build(deps): bump taiki-e/install-action from 2.82.5 to 2.82.7
What the developer wrote
Authored by dependabot[bot]
build(deps): bump taiki-e/install-action from 2.82.5 to 2.82.7
Bumps [taiki-e/install-action](https://github.com/taiki-e/install-action) from 2.82.5 to 2.82.7.
- [Release notes](https://github.com/taiki-e/install-action/releases)
- [Changelog](https://github.com/taiki-e/install-action/blob/main/CHANGELOG.md)
- [Commits](https://github.com/taiki-e/install-action/compare/bffeee26d4db9be238a4ea78d8826604ebcb594d...16b05812d776ae1dfaabc8277e421fb6d2506419)
---
updated-dependencies:
- dependency-name: taiki-e/install-action
dependency-version: 2.82.7
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com>
What changed, and why it matters
This is a routine automated update by Dependabot that bumps a GitHub Actions helper (taiki-e/install-action) used only in CI workflows to install the cargo-mutants testing tool. The change does not touch any Rust source code, cryptography, network handling, or released library behavior. There is no indication of a security issue in the commit or supplied references.
No security action required. Treat as routine CI maintenance.
Security signals we found
No strong security signals were identified.
Evidence from the diff
The commit updates two workflow files to pin taiki-e/install-action from v2.82.5 to v2.82.7. This action is used solely in CI to install cargo-mutants for mutation testing. No application code, dependencies consumed by the rust-bitcoin crate, or release artifacts are affected. Without vendor or upstream disclosure of a security-relevant change between these patch versions, this is a maintenance-only dependency bump.
Changed components
.github/workflows/cron-weekly-cargo-mutants.yml.github/workflows/rust.ymlInspect captured patch +2 / −2
### .github/workflows/cron-weekly-cargo-mutants.yml
@@ -14,7 +14,7 @@ jobs:
- uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0
with:
persist-credentials: false
- - uses: taiki-e/install-action@bffeee26d4db9be238a4ea78d8826604ebcb594d # v2.82.5
+ - uses: taiki-e/install-action@16b05812d776ae1dfaabc8277e421fb6d2506419 # v2.82.7
with:
tool: cargo-mutants
- run: cargo mutants --in-place --no-shuffle
### .github/workflows/rust.yml
@@ -311,7 +311,7 @@ jobs:
run: git fetch origin master
- name: "Retrieve relative diff"
run: git diff origin/master.. -- '*.rs' | tee git.diff
- - uses: taiki-e/install-action@bffeee26d4db9be238a4ea78d8826604ebcb594d # v2.82.5
+ - uses: taiki-e/install-action@16b05812d776ae1dfaabc8277e421fb6d2506419 # v2.82.7
with:
tool: cargo-mutants
- run: cargo mutants --no-shuffle --in-diff git.diffWhy this scored 15/100
Community notes
Notes can correct, qualify, or add evidence to the AI analysis. Every note shown here has been validated by a human moderator.
The AI analysis stands alone for now. Submit a note if you can add evidence or important context.