Skip to content

chore(deps): bump the actions group with 3 updates#270

Merged
hyperpolymath merged 2 commits into
mainfrom
dependabot/github_actions/actions-4f231e9320
Jun 19, 2026
Merged

chore(deps): bump the actions group with 3 updates#270
hyperpolymath merged 2 commits into
mainfrom
dependabot/github_actions/actions-4f231e9320

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Jun 19, 2026

Copy link
Copy Markdown
Contributor

Bumps the actions group with 3 updates: actions/checkout, taiki-e/install-action and hyperpolymath/panic-attack/.github/workflows/scan-and-report.yml.

Updates actions/checkout from 6.0.3 to 7.0.0

Release notes

Sourced from actions/checkout's releases.

v7.0.0

What's Changed

New Contributors

Full Changelog: actions/checkout@v6.0.3...v7.0.0

Changelog

Sourced from actions/checkout's changelog.

Changelog

v7.0.0

v6.0.3

v6.0.2

v6.0.1

v6.0.0

v5.0.1

v5.0.0

v4.3.1

v4.3.0

v4.2.2

v4.2.1

... (truncated)

Commits

Updates taiki-e/install-action from 2.81.5 to 2.82.0

Release notes

Sourced from taiki-e/install-action's releases.

2.82.0

  • Support cargo-vet. (#1908, thanks @​jakewimmer)

  • Support cargo-crap. (#1905, thanks @​BartoszCiesla)

  • Support cargo-leptos. (#1903, thanks @​404Simon)

  • Update kingfisher@latest to 1.103.0.

  • Update cargo-xwin@latest to 0.23.0.

  • Update wasmtime@latest to 45.0.2.

  • Update cargo-deny@latest to 0.19.9.

  • Update prek@latest to 0.4.5.

  • Update trivy@latest to 0.71.1.

  • Update mise@latest to 2026.6.10.

2.81.11

  • Update wasm-tools@latest to 1.252.0.

  • Update wasm-bindgen@latest to 0.2.125.

  • Update uv@latest to 0.11.21.

  • Update protoc@latest to 3.35.1.

  • Update mise@latest to 2026.6.9.

  • Update jaq@latest to 3.1.0.

  • Update cargo-insta@latest to 1.48.0.

  • Update biome@latest to 2.5.0.

2.81.10

  • Update tombi@latest to 1.1.3.

  • Update release-plz@latest to 0.3.159.

  • Update cosign@latest to 3.1.1.

2.81.9

  • Update wasm-bindgen@latest to 0.2.123.

  • Update tombi@latest to 1.1.2.

... (truncated)

Changelog

Sourced from taiki-e/install-action's changelog.

Changelog

All notable changes to this project will be documented in this file.

This project adheres to Semantic Versioning.

[Unreleased]

[2.82.0] - 2026-06-17

  • Support cargo-vet. (#1908, thanks @​jakewimmer)

  • Support cargo-crap. (#1905, thanks @​BartoszCiesla)

  • Support cargo-leptos. (#1903, thanks @​404Simon)

  • Update kingfisher@latest to 1.103.0.

  • Update cargo-xwin@latest to 0.23.0.

  • Update wasmtime@latest to 45.0.2.

  • Update cargo-deny@latest to 0.19.9.

  • Update prek@latest to 0.4.5.

  • Update trivy@latest to 0.71.1.

  • Update mise@latest to 2026.6.10.

[2.81.11] - 2026-06-15

  • Update wasm-tools@latest to 1.252.0.

  • Update wasm-bindgen@latest to 0.2.125.

  • Update uv@latest to 0.11.21.

  • Update protoc@latest to 3.35.1.

  • Update mise@latest to 2026.6.9.

  • Update jaq@latest to 3.1.0.

  • Update cargo-insta@latest to 1.48.0.

... (truncated)

Commits

Updates hyperpolymath/panic-attack/.github/workflows/scan-and-report.yml from 2576c19549f6c9d3d5608955fbc636628185c89e to 3f7d0bbed133629b62052fd181a84e4e1c774f9a

Changelog

Sourced from hyperpolymath/panic-attack/.github/workflows/scan-and-report.yml's changelog.

Changelog

[Unreleased]

Added — attestation unforgeability proof (Idris2, PROOF-PROGRAMME §3.2)

  • src/abi/AttestationUnforgeability.idr: Idris2 proof that the intent→evidence→seal attestation chain is unforgeable. Models chain_hash = H(intent‖evidence‖report) + the Ed25519 signature with the cryptographic facts (chain-hash collision-resistance, Ed25519 EUF-CMA message- and signer-binding, signature correctness) as a parameters block — hypotheses, not postulate (PA021 bans escape hatches), so it is an honest conditional theorem. Under %default total it Qed-closes integrity (tampering any phase invalidates the seal), authenticity (a verifying seal comes from the matching key), and nonRepudiation (a genuine seal verifies), plus two corollaries. Typechecks under Idris2 0.8.0. Closes #123.

Added — contractile registry (INDEX.a2ml)

  • .machine_readable/contractiles/INDEX.a2ml: the previously-missing contractile registry, modelled on echidna's canonical INDEX. Catalogues all six verbs (must / trust / intend / adjust / bust / dust) with their actual current locations across the three pre-consolidation trees, flags the duplicate trust Trustfile, and records the canonical trident target. The physical consolidation of the three trees stays in #124 — it couples to the contractile gen-just generator (which reads the root contractiles/ tree) and needs the standards CONTRACTILE-SPEC to do safely.

Added — assay / assimilate / aggregate proof-integration subcommands

Three new a-themed subcommands that wire panic-attack into the PROOF-PROGRAMME loop (survey → swap → fold-in-proofs):

  • panic-attack assay [TARGET] [--proven DIR]… (src/assay/mod.rs): surveys a target for code that has a formally proven drop-in equivalent in a proven / proven-servers library and reports each candidate with the proof artifact that backs it — operationalising the "Proven cross-fit" table in PROOF-PROGRAMME.md mechanically instead of by hand. Built-in catalogue: SafePath (canonicalize/unwrap pattern) and SafeUrl (VERISIMDB_URL). On this repo: safe-path Offered (port present in src/safe_path.rs, call sites still to rewire), safe-url NoReplacementSource (not yet ported).
  • panic-attack assimilate [TARGET] --candidate ID [--proven DIR] [--from FILE] [--all] [--dry-run]: performs a swap — stages the proven module into the tree, backs up the original (*.orig), and writes a provenance record (source BLAKE3 hash + proof backing + pending call-site rewires) under .assimilated/. Module swaps are automatic; call-site rewiring is reported, never auto-edited (mechanically editing arbitrary call sites is not a reviewable operation).
  • panic-attack aggregate --proof PATH… [--label PATH=NAME] [--covers PATH=SPEC] [--report BASE]

... (truncated)

Commits
  • 3f7d0bb fix(assail): UnboundedAllocation is Medium, not Critical
  • 6a814fa chore(deps): bump the rust-minor group with 2 updates (#126)
  • See full diff in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

@dependabot
chore(deps): bump the actions group with 3 updates
96fe670 
Bumps the actions group with 3 updates: [actions/checkout](https://github.com/actions/checkout), [taiki-e/install-action](https://github.com/taiki-e/install-action) and [hyperpolymath/panic-attack/.github/workflows/scan-and-report.yml](https://github.com/hyperpolymath/panic-attack).


Updates `actions/checkout` from 6.0.3 to 7.0.0
- [Release notes](https://github.com/actions/checkout/releases)
- [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md)
- [Commits](actions/checkout@df4cb1c...9c091bb)

Updates `taiki-e/install-action` from 2.81.5 to 2.82.0
- [Release notes](https://github.com/taiki-e/install-action/releases)
- [Changelog](https://github.com/taiki-e/install-action/blob/main/CHANGELOG.md)
- [Commits](taiki-e/install-action@v2.81.5...b8cecb8)

Updates `hyperpolymath/panic-attack/.github/workflows/scan-and-report.yml` from 2576c19549f6c9d3d5608955fbc636628185c89e to 3f7d0bbed133629b62052fd181a84e4e1c774f9a
- [Release notes](https://github.com/hyperpolymath/panic-attack/releases)
- [Changelog](https://github.com/hyperpolymath/panic-attack/blob/main/CHANGELOG.md)
- [Commits](hyperpolymath/panic-attack@2576c19...3f7d0bb)

---
updated-dependencies:
- dependency-name: actions/checkout
  dependency-version: 7.0.0
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: actions
- dependency-name: taiki-e/install-action
  dependency-version: 2.82.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: actions
- dependency-name: hyperpolymath/panic-attack/.github/workflows/scan-and-report.yml
  dependency-version: 3f7d0bbed133629b62052fd181a84e4e1c774f9a
  dependency-type: direct:production
  dependency-group: actions
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file github_actions Pull requests that update GitHub Actions code labels Jun 19, 2026
@hyperpolymath hyperpolymath merged commit 13c3424 into main Jun 19, 2026
42 of 53 checks passed
@hyperpolymath hyperpolymath deleted the dependabot/github_actions/actions-4f231e9320 branch June 19, 2026 21:16
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file github_actions Pull requests that update GitHub Actions code

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

1 participant

@hyperpolymath