From b65d460666ead1eaa764bfba59bf69dc22d6cc0d Mon Sep 17 00:00:00 2001 From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com> Date: Wed, 12 Aug 2026 21:11:48 +0000 Subject: [PATCH] chore(deps): bump the actions group across 1 directory with 7 updates Bumps the actions group with 7 updates in the / directory: | Package | From | To | | --- | --- | --- | | [taiki-e/install-action](https://github.com/taiki-e/install-action) | `2.85.3` | `2.85.11` | | [Swatinem/rust-cache](https://github.com/swatinem/rust-cache) | `2.9.1` | `2.9.2` | | [haskell-actions/setup](https://github.com/haskell-actions/setup) | `2.11.0` | `2.12.0` | | [github/codeql-action](https://github.com/github/codeql-action) | `4.37.3` | `4.37.6` | | [docker/login-action](https://github.com/docker/login-action) | `4.5.2` | `4.6.0` | | [actions/attest-build-provenance](https://github.com/actions/attest-build-provenance) | `4.1.1` | `4.2.2` | | [actions/setup-java](https://github.com/actions/setup-java) | `5.6.0` | `5.7.0` | Updates `taiki-e/install-action` from 2.85.3 to 2.85.11 - [Release notes](https://github.com/taiki-e/install-action/releases) - [Changelog](https://github.com/taiki-e/install-action/blob/main/CHANGELOG.md) - [Commits](https://github.com/taiki-e/install-action/compare/v2.85.3...v2.85.11) Updates `Swatinem/rust-cache` from 2.9.1 to 2.9.2 - [Release notes](https://github.com/swatinem/rust-cache/releases) - [Changelog](https://github.com/Swatinem/rust-cache/blob/master/CHANGELOG.md) - [Commits](https://github.com/swatinem/rust-cache/compare/v2.9.1...v2.9.2) Updates `haskell-actions/setup` from 2.11.0 to 2.12.0 - [Release notes](https://github.com/haskell-actions/setup/releases) - [Commits](https://github.com/haskell-actions/setup/compare/v2.11.0...v2.12.0) Updates `github/codeql-action` from 4.37.3 to 4.37.6 - [Release notes](https://github.com/github/codeql-action/releases) - [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md) - [Commits](https://github.com/github/codeql-action/compare/v4.37.3...v4.37.6) Updates `docker/login-action` from 4.5.2 to 4.6.0 - [Release notes](https://github.com/docker/login-action/releases) - [Commits](https://github.com/docker/login-action/compare/v4.5.2...v4.6.0) Updates `actions/attest-build-provenance` from 4.1.1 to 4.2.2 - [Release notes](https://github.com/actions/attest-build-provenance/releases) - [Changelog](https://github.com/actions/attest-build-provenance/blob/main/RELEASE.md) - [Commits](https://github.com/actions/attest-build-provenance/compare/v4.1.1...v4.2.2) Updates `actions/setup-java` from 5.6.0 to 5.7.0 - [Release notes](https://github.com/actions/setup-java/releases) - [Commits](https://github.com/actions/setup-java/compare/v5.6.0...v5.7.0) --- updated-dependencies: - dependency-name: actions/attest-build-provenance dependency-version: 4.2.2 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: actions - dependency-name: actions/setup-java dependency-version: 5.7.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: actions - dependency-name: docker/login-action dependency-version: 4.6.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: actions - dependency-name: github/codeql-action dependency-version: 4.37.6 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: actions - dependency-name: haskell-actions/setup dependency-version: 2.12.