chore(deps): bump the actions group with 2 updates

[dependabot]

Bumps the actions group with 2 updates: actions-rust-lang/setup-rust-toolchain and github/codeql-action.

Updates actions-rust-lang/setup-rust-toolchain from 1 to 2

Release notes

Sourced from actions-rust-lang/setup-rust-toolchain's releases.

v2.0.0

What's Changed

• Use CARGO_BUILD_WARNINGS for enforcing warning free compilations (#98) This is a new variable supported by cargo 1.97+ and sets the build.warnings config. It allows removing the RUSTFLAGS="-D warnings" default, which will improve compatibility with target.*.rustflags and .cargo/config.toml files.

  This adds a new build-warnings input to configure the value for the build.warnings config.

• Add error matcher for Rust panics This will highlight the location of the panic location during tests.

• Reuse output of rustc --version --verbose calls (#103 by @​ChihweiLHBird)

New Contributors

• @​ChihweiLHBird made their first contribution in actions-rust-lang/setup-rust-toolchain#103

Full Changelog: actions-rust-lang/setup-rust-toolchain@v1.17.0...v2.0.0

v1.17.0

What's Changed

• Bump actions/checkout from 6 to 6.0.2 by @​dependabot[bot] in actions-rust-lang/setup-rust-toolchain#94
• Bump actions/checkout from 6.0.2 to 6.0.3 by @​dependabot[bot] in actions-rust-lang/setup-rust-toolchain#95
• feat: add cache-targets input propagated to Swatinem/rust-cache by @​somaz94 in actions-rust-lang/setup-rust-toolchain#96
• Bump actions/checkout from 6.0.3 to 7.0.0 by @​dependabot[bot] in actions-rust-lang/setup-rust-toolchain#97

New Contributors

• @​somaz94 made their first contribution in actions-rust-lang/setup-rust-toolchain#96

Full Changelog: actions-rust-lang/setup-rust-toolchain@v1.16.1...v1.17.0

v1.16.1

What's Changed

• Rename local variables to avoid conflicts with global variables by @​jonasbb in actions-rust-lang/setup-rust-toolchain#92

Full Changelog: actions-rust-lang/setup-rust-toolchain@v1.16.0...v1.16.1

v1.16.0

What's Changed

• Update actions/checkout to v6 on README by @​ryuapp in actions-rust-lang/setup-rust-toolchain#88
• feat: add cache-save-if input to propagate save-if to Swatinem/rust-cache by @​ChanTsune in actions-rust-lang/setup-rust-toolchain#90

New Contributors

• @​ryuapp made their first contribution in actions-rust-lang/setup-rust-toolchain#88
• @​ChanTsune made their first contribution in actions-rust-lang/setup-rust-toolchain#90

Full Changelog: actions-rust-lang/setup-rust-toolchain@v1.15.4...v1.16.0

v1.15.4

What's Changed

• Bump Swatinem/rust-cache from 2.8.2 to 2.9.1 by @​hyperfinitism in actions-rust-lang/setup-rust-toolchain#87

... (truncated)

Changelog

Sourced from actions-rust-lang/setup-rust-toolchain's changelog.

[2.0.0] - 2026-09-07

• Use CARGO_BUILD_WARNINGS for enforcing warning free compilations (#98) This is a new variable supported by cargo 1.97+ and sets the build.warnings config. It allows removing the RUSTFLAGS="-D warnings" default, which will improve compatibility with target.*.rustflags and .cargo/config.toml files.

  This adds a new build-warnings input to configure the value for the build.warnings config.

• Add error matcher for Rust panics This will highlight the location of the panic location during tests.

• Reuse output of rustc --version --verbose calls (#103 by @​ChihweiLHBird)

[1.17.0] - 2026-06-25

• Add new parameter cache-targets that is propagated to Swatinem/rust-cache as cache-targets (#84). This allows disabling caching of the workspace target directory, e.g. when using sccache, while keeping the rest of the cache enabled.

[1.16.1] - 2026-05-08

• Renamed internally used variable to avoid clashes with globally existing variables. This fixes the interference of the TOOLCHAIN variable as reported in #91.

Commits

• ecabd13 Prepare changelog for 2.0.0 release
• dc00391 Add error matcher for Rust panics
• 70de7eb Merge pull request #103 from ChihweiLHBird/reuse-rustc-verbose-output
• c420b69 Merge pull request #105 from actions-rust-lang/use-build-warnings
• d94d10a Use CARGO_BUILD_WARNINGS for enforcing warning free compilations
• 34430aa Reuse rustc verbose output instead of invoking rustc three times.
• 0267444 Merge pull request #102 from actions-rust-lang/dependabot/github_actions/Swat...
• 5fa2882 Bump Swatinem/rust-cache from 2.9.1 to 2.9.2
• 8439c15 Merge pull request #100 from actions-rust-lang/dependabot/github_actions/acti...
• c8f944a Bump actions/checkout from 7.0.0 to 7.0.1
• See full diff in compare view

Updates github/codeql-action from 4.37.9 to 4.38.0

Release notes

Sourced from github/codeql-action's releases.

v4.38.0

• On GitHub-hosted runners, the CodeQL Action now deletes unused CodeQL bundles from the toolcache before downloading a different bundle, which frees up disk space for the analysis. We expect to roll this change out to everyone in September. #4124
• The CodeQL Action now supports CodeQL releases that are compatible with Linux Arm64 and downloads the native linux-arm64 CodeQL bundle when available. #4072
• Update default CodeQL bundle version to 2.27.0. #4129

Changelog

Sourced from github/codeql-action's changelog.

4.38.0 - 09 Sept 2026

• On GitHub-hosted runners, the CodeQL Action now deletes unused CodeQL bundles from the toolcache before downloading a different bundle, which frees up disk space for the analysis. We expect to roll this change out to everyone in September. #4124
• The CodeQL Action now supports CodeQL releases that are compatible with Linux Arm64 and downloads the native linux-arm64 CodeQL bundle when available. #4072
• Update default CodeQL bundle version to 2.27.0. #4129

Commits

• b96794f Merge pull request #4131 from github/update-v4.38.0-7e08580a9
• 02d5093 Update changelog for v4.38.0
• 7e08580 Merge pull request #4130 from github/henrymercer/workflow-runner-sizing
• bfcc52b Run slow macOS checks on larger runners
• 8c251e7 Merge pull request #4129 from github/update-bundle/codeql-bundle-v2.27.0
• 0b7ca40 Add changelog note
• 40484b3 Update default bundle to codeql-bundle-v2.27.0
• 977e6ce Merge pull request #4124 from github/henrymercer/toolcache-bundle-cleanup
• 40a6b38 Address toolcache cleanup review feedback
• deece8f Apply suggestion from @​henrymercer
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
• @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
• @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
• @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
• @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions