From 86b2cf5229aa4198efbf5140aeee858496795ae5 Mon Sep 17 00:00:00 2001
From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com>
Date: Fri, 6 Nov 2026 04:15:37 +0000
Subject: [PATCH] build(deps): Bump the actions group with 2 updates

Bumps the actions group with 2 updates: [taiki-e/install-action](https://github.com/taiki-e/install-action) and [taiki-e/create-gh-release-action](https://github.com/taiki-e/create-gh-release-action).


Updates `taiki-e/install-action` from 2.87.32 to 2.90.0
- [Release notes](https://github.com/taiki-e/install-action/releases)
- [Changelog](https://github.com/taiki-e/install-action/blob/main/CHANGELOG.md)
- [Commits](https://github.com/taiki-e/install-action/compare/5488ac5a951645ce95062214902ac4b6bc1a1037...b80e2bb2635f28eb98b9fce1e2f0887e1535c6b2)

Updates `taiki-e/create-gh-release-action` from 1.11.0 to 1.12.0
- [Release notes](https://github.com/taiki-e/create-gh-release-action/releases)
- [Changelog](https://github.com/taiki-e/create-gh-release-action/blob/main/CHANGELOG.md)
- [Commits](https://github.com/taiki-e/create-gh-release-action/compare/eba8ea96c86cca8a37f1b56e94b4d13301fba651...045e5c0ed9c50cc1f96de7e891a09ad3daea245f)

---
updated-dependencies:
- dependency-name: taiki-e/install-action
  dependency-version: 2.90.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: actions
- dependency-name: taiki-e/create-gh-release-action
  dependency-version: 1.12.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: actions
...

Signed-off-by: dependabot[bot] <support@github.com>
---
 .github/workflows/coverage.yml        | 2 +-
 .github/workflows/prepare-release.yml | 2 +-
 .github/workflows/release.yml         | 2 +-
 .github/workflows/supply-chain.yml    | 2 +-
 4 files changed, 4 insertions(+), 4 deletions(-)

diff --git a/.github/workflows/coverage.yml b/.github/workflows/coverage.yml
index f7390d77..45720440 100644
--- a/.github/workflows/coverage.yml
+++ b/.github/workflows/coverage.yml
@@ -30,7 +30,7 @@ jobs:
       # not in rust-toolchain.toml, so a clone does not install them
       - name: Install the llvm tools
         run: rustup component add llvm-tools-preview
-      - uses: taiki-e/install-action@5488ac5a951645ce95062214902ac4b6bc1a1037 # v2.87.32
+      - uses: taiki-e/install-action@b80e2bb2635f28eb98b9fce1e2f0887e1535c6b2 # v2.90.0
         with:
           # pinned for the reason the actions are
           tool: cargo-llvm-cov@0.9.0
diff --git a/.github/workflows/prepare-release.yml b/.github/workflows/prepare-release.yml
index f06e1b36..32497661 100644
--- a/.github/workflows/prepare-release.yml
+++ b/.github/workflows/prepare-release.yml
@@ -48,7 +48,7 @@ jobs:
           # made the cargo-release install below a no-op with no binary there
           cache-bin: false
 
-      - uses: taiki-e/install-action@5488ac5a951645ce95062214902ac4b6bc1a1037 # v2.87.32
+      - uses: taiki-e/install-action@b80e2bb2635f28eb98b9fce1e2f0887e1535c6b2 # v2.90.0
         with:
           # pinned exactly, since a tool that floats makes a release
           # unreproducible: these write the release commit and the changelog,
diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml
index 089ba08a..0f60d502 100644
--- a/.github/workflows/release.yml
+++ b/.github/workflows/release.yml
@@ -50,7 +50,7 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
-      - uses: taiki-e/create-gh-release-action@eba8ea96c86cca8a37f1b56e94b4d13301fba651 # v1.11.0
+      - uses: taiki-e/create-gh-release-action@045e5c0ed9c50cc1f96de7e891a09ad3daea245f # v1.12.0
         with:
           changelog: CHANGELOG.md
           token: ${{ secrets.GITHUB_TOKEN }}
diff --git a/.github/workflows/supply-chain.yml b/.github/workflows/supply-chain.yml
index a49e557d..97597083 100644
--- a/.github/workflows/supply-chain.yml
+++ b/.github/workflows/supply-chain.yml
@@ -38,7 +38,7 @@ jobs:
     steps:
       - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
       # fetches a prebuilt cargo-deny rather than compiling one
-      - uses: taiki-e/install-action@5488ac5a951645ce95062214902ac4b6bc1a1037 # v2.87.32
+      - uses: taiki-e/install-action@b80e2bb2635f28eb98b9fce1e2f0887e1535c6b2 # v2.90.0
         with:
           # Pinned because deny.toml's fields are the ones this version
           # defines. The advisory database is still fetched at run time, which