build(deps): bump the actions-deps group with 2 updates by dependabot[bot] · Pull Request #75 · OpenZeppelin/Robust-Provider

dependabot · 2026-03-25T09:25:31Z

Bumps the actions-deps group with 2 updates: taiki-e/install-action and actions/cache.

Updates taiki-e/install-action from 2.68.35 to 2.69.9

Release notes

Sourced from taiki-e/install-action's releases.

2.69.9

Update uv@latest to 0.11.1.

Update osv-scanner@latest to 2.3.5.

Update mise@latest to 2026.3.14.

2.69.8

Update just@latest to 1.48.0.

Update uv@latest to 0.11.0.

Update rclone@latest to 1.73.3.

Update mise@latest to 2026.3.13.

2.69.7

Update prek@latest to 0.3.8.

Update mise@latest to 2026.3.12.

Update cargo-valgrind@latest to 2.4.1.

2.69.6

Support signature verification for mise and syft. (#1611)

Update mise@latest to 2026.3.10.

Update knope@latest to 0.22.4.

Update cargo-binstall@latest to 1.17.8.

Update tombi@latest to 0.9.9.

2.69.5

Update cargo-nextest@latest to 0.9.132.

2.69.4

Support artifact attestations verification for biome, cargo-cyclonedx, cargo-hack, cargo-llvm-cov, cargo-minimal-versions, cargo-no-dev-deps, martin, parse-changelog, parse-dockerfile, prek, uv, wasmtime, zizmor, and zola. (#1606)

Update biome@latest to 2.4.8.

Update tombi@latest to 0.9.8.

Update parse-dockerfile@latest to 0.1.5.

Update parse-changelog@latest to 0.6.16.

Update cargo-llvm-cov@latest to 0.8.5.

... (truncated)

Changelog

Sourced from taiki-e/install-action's changelog.

Changelog

All notable changes to this project will be documented in this file.

This project adheres to Semantic Versioning.

[Unreleased]

[2.69.9] - 2026-03-25

Update uv@latest to 0.11.1.

Update osv-scanner@latest to 2.3.5.

Update mise@latest to 2026.3.14.

[2.69.8] - 2026-03-24

Update just@latest to 1.48.0.

Update uv@latest to 0.11.0.

Update rclone@latest to 1.73.3.

Update mise@latest to 2026.3.13.

[2.69.7] - 2026-03-23

Update prek@latest to 0.3.8.

Update mise@latest to 2026.3.12.

Update cargo-valgrind@latest to 2.4.1.

[2.69.6] - 2026-03-21

Support signature verification for mise and syft. (#1611)

Update mise@latest to 2026.3.10.

Update knope@latest to 0.22.4.

Update cargo-binstall@latest to 1.17.8.

Update tombi@latest to 0.9.9.

... (truncated)

Commits

328a871 Release 2.69.9
b8df135 Update uv@latest to 0.11.1
09ab1d9 Update osv-scanner@latest to 2.3.5
4168e01 Update mise@latest to 2026.3.14
7bc99ee Release 2.69.8
b3b4c93 Fix error message grammar (#1616)
1558cee Update just@latest to 1.48.0
26d156b Update uv@latest to 0.11.0
f2b7c07 Update rclone@latest to 1.73.3
cc168bc Update mise@latest to 2026.3.13
Additional commits viewable in compare view

Updates actions/cache from 5.0.3 to 5.0.4

Release notes

Sourced from actions/cache's releases.

v5.0.4

What's Changed

Add release instructions and update maintainer docs by @Link- in actions/cache#1696

Potential fix for code scanning alert no. 52: Workflow does not contain permissions by @Link- in actions/cache#1697

Fix workflow permissions and cleanup workflow names / formatting by @Link- in actions/cache#1699

docs: Update examples to use the latest version by @XZTDean in actions/cache#1690

Fix proxy integration tests by @Link- in actions/cache#1701

Fix cache key in examples.md for bun.lock by @RyPeck in actions/cache#1722

Update dependencies & patch security vulnerabilities by @Link- in actions/cache#1738

New Contributors

@XZTDean made their first contribution in actions/cache#1690

@RyPeck made their first contribution in actions/cache#1722

Full Changelog: actions/cache@v5...v5.0.4

Changelog

Sourced from actions/cache's changelog.

Releases

How to prepare a release

[!NOTE]
Relevant for maintainers with write access only.

Switch to a new branch from main.

Run npm test to ensure all tests are passing.

Update the version in https://github.com/actions/cache/blob/main/package.json.

Run npm run build to update the compiled files.

Update this https://github.com/actions/cache/blob/main/RELEASES.md with the new version and changes in the ## Changelog section.

Run licensed cache to update the license report.

Run licensed status and resolve any warnings by updating the https://github.com/actions/cache/blob/main/.licensed.yml file with the exceptions.

Commit your changes and push your branch upstream.

Open a pull request against main and get it reviewed and merged.

Draft a new release https://github.com/actions/cache/releases use the same version number used in package.json

Create a new tag with the version number.

Auto generate release notes and update them to match the changes you made in RELEASES.md.

Toggle the set as the latest release option.

Publish the release.

Navigate to https://github.com/actions/cache/actions/workflows/release-new-action-version.yml

There should be a workflow run queued with the same version number.

Approve the run to publish the new version and update the major tags for this action.

Changelog

5.0.4

Bump minimatch to v3.1.5 (fixes ReDoS via globstar patterns)

Bump undici to v6.24.1 (WebSocket decompression bomb protection, header validation fixes)

Bump fast-xml-parser to v5.5.6

5.0.3

Bump @actions/cache to v5.0.5 (Resolves: https://github.com/actions/cache/security/dependabot/33)

Bump @actions/core to v2.0.3

5.0.2

Bump @actions/cache to v5.0.3 #1692

5.0.1

Update @azure/storage-blob to ^12.29.1 via @actions/cache@5.0.1 #1685

5.0.0

[!IMPORTANT] actions/cache@v5 runs on the Node.js 24 runtime and requires a minimum Actions Runner version of 2.327.1.

... (truncated)

Commits

6682284 Merge pull request #1738 from actions/prepare-v5.0.4
e340396 Update RELEASES
8a67110 Add licenses
1865903 Update dependencies & patch security vulnerabilities
5656298 Merge pull request #1722 from RyPeck/patch-1
4e380d1 Fix cache key in examples.md for bun.lock
b7e8d49 Merge pull request #1701 from actions/Link-/fix-proxy-integration-tests
984a21b Add traffic sanity check step
acf2f1f Fix resolution
95a07c5 Add wait for proxy
Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR
@dependabot recreate will recreate this PR, overwriting any edits that have been made to it
@dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
@dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
@dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
@dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
@dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
@dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

Bumps the actions-deps group with 2 updates: [taiki-e/install-action](https://github.com/taiki-e/install-action) and [actions/cache](https://github.com/actions/cache). Updates `taiki-e/install-action` from 2.68.35 to 2.69.9 - [Release notes](https://github.com/taiki-e/install-action/releases) - [Changelog](https://github.com/taiki-e/install-action/blob/main/CHANGELOG.md) - [Commits](taiki-e/install-action@94a7388...328a871) Updates `actions/cache` from 5.0.3 to 5.0.4 - [Release notes](https://github.com/actions/cache/releases) - [Changelog](https://github.com/actions/cache/blob/main/RELEASES.md) - [Commits](actions/cache@cdf6c1f...6682284) --- updated-dependencies: - dependency-name: taiki-e/install-action dependency-version: 2.69.9 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: actions-deps - dependency-name: actions/cache dependency-version: 5.0.4 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: actions-deps ... Signed-off-by: dependabot[bot] <support@github.com>

dependabot bot added dependencies Pull requests that update a dependency file github_actions Pull requests that update GitHub Actions code labels Mar 25, 2026

dependabot bot requested a review from 0xNeshi as a code owner March 25, 2026 09:25

dependabot bot added the dependencies Pull requests that update a dependency file label Mar 25, 2026

dependabot bot requested a review from pepebndc as a code owner March 25, 2026 09:25

dependabot bot added the github_actions Pull requests that update GitHub Actions code label Mar 25, 2026

0xNeshi approved these changes Mar 25, 2026

View reviewed changes

0xNeshi merged commit b3a057d into main Mar 25, 2026
12 checks passed

0xNeshi deleted the dependabot/github_actions/actions-deps-e9290c7959 branch March 25, 2026 10:33

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

build(deps): bump the actions-deps group with 2 updates#75

build(deps): bump the actions-deps group with 2 updates#75
0xNeshi merged 1 commit intomainfrom
dependabot/github_actions/actions-deps-e9290c7959

dependabot bot commented on behalf of github Mar 25, 2026

Uh oh!

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant

Conversation

dependabot bot commented on behalf of github Mar 25, 2026

2.69.9

2.69.8

2.69.7

2.69.6

2.69.5

2.69.4

Changelog

[Unreleased]

[2.69.9] - 2026-03-25

[2.69.8] - 2026-03-24

[2.69.7] - 2026-03-23

[2.69.6] - 2026-03-21

v5.0.4

What's Changed

New Contributors

Releases

How to prepare a release

Changelog

5.0.4

5.0.3

5.0.2

5.0.1

5.0.0

Uh oh!

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant