From 7a3a8199c88631476351d11b753688f2ab2559f4 Mon Sep 17 00:00:00 2001 From: "renovate[bot]" <29139614+renovate[bot]@users.noreply.github.com> Date: Fri, 7 Aug 2026 19:53:53 +0000 Subject: [PATCH] github-actions Update GitHub Actions --- .github/workflows/ci.yml | 6 +++--- .github/workflows/nightly.yml | 20 ++++++++++---------- .github/workflows/release.yml | 18 +++++++++--------- 3 files changed, 22 insertions(+), 22 deletions(-) diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml index 2695ee9..78a11f8 100644 --- a/.github/workflows/ci.yml +++ b/.github/workflows/ci.yml @@ -25,13 +25,13 @@ jobs: runs-on: ubuntu-latest steps: - - uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8 # v6.0.1 + - uses: actions/checkout@d23441a48e516b6c34aea4fa41551a30e30af803 # v6.1.0 with: fetch-depth: 0 submodules: true - name: Install Rust toolchain - uses: dtolnay/rust-toolchain@stable + uses: dtolnay/rust-toolchain@4360b52568e2003a75bf9bc1d59f33a8e3fc893c # stable with: components: rustfmt, clippy @@ -59,7 +59,7 @@ jobs: echo "CC_wasm32_wasip1=/opt/wasi-sdk/bin/clang --sysroot=/opt/wasi-sdk/share/wasi-sysroot" >> $GITHUB_ENV - name: Cache dependencies - uses: Swatinem/rust-cache@779680da715d629ac1d338a641029a2f4372abb5 # v2.8.2 + uses: Swatinem/rust-cache@6323deb102c322ba6fcbdcafc7e3dddab59af2b6 # v2.9.2 - name: Run clippy run: cargo clippy -- -D warnings diff --git a/.github/workflows/nightly.yml b/.github/workflows/nightly.yml index 88845c8..9d56b56 100644 --- a/.github/workflows/nightly.yml +++ b/.github/workflows/nightly.yml @@ -15,7 +15,7 @@ jobs: permissions: contents: write steps: - - uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8 # v6.0.1 + - uses: actions/checkout@d23441a48e516b6c34aea4fa41551a30e30af803 # v6.1.0 with: fetch-depth: 0 @@ -42,16 +42,16 @@ jobs: outputs: sha: ${{ steps.meta.outputs.sha }} steps: - - uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8 # v6.0.1 + - uses: actions/checkout@d23441a48e516b6c34aea4fa41551a30e30af803 # v6.1.0 with: ref: nightly fetch-depth: 0 submodules: true - name: Install Rust 1.92 toolchain + wasm target - uses: dtolnay/rust-toolchain@stable + uses: dtolnay/rust-toolchain@4360b52568e2003a75bf9bc1d59f33a8e3fc893c # stable with: - toolchain: "1.92" + toolchain: "1.92.0" components: rustc rust-std cargo clippy rustfmt targets: wasm32-wasip1 @@ -109,7 +109,7 @@ jobs: echo "sha=${GITHUB_SHA}" >> "$GITHUB_OUTPUT" - name: Upload wasm artifact - uses: actions/upload-artifact@v4 + uses: actions/upload-artifact@ea165f8d65b6e75b540449e92b4886f43607fa02 # v4.6.2 with: name: plugin-wasm path: plugin.wasm @@ -128,16 +128,16 @@ jobs: nightly_digest: ${{ steps.digest.outputs.nightly_digest }} steps: - name: Download wasm artifact - uses: actions/download-artifact@v4 + uses: actions/download-artifact@d3f86a106a0bac45b974a628896c90dbdf5c8093 # v4.3.0 with: name: plugin-wasm path: . - name: Install ORAS - uses: oras-project/setup-oras@v1 + uses: oras-project/setup-oras@22ce207df3b08e061f537244349aac6ae1d214f6 # v1.2.4 - name: Install cosign - uses: sigstore/cosign-installer@faadad0cce49287aee09b3a48701e75088a2c6ad # v4.0.0 + uses: sigstore/cosign-installer@6f9f17788090df1f26f669e9d70d6ae9567deba6 # v4.1.2 - name: ORAS login to GHCR shell: bash @@ -202,7 +202,7 @@ jobs: contents: write steps: - name: Download plugin.wasm artifact - uses: actions/download-artifact@v4 + uses: actions/download-artifact@d3f86a106a0bac45b974a628896c90dbdf5c8093 # v4.3.0 with: name: plugin-wasm path: . @@ -243,7 +243,7 @@ jobs: EOF - name: Create new nightly release - uses: softprops/action-gh-release@a06a81a03ee405af7f2048a818ed3f03bbf83c7b # v2.5.0 + uses: softprops/action-gh-release@3bb12739c298aeb8a4eeaf626c5b8d85266b0e65 # v2.6.2 with: tag_name: nightly name: Nightly build (ORAS) diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml index 9541a3b..ca794b0 100644 --- a/.github/workflows/release.yml +++ b/.github/workflows/release.yml @@ -19,7 +19,7 @@ jobs: tag: ${{ steps.meta.outputs.tag }} sha: ${{ steps.meta.outputs.sha }} steps: - - uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8 # v6.0.1 + - uses: actions/checkout@d23441a48e516b6c34aea4fa41551a30e30af803 # v6.1.0 with: fetch-depth: 0 submodules: true @@ -33,9 +33,9 @@ jobs: echo "sha=${GITHUB_SHA}" >> "$GITHUB_OUTPUT" - name: Install Rust 1.92 toolchain + wasm target - uses: dtolnay/rust-toolchain@stable + uses: dtolnay/rust-toolchain@4360b52568e2003a75bf9bc1d59f33a8e3fc893c # stable with: - toolchain: "1.92" + toolchain: "1.92.0" components: rustc rust-std cargo clippy rustfmt targets: wasm32-wasip1 @@ -86,7 +86,7 @@ jobs: ls -lh ./plugin.wasm - name: Upload wasm artifact - uses: actions/upload-artifact@v4 + uses: actions/upload-artifact@ea165f8d65b6e75b540449e92b4886f43607fa02 # v4.6.2 with: name: plugin-wasm path: plugin.wasm @@ -107,16 +107,16 @@ jobs: latest_digest: ${{ steps.digest.outputs.latest_digest }} steps: - name: Download wasm artifact - uses: actions/download-artifact@v4 + uses: actions/download-artifact@d3f86a106a0bac45b974a628896c90dbdf5c8093 # v4.3.0 with: name: plugin-wasm path: . - name: Install ORAS - uses: oras-project/setup-oras@v1 + uses: oras-project/setup-oras@22ce207df3b08e061f537244349aac6ae1d214f6 # v1.2.4 - name: Install cosign - uses: sigstore/cosign-installer@faadad0cce49287aee09b3a48701e75088a2c6ad # v4.0.0 + uses: sigstore/cosign-installer@6f9f17788090df1f26f669e9d70d6ae9567deba6 # v4.1.2 - name: ORAS login to GHCR shell: bash @@ -201,7 +201,7 @@ jobs: contents: write steps: - name: Download plugin.wasm artifact - uses: actions/download-artifact@v4 + uses: actions/download-artifact@d3f86a106a0bac45b974a628896c90dbdf5c8093 # v4.3.0 with: name: plugin-wasm path: . @@ -243,7 +243,7 @@ jobs: EOF - name: Create GitHub Release - uses: softprops/action-gh-release@a06a81a03ee405af7f2048a818ed3f03bbf83c7b # v2.5.0 + uses: softprops/action-gh-release@3bb12739c298aeb8a4eeaf626c5b8d85266b0e65 # v2.6.2 with: tag_name: ${{ github.ref_name }} name: Release ${{ github.ref_name }} (ORAS)