diff --git a/.github/workflows/canary.yml b/.github/workflows/canary.yml index 92f8631..44fd94a 100644 --- a/.github/workflows/canary.yml +++ b/.github/workflows/canary.yml @@ -32,7 +32,7 @@ jobs: - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 - uses: dtolnay/rust-toolchain@stable # rolling toolchain selector — intentionally unpinned - - uses: Swatinem/rust-cache@e18b497796c12c097a38f9edb9d0641fb99eee32 # v2 + - uses: Swatinem/rust-cache@6323deb102c322ba6fcbdcafc7e3dddab59af2b6 # v2 # The checkout is disposable. Appending a patch here exercises upstream # without changing the committed manifest or lockfile on main. diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml index cb0f550..5e284ed 100644 --- a/.github/workflows/ci.yml +++ b/.github/workflows/ci.yml @@ -104,7 +104,7 @@ jobs: steps: - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 - uses: dtolnay/rust-toolchain@stable # rolling toolchain selector — intentionally unpinned - - uses: Swatinem/rust-cache@e18b497796c12c097a38f9edb9d0641fb99eee32 # v2 + - uses: Swatinem/rust-cache@6323deb102c322ba6fcbdcafc7e3dddab59af2b6 # v2 - run: cargo build --bin processkit-cli - name: Run POSIX examples if: ${{ runner.os != 'Windows' }} @@ -145,7 +145,7 @@ jobs: - uses: dtolnay/rust-toolchain@stable # rolling toolchain selector — intentionally unpinned with: components: clippy - - uses: Swatinem/rust-cache@e18b497796c12c097a38f9edb9d0641fb99eee32 # v2 + - uses: Swatinem/rust-cache@6323deb102c322ba6fcbdcafc7e3dddab59af2b6 # v2 # `--all-features` so every feature-gated tier is linted here too, including # its cfg(unix) paths on this Linux runner: the `e2e` tier and its helper # worker (tests/e2e.rs, src/bin/e2e_helper.rs), the `bench` tier (benches/, @@ -184,7 +184,7 @@ jobs: steps: - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 - uses: dtolnay/rust-toolchain@stable # rolling toolchain selector — intentionally unpinned - - uses: Swatinem/rust-cache@e18b497796c12c097a38f9edb9d0641fb99eee32 # v2 + - uses: Swatinem/rust-cache@6323deb102c322ba6fcbdcafc7e3dddab59af2b6 # v2 - run: cargo build --all-targets - run: cargo test @@ -210,7 +210,7 @@ jobs: steps: - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 - uses: dtolnay/rust-toolchain@stable # rolling toolchain selector — intentionally unpinned - - uses: Swatinem/rust-cache@e18b497796c12c097a38f9edb9d0641fb99eee32 # v2 + - uses: Swatinem/rust-cache@6323deb102c322ba6fcbdcafc7e3dddab59af2b6 # v2 - run: cargo test --features spec-drift --test spec_drift -- --nocapture coverage: @@ -241,9 +241,9 @@ jobs: - uses: dtolnay/rust-toolchain@stable # rolling toolchain selector — intentionally unpinned with: components: llvm-tools-preview - - uses: Swatinem/rust-cache@e18b497796c12c097a38f9edb9d0641fb99eee32 # v2 + - uses: Swatinem/rust-cache@6323deb102c322ba6fcbdcafc7e3dddab59af2b6 # v2 - name: Install cargo-llvm-cov - uses: taiki-e/install-action@6a1bd70eaac3c8bdf093356838d7ee09fda951cf # v2 + uses: taiki-e/install-action@6c6fd71fe4fb72c3697d269963d0e15df8adedad # v2 with: tool: cargo-llvm-cov # Instrument and run the tests once; the two `report` steps below reuse @@ -293,7 +293,7 @@ jobs: steps: - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 - uses: dtolnay/rust-toolchain@stable # rolling toolchain selector — intentionally unpinned - - uses: Swatinem/rust-cache@e18b497796c12c097a38f9edb9d0641fb99eee32 # v2 + - uses: Swatinem/rust-cache@6323deb102c322ba6fcbdcafc7e3dddab59af2b6 # v2 # The `bench`-gated tier (benches/, src/bin/bench_emit.rs): criterion # microbenchmarks of the hash/capture/hint-classifier internals, plus # the through-the-binary echo-overhead and startup-latency scenarios @@ -386,7 +386,7 @@ jobs: steps: - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 - uses: dtolnay/rust-toolchain@stable # rolling toolchain selector — intentionally unpinned - - uses: Swatinem/rust-cache@e18b497796c12c097a38f9edb9d0641fb99eee32 # v2 + - uses: Swatinem/rust-cache@6323deb102c322ba6fcbdcafc7e3dddab59af2b6 # v2 # The opt-in end-to-end containment tier (tests/e2e.rs, `e2e` feature): # leaked-grandchild reaping through the built binary, abrupt runner death, # a descendant holding the stdout pipe, rapid PID-reuse churn, `inspect` over @@ -441,7 +441,7 @@ jobs: - uses: dtolnay/rust-toolchain@stable # rolling toolchain selector — intentionally unpinned with: targets: ${{ matrix.target }} - - uses: Swatinem/rust-cache@e18b497796c12c097a38f9edb9d0641fb99eee32 # v2 + - uses: Swatinem/rust-cache@6323deb102c322ba6fcbdcafc7e3dddab59af2b6 # v2 with: key: ${{ matrix.target }} # musl's libc for the static build, installed for each leg's own native @@ -481,7 +481,7 @@ jobs: # equivalent (`typos .