Skip to content

build(deps): bump the github-actions group across 1 directory with 6 updates #21

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Closed
dependabot wants to merge 1 commit into from
Closed

build(deps): bump the github-actions group across 1 directory with 6 updates #21

Show file tree
Hide file tree
Changes from all commits
Commits
Show all changes
1 commit
Select commit
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
22 changes: 11 additions & 11 deletions .github/workflows/ci.yml
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -32,14 +32,14 @@
with:
persist-credentials: false
fetch-depth: 0
- uses: dtolnay/rust-toolchain@2c7215f132e9ebf062739d9130488b56d53c060c # master
- uses: dtolnay/rust-toolchain@683b588c487a69d01f6c6ddf40f036ff682cc2c8 # master
with:
toolchain: ${{ matrix.rust }}
components: rustfmt, clippy
- uses: mozilla-actions/sccache-action@fc920bf0ec8de6ee65d409111f7ec508035751ba # v0.0.11
with:
version: "v0.17.0"
- uses: Swatinem/rust-cache@e18b497796c12c097a38f9edb9d0641fb99eee32 # v2

Check warning on line 42 in .github/workflows/ci.yml

View workflow job for this annotation

GitHub Actions / workflow-security

ref-version-mismatch 

ci.yml:42: action's hash pin has mismatched or missing version comment: points to commit d1527c8f67ef
- name: Verify release metadata and clean checkout
if: matrix.rust == 'stable'
run: python3 scripts/check-release-metadata.py
Expand Down Expand Up @@ -78,19 +78,19 @@
if: matrix.rust == 'stable'
run: ruff format --check scripts
- if: matrix.rust == 'stable'
uses: taiki-e/install-action@c44f6b046f1c29ae5918b1e0bfdbb2f1813836fd # v2.84.1
uses: taiki-e/install-action@8cca0918f8471c33515202b73f56ab27f2bed283 # v2.87.29
with:
tool: cargo-nextest@0.9.4
- if: matrix.rust == 'stable'
uses: taiki-e/install-action@c44f6b046f1c29ae5918b1e0bfdbb2f1813836fd # v2.84.1
uses: taiki-e/install-action@8cca0918f8471c33515202b73f56ab27f2bed283 # v2.87.29
with:
tool: cargo-machete@0.9.2
- if: matrix.rust == 'stable'
uses: taiki-e/install-action@c44f6b046f1c29ae5918b1e0bfdbb2f1813836fd # v2.84.1
uses: taiki-e/install-action@8cca0918f8471c33515202b73f56ab27f2bed283 # v2.87.29
with:
tool: cargo-audit@0.22.1
- if: matrix.rust == 'stable'
uses: taiki-e/install-action@c44f6b046f1c29ae5918b1e0bfdbb2f1813836fd # v2.84.1
uses: taiki-e/install-action@8cca0918f8471c33515202b73f56ab27f2bed283 # v2.87.29
with:
tool: cargo-deny@0.20.2
- if: matrix.rust == 'stable'
Expand Down Expand Up @@ -122,7 +122,7 @@
--report "$RUNNER_TEMP/retrieval-eval.json"
- name: Retain retrieval evaluation
if: matrix.rust == 'stable' && always()
uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7.0.1
uses: actions/upload-artifact@cf430e030ddbb5b0abf93d22962f4752f3646cd9 # v7.0.2
with:
name: retrieval-eval-${{ github.sha }}
path: ${{ runner.temp }}/retrieval-eval.json
Expand Down Expand Up @@ -150,7 +150,7 @@
--require-clean
- name: Retain benchmark evidence
if: matrix.rust == 'stable' && always()
uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7.0.1
uses: actions/upload-artifact@cf430e030ddbb5b0abf93d22962f4752f3646cd9 # v7.0.2
with:
name: benchmark-${{ github.sha }}
path: |
Expand All @@ -175,7 +175,7 @@
- name: Validate workflow contracts
run: scripts/check-workflows.sh
- name: Audit GitHub Actions workflows
uses: zizmorcore/zizmor-action@3dc1ecc9bcb9e94e9b2c709687979e1298497054 # v0.6.2
uses: zizmorcore/zizmor-action@85b2b9fb8e3325e7a23d7d0a9d7ba5ae0f999e3e # v0.7.1
with:
version: 1.29.0
persona: pedantic
Expand All @@ -193,17 +193,17 @@
- uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
with:
persist-credentials: false
- uses: dtolnay/rust-toolchain@2c7215f132e9ebf062739d9130488b56d53c060c # master
- uses: dtolnay/rust-toolchain@683b588c487a69d01f6c6ddf40f036ff682cc2c8 # master
with:
toolchain: 1.97.1
components: llvm-tools-preview
- uses: Swatinem/rust-cache@e18b497796c12c097a38f9edb9d0641fb99eee32 # v2

