Sitelet https://github.com/foundry-rs/compilers/commit/017868ce2bf58240b8b7197b735ae5ab39c26d72
Skip to content
This repository was archived by the owner on Apr 20, 2026. It is now read-only.

Commit 017868c

Browse files
decofedecofe
authored
ci: pin GitHub Actions to SHA, add cargo to dependabot (#372)
1 parent c041ef7 commit 017868c

2 files changed

Lines changed: 30 additions & 16 deletions

File tree

‎.github/dependabot.yml‎

Lines changed: 14 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -11,6 +11,20 @@ updates:
1111
open-pull-requests-limit: 1
1212
groups:
1313
github-actions-weekly:
14+
applies-to: "version-updates"
15+
patterns: ["*"]
16+
update-types: ["minor", "patch"]
17+
- package-ecosystem: "cargo"
18+
directory: "/"
19+
schedule:
20+
interval: "weekly"
21+
commit-message:
22+
prefix: "chore(deps)"
23+
cooldown:
24+
default-days: 7
25+
open-pull-requests-limit: 1
26+
groups:
27+
cargo-weekly:
1428
applies-to: "version-updates"
1529
patterns: ["*"]
1630
update-types: ["minor", "patch"]

‎.github/workflows/ci.yml‎

Lines changed: 16 additions & 16 deletions
Original file line numberDiff line numberDiff line change
@@ -33,17 +33,17 @@ jobs:
3333
- rust: "1.93" # MSRV
3434
flags: "--all-features"
3535
steps:
36-
- uses: actions/checkout@v5
36+
- uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
3737
with:
3838
persist-credentials: false
3939
- uses: dtolnay/rust-toolchain@e97e2d8cc328f1b50210efc529dca0028893a2d9 # master
4040
with:
4141
toolchain: ${{ matrix.rust }}
4242
- name: Install nextest
43-
uses: taiki-e/install-action@94cb46f8d6e437890146ffbd78a778b78e623fb2 # v2
43+
uses: taiki-e/install-action@cf39a74df4a72510be4e5b63348d61067f11e64a # v2.75.0
4444
with:
4545
tool: nextest
46-
- uses: Swatinem/rust-cache@c19371144df3bb44fab255c43d04cbc2ab54d1c4 # v2
46+
- uses: Swatinem/rust-cache@c19371144df3bb44fab255c43d04cbc2ab54d1c4 # v2.9.1
4747
with:
4848
cache-on-failure: true
4949
- name: test
@@ -56,13 +56,13 @@ jobs:
5656
permissions:
5757
contents: read
5858
steps:
59-
- uses: actions/checkout@v5
59+
- uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
6060
with:
6161
persist-credentials: false
6262
- uses: dtolnay/rust-toolchain@e97e2d8cc328f1b50210efc529dca0028893a2d9 # master
6363
with:
6464
toolchain: stable
65-
- uses: Swatinem/rust-cache@c19371144df3bb44fab255c43d04cbc2ab54d1c4 # v2
65+
- uses: Swatinem/rust-cache@c19371144df3bb44fab255c43d04cbc2ab54d1c4 # v2.9.1
6666
with:
6767
cache-on-failure: true
6868
- run: cargo test --workspace --doc --all-features
@@ -73,16 +73,16 @@ jobs:
7373
permissions:
7474
contents: read
7575
steps:
76-
- uses: actions/checkout@v5
76+
- uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
7777
with:
7878
persist-credentials: false
7979
- uses: dtolnay/rust-toolchain@e97e2d8cc328f1b50210efc529dca0028893a2d9 # master
8080
with:
8181
toolchain: stable
82-
- uses: taiki-e/install-action@94cb46f8d6e437890146ffbd78a778b78e623fb2 # v2
82+
- uses: taiki-e/install-action@cf39a74df4a72510be4e5b63348d61067f11e64a # v2.75.0
8383
with:
8484
tool: cargo-hack
85-
- uses: Swatinem/rust-cache@c19371144df3bb44fab255c43d04cbc2ab54d1c4 # v2
85+
- uses: Swatinem/rust-cache@c19371144df3bb44fab255c43d04cbc2ab54d1c4 # v2.9.1
8686
with:
8787
cache-on-failure: true
8888
- name: cargo hack
@@ -94,14 +94,14 @@ jobs:
9494
permissions:
9595
contents: read
9696
steps:
97-
- uses: actions/checkout@v5
97+
- uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
9898
with:
9999
persist-credentials: false
100100
- uses: dtolnay/rust-toolchain@e97e2d8cc328f1b50210efc529dca0028893a2d9 # master
101101
with:
102102
toolchain: nightly
103103
components: clippy
104-
- uses: Swatinem/rust-cache@c19371144df3bb44fab255c43d04cbc2ab54d1c4 # v2
104+
- uses: Swatinem/rust-cache@c19371144df3bb44fab255c43d04cbc2ab54d1c4 # v2.9.1
105105
with:
106106
cache-on-failure: true
107107
- run: cargo clippy --workspace --all-targets --all-features
@@ -114,13 +114,13 @@ jobs:
114114
permissions:
115115
contents: read
116116
steps:
117-
- uses: actions/checkout@v5
117+
- uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
118118
with:
119119
persist-credentials: false
120120
- uses: dtolnay/rust-toolchain@e97e2d8cc328f1b50210efc529dca0028893a2d9 # master
121121
with:
122122
toolchain: nightly
123-
- uses: Swatinem/rust-cache@c19371144df3bb44fab255c43d04cbc2ab54d1c4 # v2
123+
- uses: Swatinem/rust-cache@c19371144df3bb44fab255c43d04cbc2ab54d1c4 # v2.9.1
124124
with:
125125
cache-on-failure: true
126126
- run: cargo doc --workspace --all-features --no-deps --document-private-items
@@ -133,7 +133,7 @@ jobs:
133133
permissions:
134134
contents: read
135135
steps:
136-
- uses: actions/checkout@v5
136+
- uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
137137
with:
138138
persist-credentials: false
139139
- uses: dtolnay/rust-toolchain@e97e2d8cc328f1b50210efc529dca0028893a2d9 # master
@@ -162,16 +162,16 @@ jobs:
162162
build-mode: none
163163
steps:
164164
- name: Checkout repository
165-
uses: actions/checkout@v5
165+
uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
166166
with:
167167
persist-credentials: false
168168
- name: Initialize CodeQL
169-
uses: github/codeql-action/init@v4
169+
uses: github/codeql-action/init@c10b8064de6f491fea524254123dbe5e09572f13 # v4.35.1
170170
with:
171171
languages: ${{ matrix.language }}
172172
build-mode: ${{ matrix.build-mode }}
173173
- name: Perform CodeQL Analysis
174-
uses: github/codeql-action/analyze@v4
174+
uses: github/codeql-action/analyze@c10b8064de6f491fea524254123dbe5e09572f13 # v4.35.1
175175
with:
176176
category: "/language:${{matrix.language}}"
177177

0 commit comments

Comments
 (0)