[renovate]

Summary

Update the existing Linux runner selections to Ubuntu 26.04, including the CodeQL Actions matrix branch.
Add the exact runner label to the pinned Actionlint 1.7.12 configuration.
Name the CodeQL selection job, explain its existing permissions, and use rustup to install and select the same Rust 1.99.1 toolchain for Windows Rust analysis.

Closes #66.

Validation

mise x -- uv run --no-project --with 'reuse[charset-normalizer]==6.2.0' just check passed on Windows 11 Pro build 10.0.26300 with Rust 1.99.1.
The gate passed formatting, strict workspace Clippy, repository laws, 39 task tests, 13 workflow tests, one native smoke test, workspace dependency checks, license metadata checks, Typos, and Actionlint.
Actionlint 1.7.12 reproduced the unknown Ubuntu 26.04 label before the configuration change and accepted the real workflows after it.
An unrelated ubuntu-99.04 label still failed with the expected unknown-label diagnostic.

Mise reports that Python 3.15.1 isn't installed locally.
The pinned Python package ran through the uv environment.
The full release qualification and manual credential workflow remain unrun.

Checklist

• Relevant local checks passed.
• Existing deterministic workflow tests passed.
• Ownership, safety, and cleanup contracts have no changes.
• The library and API snapshot have no source changes.
• The changes include no credentials or vulnerability details.
• The diff covers the Ubuntu update and its workflow validation.

@coderabbitai ignore

[coderabbitai]

Important

Review skipped

Bot user detected.

To trigger a single review, invoke the @coderabbitai review command.

Run configuration

• Source mode: Auto
• Repository: Unavailable
• Branch: Unavailable
• File: No configuration file from this repository applied
• Commit: Unavailable
• Layers: Organization UI; Enforced overrides: Organization
• Review profile: ASSERTIVE
• Plan: Advanced
• Run ID: ab3958c2-c973-427f-abe4-a74ff8e9d83a

You can disable this status message by setting the reviews.review_status to false in the CodeRabbit configuration file.

Use the checkbox below for a quick retry:

• 🔍 Trigger review

• Autofix · Keep fixing CodeRabbit findings and required CI, and resolving merge conflicts

_{Comment @coderabbitai help to get the list of available commands.}

[renovate]

Edited/Blocked Notification

Renovate will not automatically rebase this PR, because it does not recognize the last commit author and assumes somebody else may have edited the PR.

You can manually request rebase by checking the rebase/retry box above.

⚠️ Warning: custom changes will be lost.