From ce85e1a4cd17a312cd67beb6ae36075dd08fc3cf Mon Sep 17 00:00:00 2001
From: gopal tathe <44522021+techgopal@users.noreply.github.com>
Date: Sun, 15 Nov 2026 04:22:31 +0000
Subject: [PATCH] ci: repin dtolnay/rust-toolchain to the rewritten stable
 commit

dtolnay/rust-toolchain's `stable` branch was rewritten on 2026-11-15
02:32 UTC. The pinned commit b725eda5 no longer has history in that
repository, so zizmor's impostor-commit audit now fails on every PR that
touches a workflow (#769, #774). Repin the four uses (setup-rust action,
binaries, docs-site) to the current `stable` head 39008827. Its
action.yml is byte-identical to the old pin's, so the steps behave the
same.

Signed-off-by: gopal tathe <44522021+techgopal@users.noreply.github.com>
---
 .github/actions/setup-rust/action.yml | 4 ++--
 .github/workflows/binaries.yml        | 2 +-
 .github/workflows/docs-site.yml       | 2 +-
 3 files changed, 4 insertions(+), 4 deletions(-)

diff --git a/.github/actions/setup-rust/action.yml b/.github/actions/setup-rust/action.yml
index fe34208a0..9aa3868af 100644
--- a/.github/actions/setup-rust/action.yml
+++ b/.github/actions/setup-rust/action.yml
@@ -13,7 +13,7 @@ runs:
   using: composite
   steps:
     - id: first
-      uses: dtolnay/rust-toolchain@b725eda525362e7cf34af9a7243cac1e3f01a7ec # stable
+      uses: dtolnay/rust-toolchain@39008827e6b4319a349e9a42dfc90579dd25f1ca # stable
       continue-on-error: true
       with:
         toolchain: ${{ inputs.toolchain }}
@@ -24,7 +24,7 @@ runs:
       run: sleep 20
     - name: Retry the toolchain install
       if: steps.first.outcome == 'failure'
-      uses: dtolnay/rust-toolchain@b725eda525362e7cf34af9a7243cac1e3f01a7ec # stable
+      uses: dtolnay/rust-toolchain@39008827e6b4319a349e9a42dfc90579dd25f1ca # stable
       with:
         toolchain: ${{ inputs.toolchain }}
         components: ${{ inputs.components }}
diff --git a/.github/workflows/binaries.yml b/.github/workflows/binaries.yml
index c06c57314..2b3b52eab 100644
--- a/.github/workflows/binaries.yml
+++ b/.github/workflows/binaries.yml
@@ -179,7 +179,7 @@ jobs:
       - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
         with:
           persist-credentials: false
-      - uses: dtolnay/rust-toolchain@b725eda525362e7cf34af9a7243cac1e3f01a7ec # stable
+      - uses: dtolnay/rust-toolchain@39008827e6b4319a349e9a42dfc90579dd25f1ca # stable
       - uses: Swatinem/rust-cache@6323deb102c322ba6fcbdcafc7e3dddab59af2b6 # v2.9.2
         with:
           key: krishiv-macos-arm64
diff --git a/.github/workflows/docs-site.yml b/.github/workflows/docs-site.yml
index ce036c112..95c89238c 100644
--- a/.github/workflows/docs-site.yml
+++ b/.github/workflows/docs-site.yml
@@ -83,7 +83,7 @@ jobs:
       - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
         with:
           persist-credentials: false
-      - uses: dtolnay/rust-toolchain@b725eda525362e7cf34af9a7243cac1e3f01a7ec # stable
+      - uses: dtolnay/rust-toolchain@39008827e6b4319a349e9a42dfc90579dd25f1ca # stable
         with:
           toolchain: 1.99.1
       - name: Pages match their generators, examples rerun