build(deps): bump taiki-e/install-action from 2.79.12 to 2.81.4
What the developer wrote
Authored by dependabot[bot]
build(deps): bump taiki-e/install-action from 2.79.12 to 2.81.4
Bumps [taiki-e/install-action](https://github.com/taiki-e/install-action) from 2.79.12 to 2.81.4.
- [Release notes](https://github.com/taiki-e/install-action/releases)
- [Changelog](https://github.com/taiki-e/install-action/blob/main/CHANGELOG.md)
- [Commits](https://github.com/taiki-e/install-action/compare/6ed6112eb9893c58dd600eebccdf6e77ab7bfa9c...cde8c9e634f4a17bc06b61413ac0ef75450eac46)
---
updated-dependencies:
- dependency-name: taiki-e/install-action
dependency-version: 2.81.4
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com>
What changed, and why it matters
This is a routine Dependabot update that bumps a GitHub Actions helper used in automated testing workflows from version 2.79.12 to 2.81.4. It only changes which version of the action is invoked during CI runs; it does not modify the Rust Bitcoin library code or any shipped software. There is no indication this introduces a security issue.
No action required. Treat as routine CI maintenance. If desired, review the upstream taiki-e/install-action changelog between v2.79.12 and v2.81.4 for any security advisories, though none are referenced in the commit.
Security signals we found
No strong security signals were identified.
Evidence from the diff
The commit updates the pinned SHA and version comment for taiki-e/install-action in two workflow files (cron-weekly-cargo-mutants.yml and rust.yml). This action installs Rust tooling (cargo-mutants) in CI. The change is a standard dependency bump with no functional code changes to the rust-bitcoin crate, no disclosed vulnerabilities, and no security-relevant behavior change evident in the diff.
Changed components
.github/workflows/cron-weekly-cargo-mutants.yml.github/workflows/rust.ymlInspect captured patch +2 / −2
diff --git a/.github/workflows/cron-weekly-cargo-mutants.yml b/.github/workflows/cron-weekly-cargo-mutants.yml
index dcab1fe4..d8d9abdb 100644
--- a/.github/workflows/cron-weekly-cargo-mutants.yml
+++ b/.github/workflows/cron-weekly-cargo-mutants.yml
@@ -14,7 +14,7 @@ jobs:
- uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
with:
persist-credentials: false
- - uses: taiki-e/install-action@6ed6112eb9893c58dd600eebccdf6e77ab7bfa9c # v2.79.12
+ - uses: taiki-e/install-action@cde8c9e634f4a17bc06b61413ac0ef75450eac46 # v2.81.4
with:
tool: cargo-mutants
- run: cargo mutants --in-place --no-shuffle
diff --git a/.github/workflows/rust.yml b/.github/workflows/rust.yml
index 330fb3b1..e3f60964 100644
--- a/.github/workflows/rust.yml
+++ b/.github/workflows/rust.yml
@@ -287,7 +287,7 @@ jobs:
run: git fetch origin master
- name: "Retrieve relative diff"
run: git diff origin/master.. -- '*.rs' | tee git.diff
- - uses: taiki-e/install-action@6ed6112eb9893c58dd600eebccdf6e77ab7bfa9c # v2.79.12
+ - uses: taiki-e/install-action@cde8c9e634f4a17bc06b61413ac0ef75450eac46 # v2.81.4
with:
tool: cargo-mutants
- run: cargo mutants --no-shuffle --in-diff git.diff
Why this scored 15/100
Community notes
Notes can correct, qualify, or add evidence to the AI analysis. Every note shown here has been validated by a human moderator.
The AI analysis stands alone for now. Submit a note if you can add evidence or important context.