chore(deps): update github-release non-major dependencies

[ppat]

This PR contains the following updates:

Package	Update	Change
aquasecurity/tfsec	patch	1.28.9 -> 1.28.10
nektos/act	patch	0.2.63 -> 0.2.64
rust-lang/rust	minor	1.77.0 -> 1.79.0
tailscale/tailscale	patch	1.68.1 -> 1.68.2
terraform-linters/tflint	patch	0.51.1 -> 0.51.2

---

Release Notes

aquasecurity/tfsec (aquasecurity/tfsec)

v1.28.10

Compare Source

What's Changed

• Goreleaser update by @​simar7 in https://github.com/aquasecurity/tfsec/pull/2149

Full Changelog: aquasecurity/tfsec@v1.28.8...v1.28.10

nektos/act (nektos/act)

v0.2.64

Compare Source

Changelog

Bug fixes

• e4607fc fix: skip service container for empty image (#​2281)
• b5ad3c4 fix: composite action input pollution (#​2348)
• b917ecc fix: update reusable workflow input handling (#​2349)

Other

• aa54ea9 chore: bump VERSION to 0.2.64
• 935e4c3 build(deps): bump github.com/spf13/cobra from 1.8.0 to 1.8.1 (#​2366)
• 8a64a76 build(deps): bump google.golang.org/protobuf from 1.34.1 to 1.34.2 (#​2365)
• f9ea5e3 build(deps): bump golang.org/x/term from 0.20.0 to 0.21.0 (#​2360)
• 7b950e1 build(deps): bump github.com/docker/cli (#​2358)
• 55a8f9a Add riscv64 binary release (#​2350)
• 71a6fa0 build(deps): bump github.com/rhysd/actionlint from 1.7.0 to 1.7.1 (#​2346)

rust-lang/rust (rust-lang/rust)

v1.79.0

Compare Source

==========================

Language

• Stabilize inline const {} expressions.
• Prevent opaque types being instantiated twice with different regions within the same function.
• Stabilize WebAssembly target features that are in phase 4 and 5.
• Add the redundant_lifetimes lint to detect lifetimes which are semantically redundant.
• Stabilize the unnameable_types lint for public types that can't be named.
• Enable debuginfo in macros, and stabilize -C collapse-macro-debuginfo and #[collapse_debuginfo].
• Propagate temporary lifetime extension into if and match expressions.
• Restrict promotion of const fn calls.
• Warn against refining impls of crate-private traits with refining_impl_trait lint.
• Stabilize associated type bounds (RFC 2289).
• Stabilize importing main from other modules or crates.
• Check return types of function types for well-formedness
• Rework impl Trait lifetime inference
• Change inductive trait solver cycles to be ambiguous

Compiler

• Define -C strip to only affect binaries, not artifacts like .pdb.
• Stabilize -Crelro-level for controlling runtime link hardening.
• Stabilize checking of cfg names and values at compile-time with --check-cfg.
  Note that this only stabilizes the compiler part, the Cargo part is still unstable in this release.
• Add aarch64-apple-visionos and aarch64-apple-visionos-sim tier 3 targets.
• Add riscv32ima-unknown-none-elf tier 3 target.
• Promote several Windows targets to tier 2: aarch64-pc-windows-gnullvm, i686-pc-windows-gnullvm, and x86_64-pc-windows-gnullvm.

Refer to Rust's [platform support page][platform-support-doc]
for more information on Rust's tiered platform support.

Libraries

• Implement FromIterator for (impl Default + Extend, impl Default + Extend).
• Implement {Div,Rem}Assign<NonZero<X>> on X.
• Document overrides of clone_from() in core/std.
• Link MSVC default lib in core.
• Caution against using transmute between pointers and integers.
• Enable frame pointers for the standard library.

Stabilized APIs

• {integer}::unchecked_add
• {integer}::unchecked_mul
• {integer}::unchecked_sub
• <[T]>::split_at_unchecked
• <[T]>::split_at_mut_unchecked
• <[u8]>::utf8_chunks
• str::Utf8Chunks
• str::Utf8Chunk
• <*const T>::is_aligned
• <*mut T>::is_aligned
• NonNull::is_aligned
• <*const [T]>::len
• <*mut [T]>::len
• <*const [T]>::is_empty
• <*mut [T]>::is_empty
• NonNull::<[T]>::is_empty
• CStr::count_bytes
• io::Error::downcast
• num::NonZero<T>
• path::absolute
• proc_macro::Literal::byte_character
• proc_macro::Literal::c_string

These APIs are now stable in const contexts:

• Atomic*::into_inner
• io::Cursor::new
• io::Cursor::get_ref
• io::Cursor::position
• io::empty
• io::repeat
• io::sink
• panic::Location::caller
• panic::Location::file
• panic::Location::line
• panic::Location::column

Cargo

• Prevent dashes in lib.name, always normalizing to _.
• Stabilize MSRV-aware version requirement selection in cargo add.
• Switch to using gitoxide by default for listing files.

Rustdoc

• Always display stability version even if it's the same as the containing item.
• Show a single search result for items with multiple paths.
• Support typing / in docs to begin a search.

Misc

Compatibility Notes

• Update the minimum external LLVM to 17.
• RustcEncodable and RustcDecodable are soft-destabilized, to be removed
  from the prelude in next edition.
• The wasm_c_abi future-incompatibility lint will warn about use of the
  non-spec-compliant C ABI.
  Use wasm-bindgen v0.2.88 to generate forward-compatible bindings.
• Check return types of function types for well-formedness

v1.78.0

Compare Source

==========================

Language

• Stabilize #[cfg(target_abi = ...)]
• Stabilize the #[diagnostic] namespace and #[diagnostic::on_unimplemented] attribute
• Make async-fn-in-trait implementable with concrete signatures
• Make matching on NaN a hard error, and remove the rest of illegal_floating_point_literal_pattern
• static mut: allow mutable reference to arbitrary types, not just slices and arrays
• Extend invalid_reference_casting to include references casting to bigger memory layout
• Add non_contiguous_range_endpoints lint for singleton gaps after exclusive ranges
• Add wasm_c_abi lint for use of older wasm-bindgen versions
  This lint currently only works when using Cargo.
• Update indirect_structural_match and pointer_structural_match lints to match RFC
• Make non-PartialEq-typed consts as patterns a hard error
• Split refining_impl_trait lint into _reachable, _internal variants
• Remove unnecessary type inference when using associated types inside of higher ranked where-bounds
• Weaken eager detection of cyclic types during type inference
• trait Trait: Auto {}: allow upcasting from dyn Trait to dyn Trait + Auto

Compiler

• Made INVALID_DOC_ATTRIBUTES lint deny by default
• Increase accuracy of redundant use checking
• Suggest moving definition if non-found macro_rules! is defined later
• Lower transmutes from int to pointer type as gep on null

Target changes:

• Windows tier 1 targets now require at least Windows 10
  • Enable CMPXCHG16B, SSE3, SAHF/LAHF and 128-bit Atomics in tier 1 Windows
• Add wasm32-wasip1 tier 2 (without host tools) target
• Add wasm32-wasip2 tier 3 target
• Rename wasm32-wasi-preview1-threads to wasm32-wasip1-threads
• Add arm64ec-pc-windows-msvc tier 3 target
• Add armv8r-none-eabihf tier 3 target for the Cortex-R52
• Add loongarch64-unknown-linux-musl tier 3 target

Refer to Rust's [platform support page][platform-support-doc]
for more information on Rust's tiered platform support.

Libraries

• Bump Unicode to version 15.1.0, regenerate tables
• Make align_offset, align_to well-behaved in all cases
• PartialEq, PartialOrd: document expectations for transitive chains
• Optimize away poison guards when std is built with panic=abort
• Replace pthread RwLock with custom implementation
• Implement unwind safety for Condvar on all platforms
• Add ASCII fast-path for char::is_grapheme_extended

Stabilized APIs

• impl Read for &Stdin
• Accept non 'static lifetimes for several std::error::Error related implementations
• Make impl<Fd: AsFd> impl take ?Sized
• impl From<TryReserveError> for io::Error

These APIs are now stable in const contexts:

• Barrier::new()

Cargo

• Stabilize lockfile v4
• Respect rust-version when generating lockfile
• Control --charset via auto-detecting config value
• Support target.<triple>.rustdocflags officially
• Stabilize global cache data tracking

Misc

• rustdoc: add --test-builder-wrapper arg to support wrappers such as RUSTC_WRAPPER when building doctests

Compatibility Notes

• Many unsafe precondition checks now run for user code with debug assertions enabled
  This change helps users catch undefined behavior in their code, though the details of how much is checked are generally not stable.
• riscv only supports split_debuginfo=off for now
• Consistently check bounds on hidden types of impl Trait
• Change equality of higher ranked types to not rely on subtyping
• When called, additionally check bounds on normalized function return type
• Expand coverage for arithmetic_overflow lint
• Fix detection of potential interior mutability in const initializers
  This code was accidentally accepted. The fix can break generic code that borrows a value of unknown type,
  as there is currently no way to declare "this type has no interior mutability". In the future, stabilizing
  the Freeze trait will allow proper support for such code.

