From f2b269d4c5fc76e82d58301a517fb498fdad4da2 Mon Sep 17 00:00:00 2001 From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com> Date: Sat, 24 Oct 2026 15:03:34 +0000 Subject: [PATCH] chore(deps): Bump the actions group across 1 directory with 6 updates Bumps the actions group with 6 updates in the / directory: | Package | From | To | | --- | --- | --- | | [astral-sh/setup-uv](https://github.com/astral-sh/setup-uv) | `10.3.0` | `10.3.1` | | [Swatinem/rust-cache](https://github.com/swatinem/rust-cache) | `f0d9c3887740aee45f6153b24b3a6b815192ec16` | `c8037a86dde8214a8310e9f54a8fc61ab362aa31` | | [taiki-e/install-action](https://github.com/taiki-e/install-action) | `2.87.28` | `2.87.30` | | [github/codeql-action/init](https://github.com/github/codeql-action) | `4.38.3` | `4.39.1` | | [github/codeql-action/analyze](https://github.com/github/codeql-action) | `4.38.3` | `4.39.1` | | [pypa/gh-action-pypi-publish](https://github.com/pypa/gh-action-pypi-publish) | `1.14.2` | `1.14.3` | Updates `astral-sh/setup-uv` from 10.3.0 to 10.3.1 - [Release notes](https://github.com/astral-sh/setup-uv/releases) - [Commits](https://github.com/astral-sh/setup-uv/compare/1c37ad07a6a961277cf70c0d37d6f313000f5884...18d369b23da25a81e9458561248e1aafff6a70fa) Updates `Swatinem/rust-cache` from f0d9c3887740aee45f6153b24b3a6b815192ec16 to c8037a86dde8214a8310e9f54a8fc61ab362aa31 - [Release notes](https://github.com/swatinem/rust-cache/releases) - [Changelog](https://github.com/Swatinem/rust-cache/blob/master/CHANGELOG.md) - [Commits](https://github.com/swatinem/rust-cache/compare/f0d9c3887740aee45f6153b24b3a6b815192ec16...c8037a86dde8214a8310e9f54a8fc61ab362aa31) Updates `taiki-e/install-action` from 2.87.28 to 2.87.30 - [Release notes](https://github.com/taiki-e/install-action/releases) - [Changelog](https://github.com/taiki-e/install-action/blob/main/CHANGELOG.md) - [Commits](https://github.com/taiki-e/install-action/compare/1168f6810a3cb30a3514bf5756a3b7f0422c6df8...a4d3f3f761dcd95cce1b72cb61cb6d1963438177) Updates `github/codeql-action/init` from 4.38.3 to 4.39.1 - [Release notes](https://github.com/github/codeql-action/releases) - [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md) - [Commits](https://github.com/github/codeql-action/compare/24c54180a607b1449ed407dd24f251e4e9147c8d...9b3254085494b55a0f7c4c2b3d2d52cc712ce370) Updates `github/codeql-action/analyze` from 4.38.3 to 4.39.1 - [Release notes](https://github.com/github/codeql-action/releases) - [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md) - [Commits](https://github.com/github/codeql-action/compare/24c54180a607b1449ed407dd24f251e4e9147c8d...9b3254085494b55a0f7c4c2b3d2d52cc712ce370) Updates `pypa/gh-action-pypi-publish` from 1.14.2 to 1.14.3 - [Release notes](https://github.com/pypa/gh-action-pypi-publish/releases) - [Commits](https://github.com/pypa/gh-action-pypi-publish/compare/dc37677b2e1c63e2034f94d8a5b11f265b73ba33...7245906fb61fa33a13554f9d5fb856fe61758086) --- updated-dependencies: - dependency-name: astral-sh/setup-uv dependency-version: 10.3.1 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: actions - dependency-name: github/codeql-action/analyze dependency-version: 4.39.1 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: actions - dependency-name: github/codeql-action/init dependency-version: 4.39.1 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: actions - dependency-name: pypa/gh-action-pypi-publish dependency-version: 1.14.3 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: actions - dependency-name: Swatinem/rust-cache dependency-version: c8037a86dde8214a8310e9f54a8fc61ab362aa31 dependency-type: direct:production dependency-group: actions - dependency-name: taiki-e/install-action dependency-version: 2.87.30 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: actions ... Signed-off-by: dependabot[bot] --- .github/workflows/ci.yml | 106 +++++++++--------- .github/workflows/codeql.yml | 4 +- .github/workflows/docs-pages.yml | 2 +- .github/workflows/macos-contributor.yml | 4 +- .github/workflows/nightly-rust-coverage.yml | 4 +- .github/workflows/nightly-security.yml | 12 +- .github/workflows/release-candidate.yml | 2 +- .github/workflows/release-rehearsal.yml | 2 +- .github/workflows/release-repeatability.yml | 2 +- .../workflows/release-upgrade-rehearsal.yml | 4 +- .github/workflows/release.yml | 2 +- .github/workflows/render-golden.yml | 2 +- 12 files changed, 73 insertions(+), 73 deletions(-) diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml index d6408081c6..69149b5e9a 100644 --- a/.github/workflows/ci.yml +++ b/.github/workflows/ci.yml @@ -117,7 +117,7 @@ jobs: run: products/identifiers/scripts/generate.py --check-references - name: Install uv - uses: astral-sh/setup-uv@1c37ad07a6a961277cf70c0d37d6f313000f5884 # v10.3.0 + uses: astral-sh/setup-uv@18d369b23da25a81e9458561248e1aafff6a70fa # v10.3.1 with: version: "0.11.16" @@ -238,7 +238,7 @@ jobs: submodules: false - name: Cache Cargo registry and build artifacts - uses: Swatinem/rust-cache@f0d9c3887740aee45f6153b24b3a6b815192ec16 # v2 + uses: Swatinem/rust-cache@c8037a86dde8214a8310e9f54a8fc61ab362aa31 # v2 with: key: platform-all-features save-if: ${{ github.ref == 'refs/heads/main' }} @@ -279,13 +279,13 @@ jobs: submodules: false - name: Cache Cargo registry and build artifacts - uses: Swatinem/rust-cache@f0d9c3887740aee45f6153b24b3a6b815192ec16 # v2 + uses: Swatinem/rust-cache@c8037a86dde8214a8310e9f54a8fc61ab362aa31 # v2 with: key: platform-coverage save-if: ${{ github.ref == 'refs/heads/main' }} - name: Install pinned coverage tool - uses: taiki-e/install-action@1168f6810a3cb30a3514bf5756a3b7f0422c6df8 # v2.87.28 + uses: taiki-e/install-action@a4d3f3f761dcd95cce1b72cb61cb6d1963438177 # v2.87.30 with: tool: cargo-llvm-cov@${{ env.CARGO_LLVM_COV_VERSION }} @@ -362,7 +362,7 @@ jobs: submodules: false - name: Cache Cargo registry - uses: Swatinem/rust-cache@f0d9c3887740aee45f6153b24b3a6b815192ec16 # v2 + uses: Swatinem/rust-cache@c8037a86dde8214a8310e9f54a8fc61ab362aa31 # v2 with: shared-key: workspace-registry cache-targets: false @@ -411,14 +411,14 @@ jobs: toolchain: nightly - name: Cache Cargo registry and build artifacts - uses: Swatinem/rust-cache@f0d9c3887740aee45f6153b24b3a6b815192ec16 # v2 + uses: Swatinem/rust-cache@c8037a86dde8214a8310e9f54a8fc61ab362aa31 # v2 with: key: platform-fuzz-${{ matrix.group }} save-if: ${{ github.ref == 'refs/heads/main' }} workspaces: products/platform/fuzz -> target - name: Install pinned cargo-fuzz - uses: taiki-e/install-action@1168f6810a3cb30a3514bf5756a3b7f0422c6df8 # v2.87.28 + uses: taiki-e/install-action@a4d3f3f761dcd95cce1b72cb61cb6d1963438177 # v2.87.30 with: tool: cargo-fuzz@${{ env.CARGO_FUZZ_VERSION }} @@ -469,14 +469,14 @@ jobs: toolchain: nightly - name: Cache Cargo registry and build artifacts - uses: Swatinem/rust-cache@f0d9c3887740aee45f6153b24b3a6b815192ec16 # v2 + uses: Swatinem/rust-cache@c8037a86dde8214a8310e9f54a8fc61ab362aa31 # v2 with: key: evidence-fuzz-${{ matrix.group }} save-if: ${{ github.ref == 'refs/heads/main' }} workspaces: products/evidence/fuzz -> target - name: Install pinned cargo-fuzz - uses: taiki-e/install-action@1168f6810a3cb30a3514bf5756a3b7f0422c6df8 # v2.87.28 + uses: taiki-e/install-action@a4d3f3f761dcd95cce1b72cb61cb6d1963438177 # v2.87.30 with: tool: cargo-fuzz@${{ env.CARGO_FUZZ_VERSION }} @@ -510,20 +510,20 @@ jobs: submodules: false - name: Cache Cargo registry - uses: Swatinem/rust-cache@f0d9c3887740aee45f6153b24b3a6b815192ec16 # v2 + uses: Swatinem/rust-cache@c8037a86dde8214a8310e9f54a8fc61ab362aa31 # v2 with: shared-key: workspace-registry cache-targets: false save-if: ${{ github.ref == 'refs/heads/main' }} - name: Install cargo-deny - uses: taiki-e/install-action@1168f6810a3cb30a3514bf5756a3b7f0422c6df8 # v2.87.28 + uses: taiki-e/install-action@a4d3f3f761dcd95cce1b72cb61cb6d1963438177 # v2.87.30 with: tool: cargo-deny@0.19.8 - name: Install uv if: needs.changes.outputs.release_tool != 'true' - uses: astral-sh/setup-uv@1c37ad07a6a961277cf70c0d37d6f313000f5884 # v10.3.0 + uses: astral-sh/setup-uv@18d369b23da25a81e9458561248e1aafff6a70fa # v10.3.1 with: version: "0.11.16" @@ -588,7 +588,7 @@ jobs: submodules: false - name: Cache Cargo registry - uses: Swatinem/rust-cache@f0d9c3887740aee45f6153b24b3a6b815192ec16 # v2 + uses: Swatinem/rust-cache@c8037a86dde8214a8310e9f54a8fc61ab362aa31 # v2 with: shared-key: workspace-registry cache-targets: false @@ -631,7 +631,7 @@ jobs: submodules: false - name: Cache Cargo registry - uses: Swatinem/rust-cache@f0d9c3887740aee45f6153b24b3a6b815192ec16 # v2 + uses: Swatinem/rust-cache@c8037a86dde8214a8310e9f54a8fc61ab362aa31 # v2 with: shared-key: workspace-registry cache-targets: false @@ -681,7 +681,7 @@ jobs: submodules: false - name: Cache Cargo registry - uses: Swatinem/rust-cache@f0d9c3887740aee45f6153b24b3a6b815192ec16 # v2 + uses: Swatinem/rust-cache@c8037a86dde8214a8310e9f54a8fc61ab362aa31 # v2 with: shared-key: workspace-registry cache-targets: false @@ -709,7 +709,7 @@ jobs: run: products/evidence/scripts/check-verifier-portability.sh - name: Install uv - uses: astral-sh/setup-uv@1c37ad07a6a961277cf70c0d37d6f313000f5884 # v10.3.0 + uses: astral-sh/setup-uv@18d369b23da25a81e9458561248e1aafff6a70fa # v10.3.1 with: version: "0.11.16" @@ -740,14 +740,14 @@ jobs: cache-dependency-path: docs/site/package-lock.json - name: Cache Cargo registry - uses: Swatinem/rust-cache@f0d9c3887740aee45f6153b24b3a6b815192ec16 # v2 + uses: Swatinem/rust-cache@c8037a86dde8214a8310e9f54a8fc61ab362aa31 # v2 with: shared-key: workspace-registry cache-targets: false save-if: ${{ github.ref == 'refs/heads/main' }} - name: Install uv - uses: astral-sh/setup-uv@1c37ad07a6a961277cf70c0d37d6f313000f5884 # v10.3.0 + uses: astral-sh/setup-uv@18d369b23da25a81e9458561248e1aafff6a70fa # v10.3.1 with: version: "0.11.16" @@ -818,7 +818,7 @@ jobs: persist-credentials: false submodules: false - name: Rust cache - uses: Swatinem/rust-cache@f0d9c3887740aee45f6153b24b3a6b815192ec16 # v2 + uses: Swatinem/rust-cache@c8037a86dde8214a8310e9f54a8fc61ab362aa31 # v2 with: shared-key: workspace-registry cache-targets: false @@ -931,14 +931,14 @@ jobs: submodules: false - name: Cache Cargo registry - uses: Swatinem/rust-cache@f0d9c3887740aee45f6153b24b3a6b815192ec16 # v2 + uses: Swatinem/rust-cache@c8037a86dde8214a8310e9f54a8fc61ab362aa31 # v2 with: shared-key: workspace-registry cache-targets: false save-if: ${{ github.ref == 'refs/heads/main' }} - name: Install uv - uses: astral-sh/setup-uv@1c37ad07a6a961277cf70c0d37d6f313000f5884 # v10.3.0 + uses: astral-sh/setup-uv@18d369b23da25a81e9458561248e1aafff6a70fa # v10.3.1 with: version: "0.11.16" @@ -975,13 +975,13 @@ jobs: persist-credentials: false submodules: false - name: Rust cache - uses: Swatinem/rust-cache@f0d9c3887740aee45f6153b24b3a6b815192ec16 # v2 + uses: Swatinem/rust-cache@c8037a86dde8214a8310e9f54a8fc61ab362aa31 # v2 with: shared-key: workspace-registry cache-targets: false save-if: ${{ github.ref == 'refs/heads/main' }} - name: Install uv - uses: astral-sh/setup-uv@1c37ad07a6a961277cf70c0d37d6f313000f5884 # v10.3.0 + uses: astral-sh/setup-uv@18d369b23da25a81e9458561248e1aafff6a70fa # v10.3.1 with: version: "0.11.16" @@ -1062,14 +1062,14 @@ jobs: submodules: false - name: Cache Cargo registry - uses: Swatinem/rust-cache@f0d9c3887740aee45f6153b24b3a6b815192ec16 # v2 + uses: Swatinem/rust-cache@c8037a86dde8214a8310e9f54a8fc61ab362aa31 # v2 with: shared-key: workspace-registry cache-targets: false save-if: ${{ github.ref == 'refs/heads/main' }} - name: Install uv - uses: astral-sh/setup-uv@1c37ad07a6a961277cf70c0d37d6f313000f5884 # v10.3.0 + uses: astral-sh/setup-uv@18d369b23da25a81e9458561248e1aafff6a70fa # v10.3.1 with: version: "0.11.16" @@ -1109,13 +1109,13 @@ jobs: persist-credentials: false submodules: false - name: Rust cache - uses: Swatinem/rust-cache@f0d9c3887740aee45f6153b24b3a6b815192ec16 # v2 + uses: Swatinem/rust-cache@c8037a86dde8214a8310e9f54a8fc61ab362aa31 # v2 with: shared-key: workspace-registry cache-targets: false save-if: ${{ github.ref == 'refs/heads/main' }} - name: Install uv - uses: astral-sh/setup-uv@1c37ad07a6a961277cf70c0d37d6f313000f5884 # v10.3.0 + uses: astral-sh/setup-uv@18d369b23da25a81e9458561248e1aafff6a70fa # v10.3.1 with: version: "0.11.16" @@ -1172,7 +1172,7 @@ jobs: submodules: false - name: Install uv - uses: astral-sh/setup-uv@1c37ad07a6a961277cf70c0d37d6f313000f5884 # v10.3.0 + uses: astral-sh/setup-uv@18d369b23da25a81e9458561248e1aafff6a70fa # v10.3.1 with: version: "0.11.16" @@ -1206,13 +1206,13 @@ jobs: persist-credentials: false submodules: false - name: Rust cache - uses: Swatinem/rust-cache@f0d9c3887740aee45f6153b24b3a6b815192ec16 # v2 + uses: Swatinem/rust-cache@c8037a86dde8214a8310e9f54a8fc61ab362aa31 # v2 with: shared-key: workspace-registry cache-targets: false save-if: ${{ github.ref == 'refs/heads/main' }} - name: Install uv - uses: astral-sh/setup-uv@1c37ad07a6a961277cf70c0d37d6f313000f5884 # v10.3.0 + uses: astral-sh/setup-uv@18d369b23da25a81e9458561248e1aafff6a70fa # v10.3.1 with: version: "0.11.16" @@ -1269,7 +1269,7 @@ jobs: persist-credentials: false submodules: false - name: Rust cache - uses: Swatinem/rust-cache@f0d9c3887740aee45f6153b24b3a6b815192ec16 # v2 + uses: Swatinem/rust-cache@c8037a86dde8214a8310e9f54a8fc61ab362aa31 # v2 with: shared-key: workspace-registry cache-targets: false @@ -1317,7 +1317,7 @@ jobs: persist-credentials: false submodules: false - name: Rust cache - uses: Swatinem/rust-cache@f0d9c3887740aee45f6153b24b3a6b815192ec16 # v2 + uses: Swatinem/rust-cache@c8037a86dde8214a8310e9f54a8fc61ab362aa31 # v2 with: shared-key: workspace-registry cache-targets: false @@ -1380,7 +1380,7 @@ jobs: } >> "${GITHUB_ENV}" - name: Cache Cargo registry - uses: Swatinem/rust-cache@f0d9c3887740aee45f6153b24b3a6b815192ec16 # v2 + uses: Swatinem/rust-cache@c8037a86dde8214a8310e9f54a8fc61ab362aa31 # v2 with: shared-key: workspace-registry cache-targets: false @@ -1388,7 +1388,7 @@ jobs: - name: Install uv if: matrix.lane != 'immediate-actions' - uses: astral-sh/setup-uv@1c37ad07a6a961277cf70c0d37d6f313000f5884 # v10.3.0 + uses: astral-sh/setup-uv@18d369b23da25a81e9458561248e1aafff6a70fa # v10.3.1 with: version: "0.11.16" @@ -1585,7 +1585,7 @@ jobs: printf 'port=%s\n' "${port}" >> "${GITHUB_OUTPUT}" - name: Cache Cargo registry - uses: Swatinem/rust-cache@f0d9c3887740aee45f6153b24b3a6b815192ec16 # v2 + uses: Swatinem/rust-cache@c8037a86dde8214a8310e9f54a8fc61ab362aa31 # v2 with: shared-key: workspace-registry cache-targets: false @@ -1651,7 +1651,7 @@ jobs: submodules: false - name: Cache Cargo registry - uses: Swatinem/rust-cache@f0d9c3887740aee45f6153b24b3a6b815192ec16 # v2 + uses: Swatinem/rust-cache@c8037a86dde8214a8310e9f54a8fc61ab362aa31 # v2 with: shared-key: workspace-registry cache-targets: false @@ -1690,7 +1690,7 @@ jobs: submodules: false - name: Cache Cargo registry - uses: Swatinem/rust-cache@f0d9c3887740aee45f6153b24b3a6b815192ec16 # v2 + uses: Swatinem/rust-cache@c8037a86dde8214a8310e9f54a8fc61ab362aa31 # v2 with: shared-key: workspace-registry cache-targets: false @@ -1723,7 +1723,7 @@ jobs: submodules: false - name: Cache Cargo registry - uses: Swatinem/rust-cache@f0d9c3887740aee45f6153b24b3a6b815192ec16 # v2 + uses: Swatinem/rust-cache@c8037a86dde8214a8310e9f54a8fc61ab362aa31 # v2 with: shared-key: workspace-registry cache-targets: false @@ -1742,7 +1742,7 @@ jobs: run: cargo test --locked -p registry-breg-mcp -p registry-breg-review --features registry-breg-mcp/schema,registry-breg-review/schema --lib schema::tests - name: Install uv - uses: astral-sh/setup-uv@1c37ad07a6a961277cf70c0d37d6f313000f5884 # v10.3.0 + uses: astral-sh/setup-uv@18d369b23da25a81e9458561248e1aafff6a70fa # v10.3.1 with: version: "0.11.16" @@ -1868,7 +1868,7 @@ jobs: submodules: false - name: Install uv - uses: astral-sh/setup-uv@1c37ad07a6a961277cf70c0d37d6f313000f5884 # v10.3.0 + uses: astral-sh/setup-uv@18d369b23da25a81e9458561248e1aafff6a70fa # v10.3.1 with: version: "0.11.16" @@ -2078,7 +2078,7 @@ jobs: submodules: false - name: Install uv - uses: astral-sh/setup-uv@1c37ad07a6a961277cf70c0d37d6f313000f5884 # v10.3.0 + uses: astral-sh/setup-uv@18d369b23da25a81e9458561248e1aafff6a70fa # v10.3.1 with: version: "0.11.16" @@ -2143,7 +2143,7 @@ jobs: cache-dependency-path: docs/site/package-lock.json - name: Cache Cargo registry - uses: Swatinem/rust-cache@f0d9c3887740aee45f6153b24b3a6b815192ec16 # v2 + uses: Swatinem/rust-cache@c8037a86dde8214a8310e9f54a8fc61ab362aa31 # v2 with: shared-key: workspace-registry cache-targets: false @@ -2291,14 +2291,14 @@ jobs: cache-dependency-path: docs/site/package-lock.json - name: Cache Cargo registry - uses: Swatinem/rust-cache@f0d9c3887740aee45f6153b24b3a6b815192ec16 # v2 + uses: Swatinem/rust-cache@c8037a86dde8214a8310e9f54a8fc61ab362aa31 # v2 with: shared-key: workspace-registry cache-targets: false save-if: ${{ github.ref == 'refs/heads/main' }} - name: Install uv - uses: astral-sh/setup-uv@1c37ad07a6a961277cf70c0d37d6f313000f5884 # v10.3.0 + uses: astral-sh/setup-uv@18d369b23da25a81e9458561248e1aafff6a70fa # v10.3.1 with: version: "0.11.16" @@ -2397,7 +2397,7 @@ jobs: crates/registry-casework-client-node/package-lock.json docs/site/package-lock.json - name: Cache Cargo registry - uses: Swatinem/rust-cache@f0d9c3887740aee45f6153b24b3a6b815192ec16 # v2 + uses: Swatinem/rust-cache@c8037a86dde8214a8310e9f54a8fc61ab362aa31 # v2 with: shared-key: workspace-registry cache-targets: false @@ -2470,7 +2470,7 @@ jobs: cache-dependency-path: docs/site/package-lock.json - name: Cache Cargo registry - uses: Swatinem/rust-cache@f0d9c3887740aee45f6153b24b3a6b815192ec16 # v2 + uses: Swatinem/rust-cache@c8037a86dde8214a8310e9f54a8fc61ab362aa31 # v2 with: shared-key: workspace-registry cache-targets: false @@ -2526,7 +2526,7 @@ jobs: cache-dependency-path: docs/site/package-lock.json - name: Cache Cargo registry - uses: Swatinem/rust-cache@f0d9c3887740aee45f6153b24b3a6b815192ec16 # v2 + uses: Swatinem/rust-cache@c8037a86dde8214a8310e9f54a8fc61ab362aa31 # v2 with: shared-key: workspace-registry cache-targets: false @@ -2586,7 +2586,7 @@ jobs: cache-dependency-path: docs/site/package-lock.json - name: Cache Cargo registry - uses: Swatinem/rust-cache@f0d9c3887740aee45f6153b24b3a6b815192ec16 # v2 + uses: Swatinem/rust-cache@c8037a86dde8214a8310e9f54a8fc61ab362aa31 # v2 with: shared-key: workspace-registry cache-targets: false @@ -2646,7 +2646,7 @@ jobs: cache-dependency-path: docs/site/package-lock.json - name: Cache Cargo registry - uses: Swatinem/rust-cache@f0d9c3887740aee45f6153b24b3a6b815192ec16 # v2 + uses: Swatinem/rust-cache@c8037a86dde8214a8310e9f54a8fc61ab362aa31 # v2 with: shared-key: workspace-registry cache-targets: false @@ -2709,14 +2709,14 @@ jobs: submodules: false - name: Cache Cargo registry - uses: Swatinem/rust-cache@f0d9c3887740aee45f6153b24b3a6b815192ec16 # v2 + uses: Swatinem/rust-cache@c8037a86dde8214a8310e9f54a8fc61ab362aa31 # v2 with: shared-key: workspace-registry cache-targets: false save-if: ${{ github.ref == 'refs/heads/main' }} - name: Install uv - uses: astral-sh/setup-uv@1c37ad07a6a961277cf70c0d37d6f313000f5884 # v10.3.0 + uses: astral-sh/setup-uv@18d369b23da25a81e9458561248e1aafff6a70fa # v10.3.1 with: version: "0.11.16" @@ -3001,7 +3001,7 @@ jobs: crates/registry-stack-client-node/package-lock.json - name: Cache Cargo registry - uses: Swatinem/rust-cache@f0d9c3887740aee45f6153b24b3a6b815192ec16 # v2 + uses: Swatinem/rust-cache@c8037a86dde8214a8310e9f54a8fc61ab362aa31 # v2 with: shared-key: workspace-registry cache-targets: false @@ -3043,7 +3043,7 @@ jobs: done - name: Install uv - uses: astral-sh/setup-uv@1c37ad07a6a961277cf70c0d37d6f313000f5884 # v10.3.0 + uses: astral-sh/setup-uv@18d369b23da25a81e9458561248e1aafff6a70fa # v10.3.1 with: version: "0.11.16" diff --git a/.github/workflows/codeql.yml b/.github/workflows/codeql.yml index e0f96efaf6..da5f406330 100644 --- a/.github/workflows/codeql.yml +++ b/.github/workflows/codeql.yml @@ -48,7 +48,7 @@ jobs: uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 - name: Initialize CodeQL - uses: github/codeql-action/init@24c54180a607b1449ed407dd24f251e4e9147c8d # v4.38.3 + uses: github/codeql-action/init@9b3254085494b55a0f7c4c2b3d2d52cc712ce370 # v4.39.1 with: languages: ${{ matrix.language }} build-mode: ${{ matrix.build-mode }} @@ -56,6 +56,6 @@ jobs: config-file: ./.github/codeql/codeql-config.yml - name: Perform CodeQL Analysis - uses: github/codeql-action/analyze@24c54180a607b1449ed407dd24f251e4e9147c8d # v4.38.3 + uses: github/codeql-action/analyze@9b3254085494b55a0f7c4c2b3d2d52cc712ce370 # v4.39.1 with: category: "/language:${{ matrix.language }}" diff --git a/.github/workflows/docs-pages.yml b/.github/workflows/docs-pages.yml index 4da0b9af5d..ee8c570f97 100644 --- a/.github/workflows/docs-pages.yml +++ b/.github/workflows/docs-pages.yml @@ -105,7 +105,7 @@ jobs: } >> "${GITHUB_OUTPUT}" - name: Install uv - uses: astral-sh/setup-uv@1c37ad07a6a961277cf70c0d37d6f313000f5884 # v10.3.0 + uses: astral-sh/setup-uv@18d369b23da25a81e9458561248e1aafff6a70fa # v10.3.1 with: version: "0.11.16" diff --git a/.github/workflows/macos-contributor.yml b/.github/workflows/macos-contributor.yml index 5970afd714..94036daeb3 100644 --- a/.github/workflows/macos-contributor.yml +++ b/.github/workflows/macos-contributor.yml @@ -44,7 +44,7 @@ jobs: docs/site/package-lock.json - name: Install uv - uses: astral-sh/setup-uv@1c37ad07a6a961277cf70c0d37d6f313000f5884 # v10.3.0 + uses: astral-sh/setup-uv@18d369b23da25a81e9458561248e1aafff6a70fa # v10.3.1 with: version: "0.11.16" @@ -57,7 +57,7 @@ jobs: echo "$PWD/.macos-contributor-venv/bin" >> "$GITHUB_PATH" - name: Cache Cargo registry and build artifacts - uses: Swatinem/rust-cache@f0d9c3887740aee45f6153b24b3a6b815192ec16 # v2 + uses: Swatinem/rust-cache@c8037a86dde8214a8310e9f54a8fc61ab362aa31 # v2 with: key: macos-26-go-1.27.2 save-if: ${{ github.ref == 'refs/heads/main' }} diff --git a/.github/workflows/nightly-rust-coverage.yml b/.github/workflows/nightly-rust-coverage.yml index dfd23c45f8..221e7f6aea 100644 --- a/.github/workflows/nightly-rust-coverage.yml +++ b/.github/workflows/nightly-rust-coverage.yml @@ -81,14 +81,14 @@ jobs: submodules: false - name: Cache Cargo registry - uses: Swatinem/rust-cache@f0d9c3887740aee45f6153b24b3a6b815192ec16 # v2 + uses: Swatinem/rust-cache@c8037a86dde8214a8310e9f54a8fc61ab362aa31 # v2 with: shared-key: workspace-registry cache-targets: false save-if: false - name: Install pinned coverage tool - uses: taiki-e/install-action@1168f6810a3cb30a3514bf5756a3b7f0422c6df8 # v2.87.28 + uses: taiki-e/install-action@a4d3f3f761dcd95cce1b72cb61cb6d1963438177 # v2.87.30 with: tool: cargo-llvm-cov@${{ env.CARGO_LLVM_COV_VERSION }} diff --git a/.github/workflows/nightly-security.yml b/.github/workflows/nightly-security.yml index a47e95aac7..18adf9571e 100644 --- a/.github/workflows/nightly-security.yml +++ b/.github/workflows/nightly-security.yml @@ -75,10 +75,10 @@ jobs: toolchain: nightly - name: Cache Cargo registry and build artifacts - uses: Swatinem/rust-cache@f0d9c3887740aee45f6153b24b3a6b815192ec16 # v2 + uses: Swatinem/rust-cache@c8037a86dde8214a8310e9f54a8fc61ab362aa31 # v2 - name: Install cargo-fuzz - uses: taiki-e/install-action@1168f6810a3cb30a3514bf5756a3b7f0422c6df8 # v2.87.28 + uses: taiki-e/install-action@a4d3f3f761dcd95cce1b72cb61cb6d1963438177 # v2.87.30 with: tool: cargo-fuzz@${{ env.CARGO_FUZZ_VERSION }} @@ -127,10 +127,10 @@ jobs: toolchain: nightly - name: Cache Cargo registry and build artifacts - uses: Swatinem/rust-cache@f0d9c3887740aee45f6153b24b3a6b815192ec16 # v2 + uses: Swatinem/rust-cache@c8037a86dde8214a8310e9f54a8fc61ab362aa31 # v2 - name: Install cargo-fuzz - uses: taiki-e/install-action@1168f6810a3cb30a3514bf5756a3b7f0422c6df8 # v2.87.28 + uses: taiki-e/install-action@a4d3f3f761dcd95cce1b72cb61cb6d1963438177 # v2.87.30 with: tool: cargo-fuzz@${{ env.CARGO_FUZZ_VERSION }} @@ -175,10 +175,10 @@ jobs: toolchain: nightly - name: Cache Cargo registry and build artifacts - uses: Swatinem/rust-cache@f0d9c3887740aee45f6153b24b3a6b815192ec16 # v2 + uses: Swatinem/rust-cache@c8037a86dde8214a8310e9f54a8fc61ab362aa31 # v2 - name: Install cargo-fuzz - uses: taiki-e/install-action@1168f6810a3cb30a3514bf5756a3b7f0422c6df8 # v2.87.28 + uses: taiki-e/install-action@a4d3f3f761dcd95cce1b72cb61cb6d1963438177 # v2.87.30 with: tool: cargo-fuzz@${{ env.CARGO_FUZZ_VERSION }} diff --git a/.github/workflows/release-candidate.yml b/.github/workflows/release-candidate.yml index 5f178d0c62..0ec052055e 100644 --- a/.github/workflows/release-candidate.yml +++ b/.github/workflows/release-candidate.yml @@ -63,7 +63,7 @@ jobs: submodules: false - name: Install uv - uses: astral-sh/setup-uv@1c37ad07a6a961277cf70c0d37d6f313000f5884 # v10.3.0 + uses: astral-sh/setup-uv@18d369b23da25a81e9458561248e1aafff6a70fa # v10.3.1 with: version: "0.11.16" diff --git a/.github/workflows/release-rehearsal.yml b/.github/workflows/release-rehearsal.yml index 4d84e693ca..c1d7ec019e 100644 --- a/.github/workflows/release-rehearsal.yml +++ b/.github/workflows/release-rehearsal.yml @@ -137,7 +137,7 @@ jobs: run: npm ci --ignore-scripts - name: Install uv - uses: astral-sh/setup-uv@1c37ad07a6a961277cf70c0d37d6f313000f5884 # v10.3.0 + uses: astral-sh/setup-uv@18d369b23da25a81e9458561248e1aafff6a70fa # v10.3.1 with: version: "0.11.16" diff --git a/.github/workflows/release-repeatability.yml b/.github/workflows/release-repeatability.yml index 8c845adfb4..8c4eff2376 100644 --- a/.github/workflows/release-repeatability.yml +++ b/.github/workflows/release-repeatability.yml @@ -145,7 +145,7 @@ jobs: source/release/scripts/build-release-binaries.sh "${VERSION}" - name: Install uv - uses: astral-sh/setup-uv@1c37ad07a6a961277cf70c0d37d6f313000f5884 # v10.3.0 + uses: astral-sh/setup-uv@18d369b23da25a81e9458561248e1aafff6a70fa # v10.3.1 with: version: "0.11.16" diff --git a/.github/workflows/release-upgrade-rehearsal.yml b/.github/workflows/release-upgrade-rehearsal.yml index e5a12009f6..2927f7a6b6 100644 --- a/.github/workflows/release-upgrade-rehearsal.yml +++ b/.github/workflows/release-upgrade-rehearsal.yml @@ -49,7 +49,7 @@ jobs: submodules: false - name: Cache Cargo registry - uses: Swatinem/rust-cache@f0d9c3887740aee45f6153b24b3a6b815192ec16 # v2 + uses: Swatinem/rust-cache@c8037a86dde8214a8310e9f54a8fc61ab362aa31 # v2 with: shared-key: workspace-registry cache-targets: false @@ -61,7 +61,7 @@ jobs: cosign-release: v3.0.6 - name: Install uv - uses: astral-sh/setup-uv@1c37ad07a6a961277cf70c0d37d6f313000f5884 # v10.3.0 + uses: astral-sh/setup-uv@18d369b23da25a81e9458561248e1aafff6a70fa # v10.3.1 with: version: "0.11.16" diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml index 588546e0d1..c51e828355 100644 --- a/.github/workflows/release.yml +++ b/.github/workflows/release.yml @@ -1537,7 +1537,7 @@ jobs: - name: Publish absent exact wheels through PyPI trusted publishing if: steps.pypi_state.outputs.state != 'present' - uses: pypa/gh-action-pypi-publish@dc37677b2e1c63e2034f94d8a5b11f265b73ba33 # release/v1 + uses: pypa/gh-action-pypi-publish@7245906fb61fa33a13554f9d5fb856fe61758086 # release/v1 with: packages-dir: dist skip-existing: true diff --git a/.github/workflows/render-golden.yml b/.github/workflows/render-golden.yml index a90ec48149..e9105a5152 100644 --- a/.github/workflows/render-golden.yml +++ b/.github/workflows/render-golden.yml @@ -96,7 +96,7 @@ jobs: run: rustup toolchain install 1.95.0 --profile minimal - name: Cache Cargo registry and build artifacts - uses: Swatinem/rust-cache@f0d9c3887740aee45f6153b24b3a6b815192ec16 # v2 + uses: Swatinem/rust-cache@c8037a86dde8214a8310e9f54a8fc61ab362aa31 # v2 with: key: render-golden-go-1.27.2-${{ matrix.os }} save-if: ${{ github.ref == 'refs/heads/main' }}