diff --git a/.github/workflows/act_build.yml b/.github/workflows/act_build.yml index 2a1e2b4..29fe9bc 100644 --- a/.github/workflows/act_build.yml +++ b/.github/workflows/act_build.yml @@ -40,7 +40,7 @@ jobs: debug_info: - packed steps: - - uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8 # v6.0.1 + - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2 with: persist-credentials: false - name: Install Rust @@ -58,7 +58,7 @@ jobs: echo "# Ld" ld -v - name: Install cross - uses: taiki-e/install-action@0ed4032d5406d133639ce4e858011eb498223338 # v2.62.39 + uses: taiki-e/install-action@cf525cb33f51aca27cd6fa02034117ab963ff9f1 # v2.75.22 with: tool: cross@latest # TODO: Cache is broken for cross compiles, figure this out @@ -83,7 +83,7 @@ jobs: fi tar cf dummare.tar dummare zstd -T0 -6 dummare.tar - - uses: actions/upload-artifact@b7c566a772e6b6bfb58ed0dc250532a479d7789f # v6.0.0 + - uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7.0.1 if: matrix.rust == 'stable' && contains(matrix.target, 'musl') with: name: dummare_${{ matrix.target }}.tar.zst @@ -107,7 +107,7 @@ jobs: - stable - nightly steps: - - uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8 # v6.0.1 + - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2 with: persist-credentials: false - name: Install Rust @@ -116,7 +116,7 @@ jobs: run: | curl -L https://github.com/cargo-bins/cargo-binstall/releases/latest/download/cargo-binstall-x86_64-unknown-linux-musl.tgz | tar -zxf - && mv cargo-binstall $HOME/.cargo/bin/ - name: Cache builds - uses: Swatinem/rust-cache@779680da715d629ac1d338a641029a2f4372abb5 # v2.8.2 + uses: Swatinem/rust-cache@c19371144df3bb44fab255c43d04cbc2ab54d1c4 # v2.9.1 - name: Compile run: cargo test --locked ${{ matrix.features }} --verbose --no-run - name: Test diff --git a/.github/workflows/act_build_release.yml b/.github/workflows/act_build_release.yml index 48bf8bd..cdb6083 100644 --- a/.github/workflows/act_build_release.yml +++ b/.github/workflows/act_build_release.yml @@ -46,7 +46,7 @@ jobs: permissions: contents: write steps: - - uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8 # v6.0.1 + - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2 with: persist-credentials: false - name: Setup Rust @@ -88,15 +88,15 @@ jobs: timeout-minutes: 60 steps: - name: Checkout repository - uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8 # v6.0.1 + uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2 with: persist-credentials: false - name: Install Rust toolchain uses: dtolnay/rust-toolchain@stable - - uses: taiki-e/install-action@3575e532701a5fc614b0c842e4119af4cc5fd16d # v2.62.60 + - uses: taiki-e/install-action@cf525cb33f51aca27cd6fa02034117ab963ff9f1 # v2.75.22 with: tool: cross@latest - - uses: taiki-e/upload-rust-binary-action@3962470d6e7f1993108411bc3f75a135ec67fc8c # v1.27.0 + - uses: taiki-e/upload-rust-binary-action@f0d45ae91ee7b8ee928de7a9d04d893a08bcbec6 # v1.30.2 id: upload-rust-binary-action name: Upload ${{ matrix.name }} with: @@ -108,6 +108,6 @@ jobs: env: RUSTFLAGS: -D warnings -Clink-arg=-Wl,--compress-debug-sections=zlib ${{ matrix.extra_rustflags }} - name: Generate artifact attestation - uses: actions/attest-build-provenance@00014ed6ed5efc5b1ab7f7f34a39eb55d41aa4f8 # v3.1.0 + uses: actions/attest-build-provenance@a2bbfa25375fe432b6a289bc6b6cd05ecd0c4c32 # v4.1.0 with: subject-path: "${{ steps.upload-rust-binary-action.outputs.archive }}.*" diff --git a/.github/workflows/act_lint.yml b/.github/workflows/act_lint.yml index 6e29917..ddf0dbd 100644 --- a/.github/workflows/act_lint.yml +++ b/.github/workflows/act_lint.yml @@ -15,7 +15,7 @@ jobs: security-events: write steps: - name: Checkout code - uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8 # v6.0.1 + uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2 with: persist-credentials: false @@ -30,7 +30,7 @@ jobs: run: cargo binstall --no-confirm --no-symlinks clippy-sarif sarif-fmt - name: Cache builds - uses: Swatinem/rust-cache@779680da715d629ac1d338a641029a2f4372abb5 # v2.8.2 + uses: Swatinem/rust-cache@c19371144df3bb44fab255c43d04cbc2ab54d1c4 # v2.9.1 - name: Run rust-clippy run: | @@ -41,7 +41,7 @@ jobs: continue-on-error: true - name: Upload analysis results to GitHub - uses: github/codeql-action/upload-sarif@5d4e8d1aca955e8d8589aabd499c5cae939e33c7 # v4.31.9 + uses: github/codeql-action/upload-sarif@95e58e9a2cdfd71adc6e0353d5c52f41a045d225 # v4.35.2 with: sarif_file: rust-clippy-results.sarif wait-for-processing: true @@ -53,7 +53,7 @@ jobs: name: Rustfmt runs-on: ubuntu-latest steps: - - uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8 # v6.0.1 + - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2 with: persist-credentials: false - name: Install Rust @@ -63,7 +63,7 @@ jobs: cargo-deny: runs-on: ubuntu-latest steps: - - uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8 # v6.0.1 + - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2 with: persist-credentials: false @@ -82,7 +82,7 @@ jobs: cargo-about: runs-on: ubuntu-latest steps: - - uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8 # v6.0.1 + - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2 with: persist-credentials: false diff --git a/.github/workflows/ci-dev.yml b/.github/workflows/ci-dev.yml index 11da522..6089ef6 100644 --- a/.github/workflows/ci-dev.yml +++ b/.github/workflows/ci-dev.yml @@ -29,7 +29,7 @@ jobs: permissions: contents: write steps: - - uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8 # v6.0.1 + - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2 with: # Shallow checkouts don't work for merging, so pull in enough history to likely work fetch-depth: 75 @@ -42,7 +42,7 @@ jobs: git checkout main git pull origin main git merge --ff-only dev - - uses: ad-m/github-push-action@77c5b412c50b723d2a4fbc6d71fb5723bcd439aa # v1.0.0 + - uses: ad-m/github-push-action@4cc74773234f74829a8c21bc4d69dd4be9cfa599 # v1.1.0 name: Push to main with: github_token: ${{ secrets.GH_PAT }} diff --git a/.github/workflows/release-plz-pr.yml b/.github/workflows/release-plz-pr.yml index cc768e6..cde2c1d 100644 --- a/.github/workflows/release-plz-pr.yml +++ b/.github/workflows/release-plz-pr.yml @@ -26,7 +26,7 @@ jobs: cancel-in-progress: false steps: - name: Checkout repository - uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8 # v6.0.1 + uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2 with: persist-credentials: true fetch-depth: 0 @@ -34,7 +34,7 @@ jobs: - name: Install Rust toolchain uses: dtolnay/rust-toolchain@stable - name: Run release-plz - uses: release-plz/action@487eb7b5c085a664d5c5ca05f4159bd9b591182a # v0.5.120 + uses: release-plz/action@1528104d2ca23787631a1c1f022abb64b34c1e11 # v0.5.128 with: command: release-pr env: diff --git a/.github/workflows/release-plz-release.yml b/.github/workflows/release-plz-release.yml index 3c42e7b..d4f7470 100644 --- a/.github/workflows/release-plz-release.yml +++ b/.github/workflows/release-plz-release.yml @@ -23,7 +23,7 @@ jobs: id-token: write steps: - name: Checkout repository - uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8 # v6.0.1 + uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2 with: persist-credentials: true fetch-depth: 0 @@ -31,7 +31,7 @@ jobs: - name: Install Rust toolchain uses: dtolnay/rust-toolchain@stable - name: Run release-plz - uses: release-plz/action@487eb7b5c085a664d5c5ca05f4159bd9b591182a # v0.5.120 + uses: release-plz/action@1528104d2ca23787631a1c1f022abb64b34c1e11 # v0.5.128 with: command: release env: