Dylan M. Taylor a787c371f6 ci: use StepSecurity's maintained actions (#2832) ...

Each third-party action that StepSecurity publishes a secure drop-in
replacement for now uses that replacement, pinned to a commit with its
version as a comment. Versions follow what we used: the newest
StepSecurity release in the same major, or the closest major they
publish. dtolnay/rust-toolchain refs that named a toolchain (stable,
nightly, 1.76) become the replacement's `toolchain` input.

<!-- This is an auto-generated comment: release notes by coderabbit.ai
-->

<!-- coderabbit-ai-generated:v1 -->

## Summary by CodeRabbit

* **Chores**
* Updated the Linux, macOS, and Windows release workflows to use pinned
build and publishing actions. Stable Rust toolchain selection and
existing target settings are preserved.

<!-- end of auto-generated comment: release notes by coderabbit.ai -->

2026-11-11 14:57:24 -05:00

..

workflows

ci: use StepSecurity's maintained actions (#2832)

2026-11-11 14:57:24 -05:00

dependabot.yml

ci: configure Dependabot for Cargo and GitHub Actions (#2460)

2026-10-18 15:10:55 -04:00