Skip to content

ci: bump the github-actions group across 1 directory with 4 updates #443

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Open
dependabot wants to merge 1 commit into
base: master
Choose a base branch
from
+11 −11
Open

ci: bump the github-actions group across 1 directory with 4 updates #443

Show file tree
Hide file tree
Changes from all commits
Commits
Show all changes
1 commit
Select commit
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
4 changes: 2 additions & 2 deletions .github/workflows/build_binaries.yml
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -50,13 +50,13 @@ jobs:
timeout-minutes: 60
steps:
- name: Checkout repository
uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10
uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1
- name: Install Rust toolchain
uses: moonrepo/setup-rust@abb2d32350334249b178c401e5ec5836e0cd88d3
with:
inherit-toolchain: true
bins: cross
- uses: taiki-e/setup-cross-toolchain-action@3d9770ce98eb7dbcf378563182a5e8031165f75b
- uses: taiki-e/setup-cross-toolchain-action@12b7ad4acfa95a1476779d6c06699b96ec1691f8
with:
target: ${{ matrix.target }}
if: startsWith(matrix.os, 'ubuntu')
Expand Down
2 changes: 1 addition & 1 deletion .github/workflows/nightly.yml
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -12,7 +12,7 @@ jobs:
name: cargo deny --all-features check
runs-on: ubuntu-22.04
steps:
- uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10
- uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1
- uses: moonrepo/setup-rust@abb2d32350334249b178c401e5ec5836e0cd88d3
with:
inherit-toolchain: true
Expand Down
12 changes: 6 additions & 6 deletions .github/workflows/presubmit.yml
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -14,7 +14,7 @@ jobs:
os: [ubuntu-22.04, macos-latest]
runs-on: ${{ matrix.os }}
steps:
- uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10
- uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1
- uses: moonrepo/setup-rust@abb2d32350334249b178c401e5ec5836e0cd88d3
with:
inherit-toolchain: true
Expand All @@ -27,7 +27,7 @@ jobs:
- run: SHPOOL_LEAVE_TEST_LOGS=true RUST_BACKTRACE=full cargo test --all-features
- name: Archive Logs
if: always()
uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a
uses: actions/upload-artifact@cf430e030ddbb5b0abf93d22962f4752f3646cd9
id: artifact-upload-step
with:
name: test-logs-${{ matrix.os }}
Expand All @@ -40,7 +40,7 @@ jobs:
# name: cargo +nightly miri test
# runs-on: ubuntu-22.04
# steps:
# - uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10
# - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1
# - uses: moonrepo/setup-rust@b8edcc56aab474d90c7cf0bb8beeaf8334c15e9f
# with:
# components: miri
Expand All @@ -52,7 +52,7 @@ jobs:
name: cargo +nightly fmt -- --check
runs-on: ubuntu-22.04
steps:
- uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10
- uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1
- uses: moonrepo/setup-rust@abb2d32350334249b178c401e5ec5836e0cd88d3
with:
components: rustfmt
Expand All @@ -63,7 +63,7 @@ jobs:
name: cargo +nightly cranky --all-targets -- -D warnings
runs-on: ubuntu-22.04
steps:
- uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10
- uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1
- uses: moonrepo/setup-rust@abb2d32350334249b178c401e5ec5836e0cd88d3
with:
components: clippy
Expand All @@ -76,7 +76,7 @@ jobs:
name: cargo deny --all-features check licenses
runs-on: ubuntu-22.04
steps:
- uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10
- uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1
- name: Install Rust toolchain
uses: moonrepo/setup-rust@abb2d32350334249b178c401e5ec5836e0cd88d3
with:
Expand Down
4 changes: 2 additions & 2 deletions .github/workflows/publish.yml
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -17,21 +17,21 @@
# Generating a GitHub token, so that PRs and tags created by
# the release-plz-action can trigger actions workflows.
- name: Generate GitHub token
uses: actions/create-github-app-token@bcd2ba49218906704ab6c1aa796996da409d3eb1

Check failure on line 20 in .github/workflows/publish.yml

View workflow job for this annotation

GitHub Actions / zizmor-output

github-app 

publish.yml:20: dangerous use of GitHub App tokens: app token inherits blanket installation permissions
id: generate-token
with:
app-id: ${{ secrets.RELEASE_PLZ_APP_ID }} # <-- GitHub App ID secret name
private-key: ${{ secrets.RELEASE_PLZ_APP_PRIVATE_KEY }} # <-- GitHub App private key secret name
- name: Checkout repository
uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10
uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1
with:
fetch-depth: 0
- name: Install Rust toolchain
uses: moonrepo/setup-rust@abb2d32350334249b178c401e5ec5836e0cd88d3
with:
bins: cross
- name: Run release-plz
uses: MarcoIeni/release-plz-action@e8792575c7f2366cf6ff3ccc33ead9ace5b691c7
uses: MarcoIeni/release-plz-action@18641b6c63063cc5ff8786ebf69cd57e8541bae1
env:
GITHUB_TOKEN: ${{ steps.generate-token.outputs.token }}
CARGO_REGISTRY_TOKEN: ${{ secrets.CARGO_REGISTRY_TOKEN }}
Loading