build(deps): bump the dependencies group with 5 updates

[dependabot]

Bumps the dependencies group with 5 updates:

Package	From	To
actions-rust-lang/setup-rust-toolchain	1.15.4	1.16.0
harehare/setup-mq	82b5a89f9f3221f9c962822bb2731f973af5695d	2715cd2b75d3b3c4d894a8e0f83d707246c5002a
taiki-e/install-action	2.75.5	2.75.10
pnpm/action-setup	5.0.0	6.0.0
softprops/action-gh-release	2.6.1	3.0.0

Updates actions-rust-lang/setup-rust-toolchain from 1.15.4 to 1.16.0

Release notes

Sourced from actions-rust-lang/setup-rust-toolchain's releases.

v1.16.0

What's Changed

• Update actions/checkout to v6 on README by @​ryuapp in actions-rust-lang/setup-rust-toolchain#88
• feat: add cache-save-if input to propagate save-if to Swatinem/rust-cache by @​ChanTsune in actions-rust-lang/setup-rust-toolchain#90

New Contributors

• @​ryuapp made their first contribution in actions-rust-lang/setup-rust-toolchain#88
• @​ChanTsune made their first contribution in actions-rust-lang/setup-rust-toolchain#90

Full Changelog: actions-rust-lang/setup-rust-toolchain@v1.15.4...v1.16.0

Changelog

Sourced from actions-rust-lang/setup-rust-toolchain's changelog.

Changelog

All notable changes to this project will be documented in this file.

The format is based on Keep a Changelog, and this project adheres to Semantic Versioning.

[Unreleased]

[1.16.0] - 2026-04-13

• Add new parameter cache-save-if that is propagated to Swatinem/rust-cache as save-if (#90 by @​ChanTsune)

[1.15.4] - 2026-03-15

• Bump Swatinem/rust-cache from 2.8.2 to 2.9.1 (#87 by @​hyperfinitism) This gets rid of the warnings about Node.js 20.

[1.15.3] - 2026-03-01

• Bump Swatinem/rust-cache from 2.8.1 to 2.8.2

[1.15.2] - 2025-10-04

• Fix: Run the version detection steps in the selected rust-src-dir directory. This should enable the version selection even without a default toolchain installed. Fixes #74.

[1.15.1] - 2025-09-23

• Update Swatinem/rust-cache to v2.8.1

[1.15.0] - 2025-09-14

• Add support for non-root source directory. Accept source code and rust-toolchain.toml file in subdirectories of the repository. Adds a new parameter rust-src-dir that controls the lookup for toolchain files and sets a default value for the cache-workspace input. (#69 by @​Kubaryt)

[1.14.1] - 2025-08-28

• Pin Swatinem/rust-cache action to a full commit SHA (#68 by @​JohnTitor)

[1.14.0] - 2025-08-23

• Add new parameters cache-all-crates and cache-workspace-crates that are propagated to Swatinem/rust-cache as cache-all-crates and cache-workspace-crates

[1.13.0] - 2025-06-16

• Add new parameter cache-provider that is propagated to Swatinem/rust-cache as cache-provider (#65 by @​mindrunner)

... (truncated)

Commits

• 2b1f5e9 Update CHANGELOG for version 1.16.0
• 9030f3d Merge pull request #90 from ChanTsune/feat/cache-save-if
• 186b99e feat: add cache-save-if input to propagate save-if to Swatinem/rust-cache
• d197c15 Merge pull request #88 from ryuapp/chore/update-chekcout-v6-on-readme
• fa057b4 Update actions/checkout to v6 on README
• See full diff in compare view

Updates harehare/setup-mq from 82b5a89f9f3221f9c962822bb2731f973af5695d to 2715cd2b75d3b3c4d894a8e0f83d707246c5002a

