Skip to content

ci: pin rust-toolchain to the commit its stable branch now points at - #524

Merged
BryanFRD merged 1 commit into
mainfrom
ci/rust-toolchain-pin
Oct 3, 2026
Merged

BryanFRD merged 1 commit into
mainfrom
ci/rust-toolchain-pin

Conversation

@BryanFRD

@BryanFRD BryanFRD commented Oct 3, 2026

Copy link
Copy Markdown
Contributor

Closes #523

dtolnay/rust-toolchain@6bed0761 is no longer on the action's stable branch, so zizmor flags it as an impostor commit (alerts 340 to 343). This moves the four workflows to 89b12181, the current head of stable (2026-10-01).

That commit is younger than the three-day age Renovate waits for on digests; it is taken anyway because the old pin is the one that no longer verifies.

@BryanFRD
BryanFRD enabled auto-merge (squash) October 3, 2026 10:16

@ferrfleet ferrfleet Bot left a comment

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

89b12181 is the current head of dtolnay/rust-toolchain@stable ("toolchain: stable", 2026-10-01). All four pins are updated, so none is left on the old SHA. ci.yml and bench.yml don't use this action. Nothing blocking.

@BryanFRD
BryanFRD merged commit a9785a3 into main Oct 3, 2026
27 checks passed
@BryanFRD
BryanFRD deleted the ci/rust-toolchain-pin branch October 3, 2026 10:20
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

Four workflows pin a rust-toolchain commit that left its branch

1 participant