From 1571dece7dec6f99256cfc34caa6c59c7c4366fb Mon Sep 17 00:00:00 2001 From: Hero-Gamer Date: Thu, 17 Sep 2026 20:52:38 -0400 Subject: [PATCH] ci: pin remaining dtolnay/rust-toolchain@1.95.0 to SHA a5f673d CodeQL unpinned-tag flagged 5 jobs in ci.yml (fmt, clippy, test, etc) and 1 in codeql.yml. Pin to same SHA already used in ci.yml:161,181 / macos.yml / windows.yml / release.yml (a5f673d0ba8626c3977bb416a1612774bc82181b = toolchain: 1.95.0). Keep toolchain: 1.95.0 explicit, co-bumped with Cargo.toml / rust-toolchain.toml / nixpkgs 26.05 / crane 0.23. This closes last unpinned-tag alerts after #609. --- .github/workflows/ci.yml | 10 +++++----- .github/workflows/codeql.yml | 2 +- 2 files changed, 6 insertions(+), 6 deletions(-) diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml index 57e7ea5ed..522e4a480 100644 --- a/.github/workflows/ci.yml +++ b/.github/workflows/ci.yml @@ -32,7 +32,7 @@ jobs: runs-on: ubuntu-latest steps: - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 - - uses: dtolnay/rust-toolchain@1.95.0 + - uses: dtolnay/rust-toolchain@a5f673d0ba8626c3977bb416a1612774bc82181b # 1.95.0 # Prebuilt cargo-deny — do not cargo install. Pin Action commit (CodeQL). - uses: taiki-e/install-action@9534c84618278caac52cb373bb164ed464dbd8af # v2.87.11 with: @@ -45,7 +45,7 @@ jobs: runs-on: ubuntu-latest steps: - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 - - uses: dtolnay/rust-toolchain@1.95.0 # nixpkgs/crane rustc pin — not Dependabot + - uses: dtolnay/rust-toolchain@a5f673d0ba8626c3977bb416a1612774bc82181b # 1.95.0 with: components: rustfmt - name: cargo fmt --check @@ -74,7 +74,7 @@ jobs: CARGO_TARGET_DIR: target/dev steps: - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 - - uses: dtolnay/rust-toolchain@1.95.0 + - uses: dtolnay/rust-toolchain@a5f673d0ba8626c3977bb416a1612774bc82181b # 1.95.0 with: components: clippy - uses: Swatinem/rust-cache@6323deb102c322ba6fcbdcafc7e3dddab59af2b6 # v2.9.2 @@ -92,7 +92,7 @@ jobs: CARGO_TARGET_DIR: target/dev steps: - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 - - uses: dtolnay/rust-toolchain@1.95.0 + - uses: dtolnay/rust-toolchain@a5f673d0ba8626c3977bb416a1612774bc82181b # 1.95.0 - uses: Swatinem/rust-cache@6323deb102c322ba6fcbdcafc7e3dddab59af2b6 # v2.9.2 with: shared-key: ci-test @@ -201,7 +201,7 @@ jobs: - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 with: fetch-depth: 0 - - uses: dtolnay/rust-toolchain@1.95.0 + - uses: dtolnay/rust-toolchain@a5f673d0ba8626c3977bb416a1612774bc82181b # 1.95.0 with: components: llvm-tools-preview - uses: Swatinem/rust-cache@6323deb102c322ba6fcbdcafc7e3dddab59af2b6 # v2.9.2 diff --git a/.github/workflows/codeql.yml b/.github/workflows/codeql.yml index 9b6901f28..68db6abf2 100644 --- a/.github/workflows/codeql.yml +++ b/.github/workflows/codeql.yml @@ -62,7 +62,7 @@ jobs: # Required before CodeQL init for Rust: extractor needs rustup + cargo. - name: Install Rust toolchain if: matrix.language == 'rust' - uses: dtolnay/rust-toolchain@1.95.0 # nixpkgs/crane rustc pin — not Dependabot + uses: dtolnay/rust-toolchain@a5f673d0ba8626c3977bb416a1612774bc82181b # 1.95.0 - name: Initialize CodeQL uses: github/codeql-action/init@b96794f015dfd88f77b49b1c93e0fa7110f94c63 # v4.38.0