Skip to content

Commit 14ee0bb

Browse files
Merge branch 'main' into dependabot/cargo/criterion-0.8.2
2 parents 74ecdee + e6d8ce7 commit 14ee0bb

14 files changed

Lines changed: 59 additions & 59 deletions

.github/workflows/casket-pages.yml

Lines changed: 7 additions & 7 deletions
Original file line numberDiff line numberDiff line change
@@ -20,22 +20,22 @@ jobs:
2020
runs-on: ubuntu-latest
2121
steps:
2222
- name: Checkout
23-
uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8 # v4
23+
uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v4
2424

2525
- name: Checkout casket-ssg
26-
uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8 # v4
26+
uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v4
2727
with:
2828
repository: hyperpolymath/casket-ssg
2929
path: .casket-ssg
3030

3131
- name: Setup GHCup
32-
uses: haskell-actions/setup@ec49483bfc012387b227434aba94f59a6ecd0900 # v2
32+
uses: haskell-actions/setup@cd0d9bdd65b20557f41bea4dbe43d0b5fbbfe553 # v2
3333
with:
3434
ghc-version: '9.8.2'
3535
cabal-version: '3.10'
3636

3737
- name: Cache Cabal
38-
uses: actions/cache@0057852bfaa89a56745cba8c7296529d2fc39830 # v4
38+
uses: actions/cache@27d5ce7f107fe9357f9df03efb73ab90386fccae # v5.0.5
3939
with:
4040
path: |
4141
~/.cabal/packages
@@ -79,10 +79,10 @@ jobs:
7979
cd .casket-ssg && cabal run casket-ssg -- build ../site ../_site
8080
8181
- name: Setup Pages
82-
uses: actions/configure-pages@983d7736d9b0ae728b81ab479565c72886d7745b # v5
82+
uses: actions/configure-pages@45bfe0192ca1faeb007ade9deae92b16b8254a0d # v6.0.0
8383

8484
- name: Upload artifact
85-
uses: actions/upload-pages-artifact@56afc609e74202658d3ffba0e8f6dda462b719fa # v3
85+
uses: actions/upload-pages-artifact@fc324d3547104276b827a68afc52ff2a11cc49c9 # v5.0.0
8686
with:
8787
path: '_site'
8888

@@ -95,4 +95,4 @@ jobs:
9595
steps:
9696
- name: Deploy to GitHub Pages
9797
id: deployment
98-
uses: actions/deploy-pages@d6db90164ac5ed86f2b6aed7e0febac5b3c0c03e # v4
98+
uses: actions/deploy-pages@cd2ce8fcbc39b97be8ca5fce6e763baed58fa128 # v5.0.0

.github/workflows/codeql.yml

Lines changed: 3 additions & 3 deletions
Original file line numberDiff line numberDiff line change
@@ -27,15 +27,15 @@ jobs:
2727

2828
steps:
2929
- name: Checkout
30-
uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8 # v4.1.1
30+
uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v4.1.1
3131

3232
- name: Initialize CodeQL
33-
uses: github/codeql-action/init@662472033e021d55d94146f66f6058822b0b39fd # v3.28.1
33+
uses: github/codeql-action/init@7211b7c8077ea37d8641b6271f6a365a22a5fbfa # v3.28.1
3434
with:
3535
languages: ${{ matrix.language }}
3636
build-mode: ${{ matrix.build-mode }}
3737

3838
- name: Perform CodeQL Analysis
39-
uses: github/codeql-action/analyze@662472033e021d55d94146f66f6058822b0b39fd # v3.28.1
39+
uses: github/codeql-action/analyze@7211b7c8077ea37d8641b6271f6a365a22a5fbfa # v3.28.1
4040
with:
4141
category: "/language:${{ matrix.language }}"

.github/workflows/dogfood-gate.yml

Lines changed: 5 additions & 5 deletions
Original file line numberDiff line numberDiff line change
@@ -25,7 +25,7 @@ jobs:
2525

2626
steps:
2727
- name: Checkout repository
28-
uses: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5 # v4
28+
uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
2929

3030
- name: Check for A2ML files
3131
id: detect
@@ -69,7 +69,7 @@ jobs:
6969

7070
steps:
7171
- name: Checkout repository
72-
uses: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5 # v4
72+
uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
7373

7474
- name: Check for K9 files
7575
id: detect
@@ -118,7 +118,7 @@ jobs:
118118

119119
steps:
120120
- name: Checkout repository
121-
uses: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5 # v4
121+
uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
122122

123123
- name: Scan for invisible characters
124124
id: lint
@@ -182,7 +182,7 @@ jobs:
182182

183183
steps:
184184
- name: Checkout repository
185-
uses: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5 # v4
185+
uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
186186

187187
- name: Check for Groove manifest
188188
id: groove
@@ -242,7 +242,7 @@ jobs:
242242

243243
steps:
244244
- name: Checkout repository
245-
uses: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5 # v4
245+
uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
246246

247247
- name: Generate dogfooding scorecard
248248
run: |

.github/workflows/guix-nix-policy.yml

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -11,7 +11,7 @@ jobs:
1111
permissions:
1212
contents: read
1313
steps:
14-
- uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8 # v4.2.2
14+
- uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v4.2.2
1515
- name: Enforce Guix primary / Nix fallback
1616
run: |
1717
# Check for package manager files

.github/workflows/mirror.yml

Lines changed: 14 additions & 14 deletions
Original file line numberDiff line numberDiff line change
@@ -15,11 +15,11 @@ jobs:
1515
runs-on: ubuntu-latest
1616
if: vars.GITLAB_MIRROR_ENABLED == 'true'
1717
steps:
18-
- uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8 # v4
18+
- uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v4
1919
with:
2020
fetch-depth: 0
2121

22-
- uses: webfactory/ssh-agent@dc588b651fe13675774614f8e6a936a468676387 # v0.9.0
22+
- uses: webfactory/ssh-agent@e83874834305fe9a4a2997156cb26c5de65a8555 # v0.10.0
2323
with:
2424
ssh-private-key: ${{ secrets.GITLAB_SSH_KEY }}
2525

@@ -33,11 +33,11 @@ jobs:
3333
runs-on: ubuntu-latest
3434
if: vars.BITBUCKET_MIRROR_ENABLED == 'true'
3535
steps:
36-
- uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8 # v4
36+
- uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v4
3737
with:
3838
fetch-depth: 0
3939

40-
- uses: webfactory/ssh-agent@dc588b651fe13675774614f8e6a936a468676387 # v0.9.0
40+
- uses: webfactory/ssh-agent@e83874834305fe9a4a2997156cb26c5de65a8555 # v0.10.0
4141
with:
4242
ssh-private-key: ${{ secrets.BITBUCKET_SSH_KEY }}
4343

@@ -51,11 +51,11 @@ jobs:
5151
runs-on: ubuntu-latest
5252
if: vars.CODEBERG_MIRROR_ENABLED == 'true'
5353
steps:
54-
- uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8 # v4
54+
- uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v4
5555
with:
5656
fetch-depth: 0
5757

58-
- uses: webfactory/ssh-agent@dc588b651fe13675774614f8e6a936a468676387 # v0.9.0
58+
- uses: webfactory/ssh-agent@e83874834305fe9a4a2997156cb26c5de65a8555 # v0.10.0
5959
with:
6060
ssh-private-key: ${{ secrets.CODEBERG_SSH_KEY }}
6161

@@ -69,11 +69,11 @@ jobs:
6969
runs-on: ubuntu-latest
7070
if: vars.SOURCEHUT_MIRROR_ENABLED == 'true'
7171
steps:
72-
- uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8 # v4
72+
- uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v4
7373
with:
7474
fetch-depth: 0
7575

76-
- uses: webfactory/ssh-agent@dc588b651fe13675774614f8e6a936a468676387 # v0.9.0
76+
- uses: webfactory/ssh-agent@e83874834305fe9a4a2997156cb26c5de65a8555 # v0.10.0
7777
with:
7878
ssh-private-key: ${{ secrets.SOURCEHUT_SSH_KEY }}
7979

@@ -87,11 +87,11 @@ jobs:
8787
runs-on: ubuntu-latest
8888
if: vars.DISROOT_MIRROR_ENABLED == 'true'
8989
steps:
90-
- uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8 # v4
90+
- uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v4
9191
with:
9292
fetch-depth: 0
9393

94-
- uses: webfactory/ssh-agent@dc588b651fe13675774614f8e6a936a468676387 # v0.9.0
94+
- uses: webfactory/ssh-agent@e83874834305fe9a4a2997156cb26c5de65a8555 # v0.10.0
9595
with:
9696
ssh-private-key: ${{ secrets.DISROOT_SSH_KEY }}
9797

@@ -105,11 +105,11 @@ jobs:
105105
runs-on: ubuntu-latest
106106
if: vars.GITEA_MIRROR_ENABLED == 'true'
107107
steps:
108-
- uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8 # v4
108+
- uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v4
109109
with:
110110
fetch-depth: 0
111111

112-
- uses: webfactory/ssh-agent@dc588b651fe13675774614f8e6a936a468676387 # v0.9.0
112+
- uses: webfactory/ssh-agent@e83874834305fe9a4a2997156cb26c5de65a8555 # v0.10.0
113113
with:
114114
ssh-private-key: ${{ secrets.GITEA_SSH_KEY }}
115115

@@ -123,12 +123,12 @@ jobs:
123123
runs-on: ubuntu-latest
124124
if: vars.RADICLE_MIRROR_ENABLED == 'true'
125125
steps:
126-
- uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8 # v4
126+
- uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v4
127127
with:
128128
fetch-depth: 0
129129

130130
- name: Setup Rust
131-
uses: dtolnay/rust-toolchain@56f84321dbccf38fb67ce29ab63e4754056677e0 # stable
131+
uses: dtolnay/rust-toolchain@3c5f7ea28cd621ae0bf5283f0e981fb97b8a7af9 # stable
132132
with:
133133
toolchain: stable
134134

.github/workflows/quality.yml

Lines changed: 4 additions & 4 deletions
Original file line numberDiff line numberDiff line change
@@ -12,14 +12,14 @@ jobs:
1212
permissions:
1313
contents: read
1414
steps:
15-
- uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8 # v4.2.2
15+
- uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v4.2.2
1616

1717
- name: Check file permissions
1818
run: |
1919
find . -type f -perm /111 -name "*.sh" | head -10 || true
2020
2121
- name: Check for secrets
22-
uses: trufflesecurity/trufflehog@05cccb53bc9e13bc6d17997db5a6bcc3df44bf2f # v3.92.3
22+
uses: trufflesecurity/trufflehog@37b77001d0174ebec2fcca2bd83ff83a6d45a3ab # v3.95.3
2323
with:
2424
path: ./
2525
base: ${{ github.event.pull_request.base.sha || github.event.before }}
@@ -36,15 +36,15 @@ jobs:
3636
find . -type f -size +1M -not -path "./.git/*" | head -10 || echo "No large files"
3737
3838
- name: EditorConfig check
39-
uses: editorconfig-checker/action-editorconfig-checker@4b6cd6190d435e7e084fb35e36a096e98506f7b9 # v2.1.0
39+
uses: editorconfig-checker/action-editorconfig-checker@840e866d93b8e032123c23bac69dece044d4d84c # v2.2.0
4040
continue-on-error: true
4141

4242
docs:
4343
runs-on: ubuntu-latest
4444
permissions:
4545
contents: read
4646
steps:
47-
- uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8 # v4.2.2
47+
- uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v4.2.2
4848
- name: Check documentation
4949
run: |
5050
MISSING=""

.github/workflows/rust-ci.yml

Lines changed: 6 additions & 6 deletions
Original file line numberDiff line numberDiff line change
@@ -22,15 +22,15 @@ jobs:
2222

2323
steps:
2424
- name: Checkout repository
25-
uses: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5 # v4
25+
uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
2626

2727
- name: Install Rust toolchain
28-
uses: dtolnay/rust-toolchain@4be9e76fd7c4901c61fb841f559994984270fce7 # stable
28+
uses: dtolnay/rust-toolchain@3c5f7ea28cd621ae0bf5283f0e981fb97b8a7af9 # stable
2929
with:
3030
components: clippy, rustfmt
3131

3232
- name: Cache cargo registry and build
33-
uses: Swatinem/rust-cache@779680da715d629ac1d338a641029a2f4372abb5 # v2
33+
uses: Swatinem/rust-cache@c19371144df3bb44fab255c43d04cbc2ab54d1c4 # v2
3434

3535
- name: Cargo check
3636
run: cargo check --all-targets 2>&1
@@ -49,13 +49,13 @@ jobs:
4949

5050
steps:
5151
- name: Checkout repository
52-
uses: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5 # v4
52+
uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
5353

5454
- name: Install Rust toolchain
55-
uses: dtolnay/rust-toolchain@4be9e76fd7c4901c61fb841f559994984270fce7 # stable
55+
uses: dtolnay/rust-toolchain@3c5f7ea28cd621ae0bf5283f0e981fb97b8a7af9 # stable
5656

5757
- name: Cache cargo registry and build
58-
uses: Swatinem/rust-cache@779680da715d629ac1d338a641029a2f4372abb5 # v2
58+
uses: Swatinem/rust-cache@c19371144df3bb44fab255c43d04cbc2ab54d1c4 # v2
5959

6060
- name: Run tests
6161
run: cargo test --all-targets

.github/workflows/scorecard-enforcer.yml

Lines changed: 4 additions & 4 deletions
Original file line numberDiff line numberDiff line change
@@ -19,19 +19,19 @@ jobs:
1919
security-events: write
2020
id-token: write # For OIDC
2121
steps:
22-
- uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8 # v4
22+
- uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v4
2323
with:
2424
persist-credentials: false
2525

2626
- name: Run Scorecard
27-
uses: ossf/scorecard-action@62b2cac7ed8198b15735ed49ab1e5cf35480ba46 # v2.4.0
27+
uses: ossf/scorecard-action@4eaacf0543bb3f2c246792bd56e8cdeffafb205a # v2.4.3
2828
with:
2929
results_file: results.sarif
3030
results_format: sarif
3131
publish_results: true
3232

3333
- name: Upload SARIF
34-
uses: github/codeql-action/upload-sarif@662472033e021d55d94146f66f6058822b0b39fd # v3
34+
uses: github/codeql-action/upload-sarif@7211b7c8077ea37d8641b6271f6a365a22a5fbfa # v3
3535
with:
3636
sarif_file: results.sarif
3737

@@ -54,7 +54,7 @@ jobs:
5454
check-critical:
5555
runs-on: ubuntu-latest
5656
steps:
57-
- uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8 # v4
57+
- uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v4
5858

5959
- name: Check SECURITY.md exists
6060
run: |

.github/workflows/scorecard.yml

Lines changed: 3 additions & 3 deletions
Original file line numberDiff line numberDiff line change
@@ -17,17 +17,17 @@ jobs:
1717
security-events: write
1818
id-token: write
1919
steps:
20-
- uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8 # v4.2.2
20+
- uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v4.2.2
2121
with:
2222
persist-credentials: false
2323

2424
- name: Run Scorecard
25-
uses: ossf/scorecard-action@62b2cac7ed8198b15735ed49ab1e5cf35480ba46 # v2.3.1
25+
uses: ossf/scorecard-action@4eaacf0543bb3f2c246792bd56e8cdeffafb205a # v2.3.1
2626
with:
2727
results_file: results.sarif
2828
results_format: sarif
2929

3030
- name: Upload results
31-
uses: github/codeql-action/upload-sarif@48ab28a6f5dbc2a99bf1e0131198dd8f1df78169 # v3.31.8
31+
uses: github/codeql-action/upload-sarif@7211b7c8077ea37d8641b6271f6a365a22a5fbfa # v3.31.8
3232
with:
3333
sarif_file: results.sarif

0 commit comments

Comments
 (0)