build(deps): bump the actions-deps group with 3 updates

[dependabot]

Bumps the actions-deps group with 3 updates: step-security/harden-runner, crate-ci/typos and taiki-e/install-action.

Updates step-security/harden-runner from 2.21.0 to 2.21.1

Release notes

Sourced from step-security/harden-runner's releases.

v2.21.1

What's Changed

• Improved performance of the disable-sudo feature.
• Fixed an issue in the Community tier where new endpoints required by the GitHub Actions runner were not being implicitly allowed in block mode.
• Fixed the Harden-Runner post step failing on Linux distributions that do not have a merged /usr filesystem layout (for example Debian 11), where /usr/bin/echo does not exist. This mainly affected self-hosted runners.
• Documentation updates: clarified which features are in the Community (free) vs Enterprise tier.

Full Changelog: step-security/harden-runner@v2.21.0...v2.21.1

Commits

• e14015d Merge pull request #690 from step-security/rc-43
• 9001249 docs: update harden-runner version pin to v2.21.0 in getting started example
• a447fba docs: expand enterprise feature list and document custom VM and ubuntu-slim l...
• b0eaf8d docs: clarify community vs enterprise tiers and add maintained actions section
• 063e8e3 Merge pull request #687 from rohan-stepsecurity/rp/fix/bin-echo-fallback
• f46bdc1 chore: bump agent-ebpf to v1.9.1 and agent to v0.16.3
• 42e6daa fix: fall back to /bin/echo for non-usr-merged distros
• See full diff in compare view

Updates crate-ci/typos from 1.49.0 to 1.50.0

Release notes

Sourced from crate-ci/typos's releases.

v1.50.0

[1.50.0] - 2026-08-28

Features

• Updated the dictionary with the August 2026 changes

v1.49.1

[1.49.1] - 2026-08-27

Fixes

• Don't correct the brand name HashiCorp

Changelog

Sourced from crate-ci/typos's changelog.

Change Log

All notable changes to this project will be documented in this file.

The format is based on Keep a Changelog and this project adheres to Semantic Versioning.

[Unreleased] - ReleaseDate

[1.50.1] - 2026-09-01

Fixes

• Don't correct asend in Python code

[1.50.0] - 2026-08-28

Features

• Updated the dictionary with the August 2026 changes

[1.49.1] - 2026-08-27

Fixes

• Don't correct the brand name HashiCorp

[1.49.0] - 2026-08-03

Features

• Updated the dictionary with the July 2026 changes

[1.48.0] - 2026-06-30

Features

• Updated the dictionary with the June 2026 changes

[1.47.2] - 2026-06-04

Fixes

• Don't correct inferrable
• Correct unused inferible variant

[1.47.1] - 2026-06-03

Fixes

... (truncated)

Commits

• 4d9c206 chore: Release
• 67e851f chore: Release
• fed981d docs: Update changelog
• 30a3514 Merge pull request #1611 from epage/aug
• 9fcae58 feat(dict): August updates
• a8168dc chore: Release
• 767fe42 docs: Update changelog
• 8863e88 Merge pull request #1609 from epage/hasi
• e7a4e8a fix(dict): Don't correct the HashiCorp brand name
• 30dd48e test(cli): Show HashiCorp behavior
• Additional commits viewable in compare view

Updates taiki-e/install-action from 2.86.6 to 2.87.2

Release notes

Sourced from taiki-e/install-action's releases.

2.87.2

• Update typos@latest to 1.50.0.

• Update tombi@latest to 1.5.0.

• Update shfmt@latest to 3.14.0.

2.87.1

• Update uv@latest to 0.12.7.

• Update typos@latest to 1.49.1.

• Update syft@latest to 1.51.1.

• Update prek@latest to 0.5.0.

• Update d2@latest to 0.8.2.

• Update cargo-zigbuild@latest to 0.23.3.

• Update cargo-rdme@latest to 2.2.2.

• Update biome@latest to 2.5.11.

2.87.0

• Support kache. (#1980, thanks @​ChrisJr404)

• Update vacuum@latest to 0.30.1.

• Update uv@latest to 0.12.6.

• Update mise@latest to 2026.8.14.

• Update editorconfig-checker@latest to 3.11.2.

2.86.8

• Update wasmtime@latest to 48.0.1.

• Update wasm-tools@latest to 1.258.0.

• Update oxfmt@latest to 1.80.0.

• Update mise@latest to 2026.8.12.

• Update kingfisher@latest to 2.0.0.

• Update cargo-zigbuild@latest to 0.23.2.

2.86.7

• Update tombi@latest to 1.4.1.

... (truncated)

Changelog

Sourced from taiki-e/install-action's changelog.

Changelog

All notable changes to this project will be documented in this file.

This project adheres to Semantic Versioning.

[Unreleased]

[2.87.4] - 2026-09-02

• Update uv@latest to 0.12.8.

• Update protoc@latest to 3.36.1.

• Update coreutils@latest to 0.11.0.

[2.87.3] - 2026-09-01

• Update zizmor@latest to 1.30.0.

• Update ubi@latest to 0.12.0.

• Update protoc-gen-connect-openapi@latest to 0.25.8.

• Update mise@latest to 2026.8.16.

• Update kingfisher@latest to 2.1.0.

• Update dprint@latest to 0.57.0.

[2.87.2] - 2026-08-30

• Update typos@latest to 1.50.0.

• Update tombi@latest to 1.5.0.

• Update shfmt@latest to 3.14.0.

[2.87.1] - 2026-08-29

• Update uv@latest to 0.12.7.

• Update typos@latest to 1.49.1.

• Update syft@latest to 1.51.1.

... (truncated)

Commits

• 1ed6d7b Release 2.87.2
• 0fbfc5b Update typos@latest to 1.50.0
• 5f68cef Update tombi@latest to 1.5.0
• d46a5ec Update shfmt@latest to 3.14.0
• 742a331 Release 2.87.1
• c5b69cd Update uv@latest to 0.12.7
• 85e6400 Update typos@latest to 1.49.1
• 91f3a12 Update tombi manifest
• 160f8b1 Update syft@latest to 1.51.1
• aa48d3e Update shfmt manifest
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
• @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
• @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
• @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
• @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions