[dependabot]

Bumps the actions group with 2 updates: taiki-e/install-action and taiki-e/create-gh-release-action.

Updates taiki-e/install-action from 2.87.32 to 2.90.0

Release notes

Sourced from taiki-e/install-action's releases.

2.90.0

• Add fallback: skip input option. This is similar to fallback: none but skip unsupported tools instead of error. (#2052)

• Update vacuum@latest to 0.36.2.

• Update release-plz@latest to 0.4.3.

• Update bpf-linker@latest to 0.13.0.

2.89.1

• Install ld.mold symlink when installing mold on Linux. Previously, only mold binary was installed. (#2050, thanks @​FirelightFlagboy)

• Update parse-dockerfile@latest to 0.1.9.

• Update parse-changelog@latest to 0.6.18.

• Update cargo-minimal-versions@latest to 0.1.38.

• Update cargo-hack@latest to 0.6.46.

2.89.0

• Support yq. (#2036, thanks @​FirelightFlagboy)

• Support mold. (#2044, thanks @​FirelightFlagboy)

• Fix an error when old cargo-binstall had already been installed at non-standard location. (#2048)

• Update wasm-tools@latest to 1.263.0.

• Update wasm-pack@latest to 0.15.1.

• Update wasm-bindgen@latest to 0.2.130.

• Update vacuum@latest to 0.36.1.

• Update prek@latest to 0.5.9.

• Update mise@latest to 2026.10.25.

• Update kingfisher@latest to 2.16.0.

• Update cargo-binstall@latest to 1.26.2.

2.88.1

• Update wasmtime@latest to 50.0.1.

• Update vacuum@latest to 0.36.0.

• Update tombi@latest to 1.9.8.

... (truncated)

Changelog

Sourced from taiki-e/install-action's changelog.

Changelog

All notable changes to this project will be documented in this file.

This project adheres to Semantic Versioning.

[Unreleased]

[2.90.1] - 2026-11-04

• Update zizmor@latest to 1.32.0.

• Update uv@latest to 0.13.7.

• Update typos@latest to 1.52.0.

• Update tombi@latest to 1.9.9.

• Update syft@latest to 1.56.0.

• Update mise@latest to 2026.11.0.

• Update kache@latest to 2.0.0.

• Update cargo-nextest@latest to 0.9.151.

[2.90.0] - 2026-11-03

• Add fallback: skip input option. This is similar to fallback: none but skip unsupported tools instead of error. (#2052)

• Update vacuum@latest to 0.36.2.

• Update release-plz@latest to 0.4.3.

• Update bpf-linker@latest to 0.13.0.

[2.89.1] - 2026-11-02

• Install ld.mold symlink when installing mold on Linux. Previously, only mold binary was installed. (#2050, thanks @​FirelightFlagboy)

• Update parse-dockerfile@latest to 0.1.9.

• Update parse-changelog@latest to 0.6.18.

• Update cargo-minimal-versions@latest to 0.1.38.

... (truncated)

Commits

• b80e2bb Release 2.90.0
• eb7aa1c Add fallback: skip input option
• c846932 Update zizmor manifest
• 29b5f80 Update vacuum@latest to 0.36.2
• 9787a83 Update uv manifest
• 8d24cc9 Update typos manifest
• 55b8476 Update tombi manifest
• dcaca98 Update release-plz@latest to 0.4.3
• ee94ee5 Update cargo-nextest manifest
• 8c19464 Update bpf-linker@latest to 0.13.0
• Additional commits viewable in compare view

Updates taiki-e/create-gh-release-action from 1.11.0 to 1.12.0

Release notes

Sourced from taiki-e/create-gh-release-action's releases.

1.12.0

• Update parse-changelog to 0.6.18. This improves compatibility with GFM (GitHub Flavored Markdown) and CommonMark, improves performance, and fixes bugs.

Changelog

Sourced from taiki-e/create-gh-release-action's changelog.

Changelog

All notable changes to this project will be documented in this file.

This project adheres to Semantic Versioning.

[Unreleased]

[1.12.0] - 2026-11-02

• Update parse-changelog to 0.6.18. This improves compatibility with GFM (GitHub Flavored Markdown) and CommonMark, improves performance, and fixes bugs.

[1.11.0] - 2026-04-17

• Support powerpc64le/riscv64/s390x Linux host.

• Improve support for AArch64 macOS/Windows host.

• Update parse-changelog to 0.6.16.

• Improve robustness for network failure.

[1.10.0] - 2026-04-04

• create-gh-release-action no longer requires token input. This action now uses ${{ github.token }} as the default token, like actions/checkout does.

• Documentation improvements.

[1.9.3] - 2026-03-08

• Avoid triggering zizmor ref-confusion when using this action in form of uses: taiki-e/create-gh-release-action@v1.

[1.9.2] - 2026-01-06

• Enable release immutability.

• Update parse-changelog to 0.6.15.

[1.9.1] - 2025-03-29

• Increase version for workaround Dependabot issue.

[1.8.4] - 2025-01-20

• Update parse-changelog to 0.6.11.

... (truncated)

Commits

• 045e5c0 Release 1.12.0
• e6bff2d Tweak action.yml
• 009312a Update parse-changelog to 0.6.18
• 8c8bed3 tools: Update tidy.sh
• 3a8aeda ci: Update taiki-e/github-actions workflows
• fda6994 tools: Update tidy.sh
• 68b7268 ci: Update config
• e99032f ci: Update taiki-e/github-actions workflows
• d95ab4c ci,tools: Update config and script
• 96023fa Add note about unset
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
• @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
• @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
• @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
• @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

[github-actions]

Speed against f6f27ff3

Measured on AMD EPYC 7763 64-Core Processor.
Both sides built with rustc 1.99.1 (58cf8f9c3 2026-10-13).

Both sides built and run on this runner in this job, the way
scripts/speed.sh measures a perf commit. Each round runs
both sides on a layout of its own, the same compiled code with
its code and data shuffled and moved, so the 95% interval carries
where the code landed as well as the run. The verdict holds the
interval against a 1% threshold. The default layout, the one a
release ships, is measured after as a diagnostic. The node
counts are the search's: they move when the search does, and a
speed change leaves them alone.

round     base nps  candidate nps  change
    1      4521819        4494445   -0.6%
    2      4618863        4492765   -2.7%
    3      4667972        4685722   +0.4%
    4      4395941        4522424   +2.9%
    5      4509958        4660605   +3.3%
    6      4580067        4610326   +0.7%
    7      4668217        4543132   -2.7%
    8      4528918        4448798   -1.8%
    9      4450606        4536018   +1.9%
   10      4418598        4555881   +3.1%
   11      4431859        4372877   -1.3%
   12      4383421        4340480   -1.0%
   13      4356369        4264556   -2.1%
   14      4370257        4289858   -1.8%
   15      4388935        4281628   -2.4%
   16      4312998        4362370   +1.1%
   17      4288841        4310787   +0.5%
   18      4293122        4438888   +3.4%
   19      4308718        4313371   +0.1%
   20      4377859        4409813   +0.7%
   21      4438211        4600110   +3.6%
   22      4423053        4304826   -2.7%
   23      4407554        4386270   -0.5%
   24      4426304        4325847   -2.3%
   25      4296633        4472725   +4.1%
   26      4496821        4439853   -1.3%
   27      4508925        4525186   +0.4%
   28      4499163        4536597   +0.8%
   29      4348886        4475778   +2.9%
   30      4451680        4542573   +2.0%
   31      4272222        4391330   +2.8%
   32      4473736        4574838   +2.3%
   33      4447626        4438720   -0.2%
   34      4419077        4310307   -2.5%
   35      4493956        4521609   +0.6%
   36      4561339        4615854   +1.2%
   37      4520133        4540553   +0.5%
   38      4526733        4536574   +0.2%
   39      4503337        4445568   -1.3%
   40      4378745        4433142   +1.2%

              nodes    time  median nps  faster half
base       11916992  2.69 s     4435035      4523404
candidate  11916992  2.67 s     4460762      4552186
change                            +0.6%        +0.6%

paired change +0.3%, 95% interval -0.4% to +1.0%
diagnostic, on the default layout alone +1.8%, 95% interval +0.2% to +3.8%, 13 rounds

no change beyond ±1.0%: the whole interval is inside it

Speed: +0.3% (bench nps, 95% interval -0.4% to +1.0%, 40 interleaved rounds over shuffled layouts vs f6f27ff3)

The instructions each side's bench executed, counted under
cachegrind. The count repeats to within a few hundred
instructions, so a small change here is a real one, but it
prices instructions only: cache misses, mispredicted branches
and where the code lands are the speed's to show.

instructions against f6f27ff3, one cachegrind run a side, bench

             instructions     nodes  per node
base       15,968,704,738  11916992    1340.0
candidate  15,968,704,737  11916992    1340.0
change             -0.00%              -0.00%

within ±0.7%, as far as edits not made for speed have moved the count