirements-txt-fixer` as a builtin hook
([#&#8203;2390](https://redirect.github.com/j178/prek/pull/2390))
- Improve user-facing warnings and errors
([#&#8203;2380](https://redirect.github.com/j178/prek/pull/2380))
- Install Node hooks through git url
([#&#8203;2394](https://redirect.github.com/j178/prek/pull/2394))

##### Performance

- Reduce blocking-pool overhead in file hooks
([#&#8203;2384](https://redirect.github.com/j178/prek/pull/2384))
- Speed up mixed-line-ending scans with memchr2
([#&#8203;2391](https://redirect.github.com/j178/prek/pull/2391))

##### Bug fixes

- Honor filenames in builtin hook entry and args
([#&#8203;2389](https://redirect.github.com/j178/prek/pull/2389))
- Match identify tags across filename parts
([#&#8203;2399](https://redirect.github.com/j178/prek/pull/2399))
- Preserve hook output order with a shared pipe
([#&#8203;2385](https://redirect.github.com/j178/prek/pull/2385))
- Preserve system download policy when applying metadata
([#&#8203;2395](https://redirect.github.com/j178/prek/pull/2395))

##### Contributors

- [@&#8203;j178](https://redirect.github.com/j178)
- [@&#8203;chrisoro](https://redirect.github.com/chrisoro)

</details>

---

### Configuration

📅 **Schedule**: (UTC)

- Branch creation
  - Every minute (`* * * * *`)
- Automerge
  - At any time (no schedule defined)

🚦 **Automerge**: Enabled.

♻ **Rebasing**: Whenever PR is behind base branch, or you tick the
rebase/retry checkbox.

🔕 **Ignore**: Close this PR and you won't be reminded about this update
again.

---

- [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check
this box

---

This PR was generated by [Mend Renovate](https://mend.io/renovate/).
View the [repository job
log](https://developer.mend.io/github/epage/_rust).

<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0My4yODAuMCIsInVwZGF0ZWRJblZlciI6IjQzLjI4MC4wIiwidGFyZ2V0QnJhbmNoIjoibWFpbiIsImxhYmVscyI6W119-->

Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
This PR contains the following updates:

| Package | Type | Update | Change |
|---|---|---|---|
|
[EmbarkStudios/cargo-deny-action](https://redirect.github.com/EmbarkStudios/cargo-deny-action)
| action | minor | `v2.0.20` → `v2.1.1` |
| [actions/checkout](https://redirect.github.com/actions/checkout) |
action | minor | `v6.0.3` → `v6.1.0` |
|
[actions/upload-code-coverage](https://redirect.github.com/actions/upload-code-coverage)
| action | patch | `v1.4.0` → `v1.4.1` |
|
[github/codeql-action](https://redirect.github.com/github/codeql-action)
| action | minor | `v4.36.2` → `v4.37.4` |
| [j178/prek-action](https://redirect.github.com/j178/prek-action) |
action | patch | `v2.0.5` → `v2.0.6` |
|
[taiki-e/install-action](https://redirect.github.com/taiki-e/install-action)
| action | minor | `v2.82.7` → `v2.85.5` |
|
[zizmorcore/zizmor-action](https://redirect.github.com/zizmorcore/zizmor-action)
| action | minor | `v0.5.7` → `v0.6.1` |

---

### Release Notes

<details>
<summary>EmbarkStudios/cargo-deny-action
(EmbarkStudios/cargo-deny-action)</summary>

###
[`v2.1.1`](https://redirect.github.com/EmbarkStudios/cargo-deny-action/releases/tag/v2.1.1):
Release 2.1.1 - cargo-deny 0.20.2

[Compare
Source](https://redirect.github.com/EmbarkStudios/cargo-deny-action/compare/v2.1.0...v2.1.1)

#### Fixed

-
[PR#116](https://redirect.github.com/EmbarkStudios/cargo-deny-action/pull/116)
fixed in issue introduced in the 2.1.0 release due the deprecation of
the `use-git-cli` argument. Thanks
[@&#8203;Firestar99](https://redirect.github.com/Firestar99)!

###
[`v2.1.0`](https://redirect.github.com/EmbarkStudios/cargo-deny-action/releases/tag/v2.1.0):
Release 2.1.0 - cargo-deny 0.20.2

[Compare
Source](https://redirect.github.com/EmbarkStudios/cargo-deny-action/compare/v2.0.20...v2.1.0)

##### Changed

-
[PR#881](https://redirect.github.com/EmbarkStudios/cargo-deny/pull/881)
refactored the CLI, moving some duplicated options/flags into the root
and removing several deprecated options/flags/values. See the PR for a
full list of changes.

##### Added

-
[PR#879](https://redirect.github.com/EmbarkStudios/cargo-deny/pull/879)
resolved
[#&#8203;873](https://redirect.github.com/EmbarkStudios/cargo-deny/issues/873)
by adding a new
[`bans.std-replacements`](https://embarkstudios.github.io/cargo-deny/checks/bans/cfg.html#the-std-replacements-field-optional)
lint which checks the graph for crates.io sourced crates that have been
partially or fully replaced in `std` and/or `core`.

##### Fixed

-
[PR#880](https://redirect.github.com/EmbarkStudios/cargo-deny/pull/880)
resolved
[#&#8203;765](https://redirect.github.com/EmbarkStudios/cargo-deny/issues/765)
by respecting non-default build script paths in manifests.
-
[PR#881](https://redirect.github.com/EmbarkStudios/cargo-deny/pull/881)
resolved
[#&#8203;874](https://redirect.github.com/EmbarkStudios/cargo-deny/issues/874)
by cleaning up the CLI, deduplicating some options/flags that caused bug
in the `list` subcommand.

</details>

<details>
<summary>actions/checkout (actions/checkout)</summary>

###
[`v6.1.0`](https://redirect.github.com/actions/checkout/compare/v6.0.3...v6.1.0)

[Compare
Source](https://redirect.github.com/actions/checkout/compare/v6.0.3...v6.1.0)

</details>

<details>
<summary>actions/upload-code-coverage
(actions/upload-code-coverage)</summary>

###
[`v1.4.1`](https://redirect.github.com/actions/upload-code-coverage/compare/v1.4.0...v1.4.1)

[Compare
Source](https://redirect.github.com/actions/upload-code-coverage/compare/v1.4.0...v1.4.1)

</details>

<details>
<summary>github/codeql-action (github/codeql-action)</summary>

###
[`v4.37.4`](https://redirect.github.com/github/codeql-action/compare/v4.37.3...v4.37.4)

[Compare
Source](https://redirect.github.com/github/codeql-action/compare/v4.37.3...v4.37.4)

###
[`v4.37.3`](https://redirect.github.com/github/codeql-action/releases/tag/v4.37.3)

[Compare
Source](https://redirect.github.com/github/codeql-action/compare/v4.37.2...v4.37.3)

No user facing changes.