Check warning on line 200 in .github/workflows/ci.yml

View workflow job for this annotation

GitHub Actions / workflow-security

ref-version-mismatch 

ci.yml:200: action's hash pin has mismatched or missing version comment: points to commit d1527c8f67ef
- uses: taiki-e/install-action@c44f6b046f1c29ae5918b1e0bfdbb2f1813836fd # v2.84.1
- uses: taiki-e/install-action@8cca0918f8471c33515202b73f56ab27f2bed283 # v2.87.29
with:
tool: cargo-llvm-cov@0.8.7
- run: cargo llvm-cov --workspace --lcov --output-path lcov.info
- run: cargo llvm-cov report --summary-only --fail-under-lines 86
- uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7.0.1
- uses: actions/upload-artifact@cf430e030ddbb5b0abf93d22962f4752f3646cd9 # v7.0.2
with:
name: coverage-lcov
path: lcov.info
48 changes: 24 additions & 24 deletions .github/workflows/release.yml
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -48,12 +48,12 @@ jobs:
python3 scripts/check-skill-version.py "${tag_args[@]}"

- name: Install dist
uses: taiki-e/install-action@c44f6b046f1c29ae5918b1e0bfdbb2f1813836fd # v2.84.1
uses: taiki-e/install-action@8cca0918f8471c33515202b73f56ab27f2bed283 # v2.87.29
with:
tool: cargo-dist@0.31.0

- name: Cache dist
uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7.0.1
uses: actions/upload-artifact@cf430e030ddbb5b0abf93d22962f4752f3646cd9 # v7.0.2
with:
name: cargo-dist-cache
path: ~/.cargo/bin/dist
Expand All @@ -72,7 +72,7 @@ jobs:
echo "manifest=$(jq -c "." plan-dist-manifest.json)" >> "$GITHUB_OUTPUT"

- name: Upload dist-manifest.json
uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7.0.1
uses: actions/upload-artifact@cf430e030ddbb5b0abf93d22962f4752f3646cd9 # v7.0.2
with:
name: artifacts-plan-dist-manifest
path: plan-dist-manifest.json
Expand Down Expand Up @@ -101,7 +101,7 @@ jobs:
python-version: "3.12.10"

- name: Install Rust 1.97.1
uses: dtolnay/rust-toolchain@2c7215f132e9ebf062739d9130488b56d53c060c # master
uses: dtolnay/rust-toolchain@683b588c487a69d01f6c6ddf40f036ff682cc2c8 # master
with:
toolchain: 1.97.1
components: rustfmt, clippy
Expand Down Expand Up @@ -163,7 +163,7 @@ jobs:

- name: Install cargo-machete
if: runner.os == 'Linux'
uses: taiki-e/install-action@c44f6b046f1c29ae5918b1e0bfdbb2f1813836fd # v2.84.1
uses: taiki-e/install-action@8cca0918f8471c33515202b73f56ab27f2bed283 # v2.87.29
with:
tool: cargo-machete@0.9.2

Expand All @@ -176,13 +176,13 @@ jobs:

- name: Install cargo-audit
if: runner.os == 'Linux'
uses: taiki-e/install-action@c44f6b046f1c29ae5918b1e0bfdbb2f1813836fd # v2.84.1
uses: taiki-e/install-action@8cca0918f8471c33515202b73f56ab27f2bed283 # v2.87.29
with:
tool: cargo-audit@0.22.1

- name: Install cargo-deny
if: runner.os == 'Linux'
uses: taiki-e/install-action@c44f6b046f1c29ae5918b1e0bfdbb2f1813836fd # v2.84.1
uses: taiki-e/install-action@8cca0918f8471c33515202b73f56ab27f2bed283 # v2.87.29
with:
tool: cargo-deny@0.20.2

Expand Down Expand Up @@ -217,7 +217,7 @@ jobs:

- name: Retain retrieval evaluation
if: always()
uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7.0.1
uses: actions/upload-artifact@cf430e030ddbb5b0abf93d22962f4752f3646cd9 # v7.0.2
with:
name: retrieval-eval-${{ runner.os }}-${{ github.sha }}
path: ${{ runner.temp }}/retrieval-eval.json
Expand Down Expand Up @@ -249,7 +249,7 @@ jobs:

- name: Retain release benchmark evidence
if: runner.os == 'Linux' && always()
uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7.0.1
uses: actions/upload-artifact@cf430e030ddbb5b0abf93d22962f4752f3646cd9 # v7.0.2
with:
name: release-benchmark-${{ github.sha }}
path: |
Expand Down Expand Up @@ -288,17 +288,17 @@ jobs:
submodules: recursive

- name: Install Rust 1.97.1
uses: dtolnay/rust-toolchain@2c7215f132e9ebf062739d9130488b56d53c060c # master
uses: dtolnay/rust-toolchain@683b588c487a69d01f6c6ddf40f036ff682cc2c8 # master
with:
toolchain: 1.97.1

- name: Install dist
uses: taiki-e/install-action@c44f6b046f1c29ae5918b1e0bfdbb2f1813836fd # v2.84.1
uses: taiki-e/install-action@8cca0918f8471c33515202b73f56ab27f2bed283 # v2.87.29
with:
tool: cargo-dist@0.31.0

- name: Fetch local artifacts
uses: actions/download-artifact@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c # v8.0.1
uses: actions/download-artifact@9000827ccba6bdab643e8b6fd33ac0654aef8333 # v8.0.2
with:
pattern: artifacts-*
path: target/distrib/
Expand All @@ -322,7 +322,7 @@ jobs:

- name: Attest build provenance
if: needs.plan.outputs.publishing == 'true'
uses: actions/attest-build-provenance@0f67c3f4856b2e3261c31976d6725780e5e4c373 # v4.1.1
uses: actions/attest-build-provenance@4d101475d8b20a2381f78447822ac1eab6504dd8 # v4.2.2
with:
subject-path: "target/distrib/*${{ join(matrix.targets, ', ') }}*"

Expand All @@ -338,7 +338,7 @@ jobs:
cp dist-manifest.json "$BUILD_MANIFEST_NAME"

- name: Upload artifacts
uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7.0.1
uses: actions/upload-artifact@cf430e030ddbb5b0abf93d22962f4752f3646cd9 # v7.0.2
with:
name: artifacts-build-local-${{ join(matrix.targets, '_') }}
path: |
Expand Down Expand Up @@ -371,7 +371,7 @@ jobs:
with:
python-version: "3.12.10"
- name: Fetch local platform artifacts
uses: actions/download-artifact@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c # v8.0.1
uses: actions/download-artifact@9000827ccba6bdab643e8b6fd33ac0654aef8333 # v8.0.2
with:
pattern: artifacts-build-local-*
path: target/distrib/
Expand Down Expand Up @@ -404,7 +404,7 @@ jobs:
python-version: "3.12.10"

- name: Install cached dist
uses: actions/download-artifact@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c # v8.0.1
uses: actions/download-artifact@9000827ccba6bdab643e8b6fd33ac0654aef8333 # v8.0.2
with:
name: cargo-dist-cache
path: ~/.cargo/bin/
Expand All @@ -422,7 +422,7 @@ jobs:
sh "$installer"

- name: Fetch local artifacts
uses: actions/download-artifact@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c # v8.0.1
uses: actions/download-artifact@9000827ccba6bdab643e8b6fd33ac0654aef8333 # v8.0.2
with:
pattern: artifacts-*
path: target/distrib/
Expand Down Expand Up @@ -475,12 +475,12 @@ jobs:

- name: Attest global artifacts
if: needs.plan.outputs.publishing == 'true'
uses: actions/attest-build-provenance@0f67c3f4856b2e3261c31976d6725780e5e4c373 # v4.1.1
uses: actions/attest-build-provenance@4d101475d8b20a2381f78447822ac1eab6504dd8 # v4.2.2
with:
subject-path: "target/distrib/*"

- name: Upload artifacts
uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7.0.1
uses: actions/upload-artifact@cf430e030ddbb5b0abf93d22962f4752f3646cd9 # v7.0.2
with:
name: artifacts-build-global
path: |
Expand Down Expand Up @@ -512,15 +512,15 @@ jobs:
submodules: recursive

- name: Install cached dist
uses: actions/download-artifact@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c # v8.0.1
uses: actions/download-artifact@9000827ccba6bdab643e8b6fd33ac0654aef8333 # v8.0.2
with:
name: cargo-dist-cache
path: ~/.cargo/bin/

- run: chmod +x ~/.cargo/bin/dist

- name: Fetch artifacts
uses: actions/download-artifact@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c # v8.0.1
uses: actions/download-artifact@9000827ccba6bdab643e8b6fd33ac0654aef8333 # v8.0.2
with:
pattern: artifacts-*
path: target/distrib/
Expand All @@ -538,13 +538,13 @@ jobs:
echo "manifest=$(jq -c "." dist-manifest.json)" >> "$GITHUB_OUTPUT"

- name: Upload dist-manifest.json
uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7.0.1
uses: actions/upload-artifact@cf430e030ddbb5b0abf93d22962f4752f3646cd9 # v7.0.2
with:
name: artifacts-dist-manifest
path: dist-manifest.json

- name: Download GitHub artifacts
uses: actions/download-artifact@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c # v8.0.1
uses: actions/download-artifact@9000827ccba6bdab643e8b6fd33ac0654aef8333 # v8.0.2
with:
pattern: artifacts-*
path: artifacts
Expand Down Expand Up @@ -588,7 +588,7 @@ jobs:
submodules: recursive

- name: Install cached dist
uses: actions/download-artifact@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c # v8.0.1
uses: actions/download-artifact@9000827ccba6bdab643e8b6fd33ac0654aef8333 # v8.0.2
with:
name: cargo-dist-cache
path: ~/.cargo/bin/
Expand Down
Loading