From 623e2b6425b7a624f2eaca8e3380740e18af8073 Mon Sep 17 00:00:00 2001 From: "renovate[bot]" <29139614+renovate[bot]@users.noreply.github.com> Date: Fri, 7 Aug 2026 20:02:54 +0000 Subject: [PATCH] github-actions Update GitHub Actions --- .github/workflows/ci.yml | 6 +++--- .github/workflows/nightly.yml | 24 ++++++++++++------------ .github/workflows/release.yml | 22 +++++++++++----------- 3 files changed, 26 insertions(+), 26 deletions(-) diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml index 29d24e3..f08a0da 100644 --- a/.github/workflows/ci.yml +++ b/.github/workflows/ci.yml @@ -25,13 +25,13 @@ jobs: runs-on: ubuntu-latest steps: - - uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8 # v6.0.1 + - uses: actions/checkout@d23441a48e516b6c34aea4fa41551a30e30af803 # v6.1.0 with: fetch-depth: 0 submodules: true - name: Install Rust toolchain - uses: dtolnay/rust-toolchain@stable + uses: dtolnay/rust-toolchain@4360b52568e2003a75bf9bc1d59f33a8e3fc893c # stable with: components: rustfmt, clippy @@ -39,7 +39,7 @@ jobs: run: rustup target add wasm32-wasip1 - name: Cache dependencies - uses: Swatinem/rust-cache@779680da715d629ac1d338a641029a2f4372abb5 # v2.8.2 + uses: Swatinem/rust-cache@6323deb102c322ba6fcbdcafc7e3dddab59af2b6 # v2.9.2 - name: Run clippy run: cargo clippy -- -D warnings diff --git a/.github/workflows/nightly.yml b/.github/workflows/nightly.yml index e09c60a..30d2b5e 100644 --- a/.github/workflows/nightly.yml +++ b/.github/workflows/nightly.yml @@ -15,7 +15,7 @@ jobs: permissions: contents: write steps: - - uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8 # v6.0.1 + - uses: actions/checkout@d23441a48e516b6c34aea4fa41551a30e30af803 # v6.1.0 with: fetch-depth: 0 @@ -42,16 +42,16 @@ jobs: outputs: sha: ${{ steps.meta.outputs.sha }} steps: - - uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8 # v6.0.1 + - uses: actions/checkout@d23441a48e516b6c34aea4fa41551a30e30af803 # v6.1.0 with: ref: nightly fetch-depth: 0 submodules: true - name: Install Rust 1.92 toolchain + wasm target - uses: dtolnay/rust-toolchain@stable + uses: dtolnay/rust-toolchain@4360b52568e2003a75bf9bc1d59f33a8e3fc893c # stable with: - toolchain: "1.92" + toolchain: "1.92.0" components: rustc rust-std cargo clippy rustfmt targets: wasm32-wasip1 @@ -89,7 +89,7 @@ jobs: echo "sha=${GITHUB_SHA}" >> "$GITHUB_OUTPUT" - name: Upload wasm artifact - uses: actions/upload-artifact@v4 + uses: actions/upload-artifact@ea165f8d65b6e75b540449e92b4886f43607fa02 # v4.6.2 with: name: plugin-wasm path: plugin.wasm @@ -107,13 +107,13 @@ jobs: nightly_digest: ${{ steps.digest.outputs.nightly_digest }} nightly_ref: ${{ steps.meta.outputs.nightly_ref }} steps: - - uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8 # v6.0.1 + - uses: actions/checkout@d23441a48e516b6c34aea4fa41551a30e30af803 # v6.1.0 with: ref: nightly fetch-depth: 0 - name: Download wasm artifact - uses: actions/download-artifact@v4 + uses: actions/download-artifact@d3f86a106a0bac45b974a628896c90dbdf5c8093 # v4.3.0 with: name: plugin-wasm path: . @@ -122,10 +122,10 @@ jobs: uses: docker/setup-buildx-action@8d2750c68a42422c14e847fe6c8ac0403b4cbd6f # v3.12.0 - name: Install cosign - uses: sigstore/cosign-installer@faadad0cce49287aee09b3a48701e75088a2c6ad # v4.0.0 + uses: sigstore/cosign-installer@6f9f17788090df1f26f669e9d70d6ae9567deba6 # v4.1.2 - name: Log in to GitHub Container Registry - uses: docker/login-action@5e57cd118135c172c3672efd75eb46360885c0ef # v3.6.0 + uses: docker/login-action@c94ce9fb468520275223c153574b00df6fe4bcc9 # v3.7.0 with: registry: ghcr.io username: ${{ github.actor }} @@ -140,7 +140,7 @@ jobs: echo "nightly_ref=${IMAGE}:nightly" >> "$GITHUB_OUTPUT" - name: Build and push image (just copies plugin.wasm) - uses: docker/build-push-action@v6 + uses: docker/build-push-action@10e90e3645eae34f1e60eeb005ba3a3d33f178e8 # v6.19.2 with: context: . file: ./Dockerfile @@ -211,13 +211,13 @@ jobs: EOF - name: Download plugin.wasm artifact - uses: actions/download-artifact@v4 + uses: actions/download-artifact@d3f86a106a0bac45b974a628896c90dbdf5c8093 # v4.3.0 with: name: plugin-wasm path: . - name: Create new nightly release - uses: softprops/action-gh-release@a06a81a03ee405af7f2048a818ed3f03bbf83c7b # v2.5.0 + uses: softprops/action-gh-release@3bb12739c298aeb8a4eeaf626c5b8d85266b0e65 # v2.6.2 with: tag_name: nightly name: Nightly build diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml index eadef53..0d23334 100644 --- a/.github/workflows/release.yml +++ b/.github/workflows/release.yml @@ -19,7 +19,7 @@ jobs: tag: ${{ steps.meta.outputs.tag }} sha: ${{ steps.meta.outputs.sha }} steps: - - uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8 # v6.0.1 + - uses: actions/checkout@d23441a48e516b6c34aea4fa41551a30e30af803 # v6.1.0 with: fetch-depth: 0 submodules: true @@ -33,9 +33,9 @@ jobs: echo "sha=${GITHUB_SHA}" >> "$GITHUB_OUTPUT" - name: Install Rust 1.92 toolchain + wasm target - uses: dtolnay/rust-toolchain@stable + uses: dtolnay/rust-toolchain@4360b52568e2003a75bf9bc1d59f33a8e3fc893c # stable with: - toolchain: "1.92" + toolchain: "1.92.0" components: rustc rust-std cargo clippy rustfmt targets: wasm32-wasip1 @@ -66,7 +66,7 @@ jobs: ls -lh ./plugin.wasm - name: Upload wasm artifact - uses: actions/upload-artifact@v4 + uses: actions/upload-artifact@ea165f8d65b6e75b540449e92b4886f43607fa02 # v4.6.2 with: name: plugin-wasm path: plugin.wasm @@ -87,12 +87,12 @@ jobs: tag_digest: ${{ steps.digest.outputs.tag_digest }} latest_digest: ${{ steps.digest.outputs.latest_digest }} steps: - - uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8 # v6.0.1 + - uses: actions/checkout@d23441a48e516b6c34aea4fa41551a30e30af803 # v6.1.0 with: fetch-depth: 0 - name: Download wasm artifact - uses: actions/download-artifact@v4 + uses: actions/download-artifact@d3f86a106a0bac45b974a628896c90dbdf5c8093 # v4.3.0 with: name: plugin-wasm path: . @@ -101,10 +101,10 @@ jobs: uses: docker/setup-buildx-action@8d2750c68a42422c14e847fe6c8ac0403b4cbd6f # v3.12.0 - name: Install cosign - uses: sigstore/cosign-installer@faadad0cce49287aee09b3a48701e75088a2c6ad # v4.0.0 + uses: sigstore/cosign-installer@6f9f17788090df1f26f669e9d70d6ae9567deba6 # v4.1.2 - name: Log in to GitHub Container Registry - uses: docker/login-action@5e57cd118135c172c3672efd75eb46360885c0ef # v3.6.0 + uses: docker/login-action@c94ce9fb468520275223c153574b00df6fe4bcc9 # v3.7.0 with: registry: ghcr.io username: ${{ github.actor }} @@ -121,7 +121,7 @@ jobs: echo "latest_ref=${IMAGE}:latest" >> "$GITHUB_OUTPUT" - name: Build and push image (linux/amd64; copies plugin.wasm) - uses: docker/build-push-action@v6 + uses: docker/build-push-action@10e90e3645eae34f1e60eeb005ba3a3d33f178e8 # v6.19.2 with: context: . file: ./Dockerfile @@ -182,7 +182,7 @@ jobs: contents: write steps: - name: Download plugin.wasm artifact - uses: actions/download-artifact@v4 + uses: actions/download-artifact@d3f86a106a0bac45b974a628896c90dbdf5c8093 # v4.3.0 with: name: plugin-wasm path: . @@ -218,7 +218,7 @@ jobs: EOF - name: Create GitHub Release - uses: softprops/action-gh-release@a06a81a03ee405af7f2048a818ed3f03bbf83c7b # v2.5.0 + uses: softprops/action-gh-release@3bb12739c298aeb8a4eeaf626c5b8d85266b0e65 # v2.6.2 with: tag_name: ${{ github.ref_name }} name: Release ${{ github.ref_name }}