diff --git a/.github/workflows/baseline.yml b/.github/workflows/baseline.yml
index 2673b14..8320155 100644
--- a/.github/workflows/baseline.yml
+++ b/.github/workflows/baseline.yml
@@ -58,7 +58,7 @@ jobs:
         row: ${{ fromJSON(inputs.rows || '["X64", "A64"]') }}
     steps:
       - uses: actions/checkout@v7.0.1
-      - uses: Swatinem/rust-cache@v2.9.2
+      - uses: Swatinem/rust-cache@v2.9.3
       - name: kernel build dependencies
         run: |
           sudo apt-get update -q
@@ -104,7 +104,7 @@ jobs:
         env:
           CONFIG: ${{ inputs.config || 'defconfig' }}
           CC: ${{ matrix.row == 'R64' && 'riscv64-linux-gnu-gcc-14' || 'gcc-14' }}
-      - uses: actions/upload-artifact@v7.0.1
+      - uses: actions/upload-artifact@v7.0.2
         if: always()
         with:
           name: baseline-${{ matrix.version }}-${{ matrix.row }}
diff --git a/.github/workflows/census.yml b/.github/workflows/census.yml
index cf1d6c9..fda82f2 100644
--- a/.github/workflows/census.yml
+++ b/.github/workflows/census.yml
@@ -86,7 +86,7 @@ jobs:
       other: ${{ steps.ccs.outputs.other }}
     steps:
       - uses: actions/checkout@v7.0.1
-      - uses: Swatinem/rust-cache@v2.9.2
+      - uses: Swatinem/rust-cache@v2.9.3
       - id: era
         run: cargo run -q --release -p rk -- personas --for "$VERSION" | tee -a "$GITHUB_OUTPUT"
         env:
@@ -122,7 +122,7 @@ jobs:
       OUT: ${{ github.workspace }}/../${{ matrix.row }}-${{ matrix.config }}-${{ matrix.cc }}
     steps:
       - uses: actions/checkout@v7.0.1
-      - uses: Swatinem/rust-cache@v2.9.2
+      - uses: Swatinem/rust-cache@v2.9.3
       - name: room for the build tree
         run: |
           sudo rm -rf /usr/share/dotnet /usr/local/lib/android /opt/ghc /opt/hostedtoolcache/CodeQL
@@ -263,7 +263,7 @@ jobs:
         env:
           CONFIG: ${{ matrix.config }}
           KEEP: ${{ inputs.keep }}
-      - uses: actions/upload-artifact@v7.0.1
+      - uses: actions/upload-artifact@v7.0.2
         if: always()
         with:
           name: census-${{ inputs.version }}-${{ matrix.row }}-${{ matrix.config }}-${{ matrix.cc }}
@@ -287,8 +287,8 @@ jobs:
       OTHER: records/census-${{ inputs.version }}-${{ matrix.row }}-${{ matrix.config }}-${{ needs.era.outputs.other }}
     steps:
       - uses: actions/checkout@v7.0.1
-      - uses: Swatinem/rust-cache@v2.9.2
-      - uses: actions/download-artifact@v8.0.1
+      - uses: Swatinem/rust-cache@v2.9.3
+      - uses: actions/download-artifact@v8.0.2
         with:
           pattern: census-${{ inputs.version }}-${{ matrix.row }}-${{ matrix.config }}-*
           path: records
diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
index 305fb1d..517c368 100644
--- a/.github/workflows/ci.yml
+++ b/.github/workflows/ci.yml
@@ -32,7 +32,7 @@ jobs:
     runs-on: ubuntu-24.04
     steps:
       - uses: actions/checkout@v7.0.1
-      - uses: Swatinem/rust-cache@v2.9.2
+      - uses: Swatinem/rust-cache@v2.9.3
       - name: cargo fmt
         run: cargo fmt --all --check
       - name: cargo clippy
@@ -58,6 +58,6 @@ jobs:
             os: macos-26
     steps:
       - uses: actions/checkout@v7.0.1
-      - uses: Swatinem/rust-cache@v2.9.2
+      - uses: Swatinem/rust-cache@v2.9.3
       - name: cargo test
         run: cargo test --workspace
diff --git a/.github/workflows/kernel.yml b/.github/workflows/kernel.yml
index 88d0bce..b743f12 100644
--- a/.github/workflows/kernel.yml
+++ b/.github/workflows/kernel.yml
@@ -79,7 +79,7 @@ jobs:
       ccs: ${{ steps.ccs.outputs.ccs }}
     steps:
       - uses: actions/checkout@v7.0.1
-      - uses: Swatinem/rust-cache@v2.9.2
+      - uses: Swatinem/rust-cache@v2.9.3
       - id: era
