build(deps): bump the github-actions group with 2 updates

[dependabot]

Bumps the github-actions group with 2 updates: taiki-e/install-action and CodSpeedHQ/action.

Updates taiki-e/install-action from 2.87.27 to 2.87.28

Release notes

Sourced from taiki-e/install-action's releases.

2.87.28

• Update dprint@latest to 0.62.0.

• Update vacuum@latest to 0.33.0.

• Update uv@latest to 0.13.0.

• Update tombi@latest to 1.8.1.

• Update release-plz@latest to 0.3.171.

• Update rclone@latest to 1.75.2.

• Update mise@latest to 2026.10.7.

• Update cargo-binstall@latest to 1.25.3.

Changelog

Sourced from taiki-e/install-action's changelog.

Changelog

All notable changes to this project will be documented in this file.

This project adheres to Semantic Versioning.

[Unreleased]

[2.87.29] - 2026-10-16

• Update zizmor@latest to 1.31.0.

• Update wasmtime@latest to 49.0.3.

• Update wasm-tools@latest to 1.262.0.

• Update uv@latest to 0.13.1.

• Update trivy@latest to 0.76.0.

• Update tombi@latest to 1.8.4.

• Update release-plz@latest to 0.3.172.

• Update osv-scanner@latest to 2.7.0.

• Update mise@latest to 2026.10.11.

• Update mdbook-d2@latest to 0.3.9.

• Update kingfisher@latest to 2.13.0.

• Update kache@latest to 1.2.1.

• Update just@latest to 1.59.0.

• Update dprint@latest to 0.63.0.

• Update cargo-crap@latest to 0.8.0.

• Update bpf-linker@latest to 0.12.0.

[2.87.28] - 2026-10-12

• Update dprint@latest to 0.62.0.

... (truncated)

Commits

• 1168f68 Release 2.87.28
• db1b909 Update tombi@latest to 1.8.1
• 4fe7379 Update tombi manifest
• 7443747 Update osv-scanner manifest
• 6ff1c9b Update kingfisher manifest
• cb40720 Update kache manifest
• 4c1bf34 Update dprint@latest to 0.62.0
• 3dfabf7 Update vacuum@latest to 0.33.0
• a80e680 Update uv@latest to 0.13.0
• 10f4ee9 Update tombi@latest to 1.8.0
• Additional commits viewable in compare view

Updates CodSpeedHQ/action from 5.4.2 to 5.5.0

Release notes

Sourced from CodSpeedHQ/action's releases.

v5.5.0

Bumps the CodSpeed runner to v5.5.0.

This release adds support for Ubuntu 26.04, on both x86_64 and arm64. The officially supported distributions are now Ubuntu 22.04, 24.04 and 26.04, and Debian 12.

Profile uploads are also faster on GitHub-hosted runners, and archives larger than 5 GiB can now be uploaded.

Results from the Memory instrument are processed much faster and with less memory on large benchmarks.

This release also fixes a crash that could affect some pytest-codspeed benchmarks since v5.4.2.

🚀 Features

• Split profile archive uploads into concurrent parts by @​lvaroqui in #565

🐛 Bug Fixes

• Only set PYTHONPERFSUPPORT for exec-harness benchmarks by @​not-matthias in #584

⚡ Performance

• Stream memtrack frames and decode them in parallel when finding module events by @​not-matthias in #578
• Use mimalloc as the runner's global allocator by @​not-matthias in #581

⚙️ Internals

• Support Ubuntu 26.04 by @​lvaroqui in #574

Full Runner Changelog: https://github.com/CodSpeedHQ/codspeed/blob/main/CHANGELOG.md

What's Changed

• ci: migrate to github default arm runners by @​lvaroqui in CodSpeedHQ/action#250
• chore: bump runner version to 5.5.0 by @​github-actions[bot] in CodSpeedHQ/action#251

New Contributors

• @​lvaroqui made their first contribution in CodSpeedHQ/action#250

Full Changelog: CodSpeedHQ/action@v5.4.2...v5.5.0

Commits

• 821a40c Release v5.5.0 🚀
• a0d1b90 chore: bump runner version to 5.5.0 (#251)
• 67e2f8c ci: migrate to github default arm runners (#250)
• See full diff in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
• @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
• @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
• @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
• @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

[codspeed]

Merging this PR will improve performance by 14.18%

⚠️ Different runtime environments detected

Some benchmarks with significant performance changes were compared across different runtime environments,
which may affect the accuracy of the results.

Open the report in CodSpeed to investigate

⚡ 3 improved benchmarks
✅ 140 untouched benchmarks
⏩ 6 skipped benchmarks¹

Performance Changes

	Benchmark	BASE	HEAD	Efficiency
⚡	call_0	604.1 µs	524.7 µs	+15.15%
⚡	call_one_arg	632.9 µs	553.5 µs	+14.35%
⚡	call_1	688.5 µs	609.1 µs	+13.04%

Tip

Curious why performance improved? Comment @codspeedbot explain why performance improved on this PR, or directly use the CodSpeed MCP with your agent.

---

_{Comparing dependabot/github_actions/github-actions-5b29c19e1f (e875eb7) with main (2cb0a32)}

Footnotes

1. 6 benchmarks were skipped, so the baseline results were used instead. If they were deleted from the codebase, click here and archive them to remove them from the performance reports. ↩