build(deps): bump taiki-e/install-action from 2.82.7 to 2.82.11
What the developer wrote
Authored by dependabot[bot]
build(deps): bump taiki-e/install-action from 2.82.7 to 2.82.11
Bumps [taiki-e/install-action](https://github.com/taiki-e/install-action) from 2.82.7 to 2.82.11.
- [Release notes](https://github.com/taiki-e/install-action/releases)
- [Changelog](https://github.com/taiki-e/install-action/blob/main/CHANGELOG.md)
- [Commits](https://github.com/taiki-e/install-action/compare/16b05812d776ae1dfaabc8277e421fb6d2506419...5ebac0d9522d786674368e47e92963ba13f2c376)
---
updated-dependencies:
- dependency-name: taiki-e/install-action
dependency-version: 2.82.11
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com>
What changed, and why it matters
This is an automated update by Dependabot that bumps a third-party GitHub Action used in the project's CI workflows from version 2.82.7 to 2.82.11. The action installs developer tools during automated testing. There is no indication in the commit that this fixes a security issue, and the change only affects internal build/test automation, not the published Rust Bitcoin library code.
No security action required. Treat as routine dependency maintenance. If desired, review the upstream taiki-e/install-action changelog between v2.82.7 and v2.82.11 for any security-relevant fixes, though none are indicated.
Security signals we found
No strong security signals were identified.
Evidence from the diff
The commit updates the pinned SHA reference for taiki-e/install-action in two GitHub Actions workflow files (cron-weekly-cargo-mutants.yml and rust.yml). This action is used to install cargo-mutants for mutation testing in CI. The change is a patch-level semver bump (2.82.7 -> 2.82.11) of a CI dependency. No source code, cryptographic logic, or release artifacts are modified. No security advisory or vulnerability disclosure is referenced.
Changed components
.github/workflows/cron-weekly-cargo-mutants.yml.github/workflows/rust.ymlInspect captured patch +2 / −2
### .github/workflows/cron-weekly-cargo-mutants.yml
@@ -14,7 +14,7 @@ jobs:
- uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0
with:
persist-credentials: false
- - uses: taiki-e/install-action@16b05812d776ae1dfaabc8277e421fb6d2506419 # v2.82.7
+ - uses: taiki-e/install-action@5ebac0d9522d786674368e47e92963ba13f2c376 # v2.82.11
with:
tool: cargo-mutants
- run: cargo mutants --in-place --no-shuffle
### .github/workflows/rust.yml
@@ -315,7 +315,7 @@ jobs:
run: git fetch origin master
- name: "Retrieve relative diff"
run: git diff origin/master.. -- '*.rs' | tee git.diff
- - uses: taiki-e/install-action@16b05812d776ae1dfaabc8277e421fb6d2506419 # v2.82.7
+ - uses: taiki-e/install-action@5ebac0d9522d786674368e47e92963ba13f2c376 # v2.82.11
with:
tool: cargo-mutants
- run: cargo mutants --no-shuffle --in-diff git.diffWhy this scored 15/100
Community notes
Notes can correct, qualify, or add evidence to the AI analysis. Every note shown here has been validated by a human moderator.
The AI analysis stands alone for now. Submit a note if you can add evidence or important context.