build(deps): bump taiki-e/install-action from 2.62.45 to 2.79.3
What the developer wrote
Authored by dependabot[bot]
build(deps): bump taiki-e/install-action from 2.62.45 to 2.79.3
Bumps [taiki-e/install-action](https://github.com/taiki-e/install-action) from 2.62.45 to 2.79.3.
- [Release notes](https://github.com/taiki-e/install-action/releases)
- [Changelog](https://github.com/taiki-e/install-action/blob/main/CHANGELOG.md)
- [Commits](https://github.com/taiki-e/install-action/compare/81ee1d48d9194cdcab880cbdc7d36e87d39874cb...65851e10cd6c377f11a60e600abc07cb08643468)
---
updated-dependencies:
- dependency-name: taiki-e/install-action
dependency-version: 2.79.3
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com>
What changed, and why it matters
This is a routine Dependabot update that bumps a GitHub Actions helper (taiki-e/install-action) used in automated testing workflows to a newer minor version. It does not change the project's actual Bitcoin library code, its dependencies, or how user funds or data are handled. There is no security-relevant change visible in the commit.
No security action required. Treat as a normal CI maintenance update; review the upstream release notes for the action if desired, but the change itself is not security-relevant.
Security signals we found
No strong security signals were identified.
Evidence from the diff
The commit updates the pinned SHA and version comment for taiki-e/install-action from v2.62.45 to v2.79.3 in two CI workflow files (.github/workflows/cron-weekly-cargo-mutants.yml and .github/workflows/rust.yml). The action is only used to install the cargo-mutants mutation-testing tool during CI runs. No source code, cryptographic logic, network handling, or dependency manifest affecting the published crate is modified.
Changed components
.github/workflows/cron-weekly-cargo-mutants.yml.github/workflows/rust.ymlInspect captured patch +2 / −2
diff --git a/.github/workflows/cron-weekly-cargo-mutants.yml b/.github/workflows/cron-weekly-cargo-mutants.yml
index 56017df7..eb434abf 100644
--- a/.github/workflows/cron-weekly-cargo-mutants.yml
+++ b/.github/workflows/cron-weekly-cargo-mutants.yml
@@ -14,7 +14,7 @@ jobs:
- uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
with:
persist-credentials: false
- - uses: taiki-e/install-action@81ee1d48d9194cdcab880cbdc7d36e87d39874cb # v2.62.45
+ - uses: taiki-e/install-action@65851e10cd6c377f11a60e600abc07cb08643468 # v2.79.3
with:
tool: cargo-mutants
- run: cargo mutants --in-place --no-shuffle
diff --git a/.github/workflows/rust.yml b/.github/workflows/rust.yml
index af4b9247..16202fc9 100644
--- a/.github/workflows/rust.yml
+++ b/.github/workflows/rust.yml
@@ -287,7 +287,7 @@ jobs:
run: git fetch origin master
- name: "Retrieve relative diff"
run: git diff origin/master.. -- '*.rs' | tee git.diff
- - uses: taiki-e/install-action@81ee1d48d9194cdcab880cbdc7d36e87d39874cb # v2.62.45
+ - uses: taiki-e/install-action@65851e10cd6c377f11a60e600abc07cb08643468 # v2.79.3
with:
tool: cargo-mutants
- run: cargo mutants --no-shuffle --in-diff git.diff
Why this scored 15/100
Community notes
Notes can correct, qualify, or add evidence to the AI analysis. Every note shown here has been validated by a human moderator.
The AI analysis stands alone for now. Submit a note if you can add evidence or important context.