###
[`v4.37.2`](https://redirect.github.com/github/codeql-action/releases/tag/v4.37.2)

[Compare
Source](https://redirect.github.com/github/codeql-action/compare/v4.37.1...v4.37.2)

- The new address format for the `config-file` input that was introduced
in CodeQL Action 4.37.0 is now enabled by default. In addition to the
format described there, the `remote=` prefix can now be used to
explicitly indicate that the input refers to a remote file. All previous
input formats continue to be accepted as well.
[#&#8203;4023](https://redirect.github.com/github/codeql-action/pull/4023)
- The CodeQL Action can now make use of [configured private
registries](https://docs.github.com/en/code-security/how-tos/secure-at-scale/configure-organization-security/manage-usage-and-access/giving-org-access-private-registries)
in Default Setup to retrieve CodeQL configuration files from remote
repositories that require authentication. This will allow customers to
store their CodeQL configuration in a single repository that can then be
referenced by Default Setup workflows in other repositories. We expect
to roll this and other, related changes out to everyone in July.
[#&#8203;4007](https://redirect.github.com/github/codeql-action/pull/4007)

###
[`v4.37.1`](https://redirect.github.com/github/codeql-action/releases/tag/v4.37.1)

[Compare
Source](https://redirect.github.com/github/codeql-action/compare/v4.37.0...v4.37.1)

- *Upcoming breaking change*: Add a deprecation warning for customers
using CodeQL version 2.20.6 and earlier. These versions of CodeQL were
discontinued on 1 July 2026 alongside GitHub Enterprise Server 3.16, and
will be unsupported by the next minor release of the CodeQL Action.
[#&#8203;3956](https://redirect.github.com/github/codeql-action/pull/3956)
- Update default CodeQL bundle version to
[2.26.1](https://redirect.github.com/github/codeql-action/releases/tag/codeql-bundle-v2.26.1).
[#&#8203;4019](https://redirect.github.com/github/codeql-action/pull/4019)

###
[`v4.37.0`](https://redirect.github.com/github/codeql-action/releases/tag/v4.37.0)

[Compare
Source](https://redirect.github.com/github/codeql-action/compare/v4.36.3...v4.37.0)

- Update default CodeQL bundle version to
[2.26.0](https://redirect.github.com/github/codeql-action/releases/tag/codeql-bundle-v2.26.0).
[#&#8203;3995](https://redirect.github.com/github/codeql-action/pull/3995)
- In addition to the existing input format, the `config-file` input for
the `codeql-action/init` step will soon support a new
`[owner/]repo[@&#8203;ref][:path]` format. All components except the
repository name are optional. If omitted, `owner` defaults to the same
owner as the repository the analysis is running for, `ref` to `main`,
and `path` to `.github/codeql-action.yaml`. Support for this format
ships in this version of the CodeQL Action, but will only be enabled
over the coming weeks.
[#&#8203;3973](https://redirect.github.com/github/codeql-action/pull/3973)

###
[`v4.36.3`](https://redirect.github.com/github/codeql-action/releases/tag/v4.36.3)

[Compare
Source](https://redirect.github.com/github/codeql-action/compare/v4.36.2...v4.36.3)

No user facing changes.

</details>

<details>
<summary>j178/prek-action (j178/prek-action)</summary>

###
[`v2.0.6`](https://redirect.github.com/j178/prek-action/releases/tag/v2.0.6)

[Compare
Source](https://redirect.github.com/j178/prek-action/compare/v2.0.5...v2.0.6)

#### What's Changed

- Update known versions for prek 0.4.6 by
[@&#8203;j178](https://redirect.github.com/j178) in
[#&#8203;159](https://redirect.github.com/j178/prek-action/pull/159)
- Update known versions for prek 0.4.8 by
[@&#8203;j178](https://redirect.github.com/j178) in
[#&#8203;162](https://redirect.github.com/j178/prek-action/pull/162)
- Update known versions for prek 0.4.9 by
[@&#8203;j178](https://redirect.github.com/j178) in
[#&#8203;163](https://redirect.github.com/j178/prek-action/pull/163)
- Update known versions for prek 0.4.10 by
[@&#8203;j178](https://redirect.github.com/j178) in
[#&#8203;167](https://redirect.github.com/j178/prek-action/pull/167)
- Disable color in `prek cache dir` output by
[@&#8203;KSmanis](https://redirect.github.com/KSmanis) in
[#&#8203;168](https://redirect.github.com/j178/prek-action/pull/168)

#### New Contributors

- [@&#8203;KSmanis](https://redirect.github.com/KSmanis) made their
first contribution in
[#&#8203;168](https://redirect.github.com/j178/prek-action/pull/168)

**Full Changelog**:
<j178/prek-action@v2...v2.0.6>

</details>

<details>
<summary>taiki-e/install-action (taiki-e/install-action)</summary>

###
[`v2.85.5`](https://redirect.github.com/taiki-e/install-action/compare/v2.85.4...v2.85.5)

[Compare
Source](https://redirect.github.com/taiki-e/install-action/compare/v2.85.4...v2.85.5)

###
[`v2.85.4`](https://redirect.github.com/taiki-e/install-action/releases/tag/v2.85.4):
2.85.4

[Compare
Source](https://redirect.github.com/taiki-e/install-action/compare/v2.85.3...v2.85.4)

- Update `uv@latest` to 0.11.33.

- Update `mise@latest` to 2026.7.15.

- Update `biome@latest` to 2.5.6.

###
[`v2.85.3`](https://redirect.github.com/taiki-e/install-action/releases/tag/v2.85.3):
2.85.3

[Compare
Source](https://redirect.github.com/taiki-e/install-action/compare/v2.85.2...v2.85.3)

- Update `xh@latest` to 0.26.2.

- Update `ubi@latest` to 0.10.0.

- Update `mise@latest` to 2026.7.14.

- Update `martin@latest` to 1.13.0.

- Update `cargo-shear@latest` to 1.13.3.

- Update `cargo-binstall@latest` to 1.21.1.

###
[`v2.85.2`](https://redirect.github.com/taiki-e/install-action/releases/tag/v2.85.2):
2.85.2

[Compare
Source](https://redirect.github.com/taiki-e/install-action/compare/v2.85.1...v2.85.2)

- Update `prek@latest` to 0.4.11.

- Update `mise@latest` to 2026.7.13.

- Update `kingfisher@latest` to 1.109.0.

###
[`v2.85.1`](https://redirect.github.com/taiki-e/install-action/releases/tag/v2.85.1):
2.85.1

[Compare
Source](https://redirect.github.com/taiki-e/install-action/compare/v2.85.0...v2.85.1)

- Update `vacuum@latest` to 0.30.0.

- Update `uv@latest` to 0.11.32.

- Update `mise@latest` to 2026.7.12.

- Update `cyclonedx@latest` to 0.33.1.

- Update `cargo-neat@latest` to 0.5.2.

###
[`v2.85.0`](https://redirect.github.com/taiki-e/install-action/releases/tag/v2.85.0):
2.85.0

[Compare
Source](https://redirect.github.com/taiki-e/install-action/compare/v2.84.1...v2.85.0)

- Support `wild` (alias: `wild-linker`).
([#&#8203;1949](https://redirect.github.com/taiki-e/install-action/pull/1949))

- Support `bpf-linker`.
([#&#8203;1950](https://redirect.github.com/taiki-e/install-action/pull/1950))

- Support `rafn`.
([#&#8203;1935](https://redirect.github.com/taiki-e/install-action/pull/1935),
thanks [@&#8203;DarkWanderer](https://redirect.github.com/DarkWanderer))

- Update `cargo-neat@latest` to 0.5.1.

- Update `zizmor@latest` to 1.28.0.

- Update `wasmtime@latest` to 47.0.2.

- Update `uv@latest` to 0.11.31.

- Update `syft@latest` to 1.49.0.

###
[`v2.84.1`](https://redirect.github.com/taiki-e/install-action/releases/tag/v2.84.1):
2.84.1

[Compare
Source](https://redirect.github.com/taiki-e/install-action/compare/v2.84.0...v2.84.1)

- Update `wasmtime@latest` to 47.0.1.

- Update `wasm-tools@latest` to 1.254.0.

- Update `uv@latest` to 0.11.30.

- Update `mise@latest` to 2026.7.11.

- Update `cargo-neat@latest` to 0.5.0.

- Update `cargo-crap@latest` to 0.3.1.

- Update `biome@latest` to 2.5.5.

###
[`v2.84.0`](https://redirect.github.com/taiki-e/install-action/releases/tag/v2.84.0):
2.84.0

[Compare
Source](https://redirect.github.com/taiki-e/install-action/compare/v2.83.4...v2.84.0)

- Support `d2`.
([#&#8203;1944](https://redirect.github.com/taiki-e/install-action/pull/1944))

- Support `protoc-gen-connect-openapi`.
([#&#8203;1922](https://redirect.github.com/taiki-e/install-action/pull/1922),
thanks [@&#8203;JasterV](https://redirect.github.com/JasterV))

- Update `convco@latest` to 0.7.0.
([#&#8203;1941](https://redirect.github.com/taiki-e/install-action/pull/1941),
thanks [@&#8203;graelo](https://redirect.github.com/graelo))

- Update `just@latest` to 1.57.0.

- Update `cargo-semver-checks@latest` to 0.49.0.

- Update `tombi@latest` to 1.2.4.

- Update `cosign@latest` to 3.1.2.

###
[`v2.83.4`](https://redirect.github.com/taiki-e/install-action/releases/tag/v2.83.4):
2.83.4

[Compare
Source](https://redirect.github.com/taiki-e/install-action/compare/v2.83.3...v2.83.4)

- Update `vacuum@latest` to 0.29.10.

- Update `uv@latest` to 0.11.29.

- Update `syft@latest` to 1.48.0.

- Update `prek@latest` to 0.4.10.

- Update `mise@latest` to 2026.7.7.

- Update `cargo-shear@latest` to 1.13.2.

###
[`v2.83.3`](https://redirect.github.com/taiki-e/install-action/releases/tag/v2.83.3):
2.83.3

[Compare
Source](https://redirect.github.com/taiki-e/install-action/compare/v2.83.2...v2.83.3)

- Update `release-plz@latest` to 0.3.160.

- Update `prek@latest` to 0.4.9.

- Update `mise@latest` to 2026.7.6.

- Update `dprint@latest` to 0.55.2.

- Update `cargo-dinghy@latest` to 0.8.5.

- Update `cargo-binstall@latest` to 1.21.0.

- Update `biome@latest` to 2.5.4.

###
[`v2.83.2`](https://redirect.github.com/taiki-e/install-action/releases/tag/v2.83.2):
2.83.2

[Compare
Source](https://redirect.github.com/taiki-e/install-action/compare/v2.83.1...v2.83.2)

- Update `parse-dockerfile@latest` to 0.1.8.

- Update `mise@latest` to 2026.7.5.

- Update `just@latest` to 1.56.0.

- Update `gungraun-runner@latest` to 0.19.4.

- Update `cargo-neat@latest` to 0.4.1.

###
[`v2.83.1`](https://redirect.github.com/taiki-e/install-action/releases/tag/v2.83.1):
2.83.1

[Compare
Source](https://redirect.github.com/taiki-e/install-action/compare/v2.83.0...v2.83.1)

- Update `rclone@latest` to 1.74.4.

- Update `mise@latest` to 2026.7.4.

- Update `cargo-deny@latest` to 0.20.2.

###
[`v2.83.0`](https://redirect.github.com/taiki-e/install-action/releases/tag/v2.83.0):
2.83.0

[Compare
Source](https://redirect.github.com/taiki-e/install-action/compare/v2.82.11...v2.83.0)

- Support `cargo-about`.
([#&#8203;1924](https://redirect.github.com/taiki-e/install-action/pull/1924),
thanks [@&#8203;ruffsl](https://redirect.github.com/ruffsl))

- Update `uv@latest` to 0.11.28.

- Update `martin@latest` to 1.12.0.

- Update `kingfisher@latest` to 1.106.0.

- Update `biome@latest` to 2.5.3.

###
[`v2.82.11`](https://redirect.github.com/taiki-e/install-action/releases/tag/v2.82.11):
2.82.11

[Compare
Source](https://redirect.github.com/taiki-e/install-action/compare/v2.82.10...v2.82.11)

- Update `wasm-tools@latest` to 1.253.0.

- Update `uv@latest` to 0.11.27.

- Update `mise@latest` to 2026.7.2.

- Update `mdbook@latest` to 0.5.4.

###
[`v2.82.10`](https://redirect.github.com/taiki-e/install-action/releases/tag/v2.82.10):
2.82.10

[Compare
Source](https://redirect.github.com/taiki-e/install-action/compare/v2.82.9...v2.82.10)

- Update `tombi@latest` to 1.2.0.

- Update `cargo-nextest@latest` to 0.9.140.

###
[`v2.82.9`](https://redirect.github.com/taiki-e/install-action/releases/tag/v2.82.9):
2.82.9

[Compare
Source](https://redirect.github.com/taiki-e/install-action/compare/v2.82.8...v2.82.9)

- Update `vacuum@latest` to 0.29.9.

- Update `prek@latest` to 0.4.8.

- Update `cargo-tarpaulin@latest` to 0.37.0.

- Update `cargo-leptos@latest` to 0.3.7.

###
[`v2.82.8`](https://redirect.github.com/taiki-e/install-action/releases/tag/v2.82.8):
2.82.8

[Compare
Source](https://redirect.github.com/taiki-e/install-action/compare/v2.82.7...v2.82.8)

- Update `vacuum@latest` to 0.29.8.

- Update `uv@latest` to 0.11.26.

- Update `typos@latest` to 1.48.0.

- Update `trivy@latest` to 0.72.0.

- Update `tombi@latest` to 1.1.7.

- Update `prek@latest` to 0.4.6.

- Update `mise@latest` to 2026.7.0.

- Update `just@latest` to 1.55.1.

- Update `biome@latest` to 2.5.2.

</details>

<details>
<summary>zizmorcore/zizmor-action (zizmorcore/zizmor-action)</summary>

###
[`v0.6.1`](https://redirect.github.com/zizmorcore/zizmor-action/releases/tag/v0.6.1)

[Compare
Source](https://redirect.github.com/zizmorcore/zizmor-action/compare/v0.6.0...v0.6.1)

zizmor 1.28.0 is now the default version used by the action.

###
[`v0.6.0`](https://redirect.github.com/zizmorcore/zizmor-action/releases/tag/v0.6.0)

[Compare
Source](https://redirect.github.com/zizmorcore/zizmor-action/compare/v0.5.7...v0.6.0)

zizmor 1.27.0 is now the default version used by the action.

