Skip to content

chore(deps): bump the github-actions group across 1 directory with 13 updates #107

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Closed
dependabot wants to merge 1 commit into from
Closed

chore(deps): bump the github-actions group across 1 directory with 13 updates #107

Show file tree
Hide file tree
Changes from all commits
Commits
Show all changes
1 commit
Select commit
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
56 changes: 28 additions & 28 deletions .github/workflows/ci.yml
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -26,11 +26,11 @@
timeout-minutes: 10
steps:
- name: Checkout
uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6.0.3
uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
with:
persist-credentials: false
- name: Install Rust
uses: dtolnay/rust-toolchain@6c977a6ca4077a0ceb28ffbe03f59d46e9ac8772 # master

Check warning on line 33 in .github/workflows/ci.yml

View workflow job for this annotation

GitHub Actions / Workflow security

ref-version-mismatch 

ci.yml:33: action's hash pin has mismatched or missing version comment: points to commit 02cb101ec7c4
with:
toolchain: stable
components: rustfmt
Expand All @@ -43,15 +43,15 @@
timeout-minutes: 20
steps:
- name: Checkout
uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6.0.3
uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
with:
persist-credentials: false
- name: Install Rust
uses: dtolnay/rust-toolchain@6c977a6ca4077a0ceb28ffbe03f59d46e9ac8772 # master

Check warning on line 50 in .github/workflows/ci.yml

View workflow job for this annotation

GitHub Actions / Workflow security

ref-version-mismatch 

ci.yml:50: action's hash pin has mismatched or missing version comment: points to commit 02cb101ec7c4
with:
toolchain: stable
components: clippy
- uses: Swatinem/rust-cache@c19371144df3bb44fab255c43d04cbc2ab54d1c4 # v2.9.1
- uses: Swatinem/rust-cache@6323deb102c322ba6fcbdcafc7e3dddab59af2b6 # v2.9.2
- name: Run Clippy
run: >-
cargo clippy --workspace --exclude feanorfs-tray
Expand All @@ -64,14 +64,14 @@
timeout-minutes: 20
steps:
- name: Checkout
uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6.0.3
uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
with:
persist-credentials: false
- name: Install Rust 1.88
uses: dtolnay/rust-toolchain@6c977a6ca4077a0ceb28ffbe03f59d46e9ac8772 # master

Check warning on line 71 in .github/workflows/ci.yml

View workflow job for this annotation

GitHub Actions / Workflow security

ref-version-mismatch 

ci.yml:71: action's hash pin has mismatched or missing version comment: points to commit 02cb101ec7c4
with:
toolchain: "1.88.0"
- uses: Swatinem/rust-cache@c19371144df3bb44fab255c43d04cbc2ab54d1c4 # v2.9.1
- uses: Swatinem/rust-cache@6323deb102c322ba6fcbdcafc7e3dddab59af2b6 # v2.9.2
- name: Check minimum supported Rust version
run: >-
cargo check --workspace --exclude feanorfs-tray
Expand All @@ -83,14 +83,14 @@
timeout-minutes: 30
steps:
- name: Checkout
uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6.0.3
uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
with:
persist-credentials: false
- name: Install Rust
uses: dtolnay/rust-toolchain@6c977a6ca4077a0ceb28ffbe03f59d46e9ac8772 # master

Check warning on line 90 in .github/workflows/ci.yml

View workflow job for this annotation

GitHub Actions / Workflow security

ref-version-mismatch 

ci.yml:90: action's hash pin has mismatched or missing version comment: points to commit 02cb101ec7c4
with:
toolchain: stable
- uses: Swatinem/rust-cache@c19371144df3bb44fab255c43d04cbc2ab54d1c4 # v2.9.1
- uses: Swatinem/rust-cache@6323deb102c322ba6fcbdcafc7e3dddab59af2b6 # v2.9.2
- name: Run tests
run: >-
cargo test --workspace --exclude feanorfs-tray
Expand All @@ -107,14 +107,14 @@
os: [macos-latest, windows-latest]
steps:
- name: Checkout
uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6.0.3
uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
with:
persist-credentials: false
- name: Install Rust
uses: dtolnay/rust-toolchain@6c977a6ca4077a0ceb28ffbe03f59d46e9ac8772 # master

Check warning on line 114 in .github/workflows/ci.yml

View workflow job for this annotation

GitHub Actions / Workflow security

ref-version-mismatch 

ci.yml:114: action's hash pin has mismatched or missing version comment: points to commit 02cb101ec7c4
with:
toolchain: stable
- uses: Swatinem/rust-cache@c19371144df3bb44fab255c43d04cbc2ab54d1c4 # v2.9.1
- uses: Swatinem/rust-cache@6323deb102c322ba6fcbdcafc7e3dddab59af2b6 # v2.9.2
- name: Run tests
run: >-
cargo test --workspace --exclude feanorfs-tray
Expand All @@ -127,15 +127,15 @@
timeout-minutes: 60
steps:
- name: Checkout
uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6.0.3
uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
with:
fetch-depth: 0
persist-credentials: false
- name: Install Rust
uses: dtolnay/rust-toolchain@6c977a6ca4077a0ceb28ffbe03f59d46e9ac8772 # master

Check warning on line 135 in .github/workflows/ci.yml

View workflow job for this annotation

GitHub Actions / Workflow security

ref-version-mismatch 

ci.yml:135: action's hash pin has mismatched or missing version comment: points to commit 02cb101ec7c4
with:
toolchain: stable
- uses: Swatinem/rust-cache@c19371144df3bb44fab255c43d04cbc2ab54d1c4 # v2.9.1
- uses: Swatinem/rust-cache@6323deb102c322ba6fcbdcafc7e3dddab59af2b6 # v2.9.2
- name: Build current CLI
run: cargo build -p feanorfs-client --bin feanorfs --locked
- name: Checkout previous release
Expand Down Expand Up @@ -167,14 +167,14 @@
timeout-minutes: 45
steps:
- name: Checkout
uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6.0.3
uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
with:
persist-credentials: false
- name: Install Rust
uses: dtolnay/rust-toolchain@6c977a6ca4077a0ceb28ffbe03f59d46e9ac8772 # master

Check warning on line 174 in .github/workflows/ci.yml

View workflow job for this annotation

GitHub Actions / Workflow security

ref-version-mismatch 

ci.yml:174: action's hash pin has mismatched or missing version comment: points to commit 02cb101ec7c4
with:
toolchain: stable
- uses: Swatinem/rust-cache@c19371144df3bb44fab255c43d04cbc2ab54d1c4 # v2.9.1
- uses: Swatinem/rust-cache@6323deb102c322ba6fcbdcafc7e3dddab59af2b6 # v2.9.2
- name: Install Linux desktop dependencies
run: >-
sudo apt-get update &&
Expand All @@ -190,14 +190,14 @@
timeout-minutes: 20
steps:
- name: Checkout
uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6.0.3
uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
with:
persist-credentials: false
- name: Install Rust
uses: dtolnay/rust-toolchain@6c977a6ca4077a0ceb28ffbe03f59d46e9ac8772 # master

Check warning on line 197 in .github/workflows/ci.yml

View workflow job for this annotation

GitHub Actions / Workflow security

ref-version-mismatch 

ci.yml:197: action's hash pin has mismatched or missing version comment: points to commit 02cb101ec7c4
with:
toolchain: stable
- uses: Swatinem/rust-cache@c19371144df3bb44fab255c43d04cbc2ab54d1c4 # v2.9.1
- uses: Swatinem/rust-cache@6323deb102c322ba6fcbdcafc7e3dddab59af2b6 # v2.9.2
- name: Build documentation
run: >-
cargo doc --workspace --exclude feanorfs-tray
Expand All @@ -212,14 +212,14 @@
timeout-minutes: 30
steps:
- name: Checkout
uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6.0.3
uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
with:
persist-credentials: false
- name: Install Rust
uses: dtolnay/rust-toolchain@6c977a6ca4077a0ceb28ffbe03f59d46e9ac8772 # master

Check warning on line 219 in .github/workflows/ci.yml

View workflow job for this annotation

GitHub Actions / Workflow security

ref-version-mismatch 

ci.yml:219: action's hash pin has mismatched or missing version comment: points to commit 02cb101ec7c4
with:
toolchain: stable
- uses: Swatinem/rust-cache@c19371144df3bb44fab255c43d04cbc2ab54d1c4 # v2.9.1
- uses: Swatinem/rust-cache@6323deb102c322ba6fcbdcafc7e3dddab59af2b6 # v2.9.2
- name: Build optimized workspace
run: >-
cargo build --release --workspace --exclude feanorfs-tray --locked
Expand All @@ -235,14 +235,14 @@
os: [ubuntu-latest, macos-latest]
steps:
- name: Checkout
uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6.0.3
uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
with:
persist-credentials: false
- name: Install Rust
uses: dtolnay/rust-toolchain@6c977a6ca4077a0ceb28ffbe03f59d46e9ac8772 # master

Check warning on line 242 in .github/workflows/ci.yml

View workflow job for this annotation

GitHub Actions / Workflow security

ref-version-mismatch 

ci.yml:242: action's hash pin has mismatched or missing version comment: points to commit 02cb101ec7c4
with:
toolchain: stable
- uses: Swatinem/rust-cache@c19371144df3bb44fab255c43d04cbc2ab54d1c4 # v2.9.1
- uses: Swatinem/rust-cache@6323deb102c322ba6fcbdcafc7e3dddab59af2b6 # v2.9.2
- name: Build CLI (release)
run: cargo build --release -p feanorfs-client --locked
# Debug FFI matches zig build.zig profile_dir (.Debug => target/debug).
Expand All @@ -262,7 +262,7 @@
env:
FEANORFS_BIN: ${{ github.workspace }}/target/release/feanorfs
- name: Install Node
uses: actions/setup-node@48b55a011bda9f5d6aeb4c2d9c7362e8dae4041e # v6.4.0
uses: actions/setup-node@820762786026740c76f36085b0efc47a31fe5020 # v7.0.0
with:
node-version: "22"
cache: npm
Expand Down Expand Up @@ -329,7 +329,7 @@
timeout-minutes: 30
steps:
- name: Checkout
uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6.0.3
uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
with:
persist-credentials: false
- name: Install stable Rust
Expand All @@ -339,7 +339,7 @@
components: clippy
- name: Install MSRV Rust
run: rustup toolchain install 1.88.0 --profile minimal
- uses: Swatinem/rust-cache@c19371144df3bb44fab255c43d04cbc2ab54d1c4 # v2.9.1
- uses: Swatinem/rust-cache@6323deb102c322ba6fcbdcafc7e3dddab59af2b6 # v2.9.2
- name: Check tray MSRV
run: cargo +1.88.0 check -p feanorfs-tray --all-targets --locked
- name: Run tray Clippy
Expand Down Expand Up @@ -429,7 +429,7 @@
os: [ubuntu-latest, windows-latest]
steps:
- name: Checkout
uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6.0.3
uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
with:
persist-credentials: false
- name: Install Linux desktop dependencies
Expand Down Expand Up @@ -467,7 +467,7 @@
components: clippy
- name: Install MSRV Rust
run: rustup toolchain install 1.88.0 --profile minimal
- uses: Swatinem/rust-cache@c19371144df3bb44fab255c43d04cbc2ab54d1c4 # v2.9.1
- uses: Swatinem/rust-cache@6323deb102c322ba6fcbdcafc7e3dddab59af2b6 # v2.9.2
- name: Check tray MSRV
run: cargo +1.88.0 check -p feanorfs-tray --all-targets --locked
- name: Run tray Clippy
Expand Down Expand Up @@ -540,7 +540,7 @@
timeout-minutes: 45
steps:
- name: Checkout
uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6.0.3
uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
with:
persist-credentials: false
- name: Build and smoke hardened relay image
Expand All @@ -565,11 +565,11 @@
timeout-minutes: 10
steps:
- name: Checkout
uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6.0.3
uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
with:
persist-credentials: false
- name: Check advisories, licenses, bans, and sources
uses: EmbarkStudios/cargo-deny-action@bb137d7af7e4fb67e5f82a49c4fce4fad40782fe # v2.0.20
uses: EmbarkStudios/cargo-deny-action@3c6349835b2b7b196a839186cb8b78e02f7b5f25 # v2.1.1
with:
command: check
arguments: --all-features
Expand All @@ -580,7 +580,7 @@
timeout-minutes: 10
steps:
- name: Checkout
uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6.0.3
uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
with:
persist-credentials: false
- name: Run actionlint
Expand Down
12 changes: 6 additions & 6 deletions .github/workflows/desktop-release.yml
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -80,7 +80,7 @@ jobs:
} >> "$GITHUB_OUTPUT"

- name: Checkout verified release commit
uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6.0.3
uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
with:
fetch-depth: 0
persist-credentials: false
Expand Down Expand Up @@ -197,7 +197,7 @@ jobs:
nfpm_sha256: 1c0f5f2999b9a974bfb04fdb0cc3306096de530ac5dbb25d739cc5f5219c919c
steps:
- name: Checkout verified release commit
uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6.0.3
uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
with:
ref: ${{ needs.verify-release.outputs.sha }}
persist-credentials: false
Expand Down Expand Up @@ -315,7 +315,7 @@ jobs:
sha256sum -c "FeanorFS-linux-$ASSET_ARCH.rpm.sha256"
sha256sum -c "FeanorFS-linux-$ASSET_ARCH.pkg.tar.zst.sha256"
- name: Attest Linux release assets
uses: actions/attest@a1948c3f048ba23858d222213b7c278aabede763 # v4.1.1
uses: actions/attest@1e69f48acb82d1966a394da916b4c1698aa569d6 # v4.2.2
with:
subject-path: |
release/FeanorFS-linux-${{ matrix.asset_arch }}.tar.xz
Expand Down Expand Up @@ -352,7 +352,7 @@ jobs:
contents: read
steps:
- name: Checkout verified release commit
uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6.0.3
uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
with:
ref: ${{ needs.verify-release.outputs.sha }}
persist-credentials: false
Expand Down Expand Up @@ -440,7 +440,7 @@ jobs:
throw "Configure Azure OIDC and Artifact Signing before releasing Windows."
}
- name: Azure login with OIDC
uses: azure/login@532459ea530d8321f2fb9bb10d1e0bcf23869a43 # v3.0.0
uses: azure/login@7ddb5af1ef8758cf1353cf3b42f940aee27ba21c # v3.0.2
with:
client-id: ${{ secrets.AZURE_CLIENT_ID }}
tenant-id: ${{ secrets.AZURE_TENANT_ID }}
Expand Down Expand Up @@ -537,7 +537,7 @@ jobs:
-RequireAuthenticode
-HeadlessRunner
- name: Attest Windows release assets
uses: actions/attest@a1948c3f048ba23858d222213b7c278aabede763 # v4.1.1
uses: actions/attest@1e69f48acb82d1966a394da916b4c1698aa569d6 # v4.2.2
with:
subject-path: |
FeanorFS-windows-x86_64.zip
Expand Down
14 changes: 7 additions & 7 deletions .github/workflows/npm-release.yml
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -23,7 +23,7 @@ jobs:
version: ${{ steps.release.outputs.version }}
steps:
- name: Checkout release source
uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6.0.3
uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
with:
fetch-depth: 0
persist-credentials: false
Expand Down Expand Up @@ -124,7 +124,7 @@ jobs:
zig: false
steps:
- name: Checkout verified commit
uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6.0.3
uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
with:
persist-credentials: false
ref: ${{ needs.trust.outputs.sha }}
Expand All @@ -134,7 +134,7 @@ jobs:
toolchain: stable
targets: ${{ matrix.target }}
- name: Install Node
uses: actions/setup-node@48b55a011bda9f5d6aeb4c2d9c7362e8dae4041e # v6.4.0
uses: actions/setup-node@820762786026740c76f36085b0efc47a31fe5020 # v7.0.0
with:
node-version: "22"
package-manager-cache: false
Expand Down Expand Up @@ -182,7 +182,7 @@ jobs:
contents: read
steps:
- name: Checkout verified commit
uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6.0.3
uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
with:
persist-credentials: false
ref: ${{ needs.trust.outputs.sha }}
Expand All @@ -191,7 +191,7 @@ jobs:
with:
toolchain: stable
- name: Install Node
uses: actions/setup-node@48b55a011bda9f5d6aeb4c2d9c7362e8dae4041e # v6.4.0
uses: actions/setup-node@820762786026740c76f36085b0efc47a31fe5020 # v7.0.0
with:
node-version: "22"
package-manager-cache: false
Expand Down Expand Up @@ -264,12 +264,12 @@ jobs:
id-token: write
steps:
- name: Checkout verified commit
uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6.0.3
uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
with:
persist-credentials: false
ref: ${{ needs.trust.outputs.sha }}
- name: Install Node with npm registry
uses: actions/setup-node@48b55a011bda9f5d6aeb4c2d9c7362e8dae4041e # v6.4.0
uses: actions/setup-node@820762786026740c76f36085b0efc47a31fe5020 # v7.0.0
with:
node-version: "24"
package-manager-cache: false
Expand Down
Loading
Loading