chore(deps): pin action dependencies

[renovate]

This PR contains the following updates:

Package	Type	Update	Change
JamesIves/github-pages-deploy-action	action	pinDigest	-> 4a3abc7
Swatinem/rust-cache	action	digest	98c8021 -> 779680d
actions-cool/issues-helper	action	minor	v3.6.3 -> v3.7.2
actions-cool/issues-helper	action	digest	45d75b6 -> 9861779
actions/checkout	action	digest	08c6903 -> 93cb6ef
actions/setup-node	action	minor	v6.0.0 -> v6.1.0
actions/setup-node	action	digest	2028fbc -> 395ad32
cargo-bins/cargo-binstall	action	minor	v1.15.9 -> v1.16.2
crate-ci/typos	action	minor	v1.38.1 -> v1.40.0
lynx-infra/download-artifact	action	digest	79d9914 -> cc20338
lynx-infra/upload-artifact	action	digest	332ec52 -> 4cec3d8
node	uses-with	minor	22 -> 22.21.1
stormslowly/rust-cache	action	digest	8269079 -> 9d47c6a
taiki-e/install-action	action	digest	41ef8c6 -> 92e6dd1

---

Warning

Some dependencies could not be looked up. Check the Dependency Dashboard for more information.

---

Release Notes

actions-cool/issues-helper (actions-cool/issues-helper)

v3.7.2

Compare Source

2025.11.07

• 🚀 feat: doQueryIssues title/body-includes support multiple value. #​215 @​btea
• 🛠 refactor: avoid calling dealStringToArr inside loop. #​216 @​btea

v3.7.1

Compare Source

2025.11.03

• 🚀 feat: find-comments action body-includes param support multiple value. #​213 @​btea

v3.7.0

Compare Source

2025.10.31

• 🚀 feat: check-inactive action add exclude-issue-numbers param. #​211 @​btea

actions/setup-node (actions/setup-node)

v6.1.0

Compare Source

What's Changed

Enhancement:

• Remove always-auth configuration handling by @​priyagupta108 in #​1436

Dependency updates:

• Upgrade @​actions/cache from 4.0.3 to 4.1.0 by @​dependabot[bot] in #​1384
• Upgrade actions/checkout from 5 to 6 by @​dependabot[bot] in #​1439
• Upgrade js-yaml from 3.14.1 to 3.14.2 by @​dependabot[bot] in #​1435

Documentation update:

• Add example for restore-only cache in documentation by @​aparnajyothi-y in #​1419

Full Changelog: actions/setup-node@v6...v6.1.0

cargo-bins/cargo-binstall (cargo-bins/cargo-binstall)

v1.16.2

Compare Source

Binstall is a tool to fetch and install Rust-based executables as binaries. It aims to be a drop-in replacement for cargo install in most cases. Install it today with cargo install cargo-binstall, from the binaries below, or if you already have it, upgrade with cargo binstall cargo-binstall.

In this release:

• Use well-maintained netdev instead of legacy default-net/ipconfig on Windows (#​2378)

Other changes:

• Upgrade transitive dependencies (#​2380)

v1.16.1

Compare Source

Binstall is a tool to fetch and install Rust-based executables as binaries. It aims to be a drop-in replacement for cargo install in most cases. Install it today with cargo install cargo-binstall, from the binaries below, or if you already have it, upgrade with cargo binstall cargo-binstall.

In this release:

• fix: Don't send reports when telemetry is disabled (#​2373)

Other changes:

• Upgrade transitive dependencies

v1.16.0

Compare Source

Binstall is a tool to fetch and install Rust-based executables as binaries. It aims to be a drop-in replacement for cargo install in most cases. Install it today with cargo install cargo-binstall, from the binaries below, or if you already have it, upgrade with cargo binstall cargo-binstall.

In this release:

• Feature: support replace-with field for registry (#​2367 #​2370)

Other changes:

• Upgrade dependencies

v1.15.11

Compare Source

Binstall is a tool to fetch and install Rust-based executables as binaries. It aims to be a drop-in replacement for cargo install in most cases. Install it today with cargo install cargo-binstall, from the binaries below, or if you already have it, upgrade with cargo binstall cargo-binstall.

In this release:

• Fix binstalk-downloader cannot decode some zip files on macos (x64 and arm64) platforms (#​2049 #​2362)
• Fix grammer in HELP.md and --help output (#​2357 #​2359)
• Update documentation link in Cargo.toml (#​2355)

Other changes:

• Upgrade dependencies

v1.15.10

Compare Source

Binstall is a tool to fetch and install Rust-based executables as binaries. It aims to be a drop-in replacement for cargo install in most cases. Install it today with cargo install cargo-binstall, from the binaries below, or if you already have it, upgrade with cargo binstall cargo-binstall.

