[renovate]

This PR contains the following updates:

Package	Type	Update	Change	Pending
actions/create-github-app-token	action	minor	v3.2.0 → v3.3.0
actions/deploy-pages	action	patch	v5.0.0 → v5.0.1
actions/download-artifact	action	patch	v8.0.1 → v8.0.2
actions/setup-node	action	minor	v7.0.0 → v7.1.0
actions/upload-artifact	action	patch	v7.0.1 → v7.0.2
docker/build-push-action	action	minor	v7.3.0 → v7.4.0
docker/setup-buildx-action	action	minor	v4.3.0 → v4.4.1
github/codeql-action	action	minor	v4.37.9 → v4.39.0	v4.39.1
helm/chart-testing-action	action	minor	v2.8.0 → v2.9.0
mikepenz/action-junit-report	action	minor	v6.5.0 → v6.6.1
oras-project/setup-oras	action	patch	v2.0.1 → v2.0.2	v2.0.3
orhun/git-cliff-action	action	minor	v4.8.0 → v4.9.1
pnpm/action-setup	action	minor	v6.0.10 → v6.1.0
taiki-e/install-action	action	patch	v2.87.1 → v2.87.29	v2.88.0 (+4)

---

Release Notes

actions/create-github-app-token

v3.3.0

Compare Source

Features

• update permission inputs (#​399) (a47236f)

Bug Fixes

• deps: bump nested undici from 6.24.0 to 6.29.0 (#​403) (12461a3)
• deps: bump the production-dependencies group across 1 directory with 3 updates (#​395) (a69c19d)

actions/deploy-pages

v5.0.1

Compare Source

Changelog

• Add backoff and jitter to deployment polling @​yoannchaudet (#​444)
• Improve deployment request test coverage @​adwitiyagoyal (#​440)

---

See details of all code changes since previous release.

⚠️ For use with products other than GitHub.com, such as GitHub Enterprise Server, please consult the compatibility table.

actions/download-artifact

v8.0.2

Compare Source

What's Changed

• Update the readme by @​danwkennedy in #​473
• Improves artifact download retries when the service returns HTTP 429 (rate limiting), including honoring valid Retry-After headers.
• Update @​actions/artifact to 6.3.1 by @​tunc-d in #​492
• Prepare download-artifact v8.0.2 by @​tunc-d in #​493

New Contributors

• @​tunc-d made their first contribution in #​492

Full Changelog: actions/download-artifact@v8.0.1...v8.0.2

actions/setup-node

v7.1.0

Compare Source

What's Changed

Enhancements:

• Add support for mise.toml file by @​gperdomor in #​1421
• Support absolute paths in node-version-file by @​v-mahabaleshwars in #​1633

Bug fixes:

• Add Node version validation and manifest fetch retry by @​v-jitenderpalsingh in #​1580

Documentation updates:

• README.md: bump actions/checkout to latest version 7 by @​deining in #​1578
• docs: add V7 ESM migration and NODE_AUTH_TOKEN behavior change by @​v-gowridurgad in #​1593
• Fixed cache recommendation syntax by @​SubJunk in #​1603

Dependency updates:

• Update workflow pins and migrate Node matrices to modern versions by @​v-HarithaVattikuti in #​1583
• Upgrade @​actions/cache to 6.2.0 by @​philip-gai in #​1584
• Pin @​types/node to v24 by @​v-priyagupta108 in #​1585
• Override brace-expansion to 5.0.8 by @​v-priyagupta108 with @​Copilot in #​1599
• Upgrade actions/checkout from 7.0.0 to 7.0.1 by @​dependabot in #​1598
• Upgrade prettier from 3.8.4 to 3.9.6 by @​dependabot in #​1590
• Upgrade @​vercel/ncc from 0.44.0 to 0.45.0 by @​dependabot in #​1610
• Upgrade pnpm/action-setup from 6.0.9 to 6.0.10 by @​dependabot in #​1602
• Upgrade baseline-browser-mapping from 2.10.38 to 2.11.22 by @​dependabot in #​1629
• Upgrade @​types/semver from 7.7.1 to 7.8.0 by @​dependabot in #​1616
• Upgrade @​typescript-eslint/parser from 8.62.0 to 8.70.0 by @​dependabot in #​1615
• Upgrade pnpm/action-setup from 6.0.10 to 6.1.0 by @​dependabot in #​1631
• Upgrade jest-each from 30.4.1 to 30.5.2 by @​dependabot in #​1636
• Upgrade eslint-plugin-n from 18.1.0 to 18.3.0 by @​dependabot in #​1638
• Update dependencies and add license files by @​v-HarithaVattikuti in #​1642
• Upgrade eslint from 10.5.0 to 10.11.0 and package.json from 7.0.0 to 7.1.0 by @​dependabot in #​1635

New Contributors

• @​v-jitenderpalsingh made their first contribution in #​1580
• @​philip-gai made their first contribution in #​1584
• @​gperdomor made their first contribution in #​1421
• @​SubJunk made their first contribution in #​1603

Full Changelog: actions/setup-node@v7.0.0...v7.1.0

actions/upload-artifact

v7.0.2

Compare Source

What's Changed

• Improves artifact download retries when the service returns HTTP 429 (rate limiting), including honoring valid Retry-After headers.
• Updates @​actions/artifact to v6.3.1.

New Contributors

• @​tunc-d made their first contribution in #​821

Full Changelog: actions/upload-artifact@v7.0.1...v7.0.2

docker/build-push-action

v7.4.0

Compare Source

• Use the shared error helper for Buildx commands by @​crazy-max in #​1620
• Prevent workflow command injection in metadata logs by @​crazy-max in #​1617
• Bump @​docker/actions-toolkit from 0.92.0 to 0.100.0 in #​1614 #​1618 #​1621
• Bump @​humanfs/node from 0.16.7 to 0.16.8 in #​1609
• Bump brace-expansion from 1.1.13 to 1.1.18 in #​1592
• Bump csv-parse from 7.0.0 to 7.0.2 in #​1613
• Bump js-yaml from 4.3.0 to 4.3.2 in #​1605 #​1615
• Bump nanoid from 3.3.16 to 3.3.18 in #​1611
• Bump postcss from 8.5.10 to 8.5.25 in #​1590
• Bump postcss-selector-parser from 7.1.1 to 7.1.5 in #​1606
• Bump sigstore from 4.1.0 to 4.1.1 in #​1577
• Bump undici from 6.27.0 to 6.28.0 in #​1594

Full Changelog: docker/build-push-action@v7.3.0...v7.4.0

docker/setup-buildx-action

v4.4.1

Compare Source

• Skip BuildKit image pre-pulls for explicit endpoints by @​crazy-max in #​624

Full Changelog: docker/setup-buildx-action@v4.4.0...v4.4.1

v4.4.0

Compare Source

• Use official Buildx releases for cloud driver by @​crazy-max in #​606
• Pull BuildKit image before builder creation by @​crazy-max in #​609
• Use shared error helpers for Buildx and Docker commands by @​crazy-max in #​620
• Bump @​docker/actions-toolkit from 0.95.0 to 0.100.0 in #​610 #​618 #​619
• Bump @​humanfs/node from 0.16.7 to 0.16.8 in #​614
• Bump js-yaml from 5.3.0 to 5.4.2 in #​608 #​617
• Bump postcss-selector-parser from 7.1.1 to 7.1.5 in #​611

Full Changelog: docker/setup-buildx-action@v4.3.0...v4.4.0

github/codeql-action

v4.39.0

Compare Source

• Breaking change: Bump the minimum required CodeQL bundle version to 2.20.7. #​4205
• The codeql-action/analyze step now validates that a correct argument for the checkout_path input has been provided. The checkout_path input must be set to the path where the repository that is being analyzed is checked out at on the runner, if that path is something other than the workspace root. If the path does not point to a repository checkout or is different from the path that was used by codeql-action/init, then the CodeQL Action now produces a warning. #​4148
• Resolved an issue with third-party caching implementations that prevented caches from being restored correctly. #​4206
• The codeql-action/start-proxy step that is used in Code Scanning Default Setup now finds CodeQL releases using the same logic as codeql-action/init. This primarily benefits customers who are using GitHub instances other than github.com where the codeql-action/start-proxy step may previously have been unable to locate recent releases and ended up using outdated versions of the private registry authentication proxy as a result. #​4198

v4.38.3

Compare Source

• Upcoming breaking change: CodeQL version 2.21.2 and earlier were discontinued on 24 September 2026 alongside GitHub Enterprise Server 3.17, and will be unsupported by the next minor release of the CodeQL Action. Added a deprecation warning for customers using these versions of CodeQL. #​4188
• Update default CodeQL bundle version to 2.27.2. #​4203
• Fixed a bug where the decision of whether to use a per-language bundle did not account for custom configurations that reference queries outside of compiled CodeQL packs. This issue was caught during internal testing and did not affect any customer repositories. We will resume the roll out of per-language bundles in the coming weeks. #​4184

v4.38.2

Compare Source

• Update default CodeQL bundle version to 2.27.1. #​4160

v4.38.1

Compare Source

• The CodeQL Action now has experimental support for CodeQL releases for which per-language bundles are available. Per-language bundles support analysis for a single language and are therefore smaller than the combined bundles that allow analysis for all supported languages. As a result, per-language bundles take up less space on disk and are faster to download. We expect to roll this change out to everyone in the coming weeks. #​4146

v4.38.0

Compare Source

• On GitHub-hosted runners, the CodeQL Action now deletes unused CodeQL bundles from the toolcache before downloading a different bundle, which frees up disk space for the analysis. We expect to roll this change out to everyone in September. #​4124
• The CodeQL Action now supports CodeQL releases that are compatible with Linux Arm64 and downloads the native linux-arm64 CodeQL bundle when available. #​4072
• Update default CodeQL bundle version to 2.27.0. #​4129

helm/chart-testing-action

v2.9.0

Compare Source

What's Changed

• feat: uv_version to pin uv by @​jmelahman in #​194
• Bump the actions group across 1 directory with 3 updates by @​dependabot[bot] in #​199
• Fix typo in permissions section of README by @​MrLuje in #​187
• chore: remove outdated defaults from action.yml by @​pmalek in #​197
• Bump actions/checkout from 5.0.0 to 6.0.2 by @​dependabot[bot] in #​200
• Bump sigstore/cosign-installer from 4.0.0 to 4.1.1 in the actions group across 1 directory by @​dependabot[bot] in #​207
• feat: add github_token input for setup-uv action by @​fty4 in #​204
• Bump the actions group across 1 directory with 2 updates by @​dependabot[bot] in #​221
• Bump actions/checkout from 6.0.2 to 7.0.0 by @​dependabot[bot] in #​217
• Bump azure/setup-helm from 4.3.1 to 5.0.1 by @​dependabot[bot] in #​216
• Bump astral-sh/setup-uv from 7.3.0 to 10.1.0 by @​dependabot[bot] in #​223
• Bump actions/checkout from 7.0.0 to 7.0.1 in the actions group by @​dependabot[bot] in #​222
• Bump actions/setup-python from 6.2.0 to 7.0.0 by @​dependabot[bot] in #​224
• fix: report a clear error when chart-testing blob verification fails by @​somaz94 in #​210
• fix: do not let a stale cache directory suppress signature verification by @​cpanato in #​228
• fix: pass version inputs via env to prevent expression injection by @​cpanato in #​225
• chore: add concurrency group and rename workflow to .yaml by @​cpanato in #​227
• chore: harden test-action workflow permissions and pin kind-action by @​cpanato in #​226
• Bump astral-sh/setup-uv from 10.1.0 to 10.2.0 in the actions group by @​dependabot[bot] in #​229
• feat: add lint_config input for custom yamllint rules by @​Bisman-Singh in #​208
• docs: document testing charts with CRDs by @​SyedAsadRazaDevops in #​211
• run test-action workflow on push by @​adoroszlai in #​212
• docs: add Helm security policy by @​cpanato in #​231
• feat: add option to disable blob verification by @​fty4 in #​205
• chore: update chart-testing to v3.15.0 and add stale workflow by @​cpanato in #​230
• chore(deps): bump helm/kind-action from 1.15.0 to 1.15.1 in the actions group by @​dependabot[bot] in #​232

New Contributors

• @​jmelahman made their first contribution in #​194
• @​MrLuje made their first contribution in #​187
• @​pmalek made their first contribution in #​197
• @​somaz94 made their first contribution in #​210
• @​Bisman-Singh made their first contribution in #​208
• @​SyedAsadRazaDevops made their first contribution in #​211
• @​adoroszlai made their first contribution in #​212

Full Changelog: helm/chart-testing-action@v2.8.0...v2.9.0

mikepenz/action-junit-report

v6.6.1

Compare Source

🔒 Security fix

Upgrade to v6.6.1 if you process JUnit reports from untrusted sources, including fork pull requests.

This release fixes GHSA-448p-3p5j-c948: test and suite names could inject HTML or Markdown into Job Summaries and PR comments, allowing misleading content, links or images to appear in test reports. The issue affects versions through v6.6.0. Its assessed severity is low; the reported impact is content spoofing, not JavaScript execution.

The fix escapes report-derived text in detailed and flaky summaries, grouped suite headings, and check names and links when group_reports: false. It also handles line breaks that could allow Markdown injection.

Thank you to @​f0909172434 for responsibly reporting this vulnerability.

📦 Dependencies

• Update source-map-js to patched version 1.2.2 (#​1632).
• Update mikepenz/release-changelog-builder-action to v6.4.0 (#​1631).

Contributors

@​mikepenz, @​renovate-mike[bot], and security reporter @​f0909172434.

v6.6.0

Compare Source

🚀 Features

• feat: add failed_summary option to list failed tests with logs
  • PR: #​1622

📦 Dependencies

• chore(deps): update dependency fast-uri to v4.1.3 [security]
  • PR: #​1620
• chore(deps): update mikepenz/release-changelog-builder-action action to v6.3.0
  • PR: #​1621
• fix: update vulnerable npm dependencies
  • PR: #​1623
• chore(deps): update node devdependency non-major updates
  • PR: #​1624
• chore(deps): update dependency fast-uri to v4.2.1
  • PR: #​1625
• chore(deps): update dependency undici to v8.11.2
  • PR: #​1626
• chore(deps): modernize tooling and enforce seven-day release age
  • PR: #​1628

Contributors:

• @​renovate-mike[bot], @​mikepenz, @​tchiotludo

oras-project/setup-oras

v2.0.2

Compare Source

Highlights

• Support ORAS CLI version(s): 1.3.4

What's Changed

• chore(deps): Bump @​types/node from 26.1.0 to 26.1.1 by @​dependabot[bot] in #​187
• chore(deps): Bump typescript from 6.0.3 to 7.0.2 by @​dependabot[bot] in #​186
• chore(deps): Bump actions/setup-node from 6 to 7 by @​dependabot[bot] in #​188
• chore(deps): Bump @​types/node from 26.1.1 to 26.1.2 by @​dependabot[bot] in #​189
• fix: bump undici to >=8.5.0 to resolve dependabot alerts by @​TerryHowe in #​185
• chore(deps): Bump esbuild from 0.28.1 to 0.28.2 by @​dependabot[bot] in #​191
• chore(deps): Bump @​types/node from 26.1.2 to 26.2.0 by @​dependabot[bot] in #​190
• chore: update releases.json for 1.3.4 by @​github-actions[bot] in #​192
• chore(deps): Bump @​types/node from 26.2.0 to 26.4.0 by @​dependabot[bot] in #​193
• chore(deps): Bump apache/skywalking-eyes from 0.8.0 to 0.9.0 by @​dependabot[bot] in #​194
• chore(deps): Bump @​types/node from 26.4.0 to 26.4.1 by @​dependabot[bot] in #​196
• Raise the undici override floor to 8.9.0 by @​arpitjain099 in #​200
• chore(deps): Bump @​types/node from 26.4.1 to 26.5.1 by @​dependabot[bot] in #​201
• chore(deps): Bump @​types/node from 26.5.1 to 26.6.1 by @​dependabot[bot] in #​202
• chore(deps): Bump @​types/node from 26.6.1 to 26.6.2 by @​dependabot[bot] in #​203
• feat: automate patch releases for new ORAS CLI versions by @​Brilly-Bohyun in #​205

New Contributors

• @​arpitjain099 made their first contribution in #​200
• @​Brilly-Bohyun made their first contribution in #​205

Full Changelog: oras-project/setup-oras@v2.0.1...v2.0.2

orhun/git-cliff-action

v4.9.1

Compare Source

[4.9.1] - 2026-09-18

⚙️ Miscellaneous Tasks

• Bump git-cliff to v2.14.2 (#​86)

v4.9.0

Compare Source

[4.9.0] - 2026-09-01

🐛 Bug Fixes

• Use BSD-compatible stat format on macOS (#​80)
• (action) Terminate content output with a newline (#​81)

⚙️ Miscellaneous Tasks

• (sync) Resolve github cli login (#​79)
• Bump git-cliff to v2.14.1 (#​85)

pnpm/action-setup

v6.1.0

Compare Source

What's Changed

• feat: support pnpm v12 by @​zkochan in #​288

Full Changelog: pnpm/action-setup@v6.0.10...v6.1.0

taiki-e/install-action

v2.87.29: 2.87.29

Compare Source

• Update zizmor@latest to 1.31.0.

• Update wasmtime@latest to 49.0.3.

• Update wasm-tools@latest to 1.262.0.

• Update uv@latest to 0.13.1.

• Update trivy@latest to 0.76.0.

• Update tombi@latest to 1.8.4.

• Update release-plz@latest to 0.3.172.

• Update osv-scanner@latest to 2.7.0.

• Update mise@latest to 2026.10.11.

• Update mdbook-d2@latest to 0.3.9.

• Update kingfisher@latest to 2.13.0.

• Update kache@latest to 1.2.1.

• Update just@latest to 1.59.0.

• Update dprint@latest to 0.63.0.

• Update cargo-crap@latest to 0.8.0.

• Update bpf-linker@latest to 0.12.0.

v2.87.28: 2.87.28

Compare Source

• Update dprint@latest to 0.62.0.

• Update vacuum@latest to 0.33.0.

• Update uv@latest to 0.13.0.

• Update tombi@latest to 1.8.1.

• Update release-plz@latest to 0.3.171.

• Update rclone@latest to 1.75.2.

• Update mise@latest to 2026.10.7.

• Update cargo-binstall@latest to 1.25.3.

v2.87.27: 2.87.27

Compare Source

• Update vacuum@latest to 0.32.0.

• Update uv@latest to 0.12.24.

• Update typos@latest to 1.51.1.

• Update tombi@latest to 1.7.3.

• Update syft@latest to 1.54.1.

• Update release-plz@latest to 0.3.170.

• Update mise@latest to 2026.10.4.

• Update kingfisher@latest to 2.11.1.

• Update hyperfine@latest to 2.0.0.

• Update dprint@latest to 0.61.1.

• Update cargo-nextest@latest to 0.9.148.

• Update cargo-neat@latest to 0.6.0.

• Update cargo-binstall@latest to 1.25.2.

v2.87.26: 2.87.26

Compare Source

• Update tombi@latest to 1.7.2.

• Update prek@latest to 0.5.5.

• Update mise@latest to 2026.10.3.

• Update kache@latest to 1.0.0.

• Update hyperfine@latest to 1.21.0.

v2.87.25: 2.87.25

Compare Source

• Update uv@latest to 0.12.23.

• Update mise@latest to 2026.10.2.

• Update kingfisher@latest to 2.10.0.

• Update dprint@latest to 0.60.1.

• Update cargo-semver-checks@latest to 0.51.0.

• Update cargo-binstall@latest to 1.25.1.

v2.87.24: 2.87.24

Compare Source

• Update wasmtime@latest to 49.0.2.

• Update dprint@latest to 0.59.0.

• Update cargo-leptos@latest to 0.3.11.

• Update cargo-insta@latest to 1.49.0.

• Update cargo-binstall@latest to 1.25.0.

v2.87.23: 2.87.23

Compare Source

• Update wasm-tools@latest to 1.261.0.

• Update uv@latest to 0.12.22.

• Update trivy@latest to 0.75.0.

• Update tombi@latest to 1.7.1.

• Update protoc-gen-connect-openapi@latest to 0.28.0.

• Update mise@latest to 2026.10.0.

• Update kingfisher@latest to 2.9.1.

