From 7d5b8f731952129c369b6dab5b5003437d0abb3d Mon Sep 17 00:00:00 2001 From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com> Date: Fri, 6 Nov 2026 08:09:50 +0000 Subject: [PATCH] chore(deps): bump the actions group with 2 updates Bumps the actions group with 2 updates: [taiki-e/install-action](https://github.com/taiki-e/install-action) and [hyperpolymath/panic-attack/.github/workflows/scan-and-report.yml](https://github.com/hyperpolymath/panic-attack). Updates `taiki-e/install-action` from 2.87.32 to 2.90.0 - [Release notes](https://github.com/taiki-e/install-action/releases) - [Changelog](https://github.com/taiki-e/install-action/blob/main/CHANGELOG.md) - [Commits](https://github.com/taiki-e/install-action/compare/v2.87.32...v2.90.0) Updates `hyperpolymath/panic-attack/.github/workflows/scan-and-report.yml` from be6ac46716eaf049570ec4966f4ae4699b319689 to d4cef9d4a05670ecb0db1127be2387f06eae73fd - [Release notes](https://github.com/hyperpolymath/panic-attack/releases) - [Changelog](https://github.com/hyperpolymath/panic-attack/blob/main/CHANGELOG.adoc) - [Commits](https://github.com/hyperpolymath/panic-attack/compare/be6ac46716eaf049570ec4966f4ae4699b319689...d4cef9d4a05670ecb0db1127be2387f06eae73fd) --- updated-dependencies: - dependency-name: taiki-e/install-action dependency-version: 2.90.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: actions - dependency-name: hyperpolymath/panic-attack/.github/workflows/scan-and-report.yml dependency-version: d4cef9d4a05670ecb0db1127be2387f06eae73fd dependency-type: direct:production dependency-group: actions ... Signed-off-by: dependabot[bot] --- .github/workflows/actions.lock | 27 ++++++--------------------- .github/workflows/mvp-smoke.yml | 2 +- .github/workflows/s4-loop.yml | 2 +- .github/workflows/security-scan.yml | 2 +- 4 files changed, 9 insertions(+), 24 deletions(-) diff --git a/.github/workflows/actions.lock b/.github/workflows/actions.lock index 71c7b2ff..9b1bd0ca 100644 --- a/.github/workflows/actions.lock +++ b/.github/workflows/actions.lock @@ -62,7 +62,7 @@ workflows: - 'actions/checkout@v7.0.1' - 'dtolnay/rust-toolchain@v1' - 'swatinem/rust-cache@v2.9.3' - - 'taiki-e/install-action@v2.87.32' + - 'taiki-e/install-action@v2.90.0' '.github/workflows/pages.yml': - 'actions/checkout@v7.0.1' - 'actions/deploy-pages@v5.0.1' @@ -78,13 +78,12 @@ workflows: - 'actions/checkout@v7.0.1' - 'dtolnay/rust-toolchain@v1' - 'swatinem/rust-cache@v2.9.3' - - 'taiki-e/install-action@v2.87.32' + - 'taiki-e/install-action@v2.90.0' '.github/workflows/scorecard.yml': - 'metadatastician/standards@d3e4b485a2af90c92a8e18af0888cd19cb132cd9' '.github/workflows/secret-scanner.yml': - 'hyperpolymath/proven-cicd@a12b2b4644db1a1250bc50b58fd24c99f89f564e' - '.github/workflows/security-scan.yml': - - 'hyperpolymath/panic-attack@be6ac46716eaf049570ec4966f4ae4699b319689' + '.github/workflows/security-scan.yml': [] '.github/workflows/server-boot-gate.yml': - 'actions/checkout@v7.0.1' - 'dtolnay/rust-toolchain@v1' @@ -105,11 +104,6 @@ workflows: - 'hyperpolymath/cicd-suite@4c772eb235b04455307d5c03cbbc4f45130f7f0f' - 'mlugg/setup-zig@v2.2.1' dependencies: - 'Swatinem/rust-cache@d1527c8f67ef9af357290475d4af4b0fab8f12e0': - ref: 'v2.9.3' - commit: 'sha1-d1527c8f67ef9af357290475d4af4b0fab8f12e0' - owner_id: 580492 - repo_id: 298565987 'actions/attest-build-provenance@v4.2.2': ref: 'v4.2.2' commit: 'sha1-4d101475d8b20a2381f78447822ac1eab6504dd8' @@ -234,15 +228,6 @@ dependencies: commit: 'sha1-4c772eb235b04455307d5c03cbbc4f45130f7f0f' owner_id: 6759885 repo_id: 1326697643 - 'hyperpolymath/panic-attack@be6ac46716eaf049570ec4966f4ae4699b319689': - ref: 'be6ac46716eaf049570ec4966f4ae4699b319689' - commit: 'sha1-be6ac46716eaf049570ec4966f4ae4699b319689' - owner_id: 6759885 - repo_id: 1152434997 - uses: - - 'Swatinem/rust-cache@d1527c8f67ef9af357290475d4af4b0fab8f12e0' - - 'actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1' - - 'dtolnay/rust-toolchain@683b588c487a69d01f6c6ddf40f036ff682cc2c8' 'hyperpolymath/proven-cicd@a12b2b4644db1a1250bc50b58fd24c99f89f564e': ref: 'a12b2b4644db1a1250bc50b58fd24c99f89f564e' commit: 'sha1-a12b2b4644db1a1250bc50b58fd24c99f89f564e' @@ -328,9 +313,9 @@ dependencies: commit: 'sha1-d1527c8f67ef9af357290475d4af4b0fab8f12e0' owner_id: 580492 repo_id: 298565987 - 'taiki-e/install-action@v2.87.32': - ref: 'v2.87.32' - commit: 'sha1-5488ac5a951645ce95062214902ac4b6bc1a1037' + 'taiki-e/install-action@v2.90.0': + ref: 'v2.90.0' + commit: 'sha1-b80e2bb2635f28eb98b9fce1e2f0887e1535c6b2' owner_id: 43724913 repo_id: 442947557 'webfactory/ssh-agent@e83874834305fe9a4a2997156cb26c5de65a8555': diff --git a/.github/workflows/mvp-smoke.yml b/.github/workflows/mvp-smoke.yml index 570f040c..00cc7e66 100644 --- a/.github/workflows/mvp-smoke.yml +++ b/.github/workflows/mvp-smoke.yml @@ -41,7 +41,7 @@ jobs: uses: Swatinem/rust-cache@v2.9.3 - name: Install just - uses: taiki-e/install-action@v2.87.32 + uses: taiki-e/install-action@v2.90.0 with: # Governance R1 requires versioned family-tool pins # (just|must|trust|adjust|bust|dust|intend); bare `tool: just` diff --git a/.github/workflows/s4-loop.yml b/.github/workflows/s4-loop.yml index a8bfda85..9e0460a4 100644 --- a/.github/workflows/s4-loop.yml +++ b/.github/workflows/s4-loop.yml @@ -42,7 +42,7 @@ jobs: - name: Cache Cargo uses: Swatinem/rust-cache@v2.9.3 - name: Install just - uses: taiki-e/install-action@v2.87.32 + uses: taiki-e/install-action@v2.90.0 with: tool: just@1.51.0 - name: Install system dependencies diff --git a/.github/workflows/security-scan.yml b/.github/workflows/security-scan.yml index db6f3da7..286f682b 100644 --- a/.github/workflows/security-scan.yml +++ b/.github/workflows/security-scan.yml @@ -24,6 +24,6 @@ permissions: jobs: scan: - uses: hyperpolymath/panic-attack/.github/workflows/scan-and-report.yml@be6ac46716eaf049570ec4966f4ae4699b319689 # main 2026-10-20: dtolnay/rust-toolchain v1 at 683b588 (the b689a74 pin was a commit no tag names any more) + uses: hyperpolymath/panic-attack/.github/workflows/scan-and-report.yml@d4cef9d4a05670ecb0db1127be2387f06eae73fd # main 2026-10-20: dtolnay/rust-toolchain v1 at 683b588 (the b689a74 pin was a commit no tag names any more) secrets: VERISIMDB_PAT: ${{ secrets.VERISIMDB_PAT }}