[dependabot]

Bumps the actions group with 3 updates in the / directory: Swatinem/rust-cache, taiki-e/install-action and docker/login-action.

Updates Swatinem/rust-cache from 2.9.2 to 2.9.3

Release notes

Sourced from Swatinem/rust-cache's releases.

v2.9.3

What's Changed

• Issue-375: stop cleanup timestamp pruning after the first entry by @​TethysSvensson in Swatinem/rust-cache#377
• fix: log rustup toolchain list failure as info instead of warning by @​SDAChess in Swatinem/rust-cache#394

New Contributors

• @​TethysSvensson made their first contribution in Swatinem/rust-cache#377
• @​SDAChess made their first contribution in Swatinem/rust-cache#394

Full Changelog: Swatinem/rust-cache@v2.9.2...v2.9.3

Changelog

Sourced from Swatinem/rust-cache's changelog.

Changelog

2.9.3

• Fix timestamp based pruning
• Add missing awaits
• Do not emit warning on missing rustup

2.9.2

• Fix credentials.toml cleanup
• Improvements to cleanup, preserving more valid targets
• Improvements to cargo install handling
• Correctly sort/dedupe Rust versions

2.9.1

• Fix regression in hash calculation

2.9.0

• Update to node24
• Support running from within a nix shell
• Consider all installed toolchains for cache key
• Use case-insensitive comparison to determine exact cache hit

2.8.2

• Don't overwrite env for cargo-metadata call

2.8.1

• Set empty CARGO_ENCODED_RUSTFLAGS when retrieving metadata
• Various dependency updates

2.8.0

• Add support for warpbuild cache provider
• Add new cache-workspace-crates feature

2.7.8

• Include CPU arch in the cache key

2.7.7

• Also cache cargo install metadata

2.7.6

... (truncated)

Commits

• d1527c8 2.9.3
• f0fca6f update dependencies and rebuild
• b49b17f add missing awaits
• 6a7bc3e Bump the dev-minor group across 1 directory with 2 updates (#383)
• 4ece996 Bump the actions group across 1 directory with 6 updates (#392)
• 8103aff Bump the prd-minor group across 1 directory with 2 updates (#389)
• 0e361f3 fix: log rustup toolchain list failure as info instead of warning (#393) (#394)
• f0d9c38 Merge pull request #380 from Swatinem/dependabot/github_actions/actions-8ff58...
• ccd9742 Bump the actions group with 2 updates
• 258712b fix: stop cleanup timestamp pruning after the first entry (#377)
• Additional commits viewable in compare view

Updates taiki-e/install-action from 2.87.28 to 2.87.32

Release notes

Sourced from taiki-e/install-action's releases.

2.87.32

• Update wild@latest to 0.11.0.

• Update vacuum@latest to 0.35.2.

• Update tombi@latest to 1.9.5.

• Update sccache@latest to 0.19.0.

• Update release-plz@latest to 0.4.1.

• Update mise@latest to 2026.10.19.

• Update knope@latest to 0.23.2.

• Update dprint@latest to 0.64.3.

• Update cargo-vet@latest to 0.10.3.

• Update cargo-sort@latest to 2.1.4.

• Update cargo-binstall@latest to 1.26.1.

• Update biome@latest to 2.6.3.

2.87.31

• Downgrade cargo-sort@latest to 2.1.3.

• Update vacuum@latest to 0.35.0.

• Update xh@latest to 0.26.3.

• Update uv@latest to 0.13.5.

• Update ubi@latest to 0.13.0.

• Update trivy@latest to 0.76.1.

• Update tombi@latest to 1.9.0.

• Update release-plz@latest to 0.3.174.

• Update prek@latest to 0.5.7.

• Update mise@latest to 2026.10.17.

• Update jaq@latest to 3.1.2.

• Update espup@latest to 0.17.1.

... (truncated)

Changelog

Sourced from taiki-e/install-action's changelog.

Changelog

All notable changes to this project will be documented in this file.

This project adheres to Semantic Versioning.

[Unreleased]

[2.88.0] - 2026-10-28

• Support similarity-rs. (#2017, thanks @​HardMax71)

[2.87.33] - 2026-10-28

• Update vacuum@latest to 0.35.4.

• Update uv@latest to 0.13.6.

• Update trunk@latest to 0.22.1.

• Update tombi@latest to 1.9.6.

• Update release-plz@latest to 0.4.2.

• Update mise@latest to 2026.10.21.

• Update cargo-nextest@latest to 0.9.150.

• Update cargo-about@latest to 0.9.3.

[2.87.32] - 2026-10-26

• Update wild@latest to 0.11.0.

• Update vacuum@latest to 0.35.2.

• Update tombi@latest to 1.9.5.

• Update sccache@latest to 0.19.0.

• Update release-plz@latest to 0.4.1.

• Update mise@latest to 2026.10.19.

• Update knope@latest to 0.23.2.

... (truncated)

Commits

• 5488ac5 Release 2.87.32
• 688322d ci: Mark cargo-vet as glibc_pre_2_34_incompat
• cebf56e Update wild@latest to 0.11.0
• 84f1fb1 Update vacuum@latest to 0.35.2
• 22b4d72 Update trunk manifest
• 4aa26a3 Update tombi@latest to 1.9.5
• 354bf5e Update sccache@latest to 0.19.0
• 89eb201 Update release-plz@latest to 0.4.1
• 304ba0d Update mise@latest to 2026.10.19
• 104910e Update knope@latest to 0.23.2
• Additional commits viewable in compare view

Updates docker/login-action from 4.6.0 to 4.7.0

Release notes

Sourced from docker/login-action's releases.

v4.7.0

• Preserve explicit ECR settings in registry-auth by @​crazy-max in docker/login-action#1089
• Use registry hosts for scoped credentials by @​crazy-max in docker/login-action#1088
• Raise Docker Hub OIDC max expiry to 6 hours by @​crazy-max in docker/login-action#1068
• Log Docker Hub OIDC token exchange progress by @​crazy-max in docker/login-action#1061
• Bump @​aws-sdk/client-ecr and @​aws-sdk/client-ecr-public to 3.1154.0 in docker/login-action#1093
• Bump @​docker/actions-toolkit from 0.94.0 to 0.107.0 in docker/login-action#1100
• Bump @​humanfs/node from 0.16.7 to 0.16.8 in docker/login-action#1077
• Bump csv-parse from 7.0.1 to 7.0.3 in docker/login-action#1078
• Bump handlebars from 4.7.9 to 4.7.10 in docker/login-action#1091
• Bump js-yaml from 5.2.2 to 5.5.0 in docker/login-action#1066
• Bump postcss from 8.5.22 to 8.5.26 in docker/login-action#1071
• Bump postcss-selector-parser from 7.1.1 to 7.1.6 in docker/login-action#1092
• Bump source-map-js from 1.2.1 to 1.2.2 in docker/login-action#1090
• Bump undici from 6.27.0 to 6.29.1 in docker/login-action#1085
• Bump uuid from 14.0.1 to 14.0.3 in docker/login-action#1096

Full Changelog: docker/login-action@v4.6.0...v4.7.0

Commits

• 81c6f93 Merge pull request #1100 from docker/dependabot/npm_and_yarn/docker/actions-t...
• 1b16c8d Merge pull request #1096 from docker/dependabot/npm_and_yarn/uuid-14.0.3
• ac86b5e [dependabot skip] chore: update generated content
• 1476d84 build(deps): bump @​docker/actions-toolkit from 0.94.0 to 0.107.0
• 503cee6 Merge pull request #1095 from docker/dependabot/github_actions/actions/create...
• f093535 Merge pull request #1099 from docker/dependabot/github_actions/codecov/codeco...
• d5ae7f1 Merge pull request #1098 from docker/dependabot/github_actions/docker/bake-ac...
• 6f97507 Merge pull request #1097 from docker/dependabot/github_actions/docker/bake-ac...
• 006d61f Merge pull request #1094 from docker/dependabot/github_actions/codeql-actions...
• 93f5f52 Merge pull request #1093 from docker/dependabot/npm_and_yarn/aws-sdk-dependen...
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
• @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
• @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
• @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
• @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

[github-actions]

Speed against e8e795ca

Measured on AMD EPYC 7763 64-Core Processor.
Both sides built with rustc 1.99.1 (58cf8f9c3 2026-10-13).

Both sides built and run on this runner in this job, the way
scripts/speed.sh measures a perf commit. Each round runs
both sides on a layout of its own, the same compiled code with
its code and data shuffled and moved, so the 95% interval carries
where the code landed as well as the run. The verdict holds the
interval against a 1% threshold. The default layout, the one a
release ships, is measured after as a diagnostic. The node
counts are the search's: they move when the search does, and a
speed change leaves them alone.

round     base nps  candidate nps  change
    1      4568416        4656368   +1.9%
    2      4541588        4815061   +6.0%
    3      4529579        4527280   -0.1%
    4      4476729        4680543   +4.6%
    5      4378951        4462564   +1.9%
    6      4454347        4608559   +3.5%
    7      4500401        4406539   -2.1%
    8      4436027        4291658   -3.3%
    9      4388470        4389538   +0.0%
   10      4530987        4380433   -3.3%
   11      4482013        4335485   -3.3%
   12      4350672        4297338   -1.2%
   13      4215901        4227958   +0.3%
   14      4321879        4283738   -0.9%
   15      4381970        4394213   +0.3%
   16      4427707        4355694   -1.6%
   17      4336080        4341164   +0.1%
   18      4403302        4394114   -0.2%
   19      4328116        4346743   +0.4%
   20      4318799        4321706   +0.1%
   21      4393511        4413069   +0.4%
   22      4296462        4382036   +2.0%
   23      4411962        4376476   -0.8%
   24      4491031        4282445   -4.6%
   25      4398141        4384943   -0.3%
   26      4366321        4382942   +0.4%
   27      4402816        4481998   +1.8%
   28      4365465        4421387   +1.3%
   29      4334695        4313443   -0.5%
   30      4267114        4320369   +1.2%
   31      4355054        4353113   -0.0%
   32      4368421        4354287   -0.3%
   33      4365337        4392067   +0.6%
   34      4423509        4464861   +0.9%
   35      4352938        4366351   +0.3%
   36      4484673        4507060   +0.5%
   37      4376817        4382147   +0.1%
   38      4271381        4330251   +1.4%
   39      4275267        4377635   +2.4%
   40      4460058        4441719   -0.4%

              nodes    time  median nps  faster half
base       11916992  2.72 s     4385220      4460263
candidate  11916992  2.72 s     4382092      4480349
change                            -0.1%        +0.5%

paired change +0.2%, 95% interval -0.2% to +0.8%
diagnostic, on the default layout alone +0.8%, 95% interval -0.5% to +2.9%, 13 rounds

no change beyond ±1.0%: the whole interval is inside it

Speed: +0.2% (bench nps, 95% interval -0.2% to +0.8%, 40 interleaved rounds over shuffled layouts vs e8e795ca)

The instructions each side's bench executed, counted under
cachegrind. The count repeats to within a few hundred
instructions, so a small change here is a real one, but it
prices instructions only: cache misses, mispredicted branches
and where the code lands are the speed's to show.

instructions against e8e795ca, one cachegrind run a side, bench

             instructions     nodes  per node
base       15,968,841,353  11916992    1340.0
candidate  15,968,841,396  11916992    1340.0
change             +0.00%              +0.00%

within ±0.7%, as far as edits not made for speed have moved the count