Skip to content

Commit 58da277

Browse files
cknittclaude
cknitt
and
claude
authored
CI: Binaryen 133, pin rclone-actions, Dependabot for composite actions (#8913)
* Bump Binaryen from 131 to 133 in CI Updates the Binaryen release that the setup-ocaml action installs for wasm_of_ocaml, with the SHA-256 checksums of the three supported archives (x86_64-linux, aarch64-linux, arm64-macos). The checksums match the release's .sha256 files, GitHub's asset digests and a local download. Review: the action installs Binaryen on every run, outside the opam cache, so the new version takes effect without a cache key change. The browser profile build of compiler/jsoo (wasm mode) succeeds with Binaryen 133, and prints the same two integer-overflow warnings as with Binaryen 120. Area: ci Output: unchanged Tests: none, because CI installs and checks Binaryen in every OCaml setup Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com> Claude-Session: https://claude.ai/code/session_014eaBQ3wiTweSGaR2T2uxQX Signed-off-by: Christoph Knittel <ck@cca.io> * Pin cometkim/rclone-actions to a commit Replaces the ten `@main` references to cometkim/rclone-actions (setup-rclone and configure-remote/s3-provider) in the playground preview, publish and semantic diff workflows with the commit that `main` points to today, 8d9c6b9534 from 2025-06-18. These steps run with the S3 credentials, so a later push to the action's main branch no longer changes what they execute. Review: the pinned code installs rclone from downloads.rclone.org or the rclone GitHub releases and writes the S3 remote with `rclone config`; the bundled setup-rclone/dist/main.js contacts only those hosts and the GitHub API. The repository has no tags, so Dependabot does not update this pin; moving it is a deliberate change. Area: ci Output: unchanged Tests: none, because the pinned commit is the one these workflows already run Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com> Claude-Session: https://claude.ai/code/session_014eaBQ3wiTweSGaR2T2uxQX Signed-off-by: Christoph Knittel <ck@cca.io> * Let Dependabot update actions in composite actions Adds `/.github/actions/*` to the github-actions entry of dependabot.yml, so Dependabot also updates the actions that the composite actions use (actions/cache, actions/setup-node, actions/github-script, ocaml/setup-ocaml). It missed the setup-node composite action in #8887. Review: the setup-ocaml composite action repeats the ocaml/setup-ocaml version (3.9.0) in its cache key, and a cache hit skips that step. A comment there says to update both together, since Dependabot changes only the `uses:` line. Area: ci Output: unchanged Tests: none, because Dependabot reads the configuration on its next run; both files parse as YAML Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com> Claude-Session: https://claude.ai/code/session_014eaBQ3wiTweSGaR2T2uxQX Signed-off-by: Christoph Knittel <ck@cca.io> * Add a changelog fragment for the CI dependency updates Area: docs Output: unchanged Tests: none, because `yarn changelog:check` validates the fragment Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com> Claude-Session: https://claude.ai/code/session_014eaBQ3wiTweSGaR2T2uxQX Signed-off-by: Christoph Knittel <ck@cca.io> --------- Signed-off-by: Christoph Knittel <ck@cca.io> Co-authored-by: Claude Opus 5.5 <noreply@anthropic.com>
1 parent f52f1d1 commit 58da277

7 files changed

Lines changed: 22 additions & 16 deletions

File tree

‎.github/actions/setup-ocaml/action.yml‎

Lines changed: 6 additions & 4 deletions
Original file line numberDiff line numberDiff line change
@@ -30,20 +30,20 @@ runs:
3030
if: runner.os != 'Windows'
3131
shell: bash
3232
env:
33-
BINARYEN_VERSION: "131"
33+
BINARYEN_VERSION: "133"
3434
run: |
3535
case "$RUNNER_OS-$RUNNER_ARCH" in
3636
Linux-X64)
3737
platform=x86_64-linux
38-
checksum=b5bf1f0eaf17c63ee588ff7a5954dc8f6ce2c26989051c66f24dfe9ece3e46db
38+
checksum=2dc9c7813f5375db93d96ead4b78222fcc3e2677bbb832297af4797782a37489
3939
;;
4040
Linux-ARM64)
4141
platform=aarch64-linux
42-
checksum=ba991f677edd9a21d2bc96c0144bc8ac5b112d4d98a3eb266e075e22e557df2a
42+
checksum=89c07ea56faf38d0fbecf36ca8ec0721756716185f265b568e133d427f299bf8
4343
;;
4444
macOS-ARM64)
4545
platform=arm64-macos
46-
checksum=e441b48dc22163d209b4f05e44dc7210909b01237642b6c9ae48fd710a3ef83e
46+
checksum=ad66da82ac13f163e424b1643f16c6dfcccc98b5966296b43e52d3cab04f84a8
4747
;;
4848
*)
4949
echo "Unsupported Binaryen platform: $RUNNER_OS-$RUNNER_ARCH" >&2
@@ -75,6 +75,8 @@ runs:
7575
COMPILER: ${{ inputs.compiler }}
7676
DEPENDENCY_FLAGS: ${{ inputs.dependency-flags }}
7777
OS: ${{ inputs.os }}
78+
# 3.9.0 is the ocaml/setup-ocaml version below. Update both together:
79+
# Dependabot bumps only the `uses:` line, and a cache hit skips that step.
7880
run: |
7981
dependency_flags_key="${DEPENDENCY_FLAGS//--/}"
8082
dependency_flags_key="${dependency_flags_key// /_}"

‎.github/dependabot.yml‎

Lines changed: 5 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -6,8 +6,11 @@ updates:
66
schedule:
77
interval: "weekly"
88

9-
# Manage GitHub Actions dependencies
9+
# Manage GitHub Actions dependencies in the workflows and in the composite
10+
# actions under .github/actions
1011
- package-ecosystem: "github-actions"
11-
directory: "/"
12+
directories:
13+
- "/"
14+
- "/.github/actions/*"
1215
schedule:
1316
interval: "weekly"

‎.github/workflows/playground_preview_cleanup.yml‎

Lines changed: 2 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -11,10 +11,10 @@ jobs:
1111
runs-on: ubuntu-26.04
1212
steps:
1313
- name: Setup Rclone
14-
uses: cometkim/rclone-actions/setup-rclone@main
14+
uses: cometkim/rclone-actions/setup-rclone@8d9c6b95341f7698609deee65c3d62af42893288 # main, 2025-06-18
1515

1616
- name: Configure Rclone remote
17-
uses: cometkim/rclone-actions/configure-remote/s3-provider@main
17+
uses: cometkim/rclone-actions/configure-remote/s3-provider@8d9c6b95341f7698609deee65c3d62af42893288 # main, 2025-06-18
1818
with:
1919
name: rescript
2020
provider: Cloudflare

‎.github/workflows/playground_preview_upload.yml‎

Lines changed: 2 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -25,10 +25,10 @@ jobs:
2525
github-token: ${{ secrets.GITHUB_TOKEN }}
2626

2727
- name: Setup Rclone
28-
uses: cometkim/rclone-actions/setup-rclone@main
28+
uses: cometkim/rclone-actions/setup-rclone@8d9c6b95341f7698609deee65c3d62af42893288 # main, 2025-06-18
2929

3030
- name: Configure Rclone remote
31-
uses: cometkim/rclone-actions/configure-remote/s3-provider@main
31+
uses: cometkim/rclone-actions/configure-remote/s3-provider@8d9c6b95341f7698609deee65c3d62af42893288 # main, 2025-06-18
3232
with:
3333
name: rescript
3434
provider: Cloudflare

‎.github/workflows/publish.yml‎

Lines changed: 2 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -137,10 +137,10 @@ jobs:
137137
path: packages/playground
138138

139139
- name: Setup Rclone
140-
uses: cometkim/rclone-actions/setup-rclone@main
140+
uses: cometkim/rclone-actions/setup-rclone@8d9c6b95341f7698609deee65c3d62af42893288 # main, 2025-06-18
141141

142142
- name: Configure Rclone remote
143-
uses: cometkim/rclone-actions/configure-remote/s3-provider@main
143+
uses: cometkim/rclone-actions/configure-remote/s3-provider@8d9c6b95341f7698609deee65c3d62af42893288 # main, 2025-06-18
144144
with:
145145
name: rescript
146146
provider: Cloudflare

‎.github/workflows/semantic_diff.yml‎

Lines changed: 4 additions & 4 deletions
Original file line numberDiff line numberDiff line change
@@ -53,10 +53,10 @@ jobs:
5353
echo "head=$(git rev-parse --short=9 "pr-${PR_NUMBER}")" >> "$GITHUB_OUTPUT"
5454
5555
- name: Setup Rclone
56-
uses: cometkim/rclone-actions/setup-rclone@main
56+
uses: cometkim/rclone-actions/setup-rclone@8d9c6b95341f7698609deee65c3d62af42893288 # main, 2025-06-18
5757

5858
- name: Configure Rclone remote
59-
uses: cometkim/rclone-actions/configure-remote/s3-provider@main
59+
uses: cometkim/rclone-actions/configure-remote/s3-provider@8d9c6b95341f7698609deee65c3d62af42893288 # main, 2025-06-18
6060
with:
6161
name: rescript
6262
provider: Cloudflare
@@ -91,10 +91,10 @@ jobs:
9191
permissions: {}
9292
steps:
9393
- name: Setup Rclone
94-
uses: cometkim/rclone-actions/setup-rclone@main
94+
uses: cometkim/rclone-actions/setup-rclone@8d9c6b95341f7698609deee65c3d62af42893288 # main, 2025-06-18
9595

9696
- name: Configure Rclone remote
97-
uses: cometkim/rclone-actions/configure-remote/s3-provider@main
97+
uses: cometkim/rclone-actions/configure-remote/s3-provider@8d9c6b95341f7698609deee65c3d62af42893288 # main, 2025-06-18
9898
with:
9999
name: rescript
100100
provider: Cloudflare

‎changes/ci-dependency-pins.internal.md‎

Lines changed: 1 addition & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1 @@
1+
- Update Binaryen to 133 in CI, pin cometkim/rclone-actions to a commit, and let Dependabot update the actions used by composite actions.

0 commit comments

Comments
 (0)