From 2e8833a2b1f5a081eee9ada00ed2f45719c1d373 Mon Sep 17 00:00:00 2001 From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com> Date: Mon, 19 Oct 2026 07:12:40 +0000 Subject: [PATCH] build(deps): bump the actions-all group with 7 updates Bumps the actions-all group with 7 updates: | Package | From | To | | --- | --- | --- | | [taiki-e/install-action](https://github.com/taiki-e/install-action) | `2.86.2` | `2.87.28` | | [actions/upload-artifact](https://github.com/actions/upload-artifact) | `4.4.3` | `7.0.2` | | [dtolnay/rust-toolchain](https://github.com/dtolnay/rust-toolchain) | `02cb101ec7c40f2c49e1d9714d64511d8e1b74de` | `683b588c487a69d01f6c6ddf40f036ff682cc2c8` | | [github/codeql-action/init](https://github.com/github/codeql-action) | `4.37.7` | `4.38.3` | | [github/codeql-action/autobuild](https://github.com/github/codeql-action) | `4.37.7` | `4.38.3` | | [github/codeql-action/analyze](https://github.com/github/codeql-action) | `4.37.7` | `4.38.3` | | [actions/download-artifact](https://github.com/actions/download-artifact) | `4.3.0` | `8.0.2` | Updates `taiki-e/install-action` from 2.86.2 to 2.87.28 - [Release notes](https://github.com/taiki-e/install-action/releases) - [Changelog](https://github.com/taiki-e/install-action/blob/main/CHANGELOG.md) - [Commits](https://github.com/taiki-e/install-action/compare/b6b84cf49ebfe0176417bdce007c624f0db37f20...1168f6810a3cb30a3514bf5756a3b7f0422c6df8) Updates `actions/upload-artifact` from 4.4.3 to 7.0.2 - [Release notes](https://github.com/actions/upload-artifact/releases) - [Commits](https://github.com/actions/upload-artifact/compare/b4b15b8c7c6ac21ea08fcf65892d2ee8f75cf882...cf430e030ddbb5b0abf93d22962f4752f3646cd9) Updates `dtolnay/rust-toolchain` from 02cb101ec7c40f2c49e1d9714d64511d8e1b74de to 683b588c487a69d01f6c6ddf40f036ff682cc2c8 - [Release notes](https://github.com/dtolnay/rust-toolchain/releases) - [Commits](https://github.com/dtolnay/rust-toolchain/compare/02cb101ec7c40f2c49e1d9714d64511d8e1b74de...683b588c487a69d01f6c6ddf40f036ff682cc2c8) Updates `github/codeql-action/init` from 4.37.7 to 4.38.3 - [Release notes](https://github.com/github/codeql-action/releases) - [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md) - [Commits](https://github.com/github/codeql-action/compare/ff2f1c621b7f889edc0d3c761ac2e6a3f8cdb0dd...24c54180a607b1449ed407dd24f251e4e9147c8d) Updates `github/codeql-action/autobuild` from 4.37.7 to 4.38.3 - [Release notes](https://github.com/github/codeql-action/releases) - [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md) - [Commits](https://github.com/github/codeql-action/compare/ff2f1c621b7f889edc0d3c761ac2e6a3f8cdb0dd...24c54180a607b1449ed407dd24f251e4e9147c8d) Updates `github/codeql-action/analyze` from 4.37.7 to 4.38.3 - [Release notes](https://github.com/github/codeql-action/releases) - [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md) - [Commits](https://github.com/github/codeql-action/compare/ff2f1c621b7f889edc0d3c761ac2e6a3f8cdb0dd...24c54180a607b1449ed407dd24f251e4e9147c8d) Updates `actions/download-artifact` from 4.3.0 to 8.0.2 - [Release notes](https://github.com/actions/download-artifact/releases) - [Commits](https://github.com/actions/download-artifact/compare/d3f86a106a0bac45b974a628896c90dbdf5c8093...9000827ccba6bdab643e8b6fd33ac0654aef8333) --- updated-dependencies: - dependency-name: taiki-e/install-action dependency-version: 2.87.28 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: actions-all - dependency-name: actions/upload-artifact dependency-version: 7.0.2 dependency-type: direct:production update-type: version-update:semver-major dependency-group: actions-all - dependency-name: dtolnay/rust-toolchain dependency-version: 683b588c487a69d01f6c6ddf40f036ff682cc2c8 dependency-type: direct:production dependency-group: actions-all - dependency-name: github/codeql-action/init dependency-version: 4.38.3 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: actions-all - dependency-name: github/codeql-action/autobuild dependency-version: 4.38.3 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: actions-all - dependency-name: github/codeql-action/analyze dependency-version: 4.38.3 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: actions-all - dependency-name: actions/download-artifact dependency-version: 8.0.2 dependency-type: direct:production update-type: version-update:semver-major dependency-group: actions-all ... Signed-off-by: dependabot[bot] --- .github/workflows/ci.yml | 12 ++++++------ .github/workflows/codeql.yml | 6 +++--- .github/workflows/deploy.yml | 6 +++--- .github/workflows/scheduled.yml | 10 +++++----- 4 files changed, 17 insertions(+), 17 deletions(-) diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml index 75556a38..53026237 100644 --- a/.github/workflows/ci.yml +++ b/.github/workflows/ci.yml @@ -89,7 +89,7 @@ jobs: # than skipping it, which is deliberate: a supply-chain check that is # silently absent on a machine where it is not installed is a check that # reports nothing about the code. - - uses: taiki-e/install-action@b6b84cf49ebfe0176417bdce007c624f0db37f20 # v2 + - uses: taiki-e/install-action@1168f6810a3cb30a3514bf5756a3b7f0422c6df8 # v2 with: tool: | cargo-make@0.37.24 @@ -141,7 +141,7 @@ jobs: # Without this a failure is a red dot and a scrollback. The path is set in # `.config/nextest.toml` as `junit.path`, so the file lands under a # per-profile store directory next to the build output. - - uses: actions/upload-artifact@b4b15b8c7c6ac21ea08fcf65892d2ee8f75cf882 # v4 + - uses: actions/upload-artifact@cf430e030ddbb5b0abf93d22962f4752f3646cd9 # v4 if: always() with: name: nextest-junit @@ -176,11 +176,11 @@ jobs: # `rust-toolchain.toml` before any action runs, so the env var is what # wins, and setting only the action's `toolchain:` input is not enough on # its own. - - uses: dtolnay/rust-toolchain@02cb101ec7c40f2c49e1d9714d64511d8e1b74de # master + - uses: dtolnay/rust-toolchain@683b588c487a69d01f6c6ddf40f036ff682cc2c8 # master with: { toolchain: 1.97.1 } env: RUSTUP_TOOLCHAIN: 1.97.1 - - uses: taiki-e/install-action@b6b84cf49ebfe0176417bdce007c624f0db37f20 # v2 + - uses: taiki-e/install-action@1168f6810a3cb30a3514bf5756a3b7f0422c6df8 # v2 with: tool: | cargo-nextest@0.9.146 @@ -220,7 +220,7 @@ jobs: # `dioxus-cli` is the crate; `dx` is the binary it installs and is not on # crates.io, so `dx@0.7.10` does not resolve. The version is the resolved # `dioxus` in `Cargo.lock`, which is the one `dx` has to agree with. - - uses: taiki-e/install-action@b6b84cf49ebfe0176417bdce007c624f0db37f20 # v2 + - uses: taiki-e/install-action@1168f6810a3cb30a3514bf5756a3b7f0422c6df8 # v2 with: tool: | cargo-make@0.37.24 @@ -228,7 +228,7 @@ jobs: - run: ./mk web-build-all - name: Report the optimized size of each app run: ./mk web-size - - uses: actions/upload-artifact@b4b15b8c7c6ac21ea08fcf65892d2ee8f75cf882 # v4 + - uses: actions/upload-artifact@cf430e030ddbb5b0abf93d22962f4752f3646cd9 # v4 with: name: wasm-bundles # `dx` writes into the one workspace target directory, not under each diff --git a/.github/workflows/codeql.yml b/.github/workflows/codeql.yml index b8a3b606..63109fed 100644 --- a/.github/workflows/codeql.yml +++ b/.github/workflows/codeql.yml @@ -35,10 +35,10 @@ jobs: persist-credentials: false fetch-depth: 1 - - uses: github/codeql-action/init@ff2f1c621b7f889edc0d3c761ac2e6a3f8cdb0dd + - uses: github/codeql-action/init@24c54180a607b1449ed407dd24f251e4e9147c8d with: languages: ${{ matrix.language }} - - uses: github/codeql-action/autobuild@ff2f1c621b7f889edc0d3c761ac2e6a3f8cdb0dd + - uses: github/codeql-action/autobuild@24c54180a607b1449ed407dd24f251e4e9147c8d - - uses: github/codeql-action/analyze@ff2f1c621b7f889edc0d3c761ac2e6a3f8cdb0dd + - uses: github/codeql-action/analyze@24c54180a607b1449ed407dd24f251e4e9147c8d diff --git a/.github/workflows/deploy.yml b/.github/workflows/deploy.yml index f093012e..d5c978c9 100644 --- a/.github/workflows/deploy.yml +++ b/.github/workflows/deploy.yml @@ -97,7 +97,7 @@ jobs: # compiling the dependency graph and the rest reuse it. shared-key: pages - - uses: taiki-e/install-action@b6b84cf49ebfe0176417bdce007c624f0db37f20 # v2 + - uses: taiki-e/install-action@1168f6810a3cb30a3514bf5756a3b7f0422c6df8 # v2 with: tool: | cargo-make@0.37.24 @@ -111,7 +111,7 @@ jobs: # `dx` writes into the one workspace target directory, not under the app's # own directory. - - uses: actions/upload-artifact@b4b15b8c7c6ac21ea08fcf65892d2ee8f75cf882 # v4 + - uses: actions/upload-artifact@cf430e030ddbb5b0abf93d22962f4752f3646cd9 # v4 with: name: app-${{ matrix.app }} path: target/dx/${{ matrix.pkg }}/release/web/public @@ -133,7 +133,7 @@ jobs: # with "unable to find version b4b15b8c..." because this line carried # upload-artifact's SHA. `./mk action-pins` checks every pin against the # repository that owns it, on the weekly schedule. - - uses: actions/download-artifact@d3f86a106a0bac45b974a628896c90dbdf5c8093 # v4 + - uses: actions/download-artifact@9000827ccba6bdab643e8b6fd33ac0654aef8333 # v8.0.2 with: path: _site diff --git a/.github/workflows/scheduled.yml b/.github/workflows/scheduled.yml index 209a5e24..645b4f93 100644 --- a/.github/workflows/scheduled.yml +++ b/.github/workflows/scheduled.yml @@ -66,14 +66,14 @@ jobs: run: rustup show active-toolchain - uses: Swatinem/rust-cache@6323deb102c322ba6fcbdcafc7e3dddab59af2b6 # v2.8 with: { shared-key: ci } - - uses: taiki-e/install-action@b6b84cf49ebfe0176417bdce007c624f0db37f20 # v2 + - uses: taiki-e/install-action@1168f6810a3cb30a3514bf5756a3b7f0422c6df8 # v2 with: tool: | cargo-make@0.37.24 cargo-nextest@0.9.146 cargo-mutants@27.1.0 - run: ./mk mutants - - uses: actions/upload-artifact@b4b15b8c7c6ac21ea08fcf65892d2ee8f75cf882 # v4 + - uses: actions/upload-artifact@cf430e030ddbb5b0abf93d22962f4752f3646cd9 # v4 if: always() with: name: mutants-report @@ -110,14 +110,14 @@ jobs: run: rustup show active-toolchain - uses: Swatinem/rust-cache@6323deb102c322ba6fcbdcafc7e3dddab59af2b6 # v2.8 with: { shared-key: ci } - - uses: taiki-e/install-action@b6b84cf49ebfe0176417bdce007c624f0db37f20 # v2 + - uses: taiki-e/install-action@1168f6810a3cb30a3514bf5756a3b7f0422c6df8 # v2 with: tool: | cargo-make@0.37.24 cargo-nextest@0.9.146 cargo-llvm-cov@0.9.1 - run: ./mk cov - - uses: actions/upload-artifact@b4b15b8c7c6ac21ea08fcf65892d2ee8f75cf882 # v4 + - uses: actions/upload-artifact@cf430e030ddbb5b0abf93d22962f4752f3646cd9 # v4 with: name: coverage-report path: target/llvm-cov-report/ @@ -150,7 +150,7 @@ jobs: run: rustup show active-toolchain - uses: Swatinem/rust-cache@6323deb102c322ba6fcbdcafc7e3dddab59af2b6 # v2.8 with: { shared-key: ci } - - uses: taiki-e/install-action@b6b84cf49ebfe0176417bdce007c624f0db37f20 # v2 + - uses: taiki-e/install-action@1168f6810a3cb30a3514bf5756a3b7f0422c6df8 # v2 with: tool: | cargo-make@0.37.24