• Update kache@latest to 0.28.1.

• Update espup@latest to 0.18.0.

• Update dprint@latest to 0.58.0.

• Update cargo-crap@latest to 0.6.1.

• Update cargo-auditable@latest to 0.7.7.

• Update biome@latest to 2.5.15.

• Update syft@latest to 1.54.0.

v2.87.22: 2.87.22

Compare Source

• Update typos@latest to 1.50.3.

• Update tombi@latest to 1.5.8.

• Update prek@latest to 0.5.4.

• Update mise@latest to 2026.9.16.

• Update kache@latest to 0.28.0.

• Update gungraun-runner@latest to 0.20.0.

• Update cargo-tarpaulin@latest to 0.37.5.

• Update cargo-leptos@latest to 0.3.10.

• Update cargo-binstall@latest to 1.24.0.

v2.87.21: 2.87.21

Compare Source

• Update wasm-bindgen@latest to 0.2.129.

• Update protoc-gen-connect-openapi@latest to 0.27.3.

• Update wasmtime@latest to 49.0.1.

• Update uv@latest to 0.12.19.

• Update mise@latest to 2026.9.13.

• Update kingfisher@latest to 2.7.0.

v2.87.20: 2.87.20

Compare Source

• Update uv@latest to 0.12.18.

• Update cargo-shear@latest to 1.14.0.

v2.87.19: 2.87.19

Compare Source

• Update wasmtime@latest to 49.0.0.

• Update cargo-shear@latest to 1.13.5.

• Update cargo-nextest@latest to 0.9.146.

v2.87.18: 2.87.18

Compare Source

• Update oxfmt@latest to 1.84.0.

• Update mise@latest to 2026.9.12.

• Update kache@latest to 0.26.3.

• Update cargo-tarpaulin@latest to 0.37.4.

• Update cargo-rdme@latest to 2.2.3.

v2.87.17: 2.87.17

Compare Source

• Update uv@latest to 0.12.17.

• Update release-plz@latest to 0.3.169.

• Update kingfisher@latest to 2.5.0.

• Update kache@latest to 0.25.0.

• Update git-cliff@latest to 2.14.2.

• Update cargo-tarpaulin@latest to 0.37.3.

• Update cargo-leptos@latest to 0.3.9.

v2.87.16: 2.87.16

Compare Source

• Update uv@latest to 0.12.16.

• Update release-plz@latest to 0.3.168.

• Update protoc@latest to 3.36.2.

• Update mise@latest to 2026.9.11.

v2.87.15: 2.87.15

Compare Source

• Update syft@latest to 1.52.0.

• Update mise@latest to 2026.9.10.

• Update kingfisher@latest to 2.4.0.

• Update kache@latest to 0.23.1.

• Update coreutils@latest to 0.12.0.

• Update cargo-nextest@latest to 0.9.145.

v2.87.14: 2.87.14

Compare Source

• Update vacuum@latest to 0.30.6.

• Update uv@latest to 0.12.15.

• Update typos@latest to 1.50.2.

• Update sccache@latest to 0.18.0.

• Update oxfmt@latest to 1.83.0.

• Update mise@latest to 2026.9.9.

• Update kingfisher@latest to 2.3.0.

• Update kache@latest to 0.22.0.

• Update biome@latest to 2.5.14.

v2.87.13: 2.87.13

Compare Source

• Update zola@latest to 0.23.6.

• Update vacuum@latest to 0.30.5.

• Update tombi@latest to 1.5.5.

• Update release-plz@latest to 0.3.167.

• Update protoc-gen-connect-openapi@latest to 0.27.2.

• Update prek@latest to 0.5.3.

• Update osv-scanner@latest to 2.6.0.

• Update mise@latest to 2026.9.7.

• Update kache@latest to 0.21.0.

• Update cargo-leptos@latest to 0.3.8.

• Update cargo-auditable@latest to 0.7.6.

v2.87.12: 2.87.12

Compare Source

• Update wasmtime@latest to 48.0.2.

• Update wasm-tools@latest to 1.259.0.

• Update uv@latest to 0.12.13.

• Update release-plz@latest to 0.3.165.

• Update protoc-gen-connect-openapi@latest to 0.27.1.

• Update mise@latest to 2026.9.5.

• Update cargo-nextest@latest to 0.9.144.

v2.87.11: 2.87.11

Compare Source

• Update biome@latest to 2.5.13.

• Update uv@latest to 0.12.12.

• Update mise@latest to 2026.9.4.

• Update kache@latest to 0.19.0.

v2.87.10: 2.87.10

Compare Source

• Update zizmor@latest to 1.30.1.

• Update uv@latest to 0.12.11.

• Update tombi@latest to 1.5.4.

• Update release-plz@latest to 0.3.164.

• Update mise@latest to 2026.9.3.

• Update kingfisher@latest to 2.2.0.

v2.87.9: 2.87.9

Compare Source

• Update oxfmt@latest to 1.82.0.

• Update mise@latest to 2026.9.2.

• Update kache@latest to 0.18.0.

• Update d2@latest to 0.9.0.

• Update bpf-linker@latest to 0.11.1.

v2.87.8: 2.87.8

Compare Source

• Update shfmt@latest to 3.14.1.

• Update release-plz@latest to 0.3.162.

• Update protoc-gen-connect-openapi@latest to 0.26.0.

• Update dprint@latest to 0.57.4.

• Update cargo-llvm-cov@latest to 0.9.1.

• Update cargo-crap@latest to 0.5.0.

• Update cargo-binstall@latest to 1.23.0.

v2.87.7: 2.87.7

Compare Source

• Update wasm-bindgen@latest to 0.2.128.

• Update uv@latest to 0.12.10.

• Update tombi@latest to 1.5.2.

• Update rclone@latest to 1.75.1.

v2.87.6: 2.87.6

Compare Source

• Update rafn@latest to 0.1.6.

• Update editorconfig-checker@latest to 3.11.3.

• Update dprint@latest to 0.57.1.

• Update convco@latest to 0.7.2.

v2.87.5: 2.87.5

Compare Source

• Update vacuum@latest to 0.30.3.

• Update uv@latest to 0.12.9.

• Update typos@latest to 1.50.1.

• Update tombi@latest to 1.5.1.

• Update release-plz@latest to 0.3.161.

• Update prek@latest to 0.5.2.

• Update oxfmt@latest to 1.81.0.

• Update mise@latest to 2026.9.1.

• Update martin@latest to 1.15.0.

• Update git-cliff@latest to 2.14.1.

• Update cargo-zigbuild@latest to 0.23.4.

• Update cargo-deb@latest to 3.8.0.

• Update biome@latest to 2.5.12.

v2.87.4: 2.87.4

Compare Source

• Update uv@latest to 0.12.8.

• Update protoc@latest to 3.36.1.

• Update coreutils@latest to 0.11.0.

v2.87.3: 2.87.3

Compare Source

• Update zizmor@latest to 1.30.0.

• Update ubi@latest to 0.12.0.

• Update protoc-gen-connect-openapi@latest to 0.25.8.

• Update mise@latest to 2026.8.16.

• Update kingfisher@latest to 2.1.0.

• Update dprint@latest to 0.57.0.

v2.87.2: 2.87.2

Compare Source

• Update typos@latest to 1.50.0.

• Update tombi@latest to 1.5.0.

• Update shfmt@latest to 3.14.0.

---

Configuration

📅 Schedule: (in timezone UTC)

• Branch creation
  • At any time (no schedule defined)
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.

[coderabbitai]

Important

Review skipped

Bot user detected.

To trigger a single review, invoke the @coderabbitai review command.

Run configuration

• Source mode: Auto
• Repository: Unavailable
• Branch: Unavailable
• File: No configuration file from this repository applied
• Commit: Unavailable
• Layers: Organization UI
• Review profile: CHILL
• Plan: Advanced
• Run ID: 0c4f6354-761c-4b1f-88f5-16b22cf29b3c

You can disable this status message by setting the reviews.review_status to false in the CodeRabbit configuration file.

Use the checkbox below for a quick retry:

• 🔍 Trigger review

• Autofix · Keep fixing CodeRabbit findings and required CI, and resolving merge conflicts

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

• X
• Mastodon
• Reddit
• LinkedIn

_{Comment @coderabbitai help to get the list of available commands.}