build(deps): bump taiki-e/install-action from 2.79.3 to 2.79.12
What the developer wrote
Authored by dependabot[bot]
build(deps): bump taiki-e/install-action from 2.79.3 to 2.79.12
Bumps [taiki-e/install-action](https://github.com/taiki-e/install-action) from 2.79.3 to 2.79.12.
- [Release notes](https://github.com/taiki-e/install-action/releases)
- [Changelog](https://github.com/taiki-e/install-action/blob/main/CHANGELOG.md)
- [Commits](https://github.com/taiki-e/install-action/compare/65851e10cd6c377f11a60e600abc07cb08643468...6ed6112eb9893c58dd600eebccdf6e77ab7bfa9c)
---
updated-dependencies:
- dependency-name: taiki-e/install-action
dependency-version: 2.79.12
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com>
What changed, and why it matters
This is a routine automated update by Dependabot that bumps a GitHub Actions helper (taiki-e/install-action) used in testing workflows from version 2.79.3 to 2.79.12. It only changes which version of the action is used to install Rust testing tools in CI. There is no indication this fixes or introduces a security issue in the rust-bitcoin library itself.
No security action required. Treat as routine CI maintenance. If desired, verify the new action hash matches an official taiki-e/install-action release.
Security signals we found
No strong security signals were identified.
Evidence from the diff
The commit updates pinned commit hashes for the taiki-e/install-action GitHub Action in two workflow files (cron-weekly-cargo-mutants.yml and rust.yml). This action is used solely to install cargo-mutants during mutation testing in CI. The change is a semver-patch dependency bump with no functional changes to the rust-bitcoin codebase, no changes to source code, and no disclosed security relevance.
Changed components
.github/workflows/cron-weekly-cargo-mutants.yml.github/workflows/rust.ymlInspect captured patch +2 / −2
diff --git a/.github/workflows/cron-weekly-cargo-mutants.yml b/.github/workflows/cron-weekly-cargo-mutants.yml
index eb434abf..dcab1fe4 100644
--- a/.github/workflows/cron-weekly-cargo-mutants.yml
+++ b/.github/workflows/cron-weekly-cargo-mutants.yml
@@ -14,7 +14,7 @@ jobs:
- uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
with:
persist-credentials: false
- - uses: taiki-e/install-action@65851e10cd6c377f11a60e600abc07cb08643468 # v2.79.3
+ - uses: taiki-e/install-action@6ed6112eb9893c58dd600eebccdf6e77ab7bfa9c # v2.79.12
with:
tool: cargo-mutants
- run: cargo mutants --in-place --no-shuffle
diff --git a/.github/workflows/rust.yml b/.github/workflows/rust.yml
index 16202fc9..330fb3b1 100644
--- a/.github/workflows/rust.yml
+++ b/.github/workflows/rust.yml
@@ -287,7 +287,7 @@ jobs:
run: git fetch origin master
- name: "Retrieve relative diff"
run: git diff origin/master.. -- '*.rs' | tee git.diff
- - uses: taiki-e/install-action@65851e10cd6c377f11a60e600abc07cb08643468 # v2.79.3
+ - uses: taiki-e/install-action@6ed6112eb9893c58dd600eebccdf6e77ab7bfa9c # v2.79.12
with:
tool: cargo-mutants
- run: cargo mutants --no-shuffle --in-diff git.diff
Why this scored 15/100
Community notes
Notes can correct, qualify, or add evidence to the AI analysis. Every note shown here has been validated by a human moderator.
The AI analysis stands alone for now. Submit a note if you can add evidence or important context.