[dependabot]

Bumps the actions group with 3 updates in the / directory: runs-on/action, taiki-e/install-action and cachix/install-nix-action.

Updates runs-on/action from 2.4.0 to 2.6.0

Release notes

Sourced from runs-on/action's releases.

v2.6.0

What's Changed

• Build the action in CI and release the build CI tested by @​crohr in runs-on/action#74
• Skip post-step work after an EC2 Spot interruption by @​crohr in runs-on/action#69
• Add sticky_save input for restore-only sticky caches by @​crohr in runs-on/action#73
• Rename internal/cache to internal/magiccache by @​crohr in runs-on/action#76
• Run CI on every branch by @​crohr in runs-on/action#77
• Add a gocacheprog input that shares Go's build cache through Magic Cache by @​crohr in runs-on/action#75
• Add a bazel_remote_cache input that gives Bazel a remote cache through Magic Cache by @​crohr in runs-on/action#79
• Add a remote_cache input: Bazel, Go, Gradle, mbx and sccache caches on the RunsOn agent by @​crohr in runs-on/action#81
• Build with Go 1.27.3 to block the compromised eMudhra intermediates by @​crohr in runs-on/action#84

Full Changelog: runs-on/action@v2.5.0...v2.6.0

v2.5.0

What's Changed

New

• Disk metrics report free and total bytes (disk_free, disk_total), and the post-step summary charts them.
• Disk metrics identify each mount's EBS volume with a new VolumeId dimension, so a sticky disk or snapshot volume on /var/lib/docker reports its own volume instead of the root volume's. (#68, closes #19)

Changed

• On RunsOn v3.4.0 and later, the runner agent reports the job cost in the "Complete runner" step, and show_costs only chooses how it is shown (inline, summary or off). On those stacks the action no longer calls the RunsOn cost API or DescribeAvailabilityZones. Older stacks keep the post-step cost report. (#70)
• Disk metrics now carry device and VolumeId dimensions. CloudWatch matches exact dimension sets, so dashboards or alarms that select disk metrics by their dimensions need the new ones.

Commits

• 284bff8 Release v2.6.0
• 73f8424 Build with Go 1.27.3 to block the compromised eMudhra intermediates (#84)
• 1a99cc5 Add a remote_cache input: Bazel, Go, Gradle, mbx and sccache caches on the Ru...
• 1586e9c Add a bazel_remote_cache input that gives Bazel a remote cache through Magic ...
• cb1cb4f Add a gocacheprog input that shares Go's build cache through Magic Cache (#75)
• 3e0deed Run CI on every branch (#77)
• 731d906 Rename internal/cache to internal/magiccache (#76)
• df462a4 Add sticky_save input for restore-only sticky caches (#73)
• 8dbb600 Skip post-step work after an EC2 Spot interruption (#69)
• 6dc8a7d Build the action in CI and release the build CI tested (#74)
• Additional commits viewable in compare view

Updates taiki-e/install-action from 2.87.22 to 2.88.1

Release notes

Sourced from taiki-e/install-action's releases.

2.88.1

• Update wasmtime@latest to 50.0.1.

• Update vacuum@latest to 0.36.0.

• Update tombi@latest to 1.9.8.

• Update mise@latest to 2026.10.23.

• Update kingfisher@latest to 2.15.0.

• Update espup@latest to 0.19.0.

• Update deepsource@latest to 0.10.2.

• Update biome@latest to 2.6.4.

2.88.0

• Support similarity-rs. (#2017, thanks @​HardMax71)

2.87.33

• Update vacuum@latest to 0.35.4.

• Update uv@latest to 0.13.6.

• Update trunk@latest to 0.22.1.

• Update tombi@latest to 1.9.6.

• Update release-plz@latest to 0.4.2.

• Update mise@latest to 2026.10.21.

• Update cargo-nextest@latest to 0.9.150.

• Update cargo-about@latest to 0.9.3.

2.87.32

• Update wild@latest to 0.11.0.

• Update vacuum@latest to 0.35.2.

• Update tombi@latest to 1.9.5.

• Update sccache@latest to 0.19.0.

• Update release-plz@latest to 0.4.1.

• Update mise@latest to 2026.10.19.

... (truncated)

Changelog

Sourced from taiki-e/install-action's changelog.

Changelog

All notable changes to this project will be documented in this file.

This project adheres to Semantic Versioning.

[Unreleased]

[2.90.2] - 2026-11-06

• Update trivy@latest to 0.76.2.

• Update tombi@latest to 1.10.0.

• Update prek@latest to 0.5.10.

• Update mise@latest to 2026.11.2.

• Update mdbook-d2@latest to 0.3.10.

• Update cargo-zigbuild@latest to 0.24.1.

• Update cargo-tarpaulin@latest to 0.37.6.

• Update biome@latest to 2.6.5.

[2.90.1] - 2026-11-04

• Update zizmor@latest to 1.32.0.

• Update uv@latest to 0.13.7.

• Update typos@latest to 1.52.0.

• Update tombi@latest to 1.9.9.

• Update syft@latest to 1.56.0.

• Update mise@latest to 2026.11.0.

• Update kache@latest to 2.0.0.

• Update cargo-nextest@latest to 0.9.151.

[2.90.0] - 2026-11-03

... (truncated)

Commits

• 68a389c Release 2.88.1
• e31c3b8 Update wasmtime manifest
• e30a869 Update wasmtime@latest to 50.0.1
• bca7759 Update tombi@latest to 1.9.8
• 53e7fa7 ci: Mark deepsource as glibc_pre_2_34_incompat
• 8f5b3ba Update wasmtime manifest
• c6e228d Update wasm-pack manifest
• 46c9dcf Update wasm-bindgen manifest
• 4136a69 Update vacuum@latest to 0.36.0
• bf9426f Update tombi@latest to 1.9.7
• Additional commits viewable in compare view

Updates cachix/install-nix-action from 31.11.1 to 31.11.3

Release notes

Sourced from cachix/install-nix-action's releases.

31.11.3

This tag was incorrectly named. Prefer v31.11.3.

What's Changed

• nix: 2.35.3 -> 2.35.4 by @​xokdvium in cachix/install-nix-action#283 Security: Updates the bundled certificates shipped with the installer to remove the compromised eMudhra certificates.

Full Changelog: cachix/install-nix-action@v31.11.2...31.11.3

v31.11.3

What's Changed

• nix: 2.35.3 -> 2.35.4 by @​xokdvium in cachix/install-nix-action#283 Security: Updates the bundled certificates shipped with the installer to remove the compromised eMudhra certificates.

Re-release of 31.11.3, which was tagged incorrectly.

Full Changelog: cachix/install-nix-action@v31.11.2...v31.11.3

v31.11.2

What's Changed

• nix: 2.35.2 -> 2.35.3 by @​github-actions[bot] in cachix/install-nix-action#282 Security: Fixes a number of vulnerabilities that could be combined to achieve root priviledge escalation. See https://discourse.nixos.org/t/security-advisory-for-nix-and-lix-october-2026/80547

Full Changelog: cachix/install-nix-action@v31.11.1...v31.11.2

Commits

• 75c75c3 Merge pull request #283 from xokdvium/cacert-bump
• 3736037 nix: 2.35.3 -> 2.35.4
• 448cde7 Merge pull request #282 from cachix/create-pull-request/patch
• 280a411 nix: 2.35.2 -> 2.35.3
• See full diff in compare view