Commits

• 2715cd2 ✨ chore: bump version to 1.1.4 and update rollup config
• 8faf668 Merge pull request #392 from harehare/feat/bundled-tools
• 1dfd27e ✨ feat: support bundled tools from harehare/mq releases
• 9a0c74d Merge pull request #390 from harehare/dependabot/npm_and_yarn/prettier-3.8.2
• 16b5b3b Merge pull request #389 from harehare/dependabot/npm_and_yarn/actions/github-...
• 4f06da6 Bump prettier from 3.8.1 to 3.8.2
• 9001010 Merge pull request #388 from harehare/dependabot/npm_and_yarn/vitest-4.1.4
• 05b7423 Merge pull request #386 from harehare/dependabot/npm_and_yarn/oxlint-1.59.0
• 48df45f Merge pull request #391 from harehare/dependabot/npm_and_yarn/types/node-25.6.0
• 6847e3f Bump @​types/node from 25.5.2 to 25.6.0
• Additional commits viewable in compare view

Updates taiki-e/install-action from 2.75.5 to 2.75.10

Release notes

Sourced from taiki-e/install-action's releases.

2.75.10

• Update tombi@latest to 0.9.17.

• Update mise@latest to 2026.4.10.

2.75.9

• Enhance security when cargo-binstall fallback is used. (acc1621b)

2.75.8

• Update vacuum@latest to 0.25.8.

• Update mise@latest to 2026.4.9.

• Update cargo-binstall@latest to 1.18.0.

• Update gungraun-runner@latest to 0.18.1.

2.75.7

• Update covgate@latest to 0.1.4.

• Update wasm-bindgen@latest to 0.2.118.

2.75.6

• Update mise@latest to 2026.4.8.

• Update cargo-deny@latest to 0.19.1.

Changelog

Sourced from taiki-e/install-action's changelog.

Changelog

All notable changes to this project will be documented in this file.

This project adheres to Semantic Versioning.

[Unreleased]

[2.75.10] - 2026-04-13

• Update tombi@latest to 0.9.17.

• Update mise@latest to 2026.4.10.

[2.75.9] - 2026-04-13

• Enhance security when cargo-binstall fallback is used. (acc1621b)

[2.75.8] - 2026-04-13

• Update vacuum@latest to 0.25.8.

• Update mise@latest to 2026.4.9.

• Update cargo-binstall@latest to 1.18.0.

• Update gungraun-runner@latest to 0.18.1.

[2.75.7] - 2026-04-11

• Update covgate@latest to 0.1.4.

• Update wasm-bindgen@latest to 0.2.118.

[2.75.6] - 2026-04-11

• Update mise@latest to 2026.4.8.

• Update cargo-deny@latest to 0.19.1.

[2.75.5] - 2026-04-10

• Update biome@latest to 2.4.11.

• Update wasmtime@latest to 43.0.1.

... (truncated)

Commits

• 85b24a6 Release 2.75.10
• 9754889 Update typos manifest
• 00eaeec Update tombi@latest to 0.9.17
• 17d27fe Update prek manifest
• 1d472f0 Update mise@latest to 2026.4.10
• 57a0448 Update cargo-xwin manifest
• dfb05aa codegen: Apply cooldown also for latest_only
• b5147f4 Add todo comment about cargo-binstall PR
• 8bc1320 Update comment/changelog
• d0f2322 Release 2.75.9
• Additional commits viewable in compare view

Updates pnpm/action-setup from 5.0.0 to 6.0.0

Release notes

Sourced from pnpm/action-setup's releases.

v6.0.0

Added support for pnpm v11.

Commits

• 08c4be7 docs(README): update action-setup version
• 5798914 chore: update .gitignore
• ddffd66 fix: remove accidentally committed file
• b43f991 fix: update pnpm to 11.0.0-rc.0
• 3852509 README.md: bring versions up-to-date (#222)
• 6e7bdbd chore: bump bootstrap pnpm to 11.0.0-beta.4-1 and add update script
• 6b87c46 fix: Windows standalone mode — bypass broken npm shims (#217)
• 994d756 feat: read pnpm version from devEngines.packageManager (#211)
• 738f428 docs: upgrade pnpm/action-setup from v4 to v5
• 62bce64 fix: extract pnpm version from packageManager field instead of returning unde...
• Additional commits viewable in compare view

Updates softprops/action-gh-release from 2.6.1 to 3.0.0

Release notes

Sourced from softprops/action-gh-release's releases.

v3.0.0

3.0.0 is a major release that moves the action runtime from Node 20 to Node 24. Use v3 on GitHub-hosted runners and self-hosted fleets that already support the Node 24 Actions runtime. If you still need the last Node 20-compatible line, stay on v2.6.2.

What's Changed

Other Changes 🔄

• Move the action runtime and bundle target to Node 24
• Update @types/node to the Node 24 line and allow future Dependabot updates
• Keep the floating major tag on v3; v2 remains pinned to the latest 2.x release

v2.6.2

What's Changed

Other Changes 🔄

• chore(deps): bump picomatch from 4.0.3 to 4.0.4 by @​dependabot[bot] in softprops/action-gh-release#775
• chore(deps): bump brace-expansion from 5.0.4 to 5.0.5 by @​dependabot[bot] in softprops/action-gh-release#777
• chore(deps): bump vite from 8.0.0 to 8.0.5 by @​dependabot[bot] in softprops/action-gh-release#781

Full Changelog: softprops/action-gh-release@v2...v2.6.2

Changelog

Sourced from softprops/action-gh-release's changelog.

3.0.0

3.0.0 is a major release that moves the action runtime from Node 20 to Node 24. Use v3 on GitHub-hosted runners and self-hosted fleets that already support the Node 24 Actions runtime. If you still need the last Node 20-compatible line, stay on v2.6.2.

What's Changed

Other Changes 🔄

• Move the action runtime and bundle target to Node 24
• Update @types/node to the Node 24 line and allow future Dependabot updates
• Keep the floating major tag on v3; v2 remains pinned to the latest 2.x release

2.6.2

What's Changed

Other Changes 🔄

• chore(deps): bump picomatch from 4.0.3 to 4.0.4 by @​dependabot[bot] in softprops/action-gh-release#775
• chore(deps): bump brace-expansion from 5.0.4 to 5.0.5 by @​dependabot[bot] in softprops/action-gh-release#777
• chore(deps): bump vite from 8.0.0 to 8.0.5 by @​dependabot[bot] in softprops/action-gh-release#781

2.6.1

2.6.1 is a patch release focused on restoring linked discussion thread creation when discussion_category_name is set. It fixes [#764](https://github.com/softprops/action-gh-release/issues/764), where the draft-first publish flow stopped carrying the discussion category through the final publish step.

If you still hit an issue after upgrading, please open a report with the bug template and include a minimal repro or sanitized workflow snippet where possible.

What's Changed

Bug fixes 🐛

• fix: preserve discussion category on publish by @​chenrui333 in softprops/action-gh-release#765

2.6.0

2.6.0 is a minor release centered on previous_tag support for generate_release_notes, which lets workflows pin GitHub's comparison base explicitly instead of relying on the default range. It also includes the recent concurrent asset upload recovery fix, a working_directory docs sync, a checked-bundle freshness guard for maintainers, and clearer immutable-prerelease guidance where GitHub platform behavior imposes constraints on how prerelease asset uploads can be published.

If you still hit an issue after upgrading, please open a report with the bug template and include a minimal repro or sanitized workflow snippet where possible.

What's Changed

... (truncated)

Commits

• b430933 release: cut v3.0.0 for Node 24 upgrade (#670)
• c2e35e0 chore(deps): bump the npm group across 1 directory with 7 updates (#783)
• 3bb1273 release 2.6.2
• c34030f chore: bump node to 24.14.1
• 8975bd0 chore(deps): bump vite from 8.0.0 to 8.0.5 (#781)
• f71937f chore(deps): bump brace-expansion from 5.0.4 to 5.0.5 (#777)
• 3f0d239 chore(deps): bump picomatch from 4.0.3 to 4.0.4 (#775)
• See full diff in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
• @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
• @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
• @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
• @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions