From b6eaa991567e8a97108cc340434a4ea2fc1ce5e8 Mon Sep 17 00:00:00 2001 From: memosr Date: Fri, 24 Jul 2026 22:42:14 +0300 Subject: [PATCH 1/2] chore(ci): pin unpinned actions in ci.yml to SHAs --- .github/workflows/ci.yml | 22 +++++++++++----------- 1 file changed, 11 insertions(+), 11 deletions(-) diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml index b655f8f..a6a63f9 100644 --- a/.github/workflows/ci.yml +++ b/.github/workflows/ci.yml @@ -27,7 +27,7 @@ jobs: - uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6.0.3 - name: Install Rust toolchain - uses: actions-rust-lang/setup-rust-toolchain@v1 + uses: actions-rust-lang/setup-rust-toolchain@166cdcfd11aee3cb47222f9ddb555ce30ddb9659 # v1.17.0 with: components: rustfmt @@ -41,7 +41,7 @@ jobs: - uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6.0.3 - name: Install Rust toolchain - uses: actions-rust-lang/setup-rust-toolchain@v1 + uses: actions-rust-lang/setup-rust-toolchain@166cdcfd11aee3cb47222f9ddb555ce30ddb9659 # v1.17.0 - name: Install cargo-sort run: cargo install cargo-sort @@ -59,7 +59,7 @@ jobs: run: sudo apt-get update && sudo apt-get install -y --no-install-recommends libclang-dev zlib1g-dev - name: Install Rust toolchain - uses: actions-rust-lang/setup-rust-toolchain@v1 + uses: actions-rust-lang/setup-rust-toolchain@166cdcfd11aee3cb47222f9ddb555ce30ddb9659 # v1.17.0 with: components: clippy cache-shared-key: rust-build @@ -78,12 +78,12 @@ jobs: run: sudo apt-get update && sudo apt-get install -y --no-install-recommends libclang-dev zlib1g-dev - name: Install Rust toolchain - uses: actions-rust-lang/setup-rust-toolchain@v1 + uses: actions-rust-lang/setup-rust-toolchain@166cdcfd11aee3cb47222f9ddb555ce30ddb9659 # v1.17.0 with: cache-shared-key: rust-build - name: Install nextest - uses: taiki-e/install-action@v2 + uses: taiki-e/install-action@7572810d7dd469b651bb7793945692cf78da5dd7 # v2.85.0 with: tool: nextest @@ -104,7 +104,7 @@ jobs: run: sudo apt-get update && sudo apt-get install -y --no-install-recommends libclang-dev zlib1g-dev - name: Install Rust toolchain - uses: actions-rust-lang/setup-rust-toolchain@v1 + uses: actions-rust-lang/setup-rust-toolchain@166cdcfd11aee3cb47222f9ddb555ce30ddb9659 # v1.17.0 - name: Setup Node.js uses: actions/setup-node@48b55a011bda9f5d6aeb4c2d9c7362e8dae4041e # v6.4.0 @@ -120,12 +120,12 @@ jobs: run: echo "version=$(cat .foundry-version)" >> $GITHUB_OUTPUT - name: Install Foundry - uses: foundry-rs/foundry-toolchain@v1 + uses: foundry-rs/foundry-toolchain@b00af27efadbc7b4ca8b82abbd903b17cc874d2a # v1.9.0 with: version: ${{ steps.foundry-version.outputs.version }} - name: Install nextest - uses: taiki-e/install-action@v2 + uses: taiki-e/install-action@7572810d7dd469b651bb7793945692cf78da5dd7 # v2.85.0 with: tool: nextest @@ -185,7 +185,7 @@ jobs: run: echo "version=$(cat .foundry-version)" >> $GITHUB_OUTPUT - name: Install Foundry - uses: foundry-rs/foundry-toolchain@v1 + uses: foundry-rs/foundry-toolchain@b00af27efadbc7b4ca8b82abbd903b17cc874d2a # v1.9.0 with: version: ${{ steps.foundry-version.outputs.version }} @@ -215,7 +215,7 @@ jobs: run: echo "version=$(cat .foundry-version)" >> $GITHUB_OUTPUT - name: Install Foundry - uses: foundry-rs/foundry-toolchain@v1 + uses: foundry-rs/foundry-toolchain@b00af27efadbc7b4ca8b82abbd903b17cc874d2a # v1.9.0 with: version: ${{ steps.foundry-version.outputs.version }} @@ -237,7 +237,7 @@ jobs: run: echo "version=$(cat .foundry-version)" >> $GITHUB_OUTPUT - name: Install Foundry - uses: foundry-rs/foundry-toolchain@v1 + uses: foundry-rs/foundry-toolchain@b00af27efadbc7b4ca8b82abbd903b17cc874d2a # v1.9.0 with: version: ${{ steps.foundry-version.outputs.version }} From 3124f10c68cdd745f79b0c48798676f57a19c633 Mon Sep 17 00:00:00 2001 From: memosr Date: Fri, 24 Jul 2026 23:34:18 +0300 Subject: [PATCH 2/2] chore(ci): refresh stale pins in release-binaries.yaml --- .github/workflows/release-binaries.yaml | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/.github/workflows/release-binaries.yaml b/.github/workflows/release-binaries.yaml index 6fd313f..9f3f54b 100644 --- a/.github/workflows/release-binaries.yaml +++ b/.github/workflows/release-binaries.yaml @@ -75,7 +75,7 @@ jobs: echo "LIBCLANG_PATH=${LLVM_PREFIX}/lib" >> "$GITHUB_ENV" - name: Install Rust toolchain - uses: actions-rust-lang/setup-rust-toolchain@150fca883cd4034361b621bd4e6a9d34e5143606 # v1.15.4 + uses: actions-rust-lang/setup-rust-toolchain@166cdcfd11aee3cb47222f9ddb555ce30ddb9659 # v1.17.0 - name: Validate runner target env: @@ -88,7 +88,7 @@ jobs: fi - name: Install sccache - uses: taiki-e/install-action@a661f9d0b5f5222ce08202e6b2e9648d1713ca37 # untagged 2025-07-01 commit + uses: taiki-e/install-action@7572810d7dd469b651bb7793945692cf78da5dd7 # v2.85.0 with: tool: sccache