From 23e8a5ab8deb8602ff56ec1da5c3f4ee7b022568 Mon Sep 17 00:00:00 2001
From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com>
Date: Mon, 24 Aug 2026 09:26:16 +0000
Subject: [PATCH] ci(deps): bump taiki-e/install-action from 2.85.10 to 2.86.5

Bumps [taiki-e/install-action](https://github.com/taiki-e/install-action) from 2.85.10 to 2.86.5.
- [Release notes](https://github.com/taiki-e/install-action/releases)
- [Changelog](https://github.com/taiki-e/install-action/blob/main/CHANGELOG.md)
- [Commits](https://github.com/taiki-e/install-action/compare/6c6fd71fe4fb72c3697d269963d0e15df8adedad...ba47c86ac325773530516bb756137ac718732518)

---
updated-dependencies:
- dependency-name: taiki-e/install-action
  dependency-version: 2.86.5
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
---
 .github/workflows/cd.yml                         | 2 +-
 .github/workflows/ci.yml                         | 2 +-
 .github/workflows/coverage.yml                   | 4 ++--
 .github/workflows/security-critical-coverage.yml | 4 ++--
 .github/workflows/security.yml                   | 2 +-
 5 files changed, 7 insertions(+), 7 deletions(-)

diff --git a/.github/workflows/cd.yml b/.github/workflows/cd.yml
index 2a7ab28e..76ad6159 100644
--- a/.github/workflows/cd.yml
+++ b/.github/workflows/cd.yml
@@ -134,7 +134,7 @@ jobs:
         uses: docker/setup-qemu-action@v3
 
       - name: Install cross
-        uses: taiki-e/install-action@6c6fd71fe4fb72c3697d269963d0e15df8adedad # v2.85.10
+        uses: taiki-e/install-action@ba47c86ac325773530516bb756137ac718732518 # v2.86.5
         with:
           tool: cross@0.2.5
 
diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
index 57871838..dc602b9c 100644
--- a/.github/workflows/ci.yml
+++ b/.github/workflows/ci.yml
@@ -1334,7 +1334,7 @@ jobs:
         uses: docker/setup-qemu-action@v3
 
       - name: Install cross
-        uses: taiki-e/install-action@6c6fd71fe4fb72c3697d269963d0e15df8adedad # v2.85.10
+        uses: taiki-e/install-action@ba47c86ac325773530516bb756137ac718732518 # v2.86.5
         with:
           tool: cross@0.2.5
 
diff --git a/.github/workflows/coverage.yml b/.github/workflows/coverage.yml
index 8edfb66d..3c61d66e 100644
--- a/.github/workflows/coverage.yml
+++ b/.github/workflows/coverage.yml
@@ -114,7 +114,7 @@ jobs:
           
       - name: Install tarpaulin (stable, prebuilt pinned binary)
         if: matrix.rust == 'stable'
-        uses: taiki-e/install-action@6c6fd71fe4fb72c3697d269963d0e15df8adedad # v2.85.10
+        uses: taiki-e/install-action@ba47c86ac325773530516bb756137ac718732518 # v2.86.5
         with:
           # Pinned. Previously `cargo-tarpaulin` (i.e. @latest), which meant an upstream release
           # could break this job with no change on our side -- the same failure shape as the
@@ -348,7 +348,7 @@ jobs:
           key: ${{ runner.os }}-cargo-extcov-${{ matrix.shard }}-${{ steps.toolchain-fp.outputs.hash }}-${{ hashFiles('**/Cargo.lock', 'rust-toolchain.toml') }}
 
       - name: Install tarpaulin
-        uses: taiki-e/install-action@6c6fd71fe4fb72c3697d269963d0e15df8adedad # v2.85.10
+        uses: taiki-e/install-action@ba47c86ac325773530516bb756137ac718732518 # v2.86.5
         with:
           tool: cargo-tarpaulin@0.37.0
 
diff --git a/.github/workflows/security-critical-coverage.yml b/.github/workflows/security-critical-coverage.yml
index eb1fb8a3..207877ff 100644
--- a/.github/workflows/security-critical-coverage.yml
+++ b/.github/workflows/security-critical-coverage.yml
@@ -40,7 +40,7 @@ jobs:
           key: ${{ runner.os }}-sec-cov-sig-${{ hashFiles('**/Cargo.lock') }}
 
       - name: Install cargo-tarpaulin
-        uses: taiki-e/install-action@6c6fd71fe4fb72c3697d269963d0e15df8adedad # v2.85.10
+        uses: taiki-e/install-action@ba47c86ac325773530516bb756137ac718732518 # v2.86.5
         with:
           # Pinned deliberately. `cargo-tarpaulin` (unpinned) resolves to @latest, so an upstream
           # release can break this job with no change on our side -- which is exactly how the
@@ -106,7 +106,7 @@ jobs:
           key: ${{ runner.os }}-sec-cov-tkeml-${{ hashFiles('**/Cargo.lock') }}
 
       - name: Install cargo-tarpaulin
-        uses: taiki-e/install-action@6c6fd71fe4fb72c3697d269963d0e15df8adedad # v2.85.10
+        uses: taiki-e/install-action@ba47c86ac325773530516bb756137ac718732518 # v2.86.5
         with:
           # Pinned deliberately. `cargo-tarpaulin` (unpinned) resolves to @latest, so an upstream
           # release can break this job with no change on our side -- which is exactly how the
diff --git a/.github/workflows/security.yml b/.github/workflows/security.yml
index f7705d7c..80c17d59 100644
--- a/.github/workflows/security.yml
+++ b/.github/workflows/security.yml
@@ -208,7 +208,7 @@ jobs:
           run-workspace-builds: "false"
       
       - name: Install cargo-outdated
-        uses: taiki-e/install-action@6c6fd71fe4fb72c3697d269963d0e15df8adedad # v2.85.10
+        uses: taiki-e/install-action@ba47c86ac325773530516bb756137ac718732518 # v2.86.5
         with:
           tool: cargo-outdated@0.19.0