diff --git a/.github/workflows/actions.lock b/.github/workflows/actions.lock index 8a7e849d..43acce61 100644 --- a/.github/workflows/actions.lock +++ b/.github/workflows/actions.lock @@ -1,7 +1,7 @@ # This file is machine-generated by `gh actions-lock`. # Do not edit by hand; run `gh actions-lock` to update. # Docs: https://gh.io/actions-lockfile -version: 'v0.0.2' +version: 'v0.0.3' workflows: '.github/workflows/abi-codegen-drift.yml': - 'actions/cache@v6.1.0' @@ -11,22 +11,22 @@ workflows: '.github/workflows/build-gossamer-gui.yml': - 'actions/cache@v6.1.0' - 'actions/checkout@v7.0.1' - - 'actions/setup-node@v7.0.0' - - 'actions/upload-artifact@v7.0.1' + - 'actions/setup-node@v7.1.0' + - 'actions/upload-artifact@v7.0.2' - 'dtolnay/rust-toolchain@v1' - - 'taiki-e/install-action@v2.87.24' + - 'taiki-e/install-action@v2.87.27' '.github/workflows/ci-health-sweep.yml': - 'actions/checkout@v7.0.1' '.github/workflows/ci.yml': - 'actions/cache@v6.1.0' - 'actions/checkout@v7.0.1' - - 'actions/upload-artifact@v7.0.1' + - 'actions/upload-artifact@v7.0.2' - 'dtolnay/rust-toolchain@v1' - 'haskell-actions/hlint-run@v2.4.10' - 'haskell-actions/hlint-setup@v2.4.10' - 'haskell-actions/setup@v2.12.1' - 'swatinem/rust-cache@v2.9.2' - - 'taiki-e/install-action@v2.87.24' + - 'taiki-e/install-action@v2.87.27' '.github/workflows/clusterfuzzlite.yml': - 'actions/checkout@v7.0.1' - 'google/clusterfuzzlite@v1' @@ -44,7 +44,7 @@ workflows: - 'actions/cache@v6.1.0' '.github/workflows/governance.yml': [] '.github/workflows/hypatia-remediation-sweep.yml': - - 'actions/upload-artifact@v7.0.1' + - 'actions/upload-artifact@v7.0.2' '.github/workflows/hypatia-scan.yml': [] '.github/workflows/inbox-steward-intake.yml': - 'actions/checkout@v7.0.1' @@ -55,7 +55,7 @@ workflows: '.github/workflows/merge-orchestrate.yml': - 'actions/cache@v6.1.0' - 'actions/checkout@v7.0.1' - - 'actions/upload-artifact@v7.0.1' + - 'actions/upload-artifact@v7.0.2' - 'erlef/setup-beam@v1.24.1' '.github/workflows/mirror.yml': [] '.github/workflows/pages.yml': @@ -67,16 +67,16 @@ workflows: '.github/workflows/quality.yml': - 'actions/checkout@v7.0.1' - 'actions/deploy-pages@v5.0.1' - - 'actions/upload-artifact@v7.0.1' + - 'actions/upload-artifact@v7.0.2' - 'actions/upload-pages-artifact@v5.0.0' - 'dtolnay/rust-toolchain@v1' - 'editorconfig-checker/action-editorconfig-checker@v3.0.0' - - 'ruby/setup-ruby@v1.327.0' + - 'ruby/setup-ruby@v1.328.0' '.github/workflows/release.yml': - 'actions/attest-build-provenance@v4.2.2' - 'actions/checkout@v7.0.1' - - 'actions/download-artifact@v8.0.1' - - 'actions/upload-artifact@v7.0.1' + - 'actions/download-artifact@v8.0.2' + - 'actions/upload-artifact@v7.0.2' - 'docker/build-push-action@v7.4.0' - 'docker/login-action@v4.6.0' - 'docker/metadata-action@v6.2.0' @@ -96,29 +96,29 @@ workflows: '.github/workflows/security-policy.yml': - 'actions/cache@v6.1.0' - 'actions/checkout@v7.0.1' - - 'actions/upload-artifact@v7.0.1' + - 'actions/upload-artifact@v7.0.2' - 'aquasecurity/trivy-action@v0.36.0' - 'dtolnay/rust-toolchain@v1' - 'github/codeql-action@v4.38.2' - 'gitleaks/gitleaks-action@v3.0.0' - - 'taiki-e/install-action@v2.87.24' - - 'trufflesecurity/trufflehog@v3.97.9' + - 'taiki-e/install-action@v2.87.27' + - 'trufflesecurity/trufflehog@v3.99.2' '.github/workflows/tests.yml': - 'actions/cache@v6.1.0' - 'actions/checkout@v7.0.1' - - 'actions/download-artifact@v8.0.1' - - 'actions/upload-artifact@v7.0.1' + - 'actions/download-artifact@v8.0.2' + - 'actions/upload-artifact@v7.0.2' - 'docker/build-push-action@v7.4.0' - 'docker/setup-buildx-action@v4.4.1' - 'dtolnay/rust-toolchain@v1' - 'erlef/setup-beam@v1.24.1' - 'swatinem/rust-cache@v2.9.2' - - 'taiki-e/install-action@v2.87.24' + - 'taiki-e/install-action@v2.87.27' '.github/workflows/verify-proofs.yml': - 'actions/cache@v6.1.0' - 'actions/checkout@v7.0.1' - 'actions/setup-java@v6.0.1' - - 'actions/upload-artifact@v7.0.1' + - 'actions/upload-artifact@v7.0.2' '.github/workflows/zig.yml': - 'actions/cache@v6.1.0' - 'actions/checkout@v7.0.1' @@ -170,9 +170,9 @@ dependencies: commit: 'sha1-368f82528645a54fb793d4d04e342629a3f51346' owner_id: 44036562 repo_id: 438112499 - 'actions/download-artifact@v8.0.1': - ref: 'v8.0.1' - commit: 'sha1-3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c' + 'actions/download-artifact@v8.0.2': + ref: 'v8.0.2' + commit: 'sha1-9000827ccba6bdab643e8b6fd33ac0654aef8333' owner_id: 44036562 repo_id: 192626254 'actions/setup-java@v6.0.1': @@ -180,9 +180,9 @@ dependencies: commit: 'sha1-de7274f081f381c8f8158605e0321c36c376e2e6' owner_id: 44036562 repo_id: 196057608 - 'actions/setup-node@v7.0.0': - ref: 'v7.0.0' - commit: 'sha1-820762786026740c76f36085b0efc47a31fe5020' + 'actions/setup-node@v7.1.0': + ref: 'v7.1.0' + commit: 'sha1-949feb2413d6458794dcd2491c4babbbce0c15c1' owner_id: 44036562 repo_id: 189476904 'actions/upload-artifact@bbbca2ddaa5d8feaa63e36b76fdaad77386f024f': @@ -190,9 +190,9 @@ dependencies: commit: 'sha1-bbbca2ddaa5d8feaa63e36b76fdaad77386f024f' owner_id: 44036562 repo_id: 192625955 - 'actions/upload-artifact@v7.0.1': - ref: 'v7.0.1' - commit: 'sha1-043fb46d1a93c77aae656e7c1c64a875d1fc6a0a' + 'actions/upload-artifact@v7.0.2': + ref: 'v7.0.2' + commit: 'sha1-cf430e030ddbb5b0abf93d22962f4752f3646cd9' owner_id: 44036562 repo_id: 192625955 'actions/upload-pages-artifact@v5.0.0': @@ -308,9 +308,9 @@ dependencies: commit: 'sha1-c1c9fa07992a02c1fd3d67a0dc1b08cccb852aef' owner_id: 6759885 repo_id: 1352485172 - 'ruby/setup-ruby@v1.327.0': - ref: 'v1.327.0' - commit: 'sha1-14594264cd68ce8a2345dd349bc3d138a4ef85c8' + 'ruby/setup-ruby@v1.328.0': + ref: 'v1.328.0' + commit: 'sha1-e81a8fa391b11a595c1b7ed84177cc0fe02faf83' owner_id: 210414 repo_id: 231208785 'softprops/action-gh-release@v3.0.3': @@ -323,13 +323,13 @@ dependencies: commit: 'sha1-6323deb102c322ba6fcbdcafc7e3dddab59af2b6' owner_id: 580492 repo_id: 298565987 - 'taiki-e/install-action@v2.87.24': - ref: 'v2.87.24' - commit: 'sha1-e407f7bafb71fd004bc5c2da3032e5470cbb6ef0' + 'taiki-e/install-action@v2.87.27': + ref: 'v2.87.27' + commit: 'sha1-ab6895351a88b908e96a4697860d4ffea5e57dbe' owner_id: 43724913 repo_id: 442947557 - 'trufflesecurity/trufflehog@v3.97.9': - ref: 'v3.97.9' - commit: 'sha1-4dd8831c5f12599465d4d45c3c447b4018a34c85' + 'trufflesecurity/trufflehog@v3.99.2': + ref: 'v3.99.2' + commit: 'sha1-e76dff8a7e57d6df0c60ad8cbf5d5cba505a8fc9' owner_id: 79229934 repo_id: 77726177 diff --git a/.github/workflows/build-gossamer-gui.yml b/.github/workflows/build-gossamer-gui.yml index c106408d..81311ff4 100644 --- a/.github/workflows/build-gossamer-gui.yml +++ b/.github/workflows/build-gossamer-gui.yml @@ -113,7 +113,7 @@ jobs: uses: actions/checkout@v7.0.1 - name: Setup Node.js - uses: actions/setup-node@v7.0.0 + uses: actions/setup-node@v7.1.0 with: node-version: '22' @@ -143,7 +143,7 @@ jobs: targets: wasm32-unknown-unknown - name: Install just - uses: taiki-e/install-action@v2.87.24 + uses: taiki-e/install-action@v2.87.27 with: # Pin an explicit modern just: the Justfile uses `import?` # (optional import, just >= 1.19.0). Unversioned `tool: just` @@ -303,7 +303,7 @@ jobs: - name: Upload wasm artifact if: steps.compile.outcome == 'success' && steps.validate.outcome == 'success' && hashFiles('src/ui/public/assets/wasm/hypatia_gui.wasm') != '' - uses: actions/upload-artifact@v7.0.1 + uses: actions/upload-artifact@v7.0.2 with: name: hypatia-gui-wasm path: src/ui/public/assets/wasm/hypatia_gui.wasm diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml index 5a2e266f..43fc1141 100644 --- a/.github/workflows/ci.yml +++ b/.github/workflows/ci.yml @@ -120,7 +120,7 @@ jobs: components: llvm-tools-preview - name: Install cargo-llvm-cov - uses: taiki-e/install-action@v2.87.24 + uses: taiki-e/install-action@v2.87.27 with: tool: cargo-llvm-cov @@ -277,7 +277,7 @@ jobs: - name: Upload k9 artefacts if: hashFiles('generated/k9iser/**') != '' - uses: actions/upload-artifact@v7.0.1 + uses: actions/upload-artifact@v7.0.2 with: name: k9iser-artefacts path: generated/k9iser/ diff --git a/.github/workflows/hypatia-remediation-sweep.yml b/.github/workflows/hypatia-remediation-sweep.yml index c7c96598..b15c694f 100644 --- a/.github/workflows/hypatia-remediation-sweep.yml +++ b/.github/workflows/hypatia-remediation-sweep.yml @@ -225,7 +225,7 @@ jobs: - name: Upload sweep artifact if: always() - uses: actions/upload-artifact@v7.0.1 + uses: actions/upload-artifact@v7.0.2 with: name: hypatia-remediation-sweep-${{ github.run_id }} path: /tmp/targets.jsonl diff --git a/.github/workflows/merge-orchestrate.yml b/.github/workflows/merge-orchestrate.yml index 1532b6ce..a3377c82 100644 --- a/.github/workflows/merge-orchestrate.yml +++ b/.github/workflows/merge-orchestrate.yml @@ -73,7 +73,7 @@ jobs: run: mix hypatia.merge_orchestrate --store "$MERGE_ORCH_STORE" - name: Upload decision manifest - uses: actions/upload-artifact@v7.0.1 + uses: actions/upload-artifact@v7.0.2 with: name: merge-decisions path: ${{ env.MERGE_ORCH_STORE }}/merge-decisions.jsonl diff --git a/.github/workflows/quality.yml b/.github/workflows/quality.yml index 1f7ee943..5060a595 100644 --- a/.github/workflows/quality.yml +++ b/.github/workflows/quality.yml @@ -26,7 +26,7 @@ jobs: uses: actions/checkout@v7.0.1 - name: Setup Ruby - uses: ruby/setup-ruby@v1.327.0 + uses: ruby/setup-ruby@v1.328.0 with: ruby-version: '3.2' bundler-cache: true @@ -201,7 +201,7 @@ jobs: EOF - name: Upload documentation artifact - uses: actions/upload-artifact@v7.0.1 + uses: actions/upload-artifact@v7.0.2 with: name: documentation path: _site @@ -226,7 +226,7 @@ jobs: uses: actions/checkout@v7.0.1 - name: Setup Ruby - uses: ruby/setup-ruby@v1.327.0 + uses: ruby/setup-ruby@v1.328.0 with: ruby-version: '3.2' diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml index 9c25fc50..c78014e8 100644 --- a/.github/workflows/release.yml +++ b/.github/workflows/release.yml @@ -180,7 +180,7 @@ jobs: Compress-Archive -Path dist/* -DestinationPath hypatia-${{ needs.prepare.outputs.version }}-${{ matrix.target }}.zip - name: Upload artifact - uses: actions/upload-artifact@v7.0.1 + uses: actions/upload-artifact@v7.0.2 with: name: hypatia-${{ matrix.target }} path: hypatia-${{ needs.prepare.outputs.version }}-${{ matrix.target }}.${{ matrix.archive }} @@ -218,7 +218,7 @@ jobs: uses: actions/checkout@v7.0.1 - name: Download Rust artifacts - uses: actions/download-artifact@v8.0.1 + uses: actions/download-artifact@v8.0.2 with: pattern: hypatia-x86_64-* path: artifacts @@ -290,7 +290,7 @@ jobs: uses: actions/checkout@v7.0.1 - name: Download all artifacts - uses: actions/download-artifact@v8.0.1 + uses: actions/download-artifact@v8.0.2 with: path: artifacts diff --git a/.github/workflows/security-policy.yml b/.github/workflows/security-policy.yml index e1483bf6..ad600327 100644 --- a/.github/workflows/security-policy.yml +++ b/.github/workflows/security-policy.yml @@ -125,7 +125,7 @@ jobs: - name: Upload audit results if: always() - uses: actions/upload-artifact@v7.0.1 + uses: actions/upload-artifact@v7.0.2 with: name: rust-audit-report path: rust-audit-report.json @@ -140,7 +140,7 @@ jobs: uses: actions/checkout@v7.0.1 - name: Install cargo-deny - uses: taiki-e/install-action@v2.87.24 + uses: taiki-e/install-action@v2.87.27 with: tool: cargo-deny @@ -202,7 +202,7 @@ jobs: - name: Upload deny results if: always() - uses: actions/upload-artifact@v7.0.1 + uses: actions/upload-artifact@v7.0.2 with: name: cargo-deny-report path: cargo-deny-report.txt @@ -472,7 +472,7 @@ jobs: # ====================================================================== - name: Gate A — verified credentials fail the gate - uses: trufflesecurity/trufflehog@v3.97.9 + uses: trufflesecurity/trufflehog@v3.99.2 with: path: ./ base: ${{ steps.th.outputs.base }} @@ -481,7 +481,7 @@ jobs: extra_args: --results=verified - name: Gate B — private keys fail the gate even when unverified - uses: trufflesecurity/trufflehog@v3.97.9 + uses: trufflesecurity/trufflehog@v3.99.2 with: path: ./ base: ${{ steps.th.outputs.base }} @@ -690,7 +690,7 @@ jobs: fi - name: Upload license report - uses: actions/upload-artifact@v7.0.1 + uses: actions/upload-artifact@v7.0.2 with: name: license-compliance-report path: license-report.md @@ -725,7 +725,7 @@ jobs: find . -name 'rust-sbom.cdx.*' -print - name: Upload SBOM artifacts - uses: actions/upload-artifact@v7.0.1 + uses: actions/upload-artifact@v7.0.2 with: name: sbom path: | diff --git a/.github/workflows/tests.yml b/.github/workflows/tests.yml index 97b502f3..80a29bdc 100644 --- a/.github/workflows/tests.yml +++ b/.github/workflows/tests.yml @@ -239,7 +239,7 @@ jobs: docker save hypatia:test | gzip > images.tar.gz - name: Upload images - uses: actions/upload-artifact@v7.0.1 + uses: actions/upload-artifact@v7.0.2 with: name: docker-images path: images.tar.gz @@ -312,7 +312,7 @@ jobs: uses: actions/checkout@v7.0.1 - name: Download images - uses: actions/download-artifact@v8.0.1 + uses: actions/download-artifact@v8.0.2 with: name: docker-images @@ -559,7 +559,7 @@ jobs: components: llvm-tools-preview - name: Install cargo-llvm-cov - uses: taiki-e/install-action@v2.87.24 + uses: taiki-e/install-action@v2.87.27 with: tool: cargo-llvm-cov @@ -831,7 +831,7 @@ jobs: - name: Upload baseline candidate (regenerate mode) if: ${{ github.event.inputs.mode == 'regenerate-baseline' }} - uses: actions/upload-artifact@v7.0.1 + uses: actions/upload-artifact@v7.0.2 with: name: baselines-candidate path: .machine_readable/benchmarks/baselines.json @@ -839,7 +839,7 @@ jobs: - name: Upload raw bench output if: always() - uses: actions/upload-artifact@v7.0.1 + uses: actions/upload-artifact@v7.0.2 with: name: bench-output path: bench-output.txt diff --git a/.github/workflows/verify-proofs.yml b/.github/workflows/verify-proofs.yml index 3e65c070..b61a34c6 100644 --- a/.github/workflows/verify-proofs.yml +++ b/.github/workflows/verify-proofs.yml @@ -319,7 +319,7 @@ jobs: - name: Upload TLC log on failure if: failure() - uses: actions/upload-artifact@v7.0.1 + uses: actions/upload-artifact@v7.0.2 with: name: tlc-log path: verification/proofs/tlaplus/tlc.log