deps(github/action): bump all dependencies

[updateclibot]

deps: bump docker/setup-qemu-action GitHub workflow

deps(github): bump Action tag for docker/setup-qemu-action from 96fe6ef7f33517b61c61be40b68a1882f3264fb8 to 99012661954931238ded8c8b007157a8430204e1 (Pinned from v4.4.0)

change detected: * key "$.jobs.build.steps[4].uses" updated from "docker/setup-qemu-action@96fe6ef7f33517b61c61be40b68a1882f3264fb8" to "docker/setup-qemu-action@99012661954931238ded8c8b007157a8430204e1", in file ".github/workflows/release.yaml" (doc 0)

deps(github): bump Action release for docker/setup-qemu-action from 96fe6ef7f33517b61c61be40b68a1882f3264fb8 to 99012661954931238ded8c8b007157a8430204e1 (Pinned from v4.4.0)

change detected: * key "$.jobs.build.steps[4].uses" updated from "docker/setup-qemu-action@96fe6ef7f33517b61c61be40b68a1882f3264fb8" to "docker/setup-qemu-action@99012661954931238ded8c8b007157a8430204e1", in file ".github/workflows/release-sandbox.yaml" (doc 0)

GitHub Action workflow link

deps: bump docker/setup-buildx-action GitHub workflow

deps(github): bump Action tag for docker/setup-buildx-action from bb05f3f5519dd87d3ba754cc423b652a5edd6d2c to f87e5991a6d7451dcb8d9637bfbc97413f497069 (Pinned from v4.4.1)

change detected: * key "$.jobs.build.steps[5].uses" updated from "docker/setup-buildx-action@bb05f3f5519dd87d3ba754cc423b652a5edd6d2c" to "docker/setup-buildx-action@f87e5991a6d7451dcb8d9637bfbc97413f497069", in file ".github/workflows/release.yaml" (doc 0)

deps(github): bump Action release for docker/setup-buildx-action from bb05f3f5519dd87d3ba754cc423b652a5edd6d2c to f87e5991a6d7451dcb8d9637bfbc97413f497069 (Pinned from v4.4.1)

change detected: * key "$.jobs.build.steps[5].uses" updated from "docker/setup-buildx-action@bb05f3f5519dd87d3ba754cc423b652a5edd6d2c" to "docker/setup-buildx-action@f87e5991a6d7451dcb8d9637bfbc97413f497069", in file ".github/workflows/release-sandbox.yaml" (doc 0)

GitHub Action workflow link

deps: bump crate-ci/typos GitHub workflow

deps(github): bump Action tag for crate-ci/typos from 8a48f81b6c64dcfea44b3633223084c4be58ac5f to 00f422f3b19c57bc6338715ebfe3316d38768461 (Pinned from v1.50.3)

change detected: * key "$.jobs.run.steps[1].uses" updated from "crate-ci/typos@8a48f81b6c64dcfea44b3633223084c4be58ac5f" to "crate-ci/typos@00f422f3b19c57bc6338715ebfe3316d38768461", in file ".github/workflows/typos.yaml" (doc 0)

GitHub Action workflow link

deps: bump zizmorcore/zizmor-action GitHub workflow

deps(github): bump Action tag for zizmorcore/zizmor-action from 3dc1ecc9bcb9e94e9b2c709687979e1298497054 to cc914d7f3750a2d13d75c7f184a1060aa0e9d482 (Pinned from v0.6.4)

change detected: * key "$.jobs.zizmor.steps[1].uses" updated from "zizmorcore/zizmor-action@3dc1ecc9bcb9e94e9b2c709687979e1298497054" to "zizmorcore/zizmor-action@cc914d7f3750a2d13d75c7f184a1060aa0e9d482", in file ".github/workflows/zizmor.yaml" (doc 0)

GitHub Action workflow link

deps: bump release-drafter/release-drafter GitHub workflow

deps(github): bump Action tag for release-drafter/release-drafter from 34d80673e067bdc0c24568d3af899c216adcfaa9 to 72967cdc98ddd3160f1fc3dff619de365e137dd0 (Pinned from v7.9.0)

change detected: * key "$.jobs.update_release_draft.steps[0].uses" updated from "release-drafter/release-drafter@34d80673e067bdc0c24568d3af899c216adcfaa9" to "release-drafter/release-drafter@72967cdc98ddd3160f1fc3dff619de365e137dd0", in file ".github/workflows/release-drafter.yml" (doc 0)

