Bump the actions group with 3 updates

[dependabot]

Bumps the actions group with 3 updates: cargo-bins/cargo-binstall, taiki-e/install-action and cachix/install-nix-action.

Updates cargo-bins/cargo-binstall from 1.18.1 to 1.19.0

Release notes

Sourced from cargo-bins/cargo-binstall's releases.

v1.19.0

Binstall is a tool to fetch and install Rust-based executables as binaries. It aims to be a drop-in replacement for cargo install in most cases. Install it today with cargo install cargo-binstall, from the binaries below, or if you already have it, upgrade with cargo binstall cargo-binstall.

In this release:

• Support cargo config.toml include field for recursive loading (#2531)
• Add github attestation for release artifacts verification (#2549)
• Prefer quic and tls over udp/tcp for dns configs of interfaces discovered on windows (#2550)

Bug fixes:

• Fallback to quad9, cloudflare and then google dns if reading /etc/resolv.conf fails, prefer QUIC, then http3, tls, http2, fallback to udp/TCP (#2181 #2550)
• Fix Error message outputs ANSI escape sequences (#2554 #2556)

Other changes:

• Fix clippy in async_extractor (#2538)
• Upgrade dependencies (#2540 #2541 #2542 #2544 #2546 #2551 #2555)

Commits

• 4852a15 release: cargo-binstall v1.19.0 (#2557)
• e00d89e chore: release (#2539)
• 6989632 Fix Error message outputs ANSI escape sequences (#2556)
• 618ca07 build(deps): bump hickory-resolver from 0.26.0 to 0.26.1 in the deps group (#...
• 5da0a98 fix: fallback to hickory_resolver's default config if reading /etc/resolv.con...
• c0ae933 dep: Upgrade transitive dependencies (#2551)
• 639cd26 Use github attestation for release artifacts (#2549)
• 102d26b fix(action): use GITHUB_ACTION_PATH env var instead of context var (#2548)
• e9a9a9a feat: Support cargo config.toml include field (#2531)
• d53a627 dep: Upgrade transitive dependencies (#2546)
• Additional commits viewable in compare view

Updates taiki-e/install-action from 2.75.23 to 2.77.0

Release notes

Sourced from taiki-e/install-action's releases.

2.77.0

• Support rust. (#1779)

  This installs rust using rustup.

  If rustup is not yet installed, this action downloads rustup-init for the current platform using HTTPS with tlsv1.2+, verifies SHA256 checksum, and then installs rustup using it.

  This also supports installing additional components at the same time by +<additional> syntax:

  - uses: taiki-e/install-action@v2
    with:
      # Install rust stable with rustfmt component and wasm32-wasip1 target.
      tool: rust+rustfmt+wasm32-wasip1
      # When installing another rust version:
      # tool: rust@nightly + rustfmt + wasm32-wasip1

• Fix issue where x86_64 binary will be installed on AArch64 Windows even when AArch64 Windows binary available.

• Update mise@latest to 2026.5.0.

• Diagnostic improvements.

2.76.0

• Support mdbook-d2. (#1737, thanks @​nhu)

• Support cargo-apple-runner. (#1731, thanks @​madsmtm)

• Support cargo-binstall on riscv64 Linux.

• Update cargo-deb@latest to 3.7.0.

• Update tombi@latest to 0.10.2.

2.75.30

• Support cargo-spellcheck on AArch64 Linux/Windows.

• Update cargo-spellcheck@latest to 0.15.7.

• Update biome@latest to 2.4.14.

2.75.29

• Update syft@latest to 1.44.0.

• Update rclone@latest to 1.74.0.

• Update osv-scanner@latest to 2.3.6.

... (truncated)

Changelog

Sourced from taiki-e/install-action's changelog.

Changelog

All notable changes to this project will be documented in this file.

This project adheres to Semantic Versioning.

[Unreleased]

[2.77.0] - 2026-05-05

• Support rust. (#1779)

  This installs rust using rustup.

  If rustup is not yet installed, this action downloads rustup-init for the current platform using HTTPS with tlsv1.2+, verifies SHA256 checksum, and then installs rustup using it.

  This also supports installing additional components at the same time by +<additional> syntax:

  - uses: taiki-e/install-action@v2
    with:
      # Install rust stable with rustfmt component and wasm32-wasip1 target.
      tool: rust+rustfmt+wasm32-wasip1
      # When installing another rust version:
      # tool: rust@nightly + rustfmt + wasm32-wasip1

• Fix issue where x86_64 binary will be installed on AArch64 Windows even when AArch64 Windows binary available.

• Update mise@latest to 2026.5.0.

• Diagnostic improvements.

[2.76.0] - 2026-05-04

• Support mdbook-d2. (#1737, thanks @​nhu)

• Support cargo-apple-runner. (#1731, thanks @​madsmtm)

• Support cargo-binstall on riscv64 Linux.

• Update cargo-deb@latest to 3.7.0.

• Update tombi@latest to 0.10.2.

[2.75.30] - 2026-05-03

... (truncated)

Commits

• 7ea35f0 Release 2.77.0
• 18aca71 Update changelog
• b62b508 Update mise@latest to 2026.5.0
• 1156973 codegen: Improve changelog handling
• 07924c7 Diagnostic improvements
• fbb8be9 Reduce uname usage
• ca67a3a Support +<additional> syntax for rust
• bbe1b9d Support rust
• a70acaa Update tombi manifest
• 711e1c3 Release 2.76.0
• Additional commits viewable in compare view

Updates cachix/install-nix-action from 31.10.5 to 31.10.6

Release notes

Sourced from cachix/install-nix-action's releases.

v31.10.6

What's Changed

• nix: 2.34.6 -> 2.34.7 by @​github-actions[bot] in cachix/install-nix-action#275 GHSA-vh5x-56v6-4368: Fixes a coroutine stack-to-heap overflow via unbounded recursion in the NAR directory parser. Severity: High. GHSA-gr92-w2r5-qw5p: Fixes an absolute path traversal vulnerability when unpacking archives to disk. Severity: Moderate.

Full Changelog: cachix/install-nix-action@v31...v31.10.6

Commits

• 8aa0397 Merge pull request #275 from cachix/create-pull-request/patch
• 21d0b78 nix: 2.34.6 -> 2.34.7
• See full diff in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
• @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
• @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
• @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
• @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions