@@ -5,6 +5,7 @@ permissions:
55 contents : read
66on :
77 pull_request :
8+ merge_group :
89 push :
910 branches :
1011 - main
@@ -32,11 +33,11 @@ jobs:
3233 continue-on-error : ${{ matrix.rust == 'beta' }}
3334 steps :
3435 - name : Harden the runner (Audit all outbound calls)
35- uses : step-security/harden-runner@e3f713f2d8f53843e71c69a996d56f51aa9adfb9 # v2.14.1
36+ uses : step-security/harden-runner@a90bcbc6539c36a85cdfeb73f7e2f433735f215b # v2.15.0
3637 with :
3738 egress-policy : audit
3839
39- - uses : actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8 # v6.0.1
40+ - uses : actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
4041 with :
4142 submodules : true
4243 - uses : dtolnay/rust-toolchain@e97e2d8cc328f1b50210efc529dca0028893a2d9
@@ -54,18 +55,18 @@ jobs:
5455 runs-on : ubuntu-latest
5556 steps :
5657 - name : Harden the runner (Audit all outbound calls)
57- uses : step-security/harden-runner@e3f713f2d8f53843e71c69a996d56f51aa9adfb9 # v2.14.1
58+ uses : step-security/harden-runner@a90bcbc6539c36a85cdfeb73f7e2f433735f215b # v2.15.0
5859 with :
5960 egress-policy : audit
6061
61- - uses : actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8 # v6.0.1
62+ - uses : actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
6263 with :
6364 submodules : true
6465 - uses : dtolnay/rust-toolchain@e97e2d8cc328f1b50210efc529dca0028893a2d9
6566 with :
6667 toolchain : stable
6768 components : rustfmt, clippy
68- - uses : taiki-e/install-action@650c5ca14212efbbf3e580844b04bdccf68dac31 # v2.67.18
69+ - uses : taiki-e/install-action@68675c5a5f1a6950c3975d33f3ae0ef155e5bf3d # v2.68.15
6970 with :
7071 tool : cargo-hack
7172 - uses : arduino/setup-protoc@c65c819552d16ad3c9b72d9dfd5ba5237b9c906b # v3.0.0
@@ -82,18 +83,18 @@ jobs:
8283 runs-on : ubuntu-latest # TODO: Check if this could be covered for Windows. The step used currently fails on Windows.
8384 steps :
8485 - name : Harden the runner (Audit all outbound calls)
85- uses : step-security/harden-runner@e3f713f2d8f53843e71c69a996d56f51aa9adfb9 # v2.14.1
86+ uses : step-security/harden-runner@a90bcbc6539c36a85cdfeb73f7e2f433735f215b # v2.15.0
8687 with :
8788 egress-policy : audit
8889
89- - uses : actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8 # v6.0.1
90+ - uses : actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
9091 - uses : dtolnay/rust-toolchain@e97e2d8cc328f1b50210efc529dca0028893a2d9
9192 with :
9293 # Rust version should be kept in sync with the one the release was tested with
9394 # https://github.com/awslabs/cargo-check-external-types/releases
9495 toolchain : nightly-2025-05-04
9596 components : rustfmt
96- - uses : taiki-e/install-action@650c5ca14212efbbf3e580844b04bdccf68dac31 # v2.67.18
97+ - uses : taiki-e/install-action@68675c5a5f1a6950c3975d33f3ae0ef155e5bf3d # v2.68.15
9798 with :
9899 tool : cargo-check-external-types@0.2.0
99100 - name : external-type-check
@@ -107,17 +108,17 @@ jobs:
107108 continue-on-error : true
108109 steps :
109110 - name : Harden the runner (Audit all outbound calls)
110- uses : step-security/harden-runner@e3f713f2d8f53843e71c69a996d56f51aa9adfb9 # v2.14.1
111+ uses : step-security/harden-runner@a90bcbc6539c36a85cdfeb73f7e2f433735f215b # v2.15.0
111112 with :
112113 egress-policy : audit
113114
114- - uses : actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8 # v6.0.1
115+ - uses : actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
115116 with :
116117 submodules : true
117118 - uses : dtolnay/rust-toolchain@e97e2d8cc328f1b50210efc529dca0028893a2d9
118119 with :
119120 toolchain : stable
120- - uses : taiki-e/install-action@650c5ca14212efbbf3e580844b04bdccf68dac31 # v2.67.18
121+ - uses : taiki-e/install-action@68675c5a5f1a6950c3975d33f3ae0ef155e5bf3d # v2.68.15
121122 with :
122123 tool : cargo-msrv
123124 - uses : arduino/setup-protoc@c65c819552d16ad3c9b72d9dfd5ba5237b9c906b # v3.0.0
@@ -130,11 +131,11 @@ jobs:
130131 continue-on-error : true # Prevent sudden announcement of a new advisory from failing ci
131132 steps :
132133 - name : Harden the runner (Audit all outbound calls)
133- uses : step-security/harden-runner@e3f713f2d8f53843e71c69a996d56f51aa9adfb9 # v2.14.1
134+ uses : step-security/harden-runner@a90bcbc6539c36a85cdfeb73f7e2f433735f215b # v2.15.0
134135 with :
135136 egress-policy : audit
136137
137- - uses : actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8 # v6.0.1
138+ - uses : actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
138139
139140 - name : Check advisories
140141 uses : EmbarkStudios/cargo-deny-action@3fd3802e88374d3fe9159b834c7714ec57d6c979 # v2.0.15
@@ -161,11 +162,11 @@ jobs:
161162 runs-on : ubuntu-latest
162163 steps :
163164 - name : Harden the runner (Audit all outbound calls)
164- uses : step-security/harden-runner@e3f713f2d8f53843e71c69a996d56f51aa9adfb9 # v2.14.1
165+ uses : step-security/harden-runner@a90bcbc6539c36a85cdfeb73f7e2f433735f215b # v2.15.0
165166 with :
166167 egress-policy : audit
167168
168- - uses : actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8 # v6.0.1
169+ - uses : actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
169170 - uses : dtolnay/rust-toolchain@e97e2d8cc328f1b50210efc529dca0028893a2d9
170171 with :
171172 toolchain : stable
@@ -184,11 +185,11 @@ jobs:
184185 if : ${{ ! contains(github.event.pull_request.labels.*.name, 'dependencies') }}
185186 steps :
186187 - name : Harden the runner (Audit all outbound calls)
187- uses : step-security/harden-runner@e3f713f2d8f53843e71c69a996d56f51aa9adfb9 # v2.14.1
188+ uses : step-security/harden-runner@a90bcbc6539c36a85cdfeb73f7e2f433735f215b # v2.15.0
188189 with :
189190 egress-policy : audit
190191
191- - uses : actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8 # v6.0.1
192+ - uses : actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
192193 with :
193194 submodules : true
194195 - uses : dtolnay/rust-toolchain@e97e2d8cc328f1b50210efc529dca0028893a2d9
@@ -199,7 +200,7 @@ jobs:
199200 with :
200201 repo-token : ${{ secrets.GITHUB_TOKEN }}
201202 - name : Install cargo-llvm-cov
202- uses : taiki-e/install-action@650c5ca14212efbbf3e580844b04bdccf68dac31 # v2.67.18
203+ uses : taiki-e/install-action@68675c5a5f1a6950c3975d33f3ae0ef155e5bf3d # v2.68.15
203204 with :
204205 tool : cargo-llvm-cov
205206 - name : cargo generate-lockfile
@@ -216,7 +217,7 @@ jobs:
216217 build-examples :
217218 runs-on : ubuntu-latest
218219 steps :
219- - uses : actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8 # v6.0.1
220+ - uses : actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
220221 - uses : dtolnay/rust-toolchain@e97e2d8cc328f1b50210efc529dca0028893a2d9 # stable
221222 with :
222223 toolchain : stable
@@ -237,11 +238,11 @@ jobs:
237238 runs-on : ubuntu-latest
238239 steps :
239240 - name : Harden the runner (Audit all outbound calls)
240- uses : step-security/harden-runner@e3f713f2d8f53843e71c69a996d56f51aa9adfb9 # v2.14.1
241+ uses : step-security/harden-runner@a90bcbc6539c36a85cdfeb73f7e2f433735f215b # v2.15.0
241242 with :
242243 egress-policy : audit
243244
244- - uses : actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8 # v6.0.1
245+ - uses : actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
245246 with :
246247 submodules : true
247248 - uses : dtolnay/rust-toolchain@e97e2d8cc328f1b50210efc529dca0028893a2d9
@@ -250,7 +251,7 @@ jobs:
250251 - uses : arduino/setup-protoc@c65c819552d16ad3c9b72d9dfd5ba5237b9c906b # v3.0.0
251252 with :
252253 repo-token : ${{ secrets.GITHUB_TOKEN }}
253- - uses : taiki-e/install-action@650c5ca14212efbbf3e580844b04bdccf68dac31 # v2.67.18
254+ - uses : taiki-e/install-action@68675c5a5f1a6950c3975d33f3ae0ef155e5bf3d # v2.68.15
254255 with :
255256 tool : cargo-shear
256257 - name : cargo shear
0 commit comments