GitHub Action workflow link

---

Created automatically by Updatecli Options: Most of Updatecli configuration is done via its manifest(s). If you close this pull request, Updatecli will automatically reopen it, the next time it runs. If you close this pull request and delete the base branch, Updatecli will automatically recreate it, erasing all previous commits made. Feel free to report any issues at github.com/updatecli/updatecli. If you find this tool useful, do not hesitate to star our GitHub repository as a sign of appreciation, and/or to tell us directly on our chat!

[coderabbitai]

Important

Review skipped

Bot user detected.

To trigger a single review, invoke the @coderabbitai review command.

⚙️ Run configuration

• Configuration used: defaults
• Review profile: CHILL
• Plan: Advanced
• Run ID: 69f48740-c232-4716-83c0-0d563f234b25

You can disable this status message by setting the reviews.review_status to false in the CodeRabbit configuration file.

Use the checkbox below for a quick retry:

• 🔍 Trigger review

No actionable comments were generated in the recent review. 🎉

ℹ️ Recent review info

⚙️ Run configuration

Configuration used: defaults

Review profile: CHILL

Plan: Advanced

Run ID: 4cdda76c-c4db-4bc8-80e7-d8698cc0a1e2

📥 Commits

Reviewing files that changed from the base of the PR and between 2c832a4 and c7c9718.

📒 Files selected for processing (7)

• .github/workflows/release-sandbox.yaml
• .github/workflows/release.yaml
• .github/workflows/typos.yaml
• .github/workflows/updatecli.yaml
• .github/workflows/updatecli_test.yaml
• .github/workflows/updatecli_update.yaml
• .github/workflows/zizmor.yaml

Included review availability: Your plan provides up to 10 included reviews per hour; 4 remain after this review.

---

📝 Walkthrough

Walkthrough

The pull request updates pinned GitHub Actions in release, updatecli, spelling-check, and zizmor workflows.

Changes

Workflow action updates

Layer / File(s)	Summary
Release action revisions .github/workflows/release-sandbox.yaml, .github/workflows/release.yaml	The workflows now use newer Docker QEMU and Buildx action revisions.
Updatecli action revisions .github/workflows/updatecli.yaml, .github/workflows/updatecli_test.yaml, .github/workflows/updatecli_update.yaml	The workflows now use updatecli action v3.7.0 revisions.
Workflow check action revisions .github/workflows/typos.yaml, .github/workflows/zizmor.yaml	The workflows now use newer Typos and zizmor action revisions.

Priority: ⬇️ Low

Estimated code review effort: 1 (Trivial) | ~5 minutes

Change: Other

Suggested reviewers: olblak

Merge Risk: ⚪ Minimal · up to c7c97

This PR only refreshes pinned workflow dependencies; no merge-blocking risk is evident.

🚥 Pre-merge checks | ✅ 5

✅ Passed checks (5 passed)

Check name	Status	Explanation
Description Check	✅ Passed	Check skipped - CodeRabbit’s high-level summary is enabled.
Title check	✅ Passed	The title clearly summarizes the pull request. It identifies dependency updates for GitHub Actions, which matches all changes in the pull request.
Docstring Coverage	✅ Passed	No functions found in the changed files to evaluate docstring coverage. Skipping docstring coverage check. Docstring coverage is scoped to functions touched by this diff. Analyzed 0 functions across 0…
Linked Issues check	✅ Passed	Check skipped because no linked issues were found for this pull request.
Out of Scope Changes check	✅ Passed	Check skipped because no linked issues were found for this pull request.

✨ Finishing Touches

🧪 Generate unit tests (beta)

• Create PR with unit tests
• Commit unit tests in branch updatecli_main_75bba88f02d598aa1c677386f95e52cad73c9dfb05c65bf6bd87395d6e33aaca

---

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

• X
• Mastodon
• Reddit
• LinkedIn

_{Comment @coderabbitai help to get the list of available commands.}