Skip to content

update dependencies to resolve security audit findings #416

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Merged
jadamcrain merged 5 commits into from
Mar 28, 2026
Merged

update dependencies to resolve security audit findings #416

Show file tree
Hide file tree
Changes from all commits
Commits
Show all changes
5 commits
Select commit Hold shift + click to select a range
678c6ea
update dependencies to resolve security audit findings
jadamcrain Mar 28, 2026
7e211ce
add zmij to third-party license allow list
jadamcrain Mar 28, 2026
c385cd8
bump GitHub Actions to v5 for Node.js 24 compatibility
jadamcrain Mar 28, 2026
24b9463
bump remaining GitHub Actions to latest major versions
jadamcrain Mar 28, 2026
25b4438
add jni-sys-macros to third-party license allow list
jadamcrain Mar 28, 2026
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
60 changes: 30 additions & 30 deletions .github/workflows/ci.yml
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -15,7 +15,7 @@ jobs:
runs-on: ubuntu-latest
steps:
- name: Checkout
uses: actions/checkout@v4
uses: actions/checkout@v6
- name: Install Rust ${{ matrix.rust }}
uses: dtolnay/rust-toolchain@master
with:
Expand All @@ -39,7 +39,7 @@ jobs:
runs-on: ubuntu-latest
steps:
- name: Checkout
uses: actions/checkout@v4
uses: actions/checkout@v6
- name: Install Rust
uses: dtolnay/rust-toolchain@master
with:
Expand All @@ -59,7 +59,7 @@ jobs:
runs-on: ${{ matrix.os }}
steps:
- name: Checkout
uses: actions/checkout@v4
uses: actions/checkout@v6
- name: Install Rust ${{ matrix.rust }}
uses: dtolnay/rust-toolchain@master
with:
Expand All @@ -71,7 +71,7 @@ jobs:
runs-on: ubuntu-latest
steps:
- name: Checkout
uses: actions/checkout@v4
uses: actions/checkout@v6
- name: Install Rust ${{ matrix.rust }}
uses: dtolnay/rust-toolchain@stable
- name: Install doxygen 1.9.5
Expand All @@ -96,7 +96,7 @@ jobs:
cp -a ffi/bindings/java/dnp3/target/apidocs ~/doc/java
rm ffi/bindings/c/generated/logo.png ffi/bindings/c/generated/doxygen-awesome.css
- name: Upload documentation
uses: actions/upload-artifact@v4
uses: actions/upload-artifact@v7
with:
name: doc-api
path: ~/doc
Expand All @@ -113,7 +113,7 @@ jobs:
test: false
steps:
- name: Checkout
uses: actions/checkout@v4
uses: actions/checkout@v6
- name: Install NASM
run: |
choco install nasm
Expand All @@ -136,7 +136,7 @@ jobs:
Copy-Item -Path ./target/${{ matrix.target }}/release/dnp3_ffi.dll.lib -Destination ffi-modules/${{ matrix.target }}
Copy-Item -Path ./target/${{ matrix.target }}/release/dnp3_ffi_java.dll -Destination ffi-modules/${{ matrix.target }}
- name: Upload compiled FFI modules
uses: actions/upload-artifact@v4
uses: actions/upload-artifact@v7
with:
name: ffi-modules-${{ matrix.target }}
path: ffi-modules
Expand All @@ -162,7 +162,7 @@ jobs:
runs-on: ${{ matrix.runner }}
steps:
- name: Checkout
uses: actions/checkout@v4
uses: actions/checkout@v6
- name: Install Rust
uses: dtolnay/rust-toolchain@stable
- name: Create FFI modules dir
Expand All @@ -176,7 +176,7 @@ jobs:
cp ./target/release/libdnp3_ffi.dylib ./ffi-modules/${{ matrix.target }}
cp ./target/release/libdnp3_ffi_java.dylib ./ffi-modules/${{ matrix.target }}
- name: Upload compiled FFI modules
uses: actions/upload-artifact@v4
uses: actions/upload-artifact@v7
with:
name: ffi-modules-${{ matrix.target }}
path: ffi-modules
Expand Down Expand Up @@ -216,7 +216,7 @@ jobs:
runs-on: ubuntu-latest
steps:
- name: Checkout
uses: actions/checkout@v4
uses: actions/checkout@v6
- name: Install Rust
uses: dtolnay/rust-toolchain@stable
with:
Expand All @@ -234,15 +234,15 @@ jobs:
cp ./target/${{ matrix.cases.target }}/release/libdnp3_ffi.so ./ffi-modules/${{ matrix.cases.target }}
cp ./target/${{ matrix.cases.target }}/release/libdnp3_ffi_java.so ./ffi-modules/${{ matrix.cases.target }}
- name: Upload compiled FFI modules
uses: actions/upload-artifact@v4
uses: actions/upload-artifact@v7
with:
name: ffi-modules-${{ matrix.cases.target }}
path: ffi-modules
guide:
runs-on: ubuntu-latest
steps:
- name: Checkout
uses: actions/checkout@v4
uses: actions/checkout@v6
- name: Install dependencies
working-directory: guide
run: npm ci
Expand All @@ -253,7 +253,7 @@ jobs:
mkdir -p ~/doc/guide
mv build/* ~/doc/guide
