From bf018bb3575255ff638a1d01c8a466bbaa0ede80 Mon Sep 17 00:00:00 2001 From: "renovate[bot]" <29139614+renovate[bot]@users.noreply.github.com> Date: Sat, 1 Aug 2026 01:40:14 +0000 Subject: [PATCH] chore(deps): Update compatible (actions) (#88) MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit This PR contains the following updates: | Package | Type | Update | Change | |---|---|---|---| | [EmbarkStudios/cargo-deny-action](https://redirect.github.com/EmbarkStudios/cargo-deny-action) | action | minor | `v2.0.20` → `v2.1.1` | | [actions/checkout](https://redirect.github.com/actions/checkout) | action | minor | `v6.0.3` → `v6.1.0` | | [actions/upload-code-coverage](https://redirect.github.com/actions/upload-code-coverage) | action | patch | `v1.4.0` → `v1.4.1` | | [github/codeql-action](https://redirect.github.com/github/codeql-action) | action | minor | `v4.36.2` → `v4.37.4` | | [j178/prek-action](https://redirect.github.com/j178/prek-action) | action | patch | `v2.0.5` → `v2.0.6` | | [taiki-e/install-action](https://redirect.github.com/taiki-e/install-action) | action | minor | `v2.82.7` → `v2.85.5` | | [zizmorcore/zizmor-action](https://redirect.github.com/zizmorcore/zizmor-action) | action | minor | `v0.5.7` → `v0.6.1` | --- ### Release Notes
EmbarkStudios/cargo-deny-action (EmbarkStudios/cargo-deny-action) ### [`v2.1.1`](https://redirect.github.com/EmbarkStudios/cargo-deny-action/releases/tag/v2.1.1): Release 2.1.1 - cargo-deny 0.20.2 [Compare Source](https://redirect.github.com/EmbarkStudios/cargo-deny-action/compare/v2.1.0...v2.1.1) #### Fixed - [PR#116](https://redirect.github.com/EmbarkStudios/cargo-deny-action/pull/116) fixed in issue introduced in the 2.1.0 release due the deprecation of the `use-git-cli` argument. Thanks [@​Firestar99](https://redirect.github.com/Firestar99)! ### [`v2.1.0`](https://redirect.github.com/EmbarkStudios/cargo-deny-action/releases/tag/v2.1.0): Release 2.1.0 - cargo-deny 0.20.2 [Compare Source](https://redirect.github.com/EmbarkStudios/cargo-deny-action/compare/v2.0.20...v2.1.0) ##### Changed - [PR#881](https://redirect.github.com/EmbarkStudios/cargo-deny/pull/881) refactored the CLI, moving some duplicated options/flags into the root and removing several deprecated options/flags/values. See the PR for a full list of changes. ##### Added - [PR#879](https://redirect.github.com/EmbarkStudios/cargo-deny/pull/879) resolved [#​873](https://redirect.github.com/EmbarkStudios/cargo-deny/issues/873) by adding a new [`bans.std-replacements`](https://embarkstudios.github.io/cargo-deny/checks/bans/cfg.html#the-std-replacements-field-optional) lint which checks the graph for crates.io sourced crates that have been partially or fully replaced in `std` and/or `core`. ##### Fixed - [PR#880](https://redirect.github.com/EmbarkStudios/cargo-deny/pull/880) resolved [#​765](https://redirect.github.com/EmbarkStudios/cargo-deny/issues/765) by respecting non-default build script paths in manifests. - [PR#881](https://redirect.github.com/EmbarkStudios/cargo-deny/pull/881) resolved [#​874](https://redirect.github.com/EmbarkStudios/cargo-deny/issues/874) by cleaning up the CLI, deduplicating some options/flags that caused bug in the `list` subcommand.
actions/checkout (actions/checkout) ### [`v6.1.0`](https://redirect.github.com/actions/checkout/compare/v6.0.3...v6.1.0) [Compare Source](https://redirect.github.com/actions/checkout/compare/v6.0.3...v6.1.0)
actions/upload-code-coverage (actions/upload-code-coverage) ### [`v1.4.1`](https://redirect.github.com/actions/upload-code-coverage/compare/v1.4.0...v1.4.1) [Compare Source](https://redirect.github.com/actions/upload-code-coverage/compare/v1.4.0...v1.4.1)
github/codeql-action (github/codeql-action) ### [`v4.37.4`](https://redirect.github.com/github/codeql-action/compare/v4.37.3...v4.37.4) [Compare Source](https://redirect.github.com/github/codeql-action/compare/v4.37.3...v4.37.4) ### [`v4.37.3`](https://redirect.github.com/github/codeql-action/releases/tag/v4.37.3) [Compare Source](https://redirect.github.com/github/codeql-action/compare/v4.37.2...v4.37.3) No user facing changes. ### [`v4.37.2`](https://redirect.github.com/github/codeql-action/releases/tag/v4.37.2) [Compare Source](https://redirect.github.com/github/codeql-action/compare/v4.37.1...v4.37.2) - The new address format for the `config-file` input that was introduced in CodeQL Action 4.37.0 is now enabled by default. In addition to the format described there, the `remote=` prefix can now be used to explicitly indicate that the input refers to a remote file. All previous input formats continue to be accepted as well. [#​4023](https://redirect.github.com/github/codeql-action/pull/4023) - The CodeQL Action can now make use of [configured private registries](https://docs.github.com/en/code-security/how-tos/secure-at-scale/configure-organization-security/manage-usage-and-access/giving-org-access-private-registries) in Default Setup to retrieve CodeQL configuration files from remote repositories that require authentication. This will allow customers to store their CodeQL configuration in a single repository that can then be referenced by Default Setup workflows in other repositories. We expect to roll this and other, related changes out to everyone in July. [#​4007](https://redirect.github.com/github/codeql-action/pull/4007) ### [`v4.37.1`](https://redirect.github.com/github/codeql-action/releases/tag/v4.37.1) [Compare Source](https://redirect.github.com/github/codeql-action/compare/v4.37.0...v4.37.1) - *Upcoming breaking change*: Add a deprecation warning for customers using CodeQL version 2.20.6 and earlier. These versions of CodeQL were discontinued on 1 July 2026 alongside GitHub Enterprise Server 3.16, and will be unsupported by the next minor release of the CodeQL Action. [#​3956](https://redirect.github.com/github/codeql-action/pull/3956) - Update default CodeQL bundle version to [2.26.1](https://redirect.github.com/github/codeql-action/releases/tag/codeql-bundle-v2.26.1). [#​4019](https://redirect.github.com/github/codeql-action/pull/4019) ### [`v4.37.0`](https://redirect.github.com/github/codeql-action/releases/tag/v4.37.0) [Compare Source](https://redirect.github.com/github/codeql-action/compare/v4.36.3...v4.37.0) - Update default CodeQL bundle version to [2.26.0](https://redirect.github.com/github/codeql-action/releases/tag/codeql-bundle-v2.26.0). [#​3995](https://redirect.github.com/github/codeql-action/pull/3995) - In addition to the existing input format, the `config-file` input for the `codeql-action/init` step will soon support a new `[owner/]repo[@​ref][:path]` format. All components except the repository name are optional. If omitted, `owner` defaults to the same owner as the repository the analysis is running for, `ref` to `main`, and `path` to `.github/codeql-action.yaml`. Support for this format ships in this version of the CodeQL Action, but will only be enabled over the coming weeks. [#​3973](https://redirect.github.com/github/codeql-action/pull/3973) ### [`v4.36.3`](https://redirect.github.com/github/codeql-action/releases/tag/v4.36.3) [Compare Source](https://redirect.github.com/github/codeql-action/compare/v4.36.2...v4.36.3) No user facing changes.
j178/prek-action (j178/prek-action) ### [`v2.0.6`](https://redirect.github.com/j178/prek-action/releases/tag/v2.0.6) [Compare Source](https://redirect.github.com/j178/prek-action/compare/v2.0.5...v2.0.6) #### What's Changed - Update known versions for prek 0.4.6 by [@​j178](https://redirect.github.com/j178) in [#​159](https://redirect.github.com/j178/prek-action/pull/159) - Update known versions for prek 0.4.8 by [@​j178](https://redirect.github.com/j178) in [#​162](https://redirect.github.com/j178/prek-action/pull/162) - Update known versions for prek 0.4.9 by [@​j178](https://redirect.github.com/j178) in [#​163](https://redirect.github.com/j178/prek-action/pull/163) - Update known versions for prek 0.4.10 by [@​j178](https://redirect.github.com/j178) in [#​167](https://redirect.github.com/j178/prek-action/pull/167) - Disable color in `prek cache dir` output by [@​KSmanis](https://redirect.github.com/KSmanis) in [#​168](https://redirect.github.com/j178/prek-action/pull/168) #### New Contributors - [@​KSmanis](https://redirect.github.com/KSmanis) made their first contribution in [#​168](https://redirect.github.com/j178/prek-action/pull/168) **Full Changelog**:
taiki-e/install-action (taiki-e/install-action) ### [`v2.85.5`](https://redirect.github.com/taiki-e/install-action/compare/v2.85.4...v2.85.5) [Compare Source](https://redirect.github.com/taiki-e/install-action/compare/v2.85.4...v2.85.5) ### [`v2.85.4`](https://redirect.github.com/taiki-e/install-action/releases/tag/v2.85.4): 2.85.4 [Compare Source](https://redirect.github.com/taiki-e/install-action/compare/v2.85.3...v2.85.4) - Update `uv@latest` to 0.11.33. - Update `mise@latest` to 2026.7.15. - Update `biome@latest` to 2.5.6. ### [`v2.85.3`](https://redirect.github.com/taiki-e/install-action/releases/tag/v2.85.3): 2.85.3 [Compare Source](https://redirect.github.com/taiki-e/install-action/compare/v2.85.2...v2.85.3) - Update `xh@latest` to 0.26.2. - Update `ubi@latest` to 0.10.0. - Update `mise@latest` to 2026.7.14. - Update `martin@latest` to 1.13.0. - Update `cargo-shear@latest` to 1.13.3. - Update `cargo-binstall@latest` to 1.21.1. ### [`v2.85.2`](https://redirect.github.com/taiki-e/install-action/releases/tag/v2.85.2): 2.85.2 [Compare Source](https://redirect.github.com/taiki-e/install-action/compare/v2.85.1...v2.85.2) - Update `prek@latest` to 0.4.11. - Update `mise@latest` to 2026.7.13. - Update `kingfisher@latest` to 1.109.0. ### [`v2.85.1`](https://redirect.github.com/taiki-e/install-action/releases/tag/v2.85.1): 2.85.1 [Compare Source](https://redirect.github.com/taiki-e/install-action/compare/v2.85.0...v2.85.1) - Update `vacuum@latest` to 0.30.0. - Update `uv@latest` to 0.11.32. - Update `mise@latest` to 2026.7.12. - Update `cyclonedx@latest` to 0.33.1. - Update `cargo-neat@latest` to 0.5.2. ### [`v2.85.0`](https://redirect.github.com/taiki-e/install-action/releases/tag/v2.85.0): 2.85.0 [Compare Source](https://redirect.github.com/taiki-e/install-action/compare/v2.84.1...v2.85.0) - Support `wild` (alias: `wild-linker`). ([#​1949](https://redirect.github.com/taiki-e/install-action/pull/1949)) - Support `bpf-linker`. ([#​1950](https://redirect.github.com/taiki-e/install-action/pull/1950)) - Support `rafn`. ([#​1935](https://redirect.github.com/taiki-e/install-action/pull/1935), thanks [@​DarkWanderer](https://redirect.github.com/DarkWanderer)) - Update `cargo-neat@latest` to 0.5.1. - Update `zizmor@latest` to 1.28.0. - Update `wasmtime@latest` to 47.0.2. - Update `uv@latest` to 0.11.31. - Update `syft@latest` to 1.49.0. ### [`v2.84.1`](https://redirect.github.com/taiki-e/install-action/releases/tag/v2.84.1): 2.84.1 [Compare Source](https://redirect.github.com/taiki-e/install-action/compare/v2.84.0...v2.84.1) - Update `wasmtime@latest` to 47.0.1. - Update `wasm-tools@latest` to 1.254.0. - Update `uv@latest` to 0.11.30. - Update `mise@latest` to 2026.7.11. - Update `cargo-neat@latest` to 0.5.0. - Update `cargo-crap@latest` to 0.3.1. - Update `biome@latest` to 2.5.5. ### [`v2.84.0`](https://redirect.github.com/taiki-e/install-action/releases/tag/v2.84.0): 2.84.0 [Compare Source](https://redirect.github.com/taiki-e/install-action/compare/v2.83.4...v2.84.0) - Support `d2`. ([#​1944](https://redirect.github.com/taiki-e/install-action/pull/1944)) - Support `protoc-gen-connect-openapi`. ([#​1922](https://redirect.github.com/taiki-e/install-action/pull/1922), thanks [@​JasterV](https://redirect.github.com/JasterV)) - Update `convco@latest` to 0.7.0. ([#​1941](https://redirect.github.com/taiki-e/install-action/pull/1941), thanks [@​graelo](https://redirect.github.com/graelo)) - Update `just@latest` to 1.57.0. - Update `cargo-semver-checks@latest` to 0.49.0. - Update `tombi@latest` to 1.2.4. - Update `cosign@latest` to 3.1.2. ### [`v2.83.4`](https://redirect.github.com/taiki-e/install-action/releases/tag/v2.83.4): 2.83.4 [Compare Source](https://redirect.github.com/taiki-e/install-action/compare/v2.83.3...v2.83.4) - Update `vacuum@latest` to 0.29.10. - Update `uv@latest` to 0.11.29. - Update `syft@latest` to 1.48.0. - Update `prek@latest` to 0.4.10. - Update `mise@latest` to 2026.7.7. - Update `cargo-shear@latest` to 1.13.2. ### [`v2.83.3`](https://redirect.github.com/taiki-e/install-action/releases/tag/v2.83.3): 2.83.3 [Compare Source](https://redirect.github.com/taiki-e/install-action/compare/v2.83.2...v2.83.3) - Update `release-plz@latest` to 0.3.160. - Update `prek@latest` to 0.4.9. - Update `mise@latest` to 2026.7.6. - Update `dprint@latest` to 0.55.2. - Update `cargo-dinghy@latest` to 0.8.5. - Update `cargo-binstall@latest` to 1.21.0. - Update `biome@latest` to 2.5.4. ### [`v2.83.2`](https://redirect.github.com/taiki-e/install-action/releases/tag/v2.83.2): 2.83.2 [Compare Source](https://redirect.github.com/taiki-e/install-action/compare/v2.83.1...v2.83.2) - Update `parse-dockerfile@latest` to 0.1.8. - Update `mise@latest` to 2026.7.5. - Update `just@latest` to 1.56.0. - Update `gungraun-runner@latest` to 0.19.4. - Update `cargo-neat@latest` to 0.4.1. ### [`v2.83.1`](https://redirect.github.com/taiki-e/install-action/releases/tag/v2.83.1): 2.83.1 [Compare Source](https://redirect.github.com/taiki-e/install-action/compare/v2.83.0...v2.83.1) - Update `rclone@latest` to 1.74.4. - Update `mise@latest` to 2026.7.4. - Update `cargo-deny@latest` to 0.20.2. ### [`v2.83.0`](https://redirect.github.com/taiki-e/install-action/releases/tag/v2.83.0): 2.83.0 [Compare Source](https://redirect.github.com/taiki-e/install-action/compare/v2.82.11...v2.83.0) - Support `cargo-about`. ([#​1924](https://redirect.github.com/taiki-e/install-action/pull/1924), thanks [@​ruffsl](https://redirect.github.com/ruffsl)) - Update `uv@latest` to 0.11.28. - Update `martin@latest` to 1.12.0. - Update `kingfisher@latest` to 1.106.0. - Update `biome@latest` to 2.5.3. ### [`v2.82.11`](https://redirect.github.com/taiki-e/install-action/releases/tag/v2.82.11): 2.82.11 [Compare Source](https://redirect.github.com/taiki-e/install-action/compare/v2.82.10...v2.82.11) - Update `wasm-tools@latest` to 1.253.0. - Update `uv@latest` to 0.11.27. - Update `mise@latest` to 2026.7.2. - Update `mdbook@latest` to 0.5.4. ### [`v2.82.10`](https://redirect.github.com/taiki-e/install-action/releases/tag/v2.82.10): 2.82.10 [Compare Source](https://redirect.github.com/taiki-e/install-action/compare/v2.82.9...v2.82.10) - Update `tombi@latest` to 1.2.0. - Update `cargo-nextest@latest` to 0.9.140. ### [`v2.82.9`](https://redirect.github.com/taiki-e/install-action/releases/tag/v2.82.9): 2.82.9 [Compare Source](https://redirect.github.com/taiki-e/install-action/compare/v2.82.8...v2.82.9) - Update `vacuum@latest` to 0.29.9. - Update `prek@latest` to 0.4.8. - Update `cargo-tarpaulin@latest` to 0.37.0. - Update `cargo-leptos@latest` to 0.3.7. ### [`v2.82.8`](https://redirect.github.com/taiki-e/install-action/releases/tag/v2.82.8): 2.82.8 [Compare Source](https://redirect.github.com/taiki-e/install-action/compare/v2.82.7...v2.82.8) - Update `vacuum@latest` to 0.29.8. - Update `uv@latest` to 0.11.26. - Update `typos@latest` to 1.48.0. - Update `trivy@latest` to 0.72.0. - Update `tombi@latest` to 1.1.7. - Update `prek@latest` to 0.4.6. - Update `mise@latest` to 2026.7.0. - Update `just@latest` to 1.55.1. - Update `biome@latest` to 2.5.2.
zizmorcore/zizmor-action (zizmorcore/zizmor-action) ### [`v0.6.1`](https://redirect.github.com/zizmorcore/zizmor-action/releases/tag/v0.6.1) [Compare Source](https://redirect.github.com/zizmorcore/zizmor-action/compare/v0.6.0...v0.6.1) zizmor 1.28.0 is now the default version used by the action. ### [`v0.6.0`](https://redirect.github.com/zizmorcore/zizmor-action/releases/tag/v0.6.0) [Compare Source](https://redirect.github.com/zizmorcore/zizmor-action/compare/v0.5.7...v0.6.0) zizmor 1.27.0 is now the default version used by the action. #### What's Changed - Fold Docker image pull output into a collapsed Actions log group by [@​woodruffw](https://redirect.github.com/woodruffw) with [@​Copilot](https://redirect.github.com/Copilot) in [#​132](https://redirect.github.com/zizmorcore/zizmor-action/pull/132) - Readme: document missing inputs by [@​staabm](https://redirect.github.com/staabm) in [#​130](https://redirect.github.com/zizmorcore/zizmor-action/pull/130) - ci: block version sync workflow on forks by [@​shaanmajid](https://redirect.github.com/shaanmajid) in [#​129](https://redirect.github.com/zizmorcore/zizmor-action/pull/129) - Sync zizmor versions by [@​github-actions](https://redirect.github.com/github-actions)\[bot] in [#​137](https://redirect.github.com/zizmorcore/zizmor-action/pull/137) - Add `collect` input by [@​woodruffw](https://redirect.github.com/woodruffw) in [#​139](https://redirect.github.com/zizmorcore/zizmor-action/pull/139) #### New Contributors - [@​woodruffw](https://redirect.github.com/woodruffw) with [@​Copilot](https://redirect.github.com/Copilot) made their first contribution in [#​132](https://redirect.github.com/zizmorcore/zizmor-action/pull/132) - [@​staabm](https://redirect.github.com/staabm) made their first contribution in [#​130](https://redirect.github.com/zizmorcore/zizmor-action/pull/130) - [@​shaanmajid](https://redirect.github.com/shaanmajid) made their first contribution in [#​129](https://redirect.github.com/zizmorcore/zizmor-action/pull/129) **Full Changelog**:
--- ### Configuration 📅 **Schedule**: (UTC) - Branch creation - "before 5am on the first day of the month" - Automerge - At any time (no schedule defined) 🚦 **Automerge**: Enabled. ♻ **Rebasing**: Whenever PR is behind base branch, or you tick the rebase/retry checkbox. 👻 **Immortal**: This PR will be recreated if closed unmerged. Get [config help](https://redirect.github.com/renovatebot/renovate/discussions) if that's undesired. --- - [ ] If you want to rebase/retry this PR, check this box --- This PR was generated by [Mend Renovate](https://mend.io/renovate/). View the [repository job log](https://developer.mend.io/github/epage/_rust). Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com> --- .github/workflows/audit.yml | 12 ++++++------ .github/workflows/ci.yml | 24 ++++++++++++------------ .github/workflows/committed.yml | 2 +- .github/workflows/pre-commit.yml | 4 ++-- .github/workflows/rust-next.yml | 8 ++++---- .github/workflows/spelling.yml | 2 +- .github/workflows/template.yml | 2 +- 7 files changed, 27 insertions(+), 27 deletions(-) diff --git a/.github/workflows/audit.yml b/.github/workflows/audit.yml index b1e0bb46..a89f6b59 100644 --- a/.github/workflows/audit.yml +++ b/.github/workflows/audit.yml @@ -43,11 +43,11 @@ jobs: - advisories steps: - name: Checkout repository - uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6.0.3 + uses: actions/checkout@d23441a48e516b6c34aea4fa41551a30e30af803 # v6.1.0 with: persist-credentials: false - name: Lint advisories - uses: EmbarkStudios/cargo-deny-action@bb137d7af7e4fb67e5f82a49c4fce4fad40782fe # v2.0.20 + uses: EmbarkStudios/cargo-deny-action@3c6349835b2b7b196a839186cb8b78e02f7b5f25 # v2.1.1 with: command: check ${{ matrix.checks }} rust-version: stable @@ -63,11 +63,11 @@ jobs: - bans licenses sources steps: - name: Checkout repository - uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6.0.3 + uses: actions/checkout@d23441a48e516b6c34aea4fa41551a30e30af803 # v6.1.0 with: persist-credentials: false - name: Lint bans - uses: EmbarkStudios/cargo-deny-action@bb137d7af7e4fb67e5f82a49c4fce4fad40782fe # v2.0.20 + uses: EmbarkStudios/cargo-deny-action@3c6349835b2b7b196a839186cb8b78e02f7b5f25 # v2.1.1 with: command: check ${{ matrix.checks }} rust-version: stable @@ -80,8 +80,8 @@ jobs: actions: read # only needed for private or internal repos steps: - name: Checkout repository - uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6.0.3 + uses: actions/checkout@d23441a48e516b6c34aea4fa41551a30e30af803 # v6.1.0 with: persist-credentials: false - name: Run zizmor - uses: zizmorcore/zizmor-action@192e21d79ab29983730a13d1382995c2307fbcaa # v0.5.7 + uses: zizmorcore/zizmor-action@6fc4b006235f201fdab3722e17240ab420d580e5 # v0.6.1 diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml index 118b7086..f361a1e6 100644 --- a/.github/workflows/ci.yml +++ b/.github/workflows/ci.yml @@ -43,7 +43,7 @@ jobs: CARGO_PROFILE_DEV_DEBUG: line-tables-only steps: - name: Checkout repository - uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6.0.3 + uses: actions/checkout@d23441a48e516b6c34aea4fa41551a30e30af803 # v6.1.0 with: persist-credentials: false - name: Install Rust @@ -53,7 +53,7 @@ jobs: - name: Initialize cache uses: Swatinem/rust-cache@c19371144df3bb44fab255c43d04cbc2ab54d1c4 # v2.9.1 - name: Install cargo-hack - uses: taiki-e/install-action@16b05812d776ae1dfaabc8277e421fb6d2506419 # v2.82.7 + uses: taiki-e/install-action@6a1bd70eaac3c8bdf093356838d7ee09fda951cf # v2.85.5 with: tool: cargo-hack - name: Build @@ -68,7 +68,7 @@ jobs: runs-on: ${{ matrix.os }} steps: - name: Checkout repository - uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6.0.3 + uses: actions/checkout@d23441a48e516b6c34aea4fa41551a30e30af803 # v6.1.0 with: persist-credentials: false - name: Install Rust @@ -78,7 +78,7 @@ jobs: - name: Initialize cache uses: Swatinem/rust-cache@c19371144df3bb44fab255c43d04cbc2ab54d1c4 # v2.9.1 - name: Install cargo-hack - uses: taiki-e/install-action@16b05812d776ae1dfaabc8277e421fb6d2506419 # v2.82.7 + uses: taiki-e/install-action@6a1bd70eaac3c8bdf093356838d7ee09fda951cf # v2.85.5 with: tool: cargo-hack - name: Default features @@ -91,7 +91,7 @@ jobs: runs-on: ${{ matrix.os }} steps: - name: Checkout repository - uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6.0.3 + uses: actions/checkout@d23441a48e516b6c34aea4fa41551a30e30af803 # v6.1.0 with: persist-credentials: false - name: Install stable Rust @@ -110,7 +110,7 @@ jobs: runs-on: ubuntu-latest steps: - name: Checkout repository - uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6.0.3 + uses: actions/checkout@d23441a48e516b6c34aea4fa41551a30e30af803 # v6.1.0 with: persist-credentials: false - name: Install Rust @@ -126,7 +126,7 @@ jobs: runs-on: ubuntu-latest steps: - name: Checkout repository - uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6.0.3 + uses: actions/checkout@d23441a48e516b6c34aea4fa41551a30e30af803 # v6.1.0 with: persist-credentials: false - name: Install Rust @@ -144,7 +144,7 @@ jobs: runs-on: ubuntu-latest steps: - name: Checkout repository - uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6.0.3 + uses: actions/checkout@d23441a48e516b6c34aea4fa41551a30e30af803 # v6.1.0 with: persist-credentials: false - name: Install Rust @@ -163,7 +163,7 @@ jobs: security-events: write # to upload sarif results steps: - name: Checkout repository - uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6.0.3 + uses: actions/checkout@d23441a48e516b6c34aea4fa41551a30e30af803 # v6.1.0 with: persist-credentials: false - name: Install Rust @@ -185,7 +185,7 @@ jobs: | sarif-fmt continue-on-error: true - name: Upload - uses: github/codeql-action/upload-sarif@8aad20d150bbac5944a9f9d289da16a4b0d87c1e # v4.36.2 + uses: github/codeql-action/upload-sarif@f205ea1c3313d32999d8d6a48b4f6530d4437b38 # v4.37.4 with: sarif_file: clippy-results.sarif wait-for-processing: true @@ -200,7 +200,7 @@ jobs: code-quality: write steps: - name: Checkout repository - uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6.0.3 + uses: actions/checkout@d23441a48e516b6c34aea4fa41551a30e30af803 # v6.1.0 with: persist-credentials: false - name: Install Rust @@ -215,7 +215,7 @@ jobs: run: cargo tarpaulin --out xml - name: Upload coverage report if: github.event_name != 'pull_request' || github.event.pull_request.head.repo.full_name == github.repository - uses: actions/upload-code-coverage@a72ab75b4dee0e479386fb9bf33c8dcf64b9c772 # v1.4.0 + uses: actions/upload-code-coverage@1c15be36fc3733ba839b1dd643bd9556e4426dc1 # v1.4.1 with: file: cobertura.xml language: Rust diff --git a/.github/workflows/committed.yml b/.github/workflows/committed.yml index cb8222f9..509067f9 100644 --- a/.github/workflows/committed.yml +++ b/.github/workflows/committed.yml @@ -21,7 +21,7 @@ jobs: runs-on: ubuntu-latest steps: - name: Checkout repository - uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6.0.3 + uses: actions/checkout@d23441a48e516b6c34aea4fa41551a30e30af803 # v6.1.0 with: fetch-depth: 0 persist-credentials: false diff --git a/.github/workflows/pre-commit.yml b/.github/workflows/pre-commit.yml index 97a74e9c..d4b8842d 100644 --- a/.github/workflows/pre-commit.yml +++ b/.github/workflows/pre-commit.yml @@ -23,10 +23,10 @@ jobs: runs-on: ubuntu-latest steps: - name: Checkout repository - uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6.0.3 + uses: actions/checkout@d23441a48e516b6c34aea4fa41551a30e30af803 # v6.1.0 with: persist-credentials: false - name: prek - uses: j178/prek-action@e98a699c41eb69ab013a45817a0406469a748f8d # v2.0.5 + uses: j178/prek-action@5337cb91e0fa35a7ff31b9ca345126d8bbbcdf16 # v2.0.6 with: prek-version: '0.4.11' diff --git a/.github/workflows/rust-next.yml b/.github/workflows/rust-next.yml index a6545729..ff253967 100644 --- a/.github/workflows/rust-next.yml +++ b/.github/workflows/rust-next.yml @@ -33,7 +33,7 @@ jobs: CARGO_PROFILE_DEV_DEBUG: line-tables-only steps: - name: Checkout repository - uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6.0.3 + uses: actions/checkout@d23441a48e516b6c34aea4fa41551a30e30af803 # v6.1.0 with: persist-credentials: false - name: Install Rust @@ -43,7 +43,7 @@ jobs: - name: Initialize cache uses: Swatinem/rust-cache@c19371144df3bb44fab255c43d04cbc2ab54d1c4 # v2.9.1 - name: Install cargo-hack - uses: taiki-e/install-action@16b05812d776ae1dfaabc8277e421fb6d2506419 # v2.82.7 + uses: taiki-e/install-action@6a1bd70eaac3c8bdf093356838d7ee09fda951cf # v2.85.5 with: tool: cargo-hack - name: Build @@ -60,7 +60,7 @@ jobs: CARGO_RESOLVER_INCOMPATIBLE_RUST_VERSIONS: allow steps: - name: Checkout repository - uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6.0.3 + uses: actions/checkout@d23441a48e516b6c34aea4fa41551a30e30af803 # v6.1.0 with: persist-credentials: false - name: Install Rust @@ -70,7 +70,7 @@ jobs: - name: Initialize cache uses: Swatinem/rust-cache@c19371144df3bb44fab255c43d04cbc2ab54d1c4 # v2.9.1 - name: Install cargo-hack - uses: taiki-e/install-action@16b05812d776ae1dfaabc8277e421fb6d2506419 # v2.82.7 + uses: taiki-e/install-action@6a1bd70eaac3c8bdf093356838d7ee09fda951cf # v2.85.5 with: tool: cargo-hack - name: Update dependencies diff --git a/.github/workflows/spelling.yml b/.github/workflows/spelling.yml index 366e7f84..22fc8a3c 100644 --- a/.github/workflows/spelling.yml +++ b/.github/workflows/spelling.yml @@ -20,7 +20,7 @@ jobs: runs-on: ubuntu-latest steps: - name: Checkout Actions Repository - uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6.0.3 + uses: actions/checkout@d23441a48e516b6c34aea4fa41551a30e30af803 # v6.1.0 with: persist-credentials: false - name: Spell Check Repo diff --git a/.github/workflows/template.yml b/.github/workflows/template.yml index 36a9c000..755b8293 100644 --- a/.github/workflows/template.yml +++ b/.github/workflows/template.yml @@ -28,7 +28,7 @@ jobs: runs-on: ubuntu-latest steps: - name: Checkout repository - uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6.0.3 + uses: actions/checkout@d23441a48e516b6c34aea4fa41551a30e30af803 # v6.1.0 with: fetch-depth: 0 persist-credentials: true # to push the branch and create PR