Internal Changes

These changes do not affect any public interfaces of Rust, but they represent
significant improvements to the performance or internals of rustc and related
tools.

• Update to LLVM 18
• Build rustc with 1CGU on x86_64-pc-windows-msvc
• Build rustc with 1CGU on x86_64-apple-darwin
• Introduce run-make V2 infrastructure, a run_make_support library and port over 2 tests as example
• Windows: Implement condvar, mutex and rwlock using futex

v1.77.2

Compare Source

===========================

• CVE-2024-24576: fix escaping of Windows batch file arguments in std::process::Command

v1.77.1

Compare Source

===========================

• Revert stripping debuginfo by default for Windows
  This fixes a regression in 1.77 by reverting to the previous default.
  Platforms other than Windows are not affected.
• Internal: Fix heading anchor rendering in doc pages

tailscale/tailscale (tailscale/tailscale)

v1.68.2

Compare Source

All Platforms

• Fixed: Tailnet lock validation of rotation signatures now permits multiple nodes signed by the same pre-signed reusable auth key.

macOS, iOS

• Changed: Wake from sleep reliability is improved for re-connections and transitions between networks.

terraform-linters/tflint (terraform-linters/tflint)

v0.51.2

Compare Source

What's Changed

• build(deps): Bump github.com/hashicorp/go-plugin from 1.6.0 to 1.6.1 by @​dependabot in https://github.com/terraform-linters/tflint/pull/2047
• build(deps): Bump github.com/fatih/color from 1.16.0 to 1.17.0 by @​dependabot in https://github.com/terraform-linters/tflint/pull/2048
• build(deps): Bump golangci/golangci-lint-action from 5.3.0 to 6.0.1 by @​dependabot in https://github.com/terraform-linters/tflint/pull/2049
• build(deps): Bump google.golang.org/grpc from 1.63.2 to 1.64.0 by @​dependabot in https://github.com/terraform-linters/tflint/pull/2053
• build(deps): Bump github.com/hashicorp/go-version from 1.6.0 to 1.7.0 by @​dependabot in https://github.com/terraform-linters/tflint/pull/2054
• build(deps): Bump alpine from 3.19 to 3.20 by @​dependabot in https://github.com/terraform-linters/tflint/pull/2055
• build(deps): Bump goreleaser/goreleaser-action from 5 to 6 by @​dependabot in https://github.com/terraform-linters/tflint/pull/2061
• build(deps): Bump golang.org/x/crypto from 0.23.0 to 0.24.0 by @​dependabot in https://github.com/terraform-linters/tflint/pull/2062
• build(deps): Bump golang.org/x/text from 0.15.0 to 0.16.0 by @​dependabot in https://github.com/terraform-linters/tflint/pull/2064
• build(deps): Bump golang.org/x/oauth2 from 0.20.0 to 0.21.0 by @​dependabot in https://github.com/terraform-linters/tflint/pull/2063
• build(deps): Bump golang.org/x/net from 0.25.0 to 0.26.0 by @​dependabot in https://github.com/terraform-linters/tflint/pull/2065
• build(deps): Bump github.com/jessevdk/go-flags from 1.5.0 to 1.6.1 by @​dependabot in https://github.com/terraform-linters/tflint/pull/2066
• build(deps): Bump docker/build-push-action from 5 to 6 by @​dependabot in https://github.com/terraform-linters/tflint/pull/2067
• build(deps): Bump github.com/hashicorp/hcl/v2 from 2.20.1 to 2.21.0 by @​dependabot in https://github.com/terraform-linters/tflint/pull/2068
• build(deps): Bump github.com/go-test/deep from 1.1.0 to 1.1.1 by @​dependabot in https://github.com/terraform-linters/tflint/pull/2069
• build(deps): Bump github.com/hashicorp/go-getter from 1.7.4 to 1.7.5 by @​dependabot in https://github.com/terraform-linters/tflint/pull/2070
• deps: Go 1.22.4 by @​wata727 in https://github.com/terraform-linters/tflint/pull/2073
• docs: Recommend verification with GitHub CLI by @​wata727 in https://github.com/terraform-linters/tflint/pull/2074

Full Changelog: terraform-linters/tflint@v0.51.1...v0.51.2

---

Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Enabled.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

---

• If you want to rebase/retry this PR, check this box

---

This PR has been generated by Renovate Bot.

[ppat]

🎉 This PR is included in version 1.5.0 🎉

The release is available on GitHub release

Your semantic-release bot 📦🚀

[ppat]

🎉 This PR is included in version 1.5.0 🎉

The release is available on GitHub release

Your semantic-release bot 📦🚀