From 387cd9bee33a23afdd6be6781070d723f51f0790 Mon Sep 17 00:00:00 2001 From: Shane da Silva Date: Wed, 2 Sep 2026 15:26:22 -0700 Subject: [PATCH] ci: use the vendored third-party actions from tempoxyz/gh-actions Points third-party action references at the copies vendored in tempoxyz/gh-actions (vendor/), pinned to a full commit SHA. --- .github/workflows/cargo-update-pr.yml | 2 +- .github/workflows/deny.yml | 4 ++-- 2 files changed, 3 insertions(+), 3 deletions(-) diff --git a/.github/workflows/cargo-update-pr.yml b/.github/workflows/cargo-update-pr.yml index 51629a7..bd77a19 100644 --- a/.github/workflows/cargo-update-pr.yml +++ b/.github/workflows/cargo-update-pr.yml @@ -48,7 +48,7 @@ jobs: - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2 with: persist-credentials: false - - uses: dtolnay/rust-toolchain@6c977a6ca4077a0ceb28ffbe03f59d46e9ac8772 + - uses: tempoxyz/gh-actions/vendor/dtolnay/rust-toolchain@6f436eb3a168279692739e8c0c9fdb52b94bfae7 with: toolchain: ${{ inputs.rust-toolchain }} diff --git a/.github/workflows/deny.yml b/.github/workflows/deny.yml index 3831e68..5ee55b4 100644 --- a/.github/workflows/deny.yml +++ b/.github/workflows/deny.yml @@ -28,10 +28,10 @@ jobs: - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2 with: persist-credentials: false - - uses: dtolnay/rust-toolchain@6c977a6ca4077a0ceb28ffbe03f59d46e9ac8772 + - uses: tempoxyz/gh-actions/vendor/dtolnay/rust-toolchain@6f436eb3a168279692739e8c0c9fdb52b94bfae7 with: toolchain: ${{ inputs.rust-toolchain }} - - uses: EmbarkStudios/cargo-deny-action@91bf2b620e09e18d6eb78b92e7861937469acedb # v2.0.17 + - uses: tempoxyz/gh-actions/vendor/EmbarkStudios/cargo-deny-action@6f436eb3a168279692739e8c0c9fdb52b94bfae7 with: command: check all arguments: ${{ inputs.deny-flags }}