From 17e84874f9ea999c11c01448dc6b41e008adebd9 Mon Sep 17 00:00:00 2001 From: MotherSphere Date: Fri, 9 Oct 2026 13:21:02 +0200 Subject: [PATCH] ci: pick up the Rust toolchain action's input-handling security fix --- .github/workflows/ci.yml | 8 ++++---- .github/workflows/release.yml | 2 +- 2 files changed, 5 insertions(+), 5 deletions(-) diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml index 2e1fd4f..f5fdc97 100644 --- a/.github/workflows/ci.yml +++ b/.github/workflows/ci.yml @@ -34,7 +34,7 @@ jobs: steps: - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 - - uses: dtolnay/rust-toolchain@89b12181fb390509a0842a86cc55eeb8eb928c1d # stable branch + - uses: dtolnay/rust-toolchain@686976e191b89faba57d3206551f0f330d8cb249 # stable branch with: components: clippy, rustfmt @@ -88,7 +88,7 @@ jobs: [ -n "$version" ] || { echo "::error::could not read rust-version from Cargo.toml"; exit 1; } echo "version=$version" >> "$GITHUB_OUTPUT" - - uses: dtolnay/rust-toolchain@89b12181fb390509a0842a86cc55eeb8eb928c1d # stable branch + - uses: dtolnay/rust-toolchain@686976e191b89faba57d3206551f0f330d8cb249 # stable branch with: toolchain: ${{ steps.msrv.outputs.version }} @@ -162,7 +162,7 @@ jobs: steps: - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 - - uses: dtolnay/rust-toolchain@89b12181fb390509a0842a86cc55eeb8eb928c1d # stable branch + - uses: dtolnay/rust-toolchain@686976e191b89faba57d3206551f0f330d8cb249 # stable branch - name: Build the release binary run: cargo build --release --locked --target x86_64-unknown-linux-gnu @@ -182,7 +182,7 @@ jobs: steps: - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 - - uses: dtolnay/rust-toolchain@89b12181fb390509a0842a86cc55eeb8eb928c1d # stable branch + - uses: dtolnay/rust-toolchain@686976e191b89faba57d3206551f0f330d8cb249 # stable branch # bash rather than the default `bash -e`: with pipefail, a failing # cargo tree fails the step instead of counting 0 crates. diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml index b1d76ab..f0e4c59 100644 --- a/.github/workflows/release.yml +++ b/.github/workflows/release.yml @@ -124,7 +124,7 @@ jobs: ref: ${{ needs.release-please.outputs.tag_name || inputs.tag }} persist-credentials: false - - uses: dtolnay/rust-toolchain@89b12181fb390509a0842a86cc55eeb8eb928c1d # stable branch + - uses: dtolnay/rust-toolchain@686976e191b89faba57d3206551f0f330d8cb249 # stable branch with: targets: ${{ matrix.target }}