From 27a7535598639b4160cd75aa1985ae447823f64c Mon Sep 17 00:00:00 2001 From: BryanFRD Date: Sat, 3 Oct 2026 12:16:12 +0200 Subject: [PATCH] ci: pin rust-toolchain to the commit its stable branch now points at --- .github/workflows/binaries.yml | 2 +- .github/workflows/fuzz.yml | 2 +- .github/workflows/publish.yml | 2 +- .github/workflows/sonarqube.yml | 2 +- 4 files changed, 4 insertions(+), 4 deletions(-) diff --git a/.github/workflows/binaries.yml b/.github/workflows/binaries.yml index 3063e18f..c15f1aa7 100644 --- a/.github/workflows/binaries.yml +++ b/.github/workflows/binaries.yml @@ -123,7 +123,7 @@ jobs: with: ref: refs/tags/${{ inputs.tag || github.event.release.tag_name }} persist-credentials: false - - uses: dtolnay/rust-toolchain@6bed0761d98439e5a578e2877258200ad565ba87 # stable + - uses: dtolnay/rust-toolchain@89b12181fb390509a0842a86cc55eeb8eb928c1d # stable # Pinned like every other dependency in this file: this job holds the # attestation credentials, so what it runs is part of what it attests. - name: Install cargo-cyclonedx diff --git a/.github/workflows/fuzz.yml b/.github/workflows/fuzz.yml index 3cf37c07..293540fd 100644 --- a/.github/workflows/fuzz.yml +++ b/.github/workflows/fuzz.yml @@ -36,7 +36,7 @@ jobs: - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7 with: persist-credentials: false - - uses: dtolnay/rust-toolchain@6bed0761d98439e5a578e2877258200ad565ba87 # stable + - uses: dtolnay/rust-toolchain@89b12181fb390509a0842a86cc55eeb8eb928c1d # stable with: toolchain: nightly - name: Install cargo-fuzz diff --git a/.github/workflows/publish.yml b/.github/workflows/publish.yml index a76499dd..cbb4940f 100644 --- a/.github/workflows/publish.yml +++ b/.github/workflows/publish.yml @@ -27,7 +27,7 @@ jobs: ref: ${{ inputs.tag || github.event.release.tag_name }} persist-credentials: false - - uses: dtolnay/rust-toolchain@6bed0761d98439e5a578e2877258200ad565ba87 # stable + - uses: dtolnay/rust-toolchain@89b12181fb390509a0842a86cc55eeb8eb928c1d # stable # Mints a 30-minute crates.io token from this run's OIDC identity. Both # crates carry a Trusted Publishing config naming this repository and this diff --git a/.github/workflows/sonarqube.yml b/.github/workflows/sonarqube.yml index d7f8690f..548c519a 100644 --- a/.github/workflows/sonarqube.yml +++ b/.github/workflows/sonarqube.yml @@ -45,7 +45,7 @@ jobs: with: persist-credentials: false - - uses: dtolnay/rust-toolchain@6bed0761d98439e5a578e2877258200ad565ba87 # stable + - uses: dtolnay/rust-toolchain@89b12181fb390509a0842a86cc55eeb8eb928c1d # stable with: components: llvm-tools-preview