- name: Upload guide
uses: actions/upload-artifact@v4
uses: actions/upload-artifact@v7
with:
name: doc-guide
path: ~/doc
Expand All @@ -269,9 +269,9 @@ jobs:
- name: Install custom allow-list tool
run: cargo install --git https://github.com/stepfunc/bom-tools.git
- name: Checkout
uses: actions/checkout@v4
uses: actions/checkout@v6
- name: Download compiled FFI
uses: actions/download-artifact@v4
uses: actions/download-artifact@v8
with:
path: ffi-modules
pattern: ffi-modules-*
Expand All @@ -295,22 +295,22 @@ jobs:
- name: Package Java bindings
run: cargo run --bin dnp3-bindings -- --java --package ./ffi-modules --options ./packaging.json -f third-party-licenses-java.txt
- name: Upload C/C++ bindings
uses: actions/upload-artifact@v4
uses: actions/upload-artifact@v7
with:
name: c-bindings
path: ffi/bindings/c/generated/*
- name: Upload .NET bindings
uses: actions/upload-artifact@v4
uses: actions/upload-artifact@v7
with:
name: dotnet-bindings
path: ffi/bindings/dotnet/nupkg/dnp3*
- name: Upload Java bindings
uses: actions/upload-artifact@v4
uses: actions/upload-artifact@v7
with:
name: java-bindings-jar
path: ffi/bindings/java/dnp3/target/*.jar
- name: Upload Java pom.xml
uses: actions/upload-artifact@v4
uses: actions/upload-artifact@v7
with:
name: java-bindings-pom
path: ffi/bindings/java/dnp3/pom.xml
Expand All @@ -319,7 +319,7 @@ jobs:
runs-on: ubuntu-latest
steps:
- name: Checkout
uses: actions/checkout@v4
uses: actions/checkout@v6
- name: Install Rust
uses: dtolnay/rust-toolchain@stable
- name: Build JNI
Expand All @@ -330,7 +330,7 @@ jobs:
shell: bash
run: (cd ffi/bindings/java/dnp3 && sudo mvn install)
- name: Checkout dnp4s
uses: actions/checkout@v4
uses: actions/checkout@v6
with:
repository: stepfunc/dnp4s
ssh-key: ${{ secrets.DNP4S_SSH_KEY }}
Expand All @@ -344,7 +344,7 @@ jobs:
run: sudo mvn --batch-mode scala:run
- name: Upload conformance test results
if: always()
uses: actions/upload-artifact@v4
uses: actions/upload-artifact@v7
with:
name: conformance-results
path: conformance/results
Expand All @@ -364,7 +364,7 @@ jobs:
if: startsWith(github.ref, 'refs/tags/')
steps:
- name: Checkout
uses: actions/checkout@v4
uses: actions/checkout@v6
- name: Install Rust
uses: dtolnay/rust-toolchain@stable
- name: Publish to crates.io
Expand All @@ -383,12 +383,12 @@ jobs:
if: startsWith(github.ref, 'refs/tags/')
steps:
- name: Download documentation artifacts
uses: actions/download-artifact@v4
uses: actions/download-artifact@v8
with:
path: artifacts
pattern: doc-*
- name: Checkout stepfunc/docs
uses: actions/checkout@v4
uses: actions/checkout@v6
with:
repository: stepfunc/docs
ssh-key: ${{ secrets.SFIO_DOCS_SSH_KEY }}
Expand Down Expand Up @@ -420,12 +420,12 @@ jobs:
if: startsWith(github.ref, 'refs/tags/')
steps:
- name: Download Java artifacts
uses: actions/download-artifact@v4
uses: actions/download-artifact@v8
with:
path: artifacts
pattern: java-bindings-*
- name: Import PGP key
uses: crazy-max/ghaction-import-gpg@v3
uses: crazy-max/ghaction-import-gpg@v7
with:
gpg-private-key: ${{ secrets.SFIO_PGP_PRIVATE_KEY }}
passphrase: ${{ secrets.SFIO_PGP_PRIVATE_KEY_PASSPHRASE }}
Expand Down Expand Up @@ -509,7 +509,7 @@ jobs:
if: startsWith(github.ref, 'refs/tags/')
steps:
- name: Download .NET artifacts
uses: actions/download-artifact@v4
uses: actions/download-artifact@v8
with:
name: dotnet-bindings
path: artifacts/dotnet-bindings
Expand All @@ -528,7 +528,7 @@ jobs:
if: startsWith(github.ref, 'refs/tags/')
steps:
- name: Download all release artifacts
uses: actions/download-artifact@v4
uses: actions/download-artifact@v8
with:
path: artifacts
- name: Package C Bindings and Conformance Results
Expand All @@ -539,7 +539,7 @@ jobs:
cd ../conformance-results
zip -r ../../release/conformance-results.zip .
- name: Create GitHub release
uses: softprops/action-gh-release@v1
uses: softprops/action-gh-release@v2
with:
draft: true
files: |
Expand Down
2 changes: 1 addition & 1 deletion .github/workflows/security-audit.yml
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -28,7 +28,7 @@ jobs:
runs-on: ubuntu-latest
steps:
- name: Checkout
uses: actions/checkout@v4
uses: actions/checkout@v6

- name: Install cargo-binstall
uses: cargo-bins/cargo-binstall@main
Expand Down
Loading