From 316fdac8c37710cd3309195b9fbd9eee9006aa36 Mon Sep 17 00:00:00 2001 From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com> Date: Fri, 30 Oct 2026 20:05:37 +0000 Subject: [PATCH] chore(deps): Bump the github-actions-deps group with 2 updates Bumps the github-actions-deps group with 2 updates: [Swatinem/rust-cache](https://github.com/swatinem/rust-cache) and [taiki-e/install-action](https://github.com/taiki-e/install-action). Updates `Swatinem/rust-cache` from 2.9.2 to 2.9.3 - [Release notes](https://github.com/swatinem/rust-cache/releases) - [Changelog](https://github.com/Swatinem/rust-cache/blob/master/CHANGELOG.md) - [Commits](https://github.com/swatinem/rust-cache/compare/6323deb102c322ba6fcbdcafc7e3dddab59af2b6...d1527c8f67ef9af357290475d4af4b0fab8f12e0) Updates `taiki-e/install-action` from 2.87.29 to 2.87.31 - [Release notes](https://github.com/taiki-e/install-action/releases) - [Changelog](https://github.com/taiki-e/install-action/blob/main/CHANGELOG.md) - [Commits](https://github.com/taiki-e/install-action/compare/8cca0918f8471c33515202b73f56ab27f2bed283...1e29709c0ec63babbe8f266397a465f29a825f91) --- updated-dependencies: - dependency-name: Swatinem/rust-cache dependency-version: 2.9.3 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: github-actions-deps - dependency-name: taiki-e/install-action dependency-version: 2.87.31 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: github-actions-deps ... Signed-off-by: dependabot[bot] --- .github/workflows/ci.yml | 14 +++++++------- .github/workflows/deps-audit.yml | 2 +- .github/workflows/release.yml | 2 +- 3 files changed, 9 insertions(+), 9 deletions(-) diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml index 45c717bd..c441ef05 100644 --- a/.github/workflows/ci.yml +++ b/.github/workflows/ci.yml @@ -210,7 +210,7 @@ jobs: # (full rebuild every run) and never saves the new ones because the # primary key already exists. -deps-opt1 dates from the # [profile.dev.package."*"] opt-level bump. - - uses: Swatinem/rust-cache@6323deb102c322ba6fcbdcafc7e3dddab59af2b6 # v2.9.2 + - uses: Swatinem/rust-cache@d1527c8f67ef9af357290475d4af4b0fab8f12e0 # v2.9.3 with: key: lint-deps-opt1 # cdn.pyke.io (ort-sys prebuilt binaries) 403s from CI runners; seed @@ -218,7 +218,7 @@ jobs: - uses: ./.github/actions/seed-ort-cache # Pin sqlx-cli to 0.9 so the CLI's offline-cache format matches the # workspace sqlx 0.9 (the .sqlx/ files it verifies). - - uses: taiki-e/install-action@8cca0918f8471c33515202b73f56ab27f2bed283 # v2.87.29 + - uses: taiki-e/install-action@1e29709c0ec63babbe8f266397a465f29a825f91 # v2.87.31 with: tool: sqlx-cli@0.9 @@ -344,7 +344,7 @@ jobs: components: rustfmt, clippy, llvm-tools-preview # See the lint job for why the key carries a -deps-opt1 suffix (and # must be rotated again on the next [profile.*] change). - - uses: Swatinem/rust-cache@6323deb102c322ba6fcbdcafc7e3dddab59af2b6 # v2.9.2 + - uses: Swatinem/rust-cache@d1527c8f67ef9af357290475d4af4b0fab8f12e0 # v2.9.3 with: key: coverage-deps-opt1 # cdn.pyke.io (ort-sys prebuilt binaries) 403s from CI runners; seed @@ -354,7 +354,7 @@ jobs: # artifacts stay valid). Linking ~99 instrumented test binaries is # the bulk of a warm-cache "compile" phase; mold cuts it sharply. - uses: rui314/setup-mold@da13e0b42e392e3a45d1215033a2270b849d7d36 # v1 (mutable tag) - - uses: taiki-e/install-action@8cca0918f8471c33515202b73f56ab27f2bed283 # v2.87.29 + - uses: taiki-e/install-action@1e29709c0ec63babbe8f266397a465f29a825f91 # v2.87.31 with: tool: cargo-llvm-cov,cargo-nextest @@ -421,7 +421,7 @@ jobs: # Listing them keeps that cost in the setup step instead of buried, # untimed, inside the first build. components: rustfmt, clippy - - uses: Swatinem/rust-cache@6323deb102c322ba6fcbdcafc7e3dddab59af2b6 # v2.9.2 + - uses: Swatinem/rust-cache@d1527c8f67ef9af357290475d4af4b0fab8f12e0 # v2.9.3 with: key: sql-policy-deps - uses: ./.github/actions/seed-ort-cache @@ -568,14 +568,14 @@ jobs: components: rustfmt, clippy # See the lint job for why the key carries a -deps-opt1 suffix (and # must be rotated again on the next [profile.*] change). - - uses: Swatinem/rust-cache@6323deb102c322ba6fcbdcafc7e3dddab59af2b6 # v2.9.2 + - uses: Swatinem/rust-cache@d1527c8f67ef9af357290475d4af4b0fab8f12e0 # v2.9.3 with: key: e2e-deps-opt1 # cdn.pyke.io (ort-sys prebuilt binaries) 403s from CI runners; seed # its cache from a release asset so cold-cache builds don't touch it. - uses: ./.github/actions/seed-ort-cache - uses: rui314/setup-mold@da13e0b42e392e3a45d1215033a2270b849d7d36 # v1 (mutable tag) - - uses: taiki-e/install-action@8cca0918f8471c33515202b73f56ab27f2bed283 # v2.87.29 + - uses: taiki-e/install-action@1e29709c0ec63babbe8f266397a465f29a825f91 # v2.87.31 with: tool: sqlx-cli@0.9 - uses: actions/setup-node@949feb2413d6458794dcd2491c4babbbce0c15c1 # v7.1.0 diff --git a/.github/workflows/deps-audit.yml b/.github/workflows/deps-audit.yml index 8a6ad4cc..a60c0463 100644 --- a/.github/workflows/deps-audit.yml +++ b/.github/workflows/deps-audit.yml @@ -61,7 +61,7 @@ jobs: - name: Advisory-ignore review dates (deny.toml) run: bash scripts/check-deny-reviews.sh # Prebuilt binary; never `cargo install` (a from-source build is minutes). - - uses: taiki-e/install-action@8cca0918f8471c33515202b73f56ab27f2bed283 # v2.87.29 + - uses: taiki-e/install-action@1e29709c0ec63babbe8f266397a465f29a825f91 # v2.87.31 with: tool: cargo-deny@0.20.2 # advisories (RustSec), licenses, bans, sources — config in deny.toml. diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml index 457b0ee6..f7a0c5ad 100644 --- a/.github/workflows/release.yml +++ b/.github/workflows/release.yml @@ -88,7 +88,7 @@ jobs: # keep in sync with rust-toolchain.toml, or the action installs one # toolchain and cargo silently downloads another on the first build. toolchain: "1.98" - - uses: Swatinem/rust-cache@6323deb102c322ba6fcbdcafc7e3dddab59af2b6 # v2.9.2 + - uses: Swatinem/rust-cache@d1527c8f67ef9af357290475d4af4b0fab8f12e0 # v2.9.3 with: key: ${{ matrix.target }} cache-on-failure: true