build(deps): bump cargo-bins/cargo-binstall from 1.15.10 to 1.19.1
What the developer wrote
Authored by dependabot[bot]
build(deps): bump cargo-bins/cargo-binstall from 1.15.10 to 1.19.1
Bumps [cargo-bins/cargo-binstall](https://github.com/cargo-bins/cargo-binstall) from 1.15.10 to 1.19.1.
- [Release notes](https://github.com/cargo-bins/cargo-binstall/releases)
- [Changelog](https://github.com/cargo-bins/cargo-binstall/blob/main/release-plz.toml)
- [Commits](https://github.com/cargo-bins/cargo-binstall/compare/b3f755e95653da9a2d25b99154edfdbd5b356d0a...aaa84a43aec4955a42c5ffc65d258961e39f276e)
---
updated-dependencies:
- dependency-name: cargo-bins/cargo-binstall
dependency-version: 1.19.1
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com>
What changed, and why it matters
This is a routine automated dependency update by Dependabot. It changes the version of a GitHub Action used to install a Rust tool during automated semver compatibility checks. There is no indication in the commit that this fixes or introduces any security issue.
No security action required. Treat as routine CI maintenance.
Security signals we found
No strong security signals were identified.
Evidence from the diff
The commit bumps the cargo-bins/cargo-binstall GitHub Action from v1.15.10 to v1.19.1 in .github/workflows/semver-checks.yml. This is a CI-only tooling dependency used to install cargo-semver-checks. The diff contains only two line changes updating pinned commit hashes and version comments. No code, cryptographic, or runtime library changes are present.
Changed components
.github/workflows/semver-checks.ymlInspect captured patch +2 / −2
diff --git a/.github/workflows/semver-checks.yml b/.github/workflows/semver-checks.yml
index 2f854fb9..d61ada28 100644
--- a/.github/workflows/semver-checks.yml
+++ b/.github/workflows/semver-checks.yml
@@ -25,7 +25,7 @@ jobs:
run: |
rustup default $(cargo metadata --format-version 1 | jq -r '.metadata.rbmt.toolchains.stable')
- name: "Install cargo-binstall"
- uses: cargo-bins/cargo-binstall@b3f755e95653da9a2d25b99154edfdbd5b356d0a # v1.15.10
+ uses: cargo-bins/cargo-binstall@aaa84a43aec4955a42c5ffc65d258961e39f276e # v1.19.1
- name: "Binstall pinned cargo-semver-checks"
run: cargo binstall cargo-semver-checks@$(cat ./.github/workflows/cargo-semver-checks-version) --no-confirm
- name: "Run semver checker script"
@@ -67,7 +67,7 @@ jobs:
run: |
rustup default $(cargo metadata --format-version 1 | jq -r '.metadata.rbmt.toolchains.stable')
- name: "Install cargo-binstall"
- uses: cargo-bins/cargo-binstall@b3f755e95653da9a2d25b99154edfdbd5b356d0a # v1.15.10
+ uses: cargo-bins/cargo-binstall@aaa84a43aec4955a42c5ffc65d258961e39f276e # v1.19.1
- name: "Binstall pinned cargo-semver-checks"
run: cargo binstall cargo-semver-checks@$(cat ./.github/workflows/cargo-semver-checks-version) --no-confirm
- name: "Run semver checker script"
Why this scored 15/100
Community notes
Notes can correct, qualify, or add evidence to the AI analysis. Every note shown here has been validated by a human moderator.
The AI analysis stands alone for now. Submit a note if you can add evidence or important context.