Skip to content

chore(deps): bump dtolnay/rust-toolchain from 1.91.1 to 1.120.0 in the compatible-updates group across 1 directory - #49

Open
dependabot[bot] wants to merge 1 commit into
masterfrom
dependabot/github_actions/compatible-updates-96004df8d7
Open

dependabot[bot] wants to merge 1 commit into
masterfrom
dependabot/github_actions/compatible-updates-96004df8d7

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Sep 7, 2026

Copy link
Copy Markdown
Contributor

Bumps the compatible-updates group with 1 update in the / directory: dtolnay/rust-toolchain.

Updates dtolnay/rust-toolchain from 1.91.1 to 1.120.0

Commits

@dependabot dependabot Bot added dependencies Pull requests that update a dependency file github_actions Pull requests that update GitHub Actions code labels Sep 7, 2026
@dependabot
dependabot Bot requested a review from dzdidi as a code owner September 7, 2026 21:55
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file github_actions Pull requests that update GitHub Actions code labels Sep 7, 2026
@dependabot dependabot Bot changed the title chore(deps): bump dtolnay/rust-toolchain from 1.91.1 to 1.120.0 in the compatible-updates group chore(deps): bump dtolnay/rust-toolchain from 1.91.1 to 1.120.0 in the compatible-updates group across 1 directory Sep 14, 2026
@dependabot
dependabot Bot force-pushed the dependabot/github_actions/compatible-updates-96004df8d7 branch from 02b1b3b to 9e5e78c Compare September 14, 2026 21:55

@dzdidi dzdidi left a comment

Copy link
Copy Markdown
Collaborator

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Reviewed exact head 9e5e78c2a19b920486b2730512189565c1b84f1b.

Recommended human verdict: request changes. Both exact-head workflows fail before testing because this update selects nonexistent Rust 1.120.0. One blocking inline finding attached.


- name: Install Rust toolchain
uses: dtolnay/rust-toolchain@1.91.1
uses: dtolnay/rust-toolchain@1.120.0

Copy link
Copy Markdown
Collaborator

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

P1 — this disables CI rather than updating the action. dtolnay/rust-toolchain interprets its @rev as the Rust toolchain when no explicit toolchain input is supplied. This therefore runs rustup toolchain install 1.120.0, which 404s because that Rust release does not exist; the same change at .github/workflows/security.yml:29 breaks RustSec too. Restore @1.91.1 in both files to match rust-toolchain.toml. Consider excluding this action from Dependabot updates so its moving action metadata cannot repeat this failure.

Bumps the compatible-updates group with 1 update in the / directory: [dtolnay/rust-toolchain](https://github.com/dtolnay/rust-toolchain).


Updates `dtolnay/rust-toolchain` from 1.91.1 to 1.120.0
- [Release notes](https://github.com/dtolnay/rust-toolchain/releases)
- [Commits](dtolnay/rust-toolchain@1.91.1...1.120.0)

---
updated-dependencies:
- dependency-name: dtolnay/rust-toolchain
  dependency-version: 1.120.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: compatible-updates
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot
dependabot Bot force-pushed the dependabot/github_actions/compatible-updates-96004df8d7 branch from 9e5e78c to f6c070b Compare September 21, 2026 21:55
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file github_actions Pull requests that update GitHub Actions code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant