build(deps): Bump the actions group with 3 updates

[dependabot]

Bumps the actions group with 3 updates: actions/upload-artifact, actions/download-artifact and taiki-e/install-action.

Updates actions/upload-artifact from 7.0.1 to 7.0.2

Release notes

Sourced from actions/upload-artifact's releases.

v7.0.2

What's Changed

• Improves artifact download retries when the service returns HTTP 429 (rate limiting), including honoring valid Retry-After headers.
• Updates @​actions/artifact to v6.3.1.

New Contributors

• @​tunc-d made their first contribution in actions/upload-artifact#821

Full Changelog: actions/upload-artifact@v7.0.1...v7.0.2

Commits

• cf430e0 Merge pull request #822 from actions/tunc-d-prepare-upload-v7-0-2
• c2acded chore: prepare v7.0.2 release
• 4687c1b Merge pull request #821 from actions/tunc-d-upload-artifact-package-bump
• 8cbe1be Bump @​actions/artifact to 6.3.1
• See full diff in compare view

Updates actions/download-artifact from 8.0.1 to 8.0.2

Release notes

Sourced from actions/download-artifact's releases.

v8.0.2

What's Changed

• Update the readme by @​danwkennedy in actions/download-artifact#473
• Improves artifact download retries when the service returns HTTP 429 (rate limiting), including honoring valid Retry-After headers.
• Update @​actions/artifact to 6.3.1 by @​tunc-d in actions/download-artifact#492
• Prepare download-artifact v8.0.2 by @​tunc-d in actions/download-artifact#493

New Contributors

• @​tunc-d made their first contribution in actions/download-artifact#492

Full Changelog: actions/download-artifact@v8.0.1...v8.0.2

Commits

• 9000827 Merge pull request #493 from actions/tunc-d-prepare-download-v8-0-2
• e455989 Prepare download-artifact v8.0.2
• a00b90c Merge pull request #492 from actions/tunc-d-download-artifact-package-bump
• 29bb7ce Update @​actions/artifact to 6.3.1
• 484a0b5 Update the readme (#473)
• See full diff in compare view

Updates taiki-e/install-action from 2.87.26 to 2.87.28

Release notes

Sourced from taiki-e/install-action's releases.

2.87.28

• Update dprint@latest to 0.62.0.

• Update vacuum@latest to 0.33.0.

• Update uv@latest to 0.13.0.

• Update tombi@latest to 1.8.1.

• Update release-plz@latest to 0.3.171.

• Update rclone@latest to 1.75.2.

• Update mise@latest to 2026.10.7.

• Update cargo-binstall@latest to 1.25.3.

2.87.27

• Update vacuum@latest to 0.32.0.

• Update uv@latest to 0.12.24.

• Update typos@latest to 1.51.1.

• Update tombi@latest to 1.7.3.

• Update syft@latest to 1.54.1.

• Update release-plz@latest to 0.3.170.

• Update mise@latest to 2026.10.4.

• Update kingfisher@latest to 2.11.1.

• Update hyperfine@latest to 2.0.0.

• Update dprint@latest to 0.61.1.

• Update cargo-nextest@latest to 0.9.148.

• Update cargo-neat@latest to 0.6.0.

• Update cargo-binstall@latest to 1.25.2.

Changelog

Sourced from taiki-e/install-action's changelog.

Changelog

All notable changes to this project will be documented in this file.

This project adheres to Semantic Versioning.

[Unreleased]

[2.87.28] - 2026-10-12

• Update dprint@latest to 0.62.0.

• Update vacuum@latest to 0.33.0.

• Update uv@latest to 0.13.0.

• Update tombi@latest to 1.8.1.

• Update release-plz@latest to 0.3.171.

• Update rclone@latest to 1.75.2.

• Update mise@latest to 2026.10.7.

• Update cargo-binstall@latest to 1.25.3.

[2.87.27] - 2026-10-09

• Update vacuum@latest to 0.32.0.

• Update uv@latest to 0.12.24.

• Update typos@latest to 1.51.1.

• Update tombi@latest to 1.7.3.

• Update syft@latest to 1.54.1.

• Update release-plz@latest to 0.3.170.

• Update mise@latest to 2026.10.4.

• Update kingfisher@latest to 2.11.1.

• Update hyperfine@latest to 2.0.0.

... (truncated)

Commits

• 1168f68 Release 2.87.28
• db1b909 Update tombi@latest to 1.8.1
• 4fe7379 Update tombi manifest
• 7443747 Update osv-scanner manifest
• 6ff1c9b Update kingfisher manifest
• cb40720 Update kache manifest
• 4c1bf34 Update dprint@latest to 0.62.0
• 3dfabf7 Update vacuum@latest to 0.33.0
• a80e680 Update uv@latest to 0.13.0
• 10f4ee9 Update tombi@latest to 1.8.0
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
• @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
• @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
• @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
• @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

[github-actions]

Speed against dccb4ddc

Measured on AMD EPYC 7763 64-Core Processor.
Both sides built with rustc 1.99.0 (b940084d7 2026-09-28).

Both sides built and run on this runner in this job, the way
scripts/speed.sh measures a perf commit. Each round runs
both sides on a layout of its own, the same compiled code with
its code and data shuffled and moved, so the 95% interval carries
where the code landed as well as the run. The verdict holds the
interval against a 1% threshold. The default layout, the one a
release ships, is measured after as a diagnostic. The node
counts are the search's: they move when the search does, and a
speed change leaves them alone.

round     base nps  candidate nps  change
    1      4438553        4507622   +1.6%
    2      4506867        4433507   -1.6%
    3      4608762        4553637   -1.2%
    4      4544915        4645843   +2.2%
    5      4583911        4543519   -0.9%
    6      4442348        4492422   +1.1%
    7      4432392        4565204   +3.0%
    8      4410076        4383535   -0.6%
    9      4546282        4427476   -2.6%
   10      4807861        4668590   -2.9%
   11      4792307        4690130   -2.1%
   12      4653528        4608610   -1.0%
   13      4564269        4568424   +0.1%
   14      4745162        4683240   -1.3%
   15      4906334        4780286   -2.6%
   16      5120117        5187950   +1.3%
   17      4764507        5094776   +6.9%
   18      5222641        5026656   -3.8%
   19      5257927        5201673   -1.1%
   20      4909840        4986750   +1.6%
   21      5275970        5055215   -4.2%
   22      5061723        5195364   +2.6%
   23      4792794        4865542   +1.5%
   24      5002603        4963959   -0.8%
   25      4931109        5023599   +1.9%
   26      4926661        5026406   +2.0%
   27      4655384        4564966   -1.9%
   28      4726982        4630461   -2.0%
   29      4343314        4945860  +13.9%
   30      4461882        4603291   +3.2%
   31      4416345        4598955   +4.1%
   32      4422609        4410213   -0.3%
   33      4424854        4209732   -4.9%
   34      4478168        4539144   +1.4%
   35      4283077        4279887   -0.1%
   36      4426190        4440776   +0.3%
   37      4350402        4287764   -1.4%
   38      4290138        4289340   -0.0%
   39      4701546        4489772   -4.5%
   40      4656131        4615915   -0.9%

              nodes    time  median nps  faster half
base       11916992  2.57 s     4631145      4895556
candidate  11916992  2.59 s     4605950      4894841
change                            -0.5%        -0.0%

paired change -0.2%, 95% interval -1.0% to +0.7%
diagnostic, on the default layout alone -0.8%, 95% interval -4.3% to +1.1%, 13 rounds

not resolved: the interval reaches past ±1.0% without clearing it, so
more rounds are needed to say either way

Speed: -0.2% (bench nps, 95% interval -1.0% to +0.7%, 40 interleaved rounds over shuffled layouts vs dccb4ddc)

The instructions each side's bench executed, counted under
cachegrind. The count repeats to within a few hundred
instructions, so a small change here is a real one, but it
prices instructions only: cache misses, mispredicted branches
and where the code lands are the speed's to show.

instructions against dccb4ddc, one cachegrind run a side, bench

             instructions     nodes  per node
base       15,968,841,487  11916992    1340.0
candidate  15,968,841,530  11916992    1340.0
change             +0.00%              +0.00%

within ±0.7%, as far as edits not made for speed have moved the count