From 36b1717b272512794b4404a2e7c14cd668ad8cc6 Mon Sep 17 00:00:00 2001 From: Derek Date: Sat, 10 Oct 2026 15:37:01 +1100 Subject: [PATCH 1/3] fix: pin download-artifact v8.0.2 and label the pin truthfully The publish job's download-artifact pin was v4.3.0 (d3f86a10) behind a '# v7.0.0' comment. It now pins v8.0.2 by SHA. The job uses pattern, path and merge-multiple, all unchanged in v8, and v8 fails on a digest mismatch instead of warning. --- .github/workflows/ci.yml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml index 5f112374..0164e8f5 100644 --- a/.github/workflows/ci.yml +++ b/.github/workflows/ci.yml @@ -320,7 +320,7 @@ jobs: run: ${{ env.HYPERCI_INSTALL }} tag-head --bump ${{ inputs.bump }} - name: Download the built wheels - uses: actions/download-artifact@d3f86a106a0bac45b974a628896c90dbdf5c8093 # v7.0.0 + uses: actions/download-artifact@9000827ccba6bdab643e8b6fd33ac0654aef8333 # v8.0.2 with: pattern: vector-vrl-wheel-* path: vector-vrl/dist/ From 8da0fba3a6f3f9a35c16be2514fa488f8e899ac6 Mon Sep 17 00:00:00 2001 From: Derek Date: Sat, 10 Oct 2026 15:55:16 +1100 Subject: [PATCH 2/3] fix: install the pinned Rust audit tools in the vector-bindings job make quality-rust runs hyperi-ci's Rust gate, which calls cargo audit and cargo deny. The job never installed them, so it failed with 'no such command' whenever a change routed through it. --- .github/workflows/ci.yml | 2 ++ 1 file changed, 2 insertions(+) diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml index 0164e8f5..98618bea 100644 --- a/.github/workflows/ci.yml +++ b/.github/workflows/ci.yml @@ -107,6 +107,8 @@ jobs: - uses: dtolnay/rust-toolchain@stable with: components: clippy, rustfmt + # The Rust quality gate runs cargo audit and cargo deny, pinned by hyperi-ci. + - uses: hyperi-io/hyperi-ci/.github/actions/setup-rust-tools@main # Pin the interpreter pyo3-build-config finds so the build does not # depend on the runner image's default. - uses: actions/setup-python@5fda3b95a4ea91299a34e894583c3862153e4b97 # v7.0.0 From 1e24ebb051ed4d58247941add167e4aae81f4330 Mon Sep 17 00:00:00 2001 From: Derek Date: Sat, 10 Oct 2026 16:09:21 +1100 Subject: [PATCH 3/3] fix: install cargo-nextest in the vector-bindings job hyperi-ci's Rust test step requires cargo-nextest when test.rust.nextest is true, and refuses to fall back to cargo test. The job now installs it with hyperi-ci's setup-nextest action, as rust-ci.yml does. --- .github/workflows/ci.yml | 2 ++ 1 file changed, 2 insertions(+) diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml index 98618bea..f022e06d 100644 --- a/.github/workflows/ci.yml +++ b/.github/workflows/ci.yml @@ -109,6 +109,8 @@ jobs: components: clippy, rustfmt # The Rust quality gate runs cargo audit and cargo deny, pinned by hyperi-ci. - uses: hyperi-io/hyperi-ci/.github/actions/setup-rust-tools@main + # make test-rust runs the suite under cargo-nextest, pinned by hyperi-ci. + - uses: hyperi-io/hyperi-ci/.github/actions/setup-nextest@main # Pin the interpreter pyo3-build-config finds so the build does not # depend on the runner image's default. - uses: actions/setup-python@5fda3b95a4ea91299a34e894583c3862153e4b97 # v7.0.0