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: actions - dependency-name: Swatinem/rust-cache dependency-version: 2.9.2 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: actions - dependency-name: taiki-e/install-action dependency-version: 2.85.10 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: actions ... Signed-off-by: dependabot[bot] --- .github/workflows/build-gossamer-gui.yml | 2 +- .github/workflows/ci.yml | 10 +++++----- .github/workflows/codeql.yml | 4 ++-- .github/workflows/release.yml | 12 ++++++------ .github/workflows/rust.yml | 10 +++++----- .github/workflows/security-policy.yml | 20 ++++++++++---------- .github/workflows/tests.yml | 10 +++++----- .github/workflows/verify-proofs.yml | 2 +- 8 files changed, 35 insertions(+), 35 deletions(-) diff --git a/.github/workflows/build-gossamer-gui.yml b/.github/workflows/build-gossamer-gui.yml index a0a39cf9..c6e557fe 100644 --- a/.github/workflows/build-gossamer-gui.yml +++ b/.github/workflows/build-gossamer-gui.yml @@ -143,7 +143,7 @@ jobs: targets: wasm32-unknown-unknown - name: Install just - uses: taiki-e/install-action@v2.85.3 + uses: taiki-e/install-action@v2.85.11 with: # Pin an explicit modern just: the Justfile uses `import?` # (optional import, just >= 1.19.0). Unversioned `tool: just` diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml index e763dcff..a5912d85 100644 --- a/.github/workflows/ci.yml +++ b/.github/workflows/ci.yml @@ -43,7 +43,7 @@ jobs: components: clippy, rustfmt - name: Setup Rust cache - uses: Swatinem/rust-cache@v2.9.1 + uses: Swatinem/rust-cache@v2.9.2 with: workspaces: ". -> target" cache-on-failure: true @@ -86,7 +86,7 @@ jobs: toolchain: stable - name: Setup Rust cache - uses: Swatinem/rust-cache@v2.9.1 + uses: Swatinem/rust-cache@v2.9.2 with: workspaces: ". -> target" cache-on-failure: true @@ -113,12 +113,12 @@ jobs: components: llvm-tools-preview - name: Install cargo-llvm-cov - uses: taiki-e/install-action@v2.85.3 + uses: taiki-e/install-action@v2.85.11 with: tool: cargo-llvm-cov - name: Setup Rust cache - uses: Swatinem/rust-cache@v2.9.1 + uses: Swatinem/rust-cache@v2.9.2 with: workspaces: ". -> target" cache-on-failure: true @@ -178,7 +178,7 @@ jobs: uses: actions/checkout@v7.0.1 - name: Setup Haskell - uses: haskell-actions/setup@v2.11.0 + uses: haskell-actions/setup@v2.12.0 id: setup with: ghc-version: '9.6' diff --git a/.github/workflows/codeql.yml b/.github/workflows/codeql.yml index f4846623..c700b531 100644 --- a/.github/workflows/codeql.yml +++ b/.github/workflows/codeql.yml @@ -45,12 +45,12 @@ jobs: uses: actions/checkout@v7.0.1 - name: Initialize CodeQL - uses: github/codeql-action/init@v4.37.3 + uses: github/codeql-action/init@v4.37.6 with: languages: ${{ matrix.language }} build-mode: ${{ matrix.build-mode }} - name: Perform CodeQL Analysis - uses: github/codeql-action/analyze@v4.37.3 + uses: github/codeql-action/analyze@v4.37.6 with: category: "/language:${{ matrix.language }}" diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml index c7004384..aa3f1b37 100644 --- a/.github/workflows/release.yml +++ b/.github/workflows/release.yml @@ -105,7 +105,7 @@ jobs: targets: ${{ matrix.target }} - name: Setup Rust cache - uses: Swatinem/rust-cache@v2.9.1 + uses: Swatinem/rust-cache@v2.9.2 with: workspaces: ". -> target" key: ${{ matrix.target }} @@ -204,7 +204,7 @@ jobs: - name: Log in to Container Registry if: ${{ !inputs.dry_run }} - uses: docker/login-action@v4.5.2 + uses: docker/login-action@v4.6.0 with: registry: ${{ env.REGISTRY }} username: ${{ github.actor }} @@ -237,7 +237,7 @@ jobs: - name: Attest container provenance if: ${{ !inputs.dry_run }} - uses: actions/attest-build-provenance@v4.1.1 + uses: actions/attest-build-provenance@v4.2.2 with: subject-name: ${{ env.REGISTRY }}/${{ env.IMAGE_NAME }}-${{ matrix.component.name }} subject-digest: ${{ steps.push.outputs.digest }} @@ -322,7 +322,7 @@ jobs: fail_on_unmatched_files: false - name: Attest build provenance - uses: actions/attest-build-provenance@v4.1.1 + uses: actions/attest-build-provenance@v4.2.2 with: subject-path: 'release-assets/*' @@ -354,7 +354,7 @@ jobs: uses: docker/setup-buildx-action@v4.2.0 - name: Log in to GitHub Container Registry - uses: docker/login-action@v4.5.2 + uses: docker/login-action@v4.6.0 with: registry: ${{ env.REGISTRY }} username: ${{ github.actor }} @@ -386,7 +386,7 @@ jobs: VERSION=${{ github.sha }} - name: Attest container provenance - uses: actions/attest-build-provenance@v4.1.1 + uses: actions/attest-build-provenance@v4.2.2 with: subject-name: ${{ env.REGISTRY }}/${{ env.IMAGE_NAME }}-${{ matrix.component.name }} subject-digest: ${{ steps.push.outputs.digest }} diff --git a/.github/workflows/rust.yml b/.github/workflows/rust.yml index 7d3b2aab..018891fb 100644 --- a/.github/workflows/rust.yml +++ b/.github/workflows/rust.yml @@ -31,7 +31,7 @@ jobs: - uses: dtolnay/rust-toolchain@stable with: toolchain: stable - - uses: Swatinem/rust-cache@v2.9.1 + - uses: Swatinem/rust-cache@v2.9.2 - run: cargo check --workspace test: @@ -43,7 +43,7 @@ jobs: - uses: dtolnay/rust-toolchain@stable with: toolchain: stable - - uses: Swatinem/rust-cache@v2.9.1 + - uses: Swatinem/rust-cache@v2.9.2 - run: cargo test --workspace fmt: @@ -66,7 +66,7 @@ jobs: - uses: dtolnay/rust-toolchain@stable with: components: clippy - - uses: Swatinem/rust-cache@v2.9.1 + - uses: Swatinem/rust-cache@v2.9.2 - run: cargo clippy --workspace -- -D warnings rustci_check: @@ -84,7 +84,7 @@ jobs: components: clippy, rustfmt - name: Cache cargo registry and build - uses: Swatinem/rust-cache@v2.9.1 + uses: Swatinem/rust-cache@v2.9.2 - name: Cargo check run: cargo check --all-targets 2>&1 @@ -111,7 +111,7 @@ jobs: toolchain: stable - name: Cache cargo registry and build - uses: Swatinem/rust-cache@v2.9.1 + uses: Swatinem/rust-cache@v2.9.2 - name: Run tests run: cargo test --all-targets diff --git a/.github/workflows/security-policy.yml b/.github/workflows/security-policy.yml index 9499546a..1efb4475 100644 --- a/.github/workflows/security-policy.yml +++ b/.github/workflows/security-policy.yml @@ -70,7 +70,7 @@ jobs: uses: actions/checkout@v7.0.1 - name: Install cargo-deny - uses: taiki-e/install-action@v2.85.3 + uses: taiki-e/install-action@v2.85.11 with: tool: cargo-deny @@ -130,7 +130,7 @@ jobs: args: --sarif --output=semgrep.sarif - name: Upload SARIF results - uses: github/codeql-action/upload-sarif@v4.37.3 + uses: github/codeql-action/upload-sarif@v4.37.6 if: always() with: sarif_file: semgrep.sarif @@ -151,13 +151,13 @@ jobs: uses: actions/checkout@v7.0.1 - name: Initialize CodeQL - uses: github/codeql-action/init@v4.37.3 + uses: github/codeql-action/init@v4.37.6 with: languages: ${{ matrix.language }} queries: security-extended,security-and-quality - name: Perform CodeQL Analysis - uses: github/codeql-action/analyze@v4.37.3 + uses: github/codeql-action/analyze@v4.37.6 with: category: "/language:${{matrix.language}}" @@ -221,7 +221,7 @@ jobs: severity: 'CRITICAL,HIGH' - name: Upload Trivy scan results - uses: github/codeql-action/upload-sarif@v4.37.3 + uses: github/codeql-action/upload-sarif@v4.37.6 if: always() with: sarif_file: 'trivy-results.sarif' @@ -332,7 +332,7 @@ jobs: uses: actions/checkout@v7.0.1 - name: Install cargo-deny - uses: taiki-e/install-action@v2.85.3 + uses: taiki-e/install-action@v2.85.11 with: tool: cargo-deny @@ -445,7 +445,7 @@ jobs: ignore-unfixed: true - name: Upload Trivy SARIF results - uses: github/codeql-action/upload-sarif@v4.37.3 + uses: github/codeql-action/upload-sarif@v4.37.6 if: always() with: sarif_file: 'trivy-${{ steps.image.outputs.name }}.sarif' @@ -555,13 +555,13 @@ jobs: uses: actions/checkout@v7.0.1 - name: Initialize CodeQL - uses: github/codeql-action/init@v4.37.3 + uses: github/codeql-action/init@v4.37.6 with: languages: ${{ matrix.language }} queries: security-extended,security-and-quality - name: Perform CodeQL Analysis - uses: github/codeql-action/analyze@v4.37.3 + uses: github/codeql-action/analyze@v4.37.6 with: category: "/language:${{matrix.language}}" @@ -588,7 +588,7 @@ jobs: args: --sarif --output=semgrep.sarif - name: Upload SARIF results - uses: github/codeql-action/upload-sarif@v4.37.3 + uses: github/codeql-action/upload-sarif@v4.37.6 if: always() with: sarif_file: semgrep.sarif diff --git a/.github/workflows/tests.yml b/.github/workflows/tests.yml index b1e90bb9..476ddb37 100644 --- a/.github/workflows/tests.yml +++ b/.github/workflows/tests.yml @@ -80,7 +80,7 @@ jobs: toolchain: stable - name: Rust cache - uses: Swatinem/rust-cache@v2.9.1 + uses: Swatinem/rust-cache@v2.9.2 - name: Build Rust CLI run: cargo build --release @@ -260,7 +260,7 @@ jobs: toolchain: stable - name: Setup Rust cache - uses: Swatinem/rust-cache@v2.9.1 + uses: Swatinem/rust-cache@v2.9.2 with: workspaces: ". -> target" cache-on-failure: true @@ -520,12 +520,12 @@ jobs: components: llvm-tools-preview - name: Install cargo-llvm-cov - uses: taiki-e/install-action@v2.85.3 + uses: taiki-e/install-action@v2.85.11 with: tool: cargo-llvm-cov - name: Setup Rust cache - uses: Swatinem/rust-cache@v2.9.1 + uses: Swatinem/rust-cache@v2.9.2 with: workspaces: ". -> target" @@ -724,7 +724,7 @@ jobs: toolchain: stable - name: Rust cache - uses: Swatinem/rust-cache@v2.9.1 + uses: Swatinem/rust-cache@v2.9.2 with: workspaces: ". -> target" cache-on-failure: true diff --git a/.github/workflows/verify-proofs.yml b/.github/workflows/verify-proofs.yml index d0f36b03..50c11aee 100644 --- a/.github/workflows/verify-proofs.yml +++ b/.github/workflows/verify-proofs.yml @@ -213,7 +213,7 @@ jobs: uses: actions/checkout@v7.0.1 - name: Set up Eclipse Temurin 21 JRE - uses: actions/setup-java@v5.6.0 + uses: actions/setup-java@v5.7.0 with: distribution: temurin java-version: '21'