build(deps): bump taiki-e/install-action from 2.82.11 to 2.83.2
What changed, and why it matters
This is a routine automated update by Dependabot that bumps a third-party GitHub Action used in testing workflows from version 2.82.11 to 2.83.2. It only changes two lines in CI configuration files and does not touch any application code, cryptographic logic, or user-facing behavior.
No security action required. Review the upstream release notes as part of normal dependency hygiene if desired.
Security signals we found
No strong security signals were identified.
Evidence from the diff
The commit updates the pinned SHA reference for taiki-e/install-action in two GitHub Actions workflow files (cron-weekly-cargo-mutants.yml and rust.yml). This action is used only to install the cargo-mutants mutation-testing tool during CI. The change is a semver-minor dependency bump with no modifications to the Rust source code, build scripts, or public API.
Changed components
.github/workflows/cron-weekly-cargo-mutants.yml.github/workflows/rust.ymlInspect captured patch +2 / −2
### .github/workflows/cron-weekly-cargo-mutants.yml
@@ -14,7 +14,7 @@ jobs:
- uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0
with:
persist-credentials: false
- - uses: taiki-e/install-action@5ebac0d9522d786674368e47e92963ba13f2c376 # v2.82.11
+ - uses: taiki-e/install-action@43aecc8d72668fbcfe75c31400bc4f890f1c5853 # v2.83.2
with:
tool: cargo-mutants
- run: cargo mutants --in-place --no-shuffle
### .github/workflows/rust.yml
@@ -315,7 +315,7 @@ jobs:
run: git fetch origin master
- name: "Retrieve relative diff"
run: git diff origin/master.. -- '*.rs' | tee git.diff
- - uses: taiki-e/install-action@5ebac0d9522d786674368e47e92963ba13f2c376 # v2.82.11
+ - uses: taiki-e/install-action@43aecc8d72668fbcfe75c31400bc4f890f1c5853 # v2.83.2
with:
tool: cargo-mutants
- run: cargo mutants --no-shuffle --in-diff git.diffWhy this scored 15/100
Community notes
Notes can correct, qualify, or add evidence to the AI analysis. Every note shown here has been validated by a human moderator.
The AI analysis stands alone for now. Submit a note if you can add evidence or important context.