Skip to content

Commit 16e6092

Browse files
chore: update dependencies
* chore: update dependencies * fix: specify install action tools * chore: retain memchr 2.8.2
1 parent e260764 commit 16e6092

11 files changed

Lines changed: 398 additions & 306 deletions

File tree

.github/scripts/workflow-policy.test.mjs

Lines changed: 14 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -9,7 +9,7 @@ const CI_WORKFLOW_URL = new URL("ci.yml", WORKFLOWS_URL);
99
const COVERAGE_WORKFLOW_URL = new URL("coverage.yml", WORKFLOWS_URL);
1010
const RELEASE_WORKFLOW_URL = new URL("release.yml", WORKFLOWS_URL);
1111
const FALLOW_CONFIG_URL = new URL(".fallowrc.json", ROOT_URL);
12-
const WASM_PACK_INSTALL_ACTION = "taiki-e/install-action@15449e3094499af05d8d964a1c884208e4b8b595";
12+
const WASM_PACK_INSTALL_ACTION = "taiki-e/install-action@43aecc8d72668fbcfe75c31400bc4f890f1c5853";
1313
const WASM_PACK_WORKFLOWS = new Map([
1414
["bench.yml", " if: matrix.kind == 'node'\n"],
1515
["ci.yml", ""],
@@ -127,6 +127,18 @@ describe("Checkout credential policy", () => {
127127
});
128128
});
129129

130+
describe("Pinned installer policy", () => {
131+
it("specifies a tool for every install-action step", async () => {
132+
for (const entry of await workflowFiles()) {
133+
const workflow = await readFile(new URL(entry.name, WORKFLOWS_URL), "utf8");
134+
135+
for (const step of workflowSteps(workflow, "taiki-e/install-action@")) {
136+
assert.match(step, /^\s+tool: \S+$/m, `${entry.name}: install-action must specify a tool`);
137+
}
138+
}
139+
});
140+
});
141+
130142
describe("Pinned wasm-pack installation policy", () => {
131143
it("uses only the pinned install action for wasm-pack in every workflow", async () => {
132144
for (const entry of await workflowFiles()) {
@@ -140,7 +152,7 @@ describe("Pinned wasm-pack installation policy", () => {
140152
const install = [
141153
" - name: Install wasm-pack",
142154
condition.trimEnd(),
143-
` uses: ${WASM_PACK_INSTALL_ACTION} # v2.81.11`,
155+
` uses: ${WASM_PACK_INSTALL_ACTION} # v2.83.2`,
144156
" with:",
145157
" tool: wasm-pack@0.13.1",
146158
]

.github/workflows/bench.yml

Lines changed: 6 additions & 6 deletions
Original file line numberDiff line numberDiff line change
@@ -47,7 +47,7 @@ jobs:
4747
outputs:
4848
include: ${{ steps.matrix.outputs.include }}
4949
steps:
50-
- uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6.0.3
50+
- uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0
5151
with:
5252
persist-credentials: false
5353
fetch-depth: 0
@@ -69,7 +69,7 @@ jobs:
6969
matrix:
7070
include: ${{ fromJson(needs.benchmark-matrix.outputs.include) }}
7171
steps:
72-
- uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6.0.3
72+
- uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0
7373
with:
7474
persist-credentials: false
7575

@@ -100,7 +100,7 @@ jobs:
100100

101101
- name: Install wasm-pack
102102
if: matrix.kind == 'node'
103-
uses: taiki-e/install-action@15449e3094499af05d8d964a1c884208e4b8b595 # v2.81.11
103+
uses: taiki-e/install-action@43aecc8d72668fbcfe75c31400bc4f890f1c5853 # v2.83.2
104104
with:
105105
tool: wasm-pack@0.13.1
106106

@@ -117,7 +117,7 @@ jobs:
117117

118118
- name: Install cargo-codspeed
119119
if: matrix.kind == 'rust'
120-
uses: taiki-e/install-action@15449e3094499af05d8d964a1c884208e4b8b595 # v2.81.11
120+
uses: taiki-e/install-action@43aecc8d72668fbcfe75c31400bc4f890f1c5853 # v2.83.2
121121
with:
122122
tool: cargo-codspeed@4.7.0
123123

@@ -127,14 +127,14 @@ jobs:
127127

128128
- name: Run benchmark shard
129129
if: matrix.kind == 'rust'
130-
uses: CodSpeedHQ/action@c145068895e045cc725ee76fcd2307624b65c3af # v4.17.5
130+
uses: CodSpeedHQ/action@f99becdce5e5d51fd556489ebef684f4ecfd6286 # v4.18.5
131131
with:
132132
mode: ${{ matrix.mode }}
133133
run: cargo codspeed run -p ${{ matrix.package }} --bench ${{ matrix.bench }}
134134

135135
- name: Run package benchmark shard
136136
if: matrix.kind == 'node'
137-
uses: CodSpeedHQ/action@c145068895e045cc725ee76fcd2307624b65c3af # v4.17.5
137+
uses: CodSpeedHQ/action@f99becdce5e5d51fd556489ebef684f4ecfd6286 # v4.18.5
138138
with:
139139
mode: ${{ matrix.mode }}
140140
run: ${{ matrix.command }}

.github/workflows/ci.yml

Lines changed: 22 additions & 18 deletions
Original file line numberDiff line numberDiff line change
@@ -29,7 +29,7 @@ jobs:
2929
os: [ubuntu-latest, macos-latest, windows-latest]
3030

3131
steps:
32-
- uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6.0.3
32+
- uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0
3333
with:
3434
persist-credentials: false
3535
- uses: dtolnay/rust-toolchain@631a55b12751854ce901bb631d5902ceb48146f7
@@ -62,7 +62,7 @@ jobs:
6262
permissions:
6363
contents: read
6464
steps:
65-
- uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6.0.3
65+
- uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0
6666
with:
6767
persist-credentials: false
6868
- uses: dtolnay/rust-toolchain@631a55b12751854ce901bb631d5902ceb48146f7
@@ -79,7 +79,7 @@ jobs:
7979
permissions:
8080
contents: read
8181
steps:
82-
- uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6.0.3
82+
- uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0
8383
with:
8484
persist-credentials: false
8585
- uses: dtolnay/rust-toolchain@631a55b12751854ce901bb631d5902ceb48146f7
@@ -95,7 +95,7 @@ jobs:
9595
permissions:
9696
contents: read
9797
steps:
98-
- uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6.0.3
98+
- uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0
9999
with:
100100
persist-credentials: false
101101
- name: Read MSRV from Cargo.toml
@@ -116,10 +116,10 @@ jobs:
116116
permissions:
117117
contents: read
118118
steps:
119-
- uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6.0.3
119+
- uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0
120120
with:
121121
persist-credentials: false
122-
- uses: crate-ci/typos@37bb98842b0d8c4ffebdb75301a13db0267cef89 # v1
122+
- uses: crate-ci/typos@bee27e3a4fd1ea2111cf90ab89cd076c870fce14 # v1.48.0
123123

124124
audit:
125125
name: Security Audit
@@ -128,10 +128,12 @@ jobs:
128128
permissions:
129129
contents: read
130130
steps:
131-
- uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6.0.3
131+
- uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0
132132
with:
133133
persist-credentials: false
134-
- uses: taiki-e/install-action@9b29ffac42f36c4efe76140737435c61cfb92383 # cargo-audit
134+
- uses: taiki-e/install-action@43aecc8d72668fbcfe75c31400bc4f890f1c5853 # cargo-audit
135+
with:
136+
tool: cargo-audit
135137
- run: cargo audit
136138

137139
deny:
@@ -141,7 +143,7 @@ jobs:
141143
permissions:
142144
contents: read
143145
steps:
144-
- uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6.0.3
146+
- uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0
145147
with:
146148
persist-credentials: false
147149
- uses: EmbarkStudios/cargo-deny-action@bb137d7af7e4fb67e5f82a49c4fce4fad40782fe # v2
@@ -155,10 +157,12 @@ jobs:
155157
permissions:
156158
contents: read
157159
steps:
158-
- uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6.0.3
160+
- uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0
159161
with:
160162
persist-credentials: false
161-
- uses: taiki-e/install-action@b9da40722b5dc25d162879fdf6a098f2d71926cc # cargo-shear
163+
- uses: taiki-e/install-action@43aecc8d72668fbcfe75c31400bc4f890f1c5853 # cargo-shear
164+
with:
165+
tool: cargo-shear
162166
- run: cargo shear
163167

164168
zizmor:
@@ -168,7 +172,7 @@ jobs:
168172
permissions:
169173
contents: read
170174
steps:
171-
- uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6.0.3
175+
- uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0
172176
with:
173177
persist-credentials: false
174178
- uses: astral-sh/setup-uv@fac544c07dec837d0ccb6301d7b5580bf5edae39 # v8.2.0
@@ -181,7 +185,7 @@ jobs:
181185
permissions:
182186
contents: read
183187
steps:
184-
- uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6.0.3
188+
- uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0
185189
with:
186190
persist-credentials: false
187191
- uses: actions/setup-node@48b55a011bda9f5d6aeb4c2d9c7362e8dae4041e # v6.4.0
@@ -203,7 +207,7 @@ jobs:
203207
permissions:
204208
contents: read
205209
steps:
206-
- uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6.0.3
210+
- uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0
207211
with:
208212
persist-credentials: false
209213
- uses: actions/setup-node@48b55a011bda9f5d6aeb4c2d9c7362e8dae4041e # v6.4.0
@@ -218,7 +222,7 @@ jobs:
218222
- name: Install JS dependencies
219223
run: corepack pnpm install --ignore-scripts --frozen-lockfile
220224
- name: Install wasm-pack
221-
uses: taiki-e/install-action@15449e3094499af05d8d964a1c884208e4b8b595 # v2.81.11
225+
uses: taiki-e/install-action@43aecc8d72668fbcfe75c31400bc4f890f1c5853 # v2.83.2
222226
with:
223227
tool: wasm-pack@0.13.1
224228
- name: Build N-API packages
@@ -242,7 +246,7 @@ jobs:
242246
permissions:
243247
contents: read
244248
steps:
245-
- uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6.0.3
249+
- uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0
246250
with:
247251
persist-credentials: false
248252
- uses: dtolnay/rust-toolchain@631a55b12751854ce901bb631d5902ceb48146f7
@@ -256,7 +260,7 @@ jobs:
256260
permissions:
257261
contents: read
258262
steps:
259-
- uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6.0.3
263+
- uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0
260264
with:
261265
persist-credentials: false
262266
- uses: dtolnay/rust-toolchain@631a55b12751854ce901bb631d5902ceb48146f7
@@ -270,7 +274,7 @@ jobs:
270274
permissions:
271275
contents: read
272276
steps:
273-
- uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6.0.3
277+
- uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0
274278
with:
275279
persist-credentials: false
276280
- uses: dtolnay/rust-toolchain@631a55b12751854ce901bb631d5902ceb48146f7

.github/workflows/coverage.yml

Lines changed: 5 additions & 3 deletions
Original file line numberDiff line numberDiff line change
@@ -20,7 +20,7 @@ jobs:
2020
permissions:
2121
contents: write
2222
steps:
23-
- uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6.0.3
23+
- uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0
2424
with:
2525
persist-credentials: false
2626

@@ -30,7 +30,9 @@ jobs:
3030

3131
- uses: Swatinem/rust-cache@e18b497796c12c097a38f9edb9d0641fb99eee32 # v2
3232

33-
- uses: taiki-e/install-action@2d15d02e710b40b6332201aba6af30d595b5cd96 # cargo-llvm-cov
33+
- uses: taiki-e/install-action@43aecc8d72668fbcfe75c31400bc4f890f1c5853 # cargo-llvm-cov
34+
with:
35+
tool: cargo-llvm-cov
3436

3537
- name: Setup Node.js
3638
uses: actions/setup-node@48b55a011bda9f5d6aeb4c2d9c7362e8dae4041e # v6.4.0
@@ -44,7 +46,7 @@ jobs:
4446
run: corepack pnpm install --ignore-scripts --frozen-lockfile
4547

4648
- name: Install wasm-pack
47-
uses: taiki-e/install-action@15449e3094499af05d8d964a1c884208e4b8b595 # v2.81.11
49+
uses: taiki-e/install-action@43aecc8d72668fbcfe75c31400bc4f890f1c5853 # v2.83.2
4850
with:
4951
tool: wasm-pack@0.13.1
5052

.github/workflows/release-drafter.yml

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -18,6 +18,6 @@ jobs:
1818
update-release-draft:
1919
runs-on: ubuntu-latest
2020
steps:
21-
- uses: release-drafter/release-drafter@693d20e7c1ce1a81d3a41962f85914253b518449 # v7.3.1
21+
- uses: release-drafter/release-drafter@4d75298e00d9e34c483e5ff8c68d0ea1c1940c1e # v7.5.1
2222
env:
2323
GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}

.github/workflows/release.yml

Lines changed: 5 additions & 5 deletions
Original file line numberDiff line numberDiff line change
@@ -22,7 +22,7 @@ jobs:
2222
permissions:
2323
contents: read
2424
steps:
25-
- uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6.0.3
25+
- uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0
2626
with:
2727
persist-credentials: false
2828

@@ -114,7 +114,7 @@ jobs:
114114
target: x86_64-pc-windows-msvc
115115

116116
steps:
117-
- uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6.0.3
117+
- uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0
118118
with:
119119
persist-credentials: false
120120

@@ -191,7 +191,7 @@ jobs:
191191
permissions:
192192
contents: read
193193
steps:
194-
- uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6.0.3
194+
- uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0
195195
with:
196196
persist-credentials: false
197197

@@ -202,7 +202,7 @@ jobs:
202202
- uses: Swatinem/rust-cache@e18b497796c12c097a38f9edb9d0641fb99eee32 # v2
203203

204204
- name: Install wasm-pack
205-
uses: taiki-e/install-action@15449e3094499af05d8d964a1c884208e4b8b595 # v2.81.11
205+
uses: taiki-e/install-action@43aecc8d72668fbcfe75c31400bc4f890f1c5853 # v2.83.2
206206
with:
207207
tool: wasm-pack@0.13.1
208208

@@ -309,7 +309,7 @@ jobs:
309309
contents: read
310310
id-token: write
311311
steps:
312-
- uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6.0.3
312+
- uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0
313313
with:
314314
persist-credentials: false
315315

0 commit comments

Comments
 (0)