#### What's Changed

- Fold Docker image pull output into a collapsed Actions log group by
[@&#8203;woodruffw](https://redirect.github.com/woodruffw) with
[@&#8203;Copilot](https://redirect.github.com/Copilot) in
[#&#8203;132](https://redirect.github.com/zizmorcore/zizmor-action/pull/132)
- Readme: document missing inputs by
[@&#8203;staabm](https://redirect.github.com/staabm) in
[#&#8203;130](https://redirect.github.com/zizmorcore/zizmor-action/pull/130)
- ci: block version sync workflow on forks by
[@&#8203;shaanmajid](https://redirect.github.com/shaanmajid) in
[#&#8203;129](https://redirect.github.com/zizmorcore/zizmor-action/pull/129)
- Sync zizmor versions by
[@&#8203;github-actions](https://redirect.github.com/github-actions)\[bot]
in
[#&#8203;137](https://redirect.github.com/zizmorcore/zizmor-action/pull/137)
- Add `collect` input by
[@&#8203;woodruffw](https://redirect.github.com/woodruffw) in
[#&#8203;139](https://redirect.github.com/zizmorcore/zizmor-action/pull/139)

#### New Contributors

- [@&#8203;woodruffw](https://redirect.github.com/woodruffw) with
[@&#8203;Copilot](https://redirect.github.com/Copilot) made their first
contribution in
[#&#8203;132](https://redirect.github.com/zizmorcore/zizmor-action/pull/132)
- [@&#8203;staabm](https://redirect.github.com/staabm) made their first
contribution in
[#&#8203;130](https://redirect.github.com/zizmorcore/zizmor-action/pull/130)
- [@&#8203;shaanmajid](https://redirect.github.com/shaanmajid) made
their first contribution in
[#&#8203;129](https://redirect.github.com/zizmorcore/zizmor-action/pull/129)

**Full Changelog**:
<zizmorcore/zizmor-action@v0.5.7...v0.6.0>

</details>

---

### Configuration

📅 **Schedule**: (UTC)

- Branch creation
  - "before 5am on the first day of the month"
- Automerge
  - At any time (no schedule defined)

🚦 **Automerge**: Enabled.

♻ **Rebasing**: Whenever PR is behind base branch, or you tick the
rebase/retry checkbox.

👻 **Immortal**: This PR will be recreated if closed unmerged. Get
[config
help](https://redirect.github.com/renovatebot/renovate/discussions) if
that's undesired.

---

- [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check
this box

---

This PR was generated by [Mend Renovate](https://mend.io/renovate/).
View the [repository job
log](https://developer.mend.io/github/epage/_rust).

<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0NC4zLjIiLCJ1cGRhdGVkSW5WZXIiOiI0NC4zLjIiLCJ0YXJnZXRCcmFuY2giOiJtYWluIiwibGFiZWxzIjpbXX0=-->

Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
…org#87)

This PR contains the following updates:

| Package | Type | Update | Change |
|---|---|---|---|
|
[dtolnay/rust-toolchain](https://redirect.github.com/dtolnay/rust-toolchain)
| action | digest | `4be7066` → `4cda84d` |

---

### Configuration

📅 **Schedule**: (UTC)

- Branch creation
  - "before 5am on the first day of the month"
- Automerge
  - At any time (no schedule defined)

🚦 **Automerge**: Disabled by config. Please merge this manually once you
are satisfied.

♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the
rebase/retry checkbox.

🔕 **Ignore**: Close this PR and you won't be reminded about this update
again.

---

- [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check
this box

---

This PR was generated by [Mend Renovate](https://mend.io/renovate/).
View the [repository job
log](https://developer.mend.io/github/epage/_rust).

<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0NC4zLjIiLCJ1cGRhdGVkSW5WZXIiOiI0NC4zLjIiLCJ0YXJnZXRCcmFuY2giOiJtYWluIiwibGFiZWxzIjpbXX0=-->
This PR contains the following updates:

| Package | Update | Change |
|---|---|---|
| [prek](https://redirect.github.com/j178/prek) | patch | `0.4.11` →
`0.4.12` |

---

### Release Notes

<details>
<summary>j178/prek (prek)</summary>

###
[`v0.4.12`](https://redirect.github.com/j178/prek/blob/HEAD/CHANGELOG.md#0412)

[Compare
Source](https://redirect.github.com/j178/prek/compare/v0.4.11...v0.4.12)

Released on 2026-08-03.

##### Enhancements

- Add `--require-group` for hook group intersections
([#&#8203;2472](https://redirect.github.com/j178/prek/pull/2472))
- Align fast-path and builtin pre-commit hooks
([#&#8203;2433](https://redirect.github.com/j178/prek/pull/2433))
- Do not shuffle file list for verbose output
([#&#8203;2431](https://redirect.github.com/j178/prek/pull/2431))
- Improve top-level command descriptions
([#&#8203;2429](https://redirect.github.com/j178/prek/pull/2429))
- Install `uv` from Astral CDN and drop source racing
([#&#8203;2455](https://redirect.github.com/j178/prek/pull/2455))
- Make `prek install --force` bypass external hooks paths
([#&#8203;2437](https://redirect.github.com/j178/prek/pull/2437))
- Show builtin hook flags in verbose list output
([#&#8203;2427](https://redirect.github.com/j178/prek/pull/2427))
- Verify uv release archive checksums
([#&#8203;2456](https://redirect.github.com/j178/prek/pull/2456))

##### Performance

- Precompute file tags in parallel
([#&#8203;2440](https://redirect.github.com/j178/prek/pull/2440))
- Skip diffs after known hook modifications
([#&#8203;2447](https://redirect.github.com/j178/prek/pull/2447))
- Skip worktree diffs for read-only languages
([#&#8203;2432](https://redirect.github.com/j178/prek/pull/2432))
- Track builtin hook file changes directly
([#&#8203;2404](https://redirect.github.com/j178/prek/pull/2404))

##### Bug fixes

- Use full object IDs in diff snapshots
([#&#8203;2448](https://redirect.github.com/j178/prek/pull/2448))

##### Documentation

- Add a multi-repository configuration example
([#&#8203;2434](https://redirect.github.com/j178/prek/pull/2434))
- Rewrite benchmark documentation
([#&#8203;2469](https://redirect.github.com/j178/prek/pull/2469))

##### Contributors

- [@&#8203;j178](https://redirect.github.com/j178)
- [@&#8203;BitWeaverDev](https://redirect.github.com/BitWeaverDev)
- [@&#8203;allanlewis](https://redirect.github.com/allanlewis)

</details>

---

### Configuration

📅 **Schedule**: (UTC)

- Branch creation
  - Every minute (`* * * * *`)
- Automerge
  - At any time (no schedule defined)

🚦 **Automerge**: Enabled.

♻ **Rebasing**: Whenever PR is behind base branch, or you tick the
rebase/retry checkbox.

🔕 **Ignore**: Close this PR and you won't be reminded about this update
again.

---

- [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check
this box

---

This PR was generated by [Mend Renovate](https://mend.io/renovate/).
View the [repository job
log](https://developer.mend.io/github/epage/_rust).

<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0NC4zLjIiLCJ1cGRhdGVkSW5WZXIiOiI0NC4zLjIiLCJ0YXJnZXRCcmFuY2giOiJtYWluIiwibGFiZWxzIjpbXX0=-->

Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
…-org#90)

This PR contains the following updates:

| Package | Type | Update | Change |
|---|---|---|---|
| [crate-ci/typos](https://redirect.github.com/crate-ci/typos) |
repository | minor | `v1.47.0` → `v1.48.0` |

Note: The `pre-commit` manager in Renovate is not supported by the
`pre-commit` maintainers or community. Please do not report any problems
there, instead [create a Discussion in the Renovate
repository](https://redirect.github.com/renovatebot/renovate/discussions/new)
if you have any questions.

---

### Release Notes

<details>
<summary>crate-ci/typos (crate-ci/typos)</summary>

###
[`v1.48.0`](https://redirect.github.com/crate-ci/typos/releases/tag/v1.48.0)

[Compare
Source](https://redirect.github.com/crate-ci/typos/compare/v1.47.2...v1.48.0)

#### \[1.48.0] - 2026-06-30

##### Features

- Updated the dictionary with the [June
2026](https://redirect.github.com/crate-ci/typos/issues/1562) changes

###
[`v1.47.2`](https://redirect.github.com/crate-ci/typos/releases/tag/v1.47.2)

[Compare
Source](https://redirect.github.com/crate-ci/typos/compare/v1.47.1...v1.47.2)

#### \[1.47.2] - 2026-06-04

##### Fixes

- Don't correct `inferrable`
- Correct unused `inferible` variant

###
[`v1.47.1`](https://redirect.github.com/crate-ci/typos/releases/tag/v1.47.1)

[Compare
Source](https://redirect.github.com/crate-ci/typos/compare/v1.47.0...v1.47.1)

#### \[1.47.1] - 2026-06-03

##### Fixes

- Don't correct `requestors`

</details>

---

### Configuration

📅 **Schedule**: (UTC)

- Branch creation
  - "before 5am on the first day of the month"
- Automerge
  - At any time (no schedule defined)

🚦 **Automerge**: Disabled by config. Please merge this manually once you
are satisfied.

♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the
rebase/retry checkbox.

🔕 **Ignore**: Close this PR and you won't be reminded about this update
again.

---

- [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check
this box

---

This PR was generated by [Mend Renovate](https://mend.io/renovate/).
View the [repository job
log](https://developer.mend.io/github/epage/_rust).

<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0NC4zLjIiLCJ1cGRhdGVkSW5WZXIiOiI0NC4zLjIiLCJ0YXJnZXRCcmFuY2giOiJtYWluIiwibGFiZWxzIjpbXX0=-->
…1.28.0 (cobalt-org#91)

This PR contains the following updates:

| Package | Type | Update | Change | Pending |
|---|---|---|---|---|
|
[zizmorcore/zizmor-pre-commit](https://redirect.github.com/zizmorcore/zizmor-pre-commit)
| repository | minor | `v1.22.0` → `v1.28.0` | `v1.29.0` |

Note: The `pre-commit` manager in Renovate is not supported by the
`pre-commit` maintainers or community. Please do not report any problems
there, instead [create a Discussion in the Renovate
repository](https://redirect.github.com/renovatebot/renovate/discussions/new)
if you have any questions.

---

### Release Notes

<details>
<summary>zizmorcore/zizmor-pre-commit
(zizmorcore/zizmor-pre-commit)</summary>

###
[`v1.28.0`](https://redirect.github.com/zizmorcore/zizmor-pre-commit/releases/tag/v1.28.0)

[Compare
Source](https://redirect.github.com/zizmorcore/zizmor-pre-commit/compare/v1.27.0...v1.28.0)

See: <https://github.com/zizmorcore/zizmor/releases/tag/v1.28.0>

###
[`v1.27.0`](https://redirect.github.com/zizmorcore/zizmor-pre-commit/releases/tag/v1.27.0)

[Compare
Source](https://redirect.github.com/zizmorcore/zizmor-pre-commit/compare/v1.26.1...v1.27.0)

See: <https://github.com/zizmorcore/zizmor/releases/tag/v1.27.0>

###
[`v1.26.1`](https://redirect.github.com/zizmorcore/zizmor-pre-commit/releases/tag/v1.26.1)

[Compare
Source](https://redirect.github.com/zizmorcore/zizmor-pre-commit/compare/v1.26.0...v1.26.1)

See: <https://github.com/zizmorcore/zizmor/releases/tag/v1.26.1>

###
[`v1.26.0`](https://redirect.github.com/zizmorcore/zizmor-pre-commit/releases/tag/v1.26.0)

[Compare
Source](https://redirect.github.com/zizmorcore/zizmor-pre-commit/compare/v1.25.2...v1.26.0)

See: <https://github.com/zizmorcore/zizmor/releases/tag/v1.26.0>

###
[`v1.25.2`](https://redirect.github.com/zizmorcore/zizmor-pre-commit/releases/tag/v1.25.2)

[Compare
Source](https://redirect.github.com/zizmorcore/zizmor-pre-commit/compare/v1.25.1...v1.25.2)

See: <https://github.com/zizmorcore/zizmor/releases/tag/v1.25.2>

###
[`v1.25.1`](https://redirect.github.com/zizmorcore/zizmor-pre-commit/releases/tag/v1.25.1)

[Compare
Source](https://redirect.github.com/zizmorcore/zizmor-pre-commit/compare/v1.25.0...v1.25.1)

See: <https://github.com/zizmorcore/zizmor/releases/tag/v1.25.1>

###
[`v1.25.0`](https://redirect.github.com/zizmorcore/zizmor-pre-commit/releases/tag/v1.25.0)

[Compare
Source](https://redirect.github.com/zizmorcore/zizmor-pre-commit/compare/v1.24.1...v1.25.0)

See: <https://github.com/zizmorcore/zizmor/releases/tag/v1.25.0>

###
[`v1.24.1`](https://redirect.github.com/zizmorcore/zizmor-pre-commit/releases/tag/v1.24.1)

[Compare
Source](https://redirect.github.com/zizmorcore/zizmor-pre-commit/compare/v1.24.0...v1.24.1)

See: <https://github.com/zizmorcore/zizmor/releases/tag/v1.24.1>

###
[`v1.24.0`](https://redirect.github.com/zizmorcore/zizmor-pre-commit/releases/tag/v1.24.0)

[Compare
Source](https://redirect.github.com/zizmorcore/zizmor-pre-commit/compare/v1.23.1...v1.24.0)

See: <https://github.com/zizmorcore/zizmor/releases/tag/v1.24.0>

###
[`v1.23.1`](https://redirect.github.com/zizmorcore/zizmor-pre-commit/releases/tag/v1.23.1)

[Compare
Source](https://redirect.github.com/zizmorcore/zizmor-pre-commit/compare/v1.23.0...v1.23.1)

See: <https://github.com/zizmorcore/zizmor/releases/tag/v1.23.1>

###
[`v1.23.0`](https://redirect.github.com/zizmorcore/zizmor-pre-commit/releases/tag/v1.23.0)

[Compare
Source](https://redirect.github.com/zizmorcore/zizmor-pre-commit/compare/v1.22.0...v1.23.0)

See: <https://github.com/zizmorcore/zizmor/releases/tag/v1.23.0>

</details>

---

### Configuration

📅 **Schedule**: (UTC)

- Branch creation
  - "before 5am on the first day of the month"
- Automerge
  - At any time (no schedule defined)

🚦 **Automerge**: Disabled by config. Please merge this manually once you
are satisfied.

♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the
rebase/retry checkbox.

🔕 **Ignore**: Close this PR and you won't be reminded about this update
again.

---

- [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check
this box

---

This PR was generated by [Mend Renovate](https://mend.io/renovate/).
View the [repository job
log](https://developer.mend.io/github/epage/_rust).

<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0NC4zLjIiLCJ1cGRhdGVkSW5WZXIiOiI0NC4zLjIiLCJ0YXJnZXRCcmFuY2giOiJtYWluIiwibGFiZWxzIjpbXX0=-->
This PR contains the following updates:

| Package | Type | Update | Change |
|---|---|---|---|
| [actions/checkout](https://redirect.github.com/actions/checkout) |
action | major | `v6.1.0` → `v7.0.1` |

---

### Release Notes

<details>
<summary>actions/checkout (actions/checkout)</summary>

###
[`v7.0.1`](https://redirect.github.com/actions/checkout/blob/HEAD/CHANGELOG.md#v701)

[Compare
Source](https://redirect.github.com/actions/checkout/compare/v7.0.0...v7.0.1)

- Bump github/codeql-action from 3 to 4 by
[@&#8203;dependabot](https://redirect.github.com/dependabot)\[bot] in
[#&#8203;2475](https://redirect.github.com/actions/checkout/pull/2475)
- Bump actions/setup-node from 4 to 6 by
[@&#8203;dependabot](https://redirect.github.com/dependabot)\[bot] in
[#&#8203;2477](https://redirect.github.com/actions/checkout/pull/2477)
- Bump docker/build-push-action from 6.5.0 to 7.2.0 by
[@&#8203;dependabot](https://redirect.github.com/dependabot)\[bot] in
[#&#8203;2478](https://redirect.github.com/actions/checkout/pull/2478)
- Bump docker/login-action from 3.3.0 to 4.2.0 by
[@&#8203;dependabot](https://redirect.github.com/dependabot)\[bot] in
[#&#8203;2479](https://redirect.github.com/actions/checkout/pull/2479)
- Bump actions/checkout from 6 to 7 by
[@&#8203;dependabot](https://redirect.github.com/dependabot)\[bot] in
[#&#8203;2488](https://redirect.github.com/actions/checkout/pull/2488)
- Bump actions/upload-artifact from 4 to 7 by
[@&#8203;dependabot](https://redirect.github.com/dependabot)\[bot] in
[#&#8203;2476](https://redirect.github.com/actions/checkout/pull/2476)
- eslint 9 by
[@&#8203;dependabot](https://redirect.github.com/dependabot)\[bot] in
[#&#8203;2474](https://redirect.github.com/actions/checkout/pull/2474)
- Bump the minor-actions-dependencies group with 2 updates by
[@&#8203;dependabot](https://redirect.github.com/dependabot)\[bot] in
[#&#8203;2499](https://redirect.github.com/actions/checkout/pull/2499)
- skip running unsafe pr check if input is default by
[@&#8203;aiqiaoy](https://redirect.github.com/aiqiaoy) in
[#&#8203;2518](https://redirect.github.com/actions/checkout/pull/2518)
- trim only ascii whitespace for branch by
[@&#8203;aiqiaoy](https://redirect.github.com/aiqiaoy) in
[#&#8203;2521](https://redirect.github.com/actions/checkout/pull/2521)
- escape values passed to --unset by
[@&#8203;aiqiaoy](https://redirect.github.com/aiqiaoy) in
[#&#8203;2530](https://redirect.github.com/actions/checkout/pull/2530)

###
[`v7.0.0`](https://redirect.github.com/actions/checkout/blob/HEAD/CHANGELOG.md#v700)

[Compare
Source](https://redirect.github.com/actions/checkout/compare/v7.0.0...v7.0.0)

- Block checking out fork PR for pull\_request\_target and workflow\_run
by [@&#8203;aiqiaoy](https://redirect.github.com/aiqiaoy) in
[#&#8203;2454](https://redirect.github.com/actions/checkout/pull/2454)
- Bump actions/publish-immutable-action from 0.0.3 to 0.0.4 in the
minor-actions-dependencies group across 1 directory by
[@&#8203;dependabot](https://redirect.github.com/dependabot)\[bot] in
[#&#8203;2458](https://redirect.github.com/actions/checkout/pull/2458)
- Bump flatted from 3.3.1 to 3.4.2 by
[@&#8203;dependabot](https://redirect.github.com/dependabot)\[bot] in
[#&#8203;2460](https://redirect.github.com/actions/checkout/pull/2460)
- Bump js-yaml from 4.1.0 to 4.2.0 by
[@&#8203;dependabot](https://redirect.github.com/dependabot)\[bot] in
[#&#8203;2461](https://redirect.github.com/actions/checkout/pull/2461)
- Bump [@&#8203;actions/core](https://redirect.github.com/actions/core)
and
[@&#8203;actions/tool-cache](https://redirect.github.com/actions/tool-cache)
and Remove uuid by
[@&#8203;dependabot](https://redirect.github.com/dependabot)\[bot] in
[#&#8203;2459](https://redirect.github.com/actions/checkout/pull/2459)
- upgrade module to esm and update dependencies by
[@&#8203;aiqiaoy](https://redirect.github.com/aiqiaoy) in
[#&#8203;2463](https://redirect.github.com/actions/checkout/pull/2463)
- Bump the minor-npm-dependencies group across 1 directory with 3
updates by
[@&#8203;dependabot](https://redirect.github.com/dependabot)\[bot] in
[#&#8203;2462](https://redirect.github.com/actions/checkout/pull/2462)

###
[`v7`](https://redirect.github.com/actions/checkout/blob/HEAD/CHANGELOG.md#v700)

[Compare
Source](https://redirect.github.com/actions/checkout/compare/v6.1.0...v7.0.0)

- Block checking out fork PR for pull\_request\_target and workflow\_run
by [@&#8203;aiqiaoy](https://redirect.github.com/aiqiaoy) in
[#&#8203;2454](https://redirect.github.com/actions/checkout/pull/2454)
- Bump actions/publish-immutable-action from 0.0.3 to 0.0.4 in the
minor-actions-dependencies group across 1 directory by
[@&#8203;dependabot](https://redirect.github.com/dependabot)\[bot] in
[#&#8203;2458](https://redirect.github.com/actions/checkout/pull/2458)
- Bump flatted from 3.3.1 to 3.4.2 by
[@&#8203;dependabot](https://redirect.github.com/dependabot)\[bot] in
[#&#8203;2460](https://redirect.github.com/actions/checkout/pull/2460)
- Bump js-yaml from 4.1.0 to 4.2.0 by
[@&#8203;dependabot](https://redirect.github.com/dependabot)\[bot] in
[#&#8203;2461](https://redirect.github.com/actions/checkout/pull/2461)
- Bump [@&#8203;actions/core](https://redirect.github.com/actions/core)
and
[@&#8203;actions/tool-cache](https://redirect.github.com/actions/tool-cache)
and Remove uuid by
[@&#8203;dependabot](https://redirect.github.com/dependabot)\[bot] in
[#&#8203;2459](https://redirect.github.com/actions/checkout/pull/2459)
- upgrade module to esm and update dependencies by
[@&#8203;aiqiaoy](https://redirect.github.com/aiqiaoy) in
[#&#8203;2463](https://redirect.github.com/actions/checkout/pull/2463)
- Bump the minor-npm-dependencies group across 1 directory with 3
updates by
[@&#8203;dependabot](https://redirect.github.com/dependabot)\[bot] in
[#&#8203;2462](https://redirect.github.com/actions/checkout/pull/2462)

</details>

---

### Configuration

📅 **Schedule**: (UTC)

- Branch creation
  - "before 5am on the first day of the month"
- Automerge
  - At any time (no schedule defined)

🚦 **Automerge**: Disabled by config. Please merge this manually once you
are satisfied.

♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the
rebase/retry checkbox.

🔕 **Ignore**: Close this PR and you won't be reminded about this update
again.

---

- [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check
this box

---

This PR was generated by [Mend Renovate](https://mend.io/renovate/).
View the [repository job
log](https://developer.mend.io/github/epage/_rust).

<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0NC4zLjIiLCJ1cGRhdGVkSW5WZXIiOiI0NC4zLjIiLCJ0YXJnZXRCcmFuY2giOiJtYWluIiwibGFiZWxzIjpbXX0=-->
This PR contains the following updates:

| Package | Type | Update | Change |
|---|---|---|---|
| [j178/prek-action](https://redirect.github.com/j178/prek-action) |
action | major | `v2.0.6` → `v3.0.0` |

---

### Release Notes

<details>
<summary>j178/prek-action (j178/prek-action)</summary>

###
[`v3.0.0`](https://redirect.github.com/j178/prek-action/releases/tag/v3.0.0)

[Compare
Source](https://redirect.github.com/j178/prek-action/compare/v2.0.6...v3.0.0)

#### `prek-action` releases are now immutable

Starting with v3, `prek-action` will no longer publish moving major or
minor tags. References such as `j178/prek-action@v3` and
`j178/prek-action@v3.0` will **not** be available.

Moving tags can be retargeted after users adopt them, creating
unnecessary supply-chain risk. Use an exact release tag or, for stronger
protection, pin the action to a full commit SHA.

> \[!TIP]
> Use an exact release tag:
>
> ```yaml
> - uses: j178/prek-action@v3.0.0
> ```
>
> Or, even better, pin the full commit SHA:
>
> ```yaml
> - uses: j178/prek-action@4e14d07 #
v3.0.0
> ```

#### What's Changed

- Fix cache key hashing by
[@&#8203;akx](https://redirect.github.com/akx) in
[#&#8203;153](https://redirect.github.com/j178/prek-action/pull/153)
- Drop floating version tag support by
[@&#8203;j178](https://redirect.github.com/j178) in
[#&#8203;170](https://redirect.github.com/j178/prek-action/pull/170)
- Update known versions for prek 0.4.11 by
[@&#8203;j178](https://redirect.github.com/j178) in
[#&#8203;169](https://redirect.github.com/j178/prek-action/pull/169)

**Full Changelog**:
<j178/prek-action@v2...v3.0.0>

</details>

---

### Configuration

📅 **Schedule**: (UTC)

- Branch creation
  - "before 5am on the first day of the month"
- Automerge
  - At any time (no schedule defined)

🚦 **Automerge**: Disabled by config. Please merge this manually once you
are satisfied.

♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the
rebase/retry checkbox.

🔕 **Ignore**: Close this PR and you won't be reminded about this update
again.

---

- [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check
this box

---

This PR was generated by [Mend Renovate](https://mend.io/renovate/).
View the [repository job
log](https://developer.mend.io/github/epage/_rust).

<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0NC4zLjIiLCJ1cGRhdGVkSW5WZXIiOiI0NC4zLjIiLCJ0YXJnZXRCcmFuY2giOiJtYWluIiwibGFiZWxzIjpbXX0=-->
…alt-org#94)

`clippy::from_iter_instead_of_collect` was
[deprecated](rust-lang/rust-clippy#17208) a
couple of months ago, and shows a warning on `beta` (`1.98.0`) when
there is any config set for it:
```
warning: lint `clippy::from_iter_instead_of_collect` has been removed: lint has proved problematic
  |
  = note: requested on the command line with `-W clippy::from_iter_instead_of_collect`
  = note: `#[warn(renamed_and_removed_lints)]` on by default
```

Given that `1.98.0` will be `stable` in a couple of weeks
(`2026-08-20`), I figured it would be a good idea to remove
`from_iter_instead_of_collect` from `[lints.clippy]` early.
This causes enough issues with zizmor
This causes enough issues with zizmor
This PR contains the following updates:

| Package | Update | Change |
|---|---|---|
| [STABLE](https://redirect.github.com/rust-lang/rust) | minor | `1.97`
→ `1.98` |

---

### Release Notes

<details>
<summary>rust-lang/rust (STABLE)</summary>

###
[`v1.98`](https://redirect.github.com/rust-lang/rust/blob/HEAD/RELEASES.md#Version-1980-2026-08-20)

[Compare
Source](https://redirect.github.com/rust-lang/rust/compare/1.97.0...1.98.0)

\==========================

<a id="1.98.0-Language"></a>

## Language

- [Allow shortening lifetime of `&mut` when unsize-coercing, even in an
invariant
position.](https://redirect.github.com/rust-lang/rust/pull/149219) For
example, you can now coerce a `Cell<&'long mut i32>` to a `Cell<&'short
mut dyn Send>`. Such shortenings were already previously allowed when
coercing a `&mut` to a `&`, or coercing a `&` to a `&`.
- [Add deny-by-default `invalid_runtime_symbol_definitions` lint and
warn-by-default `suspicious_runtime_symbol_definitions`
lint](https://redirect.github.com/rust-lang/rust/pull/155521)
- The lints currently specifically targets `core` runtime symbols like
`memcmp`, `memset`, `strlen`, ... and is planned to be expanded in the
next few releases.
- [Add warn-by-default `c_void_returns` lint to check
`core::ffi::c_void` as a return
type](https://redirect.github.com/rust-lang/rust/pull/156379)

<a id="1.98.0-Platform-Support"></a>

## Platform Support

- [Add `powerpc64-unknown-linux-gnuelfv2` as Tier
3](https://redirect.github.com/rust-lang/rust/pull/144220)
- [Add `aarch64-unknown-linux-pauthtest` as Tier 3
target](https://redirect.github.com/rust-lang/rust/pull/155722)
- [Promote `thumbv7a-none-eabi` to Tier
2](https://redirect.github.com/rust-lang/rust/pull/155763)
- [Promote `thumbv7a-none-eabihf` to Tier
2](https://redirect.github.com/rust-lang/rust/pull/155763)
- [Promote `thumbv7r-none-eabi` to Tier
2](https://redirect.github.com/rust-lang/rust/pull/155763)
- [Promote `thumbv7r-none-eabihf` to Tier
2](https://redirect.github.com/rust-lang/rust/pull/155763)
- [Promote `thumbv8r-none-eabihf` to Tier
2](https://redirect.github.com/rust-lang/rust/pull/155763)

Refer to Rust's [platform support page][platform-support-doc]
for more information on Rust's tiered platform support.

[platform-support-doc]:
https://doc.rust-lang.org/rustc/platform-support.html

<a id="1.98.0-Libraries"></a>

## Libraries

- [Change `Location<'_>` lifetime to `'static` in
`Panic[Hook]Info`](https://redirect.github.com/rust-lang/rust/pull/146561)
- [Document panic in
`RangeInclusive::from(legacy::RangeInclusive)`](https://redirect.github.com/rust-lang/rust/pull/155421)
- [Document that `ManuallyDrop`'s `Box` interaction has been
fixed](https://redirect.github.com/rust-lang/rust/pull/155750)
- [Stabilize LoongArch CRC
Intrinsics](https://redirect.github.com/rust-lang/rust/issues/156908)
- [The `derive` macro is available at
`{core,std}::derive`.](https://redirect.github.com/rust-lang/rust/issues/154645)
This was previously [unintentionally stabilized in
1.96](https://redirect.github.com/rust-lang/rust/issues/159856), but is
now [explicitly
accepted](https://redirect.github.com/rust-lang/rust/issues/154645) as a
stabilized API.
- Please note that the MSRV for `{core,std}::derive` will be 1.96, and
not 1.98.

<a id="1.98.0-Stabilized-APIs"></a>

## Stabilized APIs

-
[`str::substr_range`](https://doc.rust-lang.org/stable/std/primitive.str.html#method.substr_range)
-
[`[T]::subslice_range`](https://doc.rust-lang.org/stable/std/primitive.slice.html#method.subslice_range)
-
[`core::fmt::NumBuffer`](https://doc.rust-lang.org/stable/core/fmt/struct.NumBuffer.html)
-
[`<{integer}>::format_into`](https://doc.rust-lang.org/stable/core/primitive.usize.html#method.format_into)
- [`Send/Sync for
std::process::CommandArgs`](https://doc.rust-lang.org/stable/std/process/struct.CommandArgs.html#impl-Send-for-CommandArgs%3C'a%3E)
-
[`{fN}::algebraic_add`](https://doc.rust-lang.org/stable/core/primitive.f32.html#method.algebraic_add)
-
[`{fN}::algebraic_sub`](https://doc.rust-lang.org/stable/core/primitive.f32.html#method.algebraic_sub)
-
[`{fN}::algebraic_mul`](https://doc.rust-lang.org/stable/core/primitive.f32.html#method.algebraic_mul)
-
[`{fN}::algebraic_div`](https://doc.rust-lang.org/stable/core/primitive.f32.html#method.algebraic_div)
-
[`{fN}::algebraic_rem`](https://doc.rust-lang.org/stable/core/primitive.f32.html#method.algebraic_rem)
-
[`NonZero<{integer}>::from_str_radix`](https://doc.rust-lang.org/stable/core/num/struct.NonZero.html#method.from_str_radix-4)
-
[`String::from_utf16le`](https://doc.rust-lang.org/stable/std/string/struct.String.html#method.from_utf16le)
-
[`String::from_utf16le_lossy`](https://doc.rust-lang.org/stable/std/string/struct.String.html#method.from_utf16le_lossy)
-
[`String::from_utf16be`](https://doc.rust-lang.org/stable/std/string/struct.String.html#method.from_utf16be)
-
[`String::from_utf16be_lossy`](https://doc.rust-lang.org/stable/std/string/struct.String.html#method.from_utf16be_lossy)
-
[`[T]::strip_circumfix`](https://doc.rust-lang.org/stable/core/primitive.slice.html#method.strip_circumfix)
-
[`str::strip_circumfix`](https://doc.rust-lang.org/stable/core/primitive.str.html#method.strip_circumfix)
-
[`Atomic<T>::from_mut`](https://doc.rust-lang.org/stable/core/sync/atomic/struct.Atomic.html#method.from_mut)
-
[`Atomic<T>::get_mut_slice`](https://doc.rust-lang.org/stable/core/sync/atomic/struct.Atomic.html#method.get_mut_slice)
-
[`Atomic<T>::from_mut_slice`](https://doc.rust-lang.org/stable/core/sync/atomic/struct.Atomic.html#method.from_mut_slice)
-
[`std::range::legacy`](https://doc.rust-lang.org/stable/std/range/legacy/index.html)

<a id="1.98.0-Compatibility-Notes"></a>

## Compatibility Notes

- [If fully elided, lifetime bounds of trait object types may now
resolve differently or even get rejected in very specific niche
scenarios](https://redirect.github.com/rust-lang/rust/pull/129543)
- [Error in more cases of ambiguous
imports](https://redirect.github.com/rust-lang/rust/pull/145108)
- [Switch the destructors implementation for thread locals on Windows to
use Fiber Local Storage
(FLS)](https://redirect.github.com/rust-lang/rust/pull/148799)
- [Convert some cases of the `ambiguous_glob_imports` lint into a hard
error](https://redirect.github.com/rust-lang/rust/pull/149195)
- [Where-bounds of the form `Type = Type` and `Type == Type` are no
longer syntactically
allowed](https://redirect.github.com/rust-lang/rust/pull/153513)
- [Ensure Send/Sync is not implemented for
std::env::Vars{,Os}](https://redirect.github.com/rust-lang/rust/pull/155153)
- [Fix that in some attributes, arguments were not properly
rejected](https://redirect.github.com/rust-lang/rust/pull/155193)
- [`repr(transparent)` is now more strict about which fields have
"trivial" layout and hence can be ignored: `repr(C)` types, types with
private fields, and `#[non_exhaustive]` types are no longer considered
"trivial"](https://redirect.github.com/rust-lang/rust/pull/155299)
- [Correctly check whether types have equal size in `transmute()` when
some `repr` attributes are
involved.](https://redirect.github.com/rust-lang/rust/pull/155418)
- [More characters are escaped when printing strings and
chars](https://redirect.github.com/rust-lang/rust/pull/155527)
- [Implement fast path for `derive(PartialOrd)` when deriving
`Ord`](https://redirect.github.com/rust-lang/rust/pull/155598)
This can break crates in practice where a type's PartialOrd and Ord
impls were inconsistent with each other.
- [Add temporary scope to `assert_eq` and
`assert_ne`](https://redirect.github.com/rust-lang/rust/pull/155739)
- Closed a hole in the pattern matching [structural
equality](https://doc.rust-lang.org/reference/patterns.html#constant-patterns)
check, preventing cases where a match of a constant would be allowed,
despite disagreeing with a manually written `PartialEq` implementation,
when a `derive(PartialEq)` implementation for that type also exists.
- [On Emscripten the WASM exception handling ABI is now unconditionally
used](https://redirect.github.com/rust-lang/rust/pull/156928) The
`-Zemscripten-wasm-eh=false` flag to switch back to JS exceptions has
been removed.
- [The UNSAFE\_CODE lint is now consistently emitted for all unsafe
attributes](https://redirect.github.com/rust-lang/rust/pull/157201)
- [Solaris: remove `File::lock` implementation, it has the wrong
semantics (return "unsupported"
instead)](https://redirect.github.com/rust-lang/rust/pull/157509)
- [Windows-gnu targets now specify baseline tools
versions](https://redirect.github.com/rust-lang/rust/pull/158020)
- [rustfmt now discovers module files that are defined in
`cfg_select!`](https://redirect.github.com/rust-lang/rust/pull/158372)
  This may cause more code to be formatted which was previously ignored.

</details>

---

### Configuration

📅 **Schedule**: (UTC)

- Branch creation
  - Every minute (`* * * * *`)
- Automerge
  - At any time (no schedule defined)

🚦 **Automerge**: Enabled.

♻ **Rebasing**: Whenever PR is behind base branch, or you tick the
rebase/retry checkbox.

🔕 **Ignore**: Close this PR and you won't be reminded about this update
again.

---

- [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check
this box

---

This PR was generated by [Mend Renovate](https://mend.io/renovate/).
View the [repository job
log](https://developer.mend.io/github/epage/_rust).

<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0NC4zOS4wIiwidXBkYXRlZEluVmVyIjoiNDQuMzkuMCIsInRhcmdldEJyYW5jaCI6Im1haW4iLCJsYWJlbHMiOltdfQ==-->

Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
@epage
epage merged commit 6bdc350 into cobalt-org:master Aug 25, 2026
19 of 21 checks passed
@epage
epage deleted the template branch August 25, 2026 17:50
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants