chore(deps): bump dtolnay/rust-toolchain from 1.91.1 to 1.120.0 in the compatible-updates group across 1 directory - #49
Conversation
02b1b3b to
9e5e78c
Compare
dzdidi
left a comment
There was a problem hiding this comment.
Reviewed exact head 9e5e78c2a19b920486b2730512189565c1b84f1b.
Recommended human verdict: request changes. Both exact-head workflows fail before testing because this update selects nonexistent Rust 1.120.0. One blocking inline finding attached.
|
|
||
| - name: Install Rust toolchain | ||
| uses: dtolnay/rust-toolchain@1.91.1 | ||
| uses: dtolnay/rust-toolchain@1.120.0 |
There was a problem hiding this comment.
P1 — this disables CI rather than updating the action. dtolnay/rust-toolchain interprets its @rev as the Rust toolchain when no explicit toolchain input is supplied. This therefore runs rustup toolchain install 1.120.0, which 404s because that Rust release does not exist; the same change at .github/workflows/security.yml:29 breaks RustSec too. Restore @1.91.1 in both files to match rust-toolchain.toml. Consider excluding this action from Dependabot updates so its moving action metadata cannot repeat this failure.
Bumps the compatible-updates group with 1 update in the / directory: [dtolnay/rust-toolchain](https://github.com/dtolnay/rust-toolchain). Updates `dtolnay/rust-toolchain` from 1.91.1 to 1.120.0 - [Release notes](https://github.com/dtolnay/rust-toolchain/releases) - [Commits](dtolnay/rust-toolchain@1.91.1...1.120.0) --- updated-dependencies: - dependency-name: dtolnay/rust-toolchain dependency-version: 1.120.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: compatible-updates ... Signed-off-by: dependabot[bot] <support@github.com>
9e5e78c to
f6c070b
Compare
Bumps the compatible-updates group with 1 update in the / directory: dtolnay/rust-toolchain.
Updates
dtolnay/rust-toolchainfrom 1.91.1 to 1.120.0Commits
237493ctoolchain: 1.120.0