`). Gating: every finding to date has been a # genuine misspelling fixed in the source, not a domain term needing an # exclusion (see `typos.toml`'s own comments). - - uses: crate-ci/typos@bee27e3a4fd1ea2111cf90ab89cd076c870fce14 # v1.48.0 + - uses: crate-ci/typos@8a48f81b6c64dcfea44b3633223084c4be58ac5f # v1.49.0 docs-links: name: docs links (internal) @@ -549,5 +549,5 @@ jobs: # rust-toolchain.toml tracks stable and would otherwise win here; remove it # so cargo uses the 1.88 toolchain installed above and truly tests the floor. - run: rm -f rust-toolchain.toml - - uses: Swatinem/rust-cache@e18b497796c12c097a38f9edb9d0641fb99eee32 # v2 + - uses: Swatinem/rust-cache@6323deb102c322ba6fcbdcafc7e3dddab59af2b6 # v2 - run: cargo check --all-targets diff --git a/.github/workflows/fuzz.yml b/.github/workflows/fuzz.yml index dfb6caa..cafe422 100644 --- a/.github/workflows/fuzz.yml +++ b/.github/workflows/fuzz.yml @@ -49,7 +49,7 @@ jobs: with: components: llvm-tools-preview - - uses: Swatinem/rust-cache@e18b497796c12c097a38f9edb9d0641fb99eee32 # v2 + - uses: Swatinem/rust-cache@6323deb102c322ba6fcbdcafc7e3dddab59af2b6 # v2 with: # `fuzz/` is its own crate outside the parent's implicit workspace # (see fuzz/Cargo.toml) with its own lockfile and target dir. diff --git a/.github/workflows/interop.yml b/.github/workflows/interop.yml index cf0e70e..f18aa10 100644 --- a/.github/workflows/interop.yml +++ b/.github/workflows/interop.yml @@ -112,7 +112,7 @@ jobs: run: python -m unittest scripts/tests/test_cross_version_interop.py -v - uses: dtolnay/rust-toolchain@stable # rolling toolchain selector — intentionally unpinned - - uses: Swatinem/rust-cache@e18b497796c12c097a38f9edb9d0641fb99eee32 # v2 + - uses: Swatinem/rust-cache@6323deb102c322ba6fcbdcafc7e3dddab59af2b6 # v2 # `--locked` asserts the committed Cargo.lock is authoritative; `--release` # because that is the shape a user actually installs, and it is what the diff --git a/.github/workflows/mutants.yml b/.github/workflows/mutants.yml index f8af1b5..c0af573 100644 --- a/.github/workflows/mutants.yml +++ b/.github/workflows/mutants.yml @@ -73,7 +73,7 @@ jobs: - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 - uses: dtolnay/rust-toolchain@stable # rolling toolchain selector — intentionally unpinned - - uses: Swatinem/rust-cache@e18b497796c12c097a38f9edb9d0641fb99eee32 # v2 + - uses: Swatinem/rust-cache@6323deb102c322ba6fcbdcafc7e3dddab59af2b6 # v2 - name: Install cargo-mutants run: cargo install cargo-mutants --locked diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml index f0ea68a..1802552 100644 --- a/.github/workflows/release.yml +++ b/.github/workflows/release.yml @@ -140,7 +140,7 @@ jobs: run: cargo install cargo-edit --locked - name: Install git-cliff - uses: taiki-e/install-action@6a1bd70eaac3c8bdf093356838d7ee09fda951cf # v2 + uses: taiki-e/install-action@6c6fd71fe4fb72c3697d269963d0e15df8adedad # v2 with: tool: git-cliff@2 @@ -542,7 +542,7 @@ jobs: with: targets: ${{ matrix.target }} - - uses: Swatinem/rust-cache@e18b497796c12c097a38f9edb9d0641fb99eee32 # v2 + - uses: Swatinem/rust-cache@6323deb102c322ba6fcbdcafc7e3dddab59af2b6 # v2 with: key: ${{ matrix.target }} @@ -656,7 +656,7 @@ jobs: # the sole irreversible step). Re-running the job regenerates it. SHA-pinned # like every other third-party action in this file. - name: Attest build provenance for the archive - uses: actions/attest-build-provenance@0f67c3f4856b2e3261c31976d6725780e5e4c373 # v4.1.1 + uses: actions/attest-build-provenance@4d101475d8b20a2381f78447822ac1eab6504dd8 # v4.2.2 with: subject-path: ${{ env.ASSET }} diff --git a/.github/workflows/stress.yml b/.github/workflows/stress.yml index e63bdb2..191938f 100644 --- a/.github/workflows/stress.yml +++ b/.github/workflows/stress.yml @@ -69,7 +69,7 @@ jobs: - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 - uses: dtolnay/rust-toolchain@stable # rolling toolchain selector — intentionally unpinned - - uses: Swatinem/rust-cache@e18b497796c12c097a38f9edb9d0641fb99eee32 # v2 + - uses: Swatinem/rust-cache@6323deb102c322ba6fcbdcafc7e3dddab59af2b6 # v2 # `--nocapture` so each scenario's own diagnostics (client counts, the slowest # bounded client invocation) reach the log even on a pass — the numbers are how