From f4bcd373fecec1c001b6c0513c8da9c60101c165 Mon Sep 17 00:00:00 2001 From: Niklas Zender Date: Tue, 26 May 2026 11:05:10 +0200 Subject: [PATCH 1/3] chore: update GitHub Action pins Pin listed workflow actions to current upstream default-branch SHAs. --- .github/workflows/rust-workflow.yml | 8 ++++---- 1 file changed, 4 insertions(+), 4 deletions(-) diff --git a/.github/workflows/rust-workflow.yml b/.github/workflows/rust-workflow.yml index a4ed63d..81fbfe9 100644 --- a/.github/workflows/rust-workflow.yml +++ b/.github/workflows/rust-workflow.yml @@ -65,7 +65,7 @@ jobs: uses: actions/checkout@v4 - name: Caching - uses: Swatinem/rust-cache@98c8021b550208e191a6a3145459bfc9fb29c4c0 + uses: Swatinem/rust-cache@65012b490220f477f20ab979e35ae732e6de4e68 - name: Rustfmt shell: bash @@ -101,7 +101,7 @@ jobs: uses: actions/checkout@v4 - name: Caching - uses: Swatinem/rust-cache@98c8021b550208e191a6a3145459bfc9fb29c4c0 + uses: Swatinem/rust-cache@65012b490220f477f20ab979e35ae732e6de4e68 - name: Test shell: bash @@ -113,12 +113,12 @@ jobs: run: cargo +${NIGHTLY_VERSION} test --doc --workspace --verbose ${{inputs.test_args}} - name: Codecov - Upload coverage - uses: codecov/codecov-action@v4 + uses: codecov/codecov-action@ca0a928a4cb3911011e868128a5cd90437c12db1 with: token: ${{secrets.CODECOV_TOKEN}} files: "lcov.info" - name: Codecov - Upload test results - uses: codecov/test-results-action@v1 + uses: codecov/test-results-action@0fa95f0e1eeaafde2c782583b36b28ad0d8c77d3 with: token: ${{secrets.CODECOV_TOKEN}} From 412ca7d0bbb5b2ecad02d175be85f93c4816386e Mon Sep 17 00:00:00 2001 From: Niklas Zender Date: Tue, 26 May 2026 11:31:15 +0200 Subject: [PATCH 2/3] chore: update GitHub Action pins Pin all external workflow actions to current upstream default-branch SHAs. --- .github/workflows/docker-backend.yml | 2 +- .github/workflows/rust-workflow.yml | 8 ++++---- .github/workflows/~local-checks.yml | 2 +- 3 files changed, 6 insertions(+), 6 deletions(-) diff --git a/.github/workflows/docker-backend.yml b/.github/workflows/docker-backend.yml index 1b87332..07bbf01 100644 --- a/.github/workflows/docker-backend.yml +++ b/.github/workflows/docker-backend.yml @@ -112,7 +112,7 @@ jobs: done - name: Log into registry ${{ env.OCI_REGISTRY }} - uses: famedly/login-action@v2 + uses: famedly/login-action@87baf41dadcc0145026ac21b0b86cf62e43f51e1 if: env.OCI_REGISTRY != null with: registry: ${{ env.OCI_REGISTRY }} diff --git a/.github/workflows/rust-workflow.yml b/.github/workflows/rust-workflow.yml index 81fbfe9..af15c11 100644 --- a/.github/workflows/rust-workflow.yml +++ b/.github/workflows/rust-workflow.yml @@ -52,7 +52,7 @@ jobs: container: ghcr.io/famedly/rust-container:nightly steps: - name: Checkout workflow dependencies - uses: actions/checkout@v4 + uses: actions/checkout@900f2210b1d28bbbd0bd22d17926b9e224e8f231 with: repository: famedly/backend-build-workflows ref: ${{ inputs.ref }} @@ -62,7 +62,7 @@ jobs: crate_registry_ssh_privkey: ${{ secrets.CRATE_REGISTRY_SSH_PRIVKEY}} - name: Checkout the repository to test - uses: actions/checkout@v4 + uses: actions/checkout@900f2210b1d28bbbd0bd22d17926b9e224e8f231 - name: Caching uses: Swatinem/rust-cache@65012b490220f477f20ab979e35ae732e6de4e68 @@ -88,7 +88,7 @@ jobs: container: registry.famedly.net/docker-oss/rust-container:nightly steps: - name: Checkout workflow dependencies - uses: actions/checkout@v4 + uses: actions/checkout@900f2210b1d28bbbd0bd22d17926b9e224e8f231 with: repository: famedly/backend-build-workflows ref: ${{ inputs.ref }} @@ -98,7 +98,7 @@ jobs: crate_registry_ssh_privkey: ${{ secrets.CRATE_REGISTRY_SSH_PRIVKEY}} - name: Checkout the repository to test - uses: actions/checkout@v4 + uses: actions/checkout@900f2210b1d28bbbd0bd22d17926b9e224e8f231 - name: Caching uses: Swatinem/rust-cache@65012b490220f477f20ab979e35ae732e6de4e68 diff --git a/.github/workflows/~local-checks.yml b/.github/workflows/~local-checks.yml index 3a59cdc..0bfbb3b 100644 --- a/.github/workflows/~local-checks.yml +++ b/.github/workflows/~local-checks.yml @@ -20,7 +20,7 @@ jobs: run: sudo apt-get install -y shellcheck - name: Checkout repository - uses: actions/checkout@v3 + uses: actions/checkout@900f2210b1d28bbbd0bd22d17926b9e224e8f231 - name: Run shellcheck on all shell files run: find . \( -name '*.sh' -or -name '*.bash' \) -exec shellcheck --color=always {} + From 40815a109c3c3cd664c1be5baf4cac287043b953 Mon Sep 17 00:00:00 2001 From: Niklas Zender Date: Tue, 26 May 2026 12:03:40 +0200 Subject: [PATCH 3/3] chore: migrate to docker login action Replace famedly/login-action with docker/login-action@2ff7bc63ffa51414f77e9cbeea0d3297c1672d2e. --- .github/workflows/docker-backend.yml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/.github/workflows/docker-backend.yml b/.github/workflows/docker-backend.yml index 07bbf01..509c303 100644 --- a/.github/workflows/docker-backend.yml +++ b/.github/workflows/docker-backend.yml @@ -112,7 +112,7 @@ jobs: done - name: Log into registry ${{ env.OCI_REGISTRY }} - uses: famedly/login-action@87baf41dadcc0145026ac21b0b86cf62e43f51e1 + uses: docker/login-action@2ff7bc63ffa51414f77e9cbeea0d3297c1672d2e if: env.OCI_REGISTRY != null with: registry: ${{ env.OCI_REGISTRY }}