         run: cargo run -q --release -p rk -- personas --for "$VERSION" | tee -a "$GITHUB_OUTPUT"
         env:
@@ -108,7 +108,7 @@ jobs:
         config: [tinyconfig, defconfig]
     steps:
       - uses: actions/checkout@v7.0.1
-      - uses: Swatinem/rust-cache@v2.9.2
+      - uses: Swatinem/rust-cache@v2.9.3
       - name: kernel build dependencies
         run: |
           sudo apt-get update -q
@@ -201,7 +201,7 @@ jobs:
             "$GITHUB_WORKSPACE/record/" 2>/dev/null || true
           if [ -f compile.jsonl ]; then gzip -c compile.jsonl > "$GITHUB_WORKSPACE/record/compile.jsonl.gz"; fi
           find . -path ./rk-bin -prune -o -name '.*.o.cmd' -print | tar -czf "$GITHUB_WORKSPACE/record/cmd.tar.gz" -T -
-      - uses: actions/upload-artifact@v7.0.1
+      - uses: actions/upload-artifact@v7.0.2
         if: always()
         with:
           name: X64-${{ matrix.config }}-${{ matrix.cc }}
@@ -223,8 +223,8 @@ jobs:
         config: [tinyconfig, defconfig]
     steps:
       - uses: actions/checkout@v7.0.1
-      - uses: Swatinem/rust-cache@v2.9.2
-      - uses: actions/download-artifact@v8.0.1
+      - uses: Swatinem/rust-cache@v2.9.3
+      - uses: actions/download-artifact@v8.0.2
         with:
           pattern: X64-${{ matrix.config }}-*
           path: records
@@ -294,8 +294,8 @@ jobs:
     continue-on-error: true
     steps:
       - uses: actions/checkout@v7.0.1
-      - uses: Swatinem/rust-cache@v2.9.2
-      - uses: actions/download-artifact@v8.0.1
+      - uses: Swatinem/rust-cache@v2.9.3
+      - uses: actions/download-artifact@v8.0.2
         with:
           pattern: X64-*-rucc
           path: records
diff --git a/.github/workflows/mixed.yml b/.github/workflows/mixed.yml
index fec9991..fd7b40f 100644
--- a/.github/workflows/mixed.yml
+++ b/.github/workflows/mixed.yml
@@ -61,7 +61,7 @@ jobs:
     timeout-minutes: 355
     steps:
       - uses: actions/checkout@v7.0.1
-      - uses: Swatinem/rust-cache@v2.9.2
+      - uses: Swatinem/rust-cache@v2.9.3
       - name: kernel build dependencies
         run: |
           sudo apt-get update -q
@@ -155,7 +155,7 @@ jobs:
           cp "$RUNNER_TEMP"/mixed/{mixed.json,summary.md,relink.jsonl} "$RUNNER_TEMP"/mixed/*.log record/mixed/ 2>/dev/null || true
           cp -r "$RUNNER_TEMP/mixed/fuel" record/mixed/ 2>/dev/null || true
           find record/mixed/fuel -name '*.o' -delete 2>/dev/null || true
-      - uses: actions/upload-artifact@v7.0.1
+      - uses: actions/upload-artifact@v7.0.2
         if: always()
         with:
           name: mixed-${{ inputs.version }}-${{ inputs.row }}-${{ inputs.config }}
diff --git a/.github/workflows/nightly.yml b/.github/workflows/nightly.yml
index 83c8def..c2229f8 100644
--- a/.github/workflows/nightly.yml
+++ b/.github/workflows/nightly.yml
@@ -138,7 +138,7 @@ jobs:
         env:
           LIMIT: 355
       - uses: actions/checkout@v7.0.1
-      - uses: Swatinem/rust-cache@v2.9.2
+      - uses: Swatinem/rust-cache@v2.9.3
       - name: the reference for the version
         run: |
           cargo run -q --release -p rk -- personas --for "$VERSION" > "$RUNNER_TEMP/era"
@@ -421,7 +421,7 @@ jobs:
             mkdir -p "record/ltp/$side"
             cp -r "$RUNNER_TEMP/ltp-$side"/{ltp.json,logs} "record/ltp/$side/" 2>/dev/null || true
           done
-      - uses: actions/upload-artifact@v7.0.1
+      - uses: actions/upload-artifact@v7.0.2
         if: always()
         with:
           name: nightly-${{ matrix.version }}-${{ inputs.row || 'X64' }}
@@ -454,7 +454,7 @@ jobs:
           cp "$RUNNER_TEMP"/mixed/{mixed.json,summary.md,relink.jsonl} "$RUNNER_TEMP"/mixed/*.log record/mixed/ 2>/dev/null || true
           cp -r "$RUNNER_TEMP/mixed/fuel" record/mixed/ 2>/dev/null || true
           find record/mixed/fuel -name '*.o' -delete 2>/dev/null || true
-      - uses: actions/upload-artifact@v7.0.1
+      - uses: actions/upload-artifact@v7.0.2
         if: always() && steps.mixed.outcome != 'skipped'
         with:
           name: nightly-${{ matrix.version }}-${{ inputs.row || 'X64' }}
@@ -469,7 +469,7 @@ jobs:
     if: always()
     runs-on: ubuntu-24.04
     steps:
-      - uses: actions/download-artifact@v8.0.1
+      - uses: actions/download-artifact@v8.0.2
         with:
           pattern: nightly-*
           path: records
diff --git a/.github/workflows/object.yml b/.github/workflows/object.yml
index 5743849..e83e2c0 100644
--- a/.github/workflows/object.yml
+++ b/.github/workflows/object.yml
@@ -50,7 +50,7 @@ jobs:
     timeout-minutes: 90
     steps:
       - uses: actions/checkout@v7.0.1
-      - uses: Swatinem/rust-cache@v2.9.2
+      - uses: Swatinem/rust-cache@v2.9.3
       - name: kernel build dependencies
         run: |
           sudo apt-get update -q
@@ -97,7 +97,7 @@ jobs:
           done | tee -a "$GITHUB_STEP_SUMMARY"
         env:
           OBJECT: ${{ inputs.object }}
-      - uses: actions/upload-artifact@v7.0.1
+      - uses: actions/upload-artifact@v7.0.2
         if: always()
         with:
           name: object-${{ inputs.version }}-${{ inputs.row }}
diff --git a/.github/workflows/provision.yml b/.github/workflows/provision.yml
index 73f0afc..8894370 100644
--- a/.github/workflows/provision.yml
+++ b/.github/workflows/provision.yml
@@ -77,14 +77,14 @@ jobs:
           load: true
           cache-from: type=gha,scope=${{ matrix.release }}-${{ matrix.platform }}
           cache-to: type=gha,mode=max,scope=${{ matrix.release }}-${{ matrix.platform }}
-      - uses: Swatinem/rust-cache@v2.9.2
+      - uses: Swatinem/rust-cache@v2.9.3
       - name: build rk
         run: cargo build --release -p rk
       - name: rk personas check
         run: ./target/release/rk personas check --era "${{ matrix.eras }}" --container "rk-era-${{ matrix.release }}"
       - name: log in to the registry
         if: github.event_name != 'pull_request'
-        uses: docker/login-action@v4.6.0
+        uses: docker/login-action@v4.7.0
         with:
           registry: ghcr.io
           username: ${{ github.actor }}
@@ -105,7 +105,7 @@ jobs:
           touch "$RUNNER_TEMP/digests/${DIGEST#sha256:}"
         env:
           DIGEST: ${{ steps.push.outputs.digest }}
-      - uses: actions/upload-artifact@v7.0.1
+      - uses: actions/upload-artifact@v7.0.2
         if: github.event_name != 'pull_request'
         with:
           name: digest-${{ matrix.release }}-${{ matrix.platform }}
@@ -126,13 +126,13 @@ jobs:
       matrix:
         release: [etch, lenny, wheezy, jessie, stretch, bullseye, bookworm, trixie, forky]
     steps:
-      - uses: actions/download-artifact@v8.0.1
+      - uses: actions/download-artifact@v8.0.2
         with:
           pattern: digest-${{ matrix.release }}-*
           path: ${{ runner.temp }}/digests
           merge-multiple: true
       - uses: docker/setup-buildx-action@v4.4.1
-      - uses: docker/login-action@v4.6.0
+      - uses: docker/login-action@v4.7.0
         with:
           registry: ghcr.io
           username: ${{ github.actor }}
diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml
index 8e582b5..42f1347 100644
--- a/.github/workflows/release.yml
+++ b/.github/workflows/release.yml
@@ -29,7 +29,7 @@ jobs:
             os: ubuntu-24.04-arm
     steps:
       - uses: actions/checkout@v7.0.1
-      - uses: Swatinem/rust-cache@v2.9.2
+      - uses: Swatinem/rust-cache@v2.9.3
       - name: cargo build
         run: cargo build --release --workspace --locked
       - name: package