In this release:

• fix file locking for android and illumos (#​2330 #​2348 #​2350)

Other changes:

• Upgrade dependencies

crate-ci/typos (crate-ci/typos)

v1.40.0

Compare Source

Bug Fixes

• Ignore numbers as identifiers (a00831c8)
• Improve the organization of --help (a48a457c)

Features

• Dump files, identifiers, and words (ce365ae1, closes #​41)
• Give control over allowed identifier characters for leading vs rest (107308a6)

Performance

• Use standard identifier rules to avoid doing umber checks (107308a6)
• Only do hex check if digits are in identifiers (68cd36d0)

v1.39.2

Compare Source

Bug Fixes

• Ignore numbers as identifiers (a00831c8)
• Improve the organization of --help (a48a457c)

Features

• Dump files, identifiers, and words (ce365ae1, closes #​41)
• Give control over allowed identifier characters for leading vs rest (107308a6)

Performance

• Use standard identifier rules to avoid doing umber checks (107308a6)
• Only do hex check if digits are in identifiers (68cd36d0)

v1.39.1

Compare Source

Bug Fixes

• Ignore numbers as identifiers (a00831c8)
• Improve the organization of --help (a48a457c)

Features

• Dump files, identifiers, and words (ce365ae1, closes #​41)
• Give control over allowed identifier characters for leading vs rest (107308a6)

Performance

• Use standard identifier rules to avoid doing umber checks (107308a6)
• Only do hex check if digits are in identifiers (68cd36d0)

---

Configuration

📅 Schedule: Branch creation - "before 8am on wednesday" in timezone Asia/Shanghai, Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.

[netlify]

✅ Deploy Preview for rspack canceled.

Name	Link
🔨 Latest commit	238c661
🔍 Latest deploy log	https://app.netlify.com/projects/rspack/deploys/692fd96c0071da0008305c88

[github-actions]

Rsdoctor Bundle Diff Analysis

Found 5 project(s) in monorepo.

📁 react-10k

Path: ../build-tools-performance/cases/react-10k/dist/rsdoctor-data.json

📌 Baseline Commit: cc261ac978 | PR: #12359

Metric	Current	Baseline	Change
📊 Total Size	5.7 MB	5.7 MB	0 B (0.0%)
📄 JavaScript	5.7 MB	5.7 MB	0 B (0.0%)
🎨 CSS	21.0 B	21.0 B	0 B (0.0%)
🌐 HTML	0 B	0 B	N/A
📁 Other Assets	0 B	0 B	N/A

📦 Download Diff Report: react-10k Bundle Diff

📁 react-1k

Path: ../build-tools-performance/cases/react-1k/dist/rsdoctor-data.json

📌 Baseline Commit: cc261ac978 | PR: #12359

Metric	Current	Baseline	Change
📊 Total Size	822.6 KB	822.6 KB	0 B (0.0%)
📄 JavaScript	822.6 KB	822.6 KB	0 B (0.0%)
🎨 CSS	0 B	0 B	N/A
🌐 HTML	0 B	0 B	N/A
📁 Other Assets	0 B	0 B	N/A

📦 Download Diff Report: react-1k Bundle Diff

📁 rome

Path: ../build-tools-performance/cases/rome/dist/rsdoctor-data.json

📌 Baseline Commit: cc261ac978 | PR: #12359

Metric	Current	Baseline	Change
📊 Total Size	984.3 KB	984.3 KB	0 B (0.0%)
📄 JavaScript	984.3 KB	984.3 KB	0 B (0.0%)
🎨 CSS	0 B	0 B	N/A
🌐 HTML	0 B	0 B	N/A
📁 Other Assets	0 B	0 B	N/A

📦 Download Diff Report: rome Bundle Diff

📁 ui-components

Path: ../build-tools-performance/cases/ui-components/dist/rsdoctor-data.json

📌 Baseline Commit: cc261ac978 | PR: #12359

Metric	Current	Baseline	Change
📊 Total Size	2.1 MB	2.1 MB	0 B (0.0%)
📄 JavaScript	2.0 MB	2.0 MB	0 B (0.0%)
🎨 CSS	83.0 KB	83.0 KB	0 B (0.0%)
🌐 HTML	0 B	0 B	N/A
📁 Other Assets	0 B	0 B	N/A

📦 Download Diff Report: ui-components Bundle Diff

📁 react-5k

Path: ../build-tools-performance/cases/react-5k/dist/rsdoctor-data.json

📌 Baseline Commit: cc261ac978 | PR: #12359

Metric	Current	Baseline	Change
📊 Total Size	2.7 MB	2.7 MB	0 B (0.0%)
📄 JavaScript	2.7 MB	2.7 MB	0 B (0.0%)
🎨 CSS	21.0 B	21.0 B	0 B (0.0%)
🌐 HTML	0 B	0 B	N/A
📁 Other Assets	0 B	0 B	N/A

📦 Download Diff Report: react-5k Bundle Diff

Generated by Rsdoctor GitHub Action

[github-actions]

📦 Binary Size-limit

Comparing 238c661 to fix: should use sourceOrder to sort module outgoing in buildChunkGraph (#12351) by Fy

🙈 Size remains the same at 47.72MB

[codspeed-hq]

CodSpeed Performance Report

Merging #12354 will not alter performance

_{Comparing renovate/github-actions (238c661) with main (cc261ac)}

Summary

✅ 17 untouched

[renovate]

Edited/Blocked Notification

Renovate will not automatically rebase this PR, because it does not recognize the last commit author and assumes somebody else may have edited the PR.

You can manually request rebase by checking the rebase/retry box above.

⚠️ Warning: custom changes will be lost.