[dependabot]

Bumps the actions group with 2 updates: CodSpeedHQ/action and zizmorcore/zizmor-action.

Updates CodSpeedHQ/action from 5.6.0 to 5.6.3

Release notes

Sourced from CodSpeedHQ/action's releases.

v5.6.3

Bumps the CodSpeed runner to v5.6.3, including v5.6.2.

Highlights

Go benchmark times match go test

b.Loop() benchmarks that stop and restart the timer inside an iteration now report all of their timed work. A round previously counted only the time since the most recent StartTimer, so results for those benchmarks will move.

Unsupported go test flags no longer fail the run

go test -p 1 ./... -bench . used to strip -p, parse 1 as a package, and fail with package 1 is not in std after every benchmark had passed. Flags and their values are now dropped together.

Fixed randomness in CPU Simulation

getrandom(), /dev/urandom, AT_RANDOM and hardware RNG instructions now return the same values on every CPU Simulation run, removing one source of run-to-run variance.

Fixes

• Simulation: fix SIGILL on arm64 when programs read previously unsupported CPU ID registers or TPIDRRO_EL0 (#59).
• Go: benchmarks that draw from the global math/rand now start from the same seed on every run, so their results no longer vary between runs (#596).

🚀 Features

• Seed Go's global math/rand deterministically (#596) by @​not-matthias in #596
• Always enable deterministic RNG (#600) by @​not-matthias in #600

🐛 Bug Fixes

• Bump go-runner to 1.4.0 (#605) by @​adriencaccia in #605
  • fix(cli): drop the value of unsupported go test flags by @​not-matthias in CodSpeedHQ/codspeed-go#67
  • fix(go-runner): count all timed segments of a b.Loop() iteration by @​not-matthias in CodSpeedHQ/codspeed-go#69

⚙️ Internals

• Bump pinned valgrind-codspeed to 3.26.0-0codspeed12 (#604) by @​adriencaccia in #604
  • feat: add --deterministic-rng to make client randomness reproducible by @​not-matthias in CodSpeedHQ/valgrind-codspeed#54
  • feat(vex): serve arm64 RNDR and RNDRRS with --deterministic-rng by @​not-matthias in CodSpeedHQ/valgrind-codspeed#56
  • fix(vex): decode arm64 MRS of all EL0-visible ID registers by @​not-matthias in CodSpeedHQ/valgrind-codspeed#59

Full Runner Changelog: https://github.com/CodSpeedHQ/codspeed/blob/main/CHANGELOG.md

What's Changed

• chore: bump runner version to 5.6.2 by @​github-actions[bot] in CodSpeedHQ/action#255
• chore: bump runner version to 5.6.3 by @​github-actions[bot] in CodSpeedHQ/action#256

Full Changelog: CodSpeedHQ/action@v5.6.1...v5.6.3

v5.6.1

Bumps the CodSpeed runner to v5.6.1.

... (truncated)

Commits

• af75f77 Release v5.6.3 🚀
• 3a5fe1c chore: bump runner version to 5.6.3 (#256)
• ca7c971 chore: bump runner version to 5.6.2 (#255)
• 61efe07 Release v5.6.1 🚀
• 2dea609 chore: bump runner version to 5.6.1 (#254)
• e0fab22 docs(examples): update the example workflows (#252)
• See full diff in compare view

Updates zizmorcore/zizmor-action from 0.8.0 to 0.8.1

Release notes

Sourced from zizmorcore/zizmor-action's releases.

v0.8.1

Sponsorship is appreciated!

zizmor 1.32 is now the default version used by this action.

Full release notes: zizmorcore/zizmor-action#1320

Full Changelog: zizmorcore/zizmor-action@v0.8.0...v0.8.1

Commits

• 45d7276 Sync zizmor versions (#191)
• ff38741 chore(deps): bump the github-actions group across 1 directory with 2 updates ...
• 4a9eca4 README: another troubleshooting section (#186)
• 83a0416 Bump pins (#185)
• See full diff in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
• @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
• @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
• @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
• @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions