Skip to content

chore(deps): bump the actions group with 3 updates #451

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Open
dependabot wants to merge 1 commit into
base: main
Choose a base branch
from
Open

chore(deps): bump the actions group with 3 updates #451

Show file tree
Hide file tree
Changes from all commits
Commits
Show all changes
1 commit
Select commit
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
49 changes: 17 additions & 32 deletions .github/workflows/actions.lock
View file
Open in desktop
Original file line number Diff line number Diff line change
@@ -1,4 +1,4 @@
# This file is machine-generated by `gh actions-lock`.

Check failure on line 1 in .github/workflows/actions.lock

View workflow job for this annotation

GitHub Actions / Hypatia neurosymbolic scan 

[hypatia] actions.lock failed closed: {:line, 4, {:unsupported_version, "v0.0.3"}}

Check failure on line 1 in .github/workflows/actions.lock

View workflow job for this annotation

GitHub Actions / Hypatia neurosymbolic scan 

[hypatia] Invalid .github/workflows/actions.lock: {:line, 4, {:unsupported_version, "v0.0.3"}}. Regenerate and verify it with gh actions-lock.
# Do not edit by hand; run `gh actions-lock` to update.
# Docs: https://gh.io/actions-lockfile
version: 'v0.0.3'
Expand All @@ -24,7 +24,7 @@
- 'actions/upload-artifact@v7.0.2'
- 'dtolnay/rust-toolchain@v1'
- 'mlugg/setup-zig@v2.2.1'
- 'swatinem/rust-cache@v2.9.2'
- 'swatinem/rust-cache@v2.9.3'
'.github/workflows/codeql.yml':
- 'actions/checkout@v7.0.1'
- 'github/codeql-action@v4.38.2'
Expand All @@ -38,7 +38,7 @@
'.github/workflows/formal-verification.yml':
- 'actions/checkout@v7.0.1'
- 'dtolnay/rust-toolchain@v1'
- 'swatinem/rust-cache@v2.9.2'
- 'swatinem/rust-cache@v2.9.3'
'.github/workflows/generator-generic-ossf-slsa3-publish.yml':
- 'actions/checkout@v7.0.1'
- 'slsa-framework/slsa-github-generator@f7dd8c54c2067bafc12ca7a55595d5ee9b75204a'
Expand All @@ -56,40 +56,39 @@
'.github/workflows/live-provers.yml':
- 'actions/checkout@v7.0.1'
- 'dtolnay/rust-toolchain@v1'
- 'swatinem/rust-cache@v2.9.2'
- 'swatinem/rust-cache@v2.9.3'
'.github/workflows/mirror.yml':
- 'hyperpolymath/standards@3c00687a5bbd0d881d351db8502417b5d0a8b0b0'
'.github/workflows/mvp-smoke.yml':
- 'actions/checkout@v7.0.1'
- 'dtolnay/rust-toolchain@v1'
- 'swatinem/rust-cache@v2.9.2'
- 'taiki-e/install-action@v2.87.28'
- 'swatinem/rust-cache@v2.9.3'
- 'taiki-e/install-action@v2.87.29'
'.github/workflows/pages.yml':
- 'actions/checkout@v7.0.1'
- 'actions/deploy-pages@v5.0.1'
- 'actions/upload-pages-artifact@v5.0.0'
'.github/workflows/proof-safety.yml':
- 'actions/checkout@v7.0.1'
- 'swatinem/rust-cache@v2.9.2'
- 'swatinem/rust-cache@v2.9.3'
'.github/workflows/rust-ci.yml':
- 'actions/checkout@v7.0.1'
- 'dtolnay/rust-toolchain@v1'
- 'swatinem/rust-cache@v2.9.2'
- 'swatinem/rust-cache@v2.9.3'
'.github/workflows/s4-loop.yml':
- 'actions/checkout@v7.0.1'
- 'dtolnay/rust-toolchain@v1'
- 'swatinem/rust-cache@v2.9.2'
- 'taiki-e/install-action@v2.87.28'
- 'swatinem/rust-cache@v2.9.3'
- 'taiki-e/install-action@v2.87.29'
'.github/workflows/scorecard.yml':
- 'hyperpolymath/standards@3c00687a5bbd0d881d351db8502417b5d0a8b0b0'
'.github/workflows/secret-scanner.yml':
- 'hyperpolymath/standards@3c00687a5bbd0d881d351db8502417b5d0a8b0b0'
'.github/workflows/security-scan.yml':
- 'hyperpolymath/panic-attack@8955f615f769204e42340e08bdea2de9d72e81cd'
'.github/workflows/security-scan.yml': []

@chatgpt-codex-connector chatgpt-codex-connector Bot Oct 23, 2026

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

P1 Badge Restore the reusable workflow to the lock graph

Whenever the governance/Hypatia lock audit runs, this empty entry conflicts with .github/workflows/security-scan.yml, which still invokes hyperpolymath/panic-attack at the new SHA. The change also removes that reusable workflow’s dependency record and its three transitive actions, so the lock is no longer transitively closed and is reported as invalid_actions_lock / workflow_dependencies_missing, leaving the governance gate red and the security workflow outside lock coverage. Pin a panic-attack revision that the estate lock tooling can resolve, then regenerate the complete lock graph rather than recording this workflow as action-free.

Useful? React with 👍 / 👎.

'.github/workflows/server-boot-gate.yml':
- 'actions/checkout@v7.0.1'
- 'dtolnay/rust-toolchain@v1'
- 'swatinem/rust-cache@v2.9.2'
- 'swatinem/rust-cache@v2.9.3'
'.github/workflows/spark-theatre-gate.yml':
- 'hyperpolymath/standards@3c00687a5bbd0d881d351db8502417b5d0a8b0b0'
'.github/workflows/static-analysis-gate.yml':
Expand All @@ -106,11 +105,6 @@
- 'hyperpolymath/cicd-suite@4c772eb235b04455307d5c03cbbc4f45130f7f0f'
- 'mlugg/setup-zig@v2.2.1'
dependencies:
'Swatinem/rust-cache@6323deb102c322ba6fcbdcafc7e3dddab59af2b6':
ref: 'v2.9.2'
commit: 'sha1-6323deb102c322ba6fcbdcafc7e3dddab59af2b6'
owner_id: 580492
repo_id: 298565987
'actions/attest-build-provenance@v4.2.2':
ref: 'v4.2.2'
commit: 'sha1-4d101475d8b20a2381f78447822ac1eab6504dd8'
Expand Down Expand Up @@ -235,15 +229,6 @@
commit: 'sha1-4c772eb235b04455307d5c03cbbc4f45130f7f0f'
owner_id: 6759885
repo_id: 1326697643
'hyperpolymath/panic-attack@8955f615f769204e42340e08bdea2de9d72e81cd':
ref: '8955f615f769204e42340e08bdea2de9d72e81cd'
commit: 'sha1-8955f615f769204e42340e08bdea2de9d72e81cd'
owner_id: 6759885
repo_id: 1152434997
uses:
- 'Swatinem/rust-cache@6323deb102c322ba6fcbdcafc7e3dddab59af2b6'
- 'actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1'
- 'dtolnay/rust-toolchain@683b588c487a69d01f6c6ddf40f036ff682cc2c8'
'hyperpolymath/standards@3c00687a5bbd0d881d351db8502417b5d0a8b0b0':
ref: '3c00687a5bbd0d881d351db8502417b5d0a8b0b0'
commit: 'sha1-3c00687a5bbd0d881d351db8502417b5d0a8b0b0'
Expand Down Expand Up @@ -300,14 +285,14 @@
commit: 'sha1-c95fe1489396fe8a9eb87c0abf8aa5b2ef267fda'
owner_id: 2242
repo_id: 204253808
'swatinem/rust-cache@v2.9.2':
ref: 'v2.9.2'
commit: 'sha1-6323deb102c322ba6fcbdcafc7e3dddab59af2b6'
'swatinem/rust-cache@v2.9.3':
ref: 'v2.9.3'
commit: 'sha1-d1527c8f67ef9af357290475d4af4b0fab8f12e0'
owner_id: 580492
repo_id: 298565987
'taiki-e/install-action@v2.87.28':
ref: 'v2.87.28'
commit: 'sha1-1168f6810a3cb30a3514bf5756a3b7f0422c6df8'
'taiki-e/install-action@v2.87.29':
ref: 'v2.87.29'
commit: 'sha1-8cca0918f8471c33515202b73f56ab27f2bed283'
owner_id: 43724913
repo_id: 442947557
'webfactory/ssh-agent@e83874834305fe9a4a2997156cb26c5de65a8555':
Expand Down
4 changes: 2 additions & 2 deletions .github/workflows/chapel-ci.yml
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -154,7 +154,7 @@ jobs:
toolchain: stable

- name: Rust cache
uses: Swatinem/rust-cache@v2.9.2
uses: Swatinem/rust-cache@v2.9.3

- name: Download FFI library
uses: actions/download-artifact@v8.0.2
Expand Down Expand Up @@ -208,7 +208,7 @@ jobs:
toolchain: stable

- name: Rust cache
uses: Swatinem/rust-cache@v2.9.2
uses: Swatinem/rust-cache@v2.9.3

- name: Download real Chapel library
uses: actions/download-artifact@v8.0.2
Expand Down
2 changes: 1 addition & 1 deletion .github/workflows/formal-verification.yml
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -63,7 +63,7 @@ jobs:
toolchain: stable

- name: Cache Rust build artefacts
uses: Swatinem/rust-cache@v2.9.2
uses: Swatinem/rust-cache@v2.9.3
with:
workspaces: ". -> target"

Expand Down
8 changes: 4 additions & 4 deletions .github/workflows/live-provers.yml
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -84,7 +84,7 @@ jobs:
toolchain: stable

- name: Cache Cargo
uses: Swatinem/rust-cache@v2.9.2
uses: Swatinem/rust-cache@v2.9.3

- name: Provision prover (${{ matrix.backend }})
run: |
Expand Down Expand Up @@ -178,7 +178,7 @@ jobs:
with:
toolchain: stable
- name: Cache Cargo
uses: Swatinem/rust-cache@v2.9.2
uses: Swatinem/rust-cache@v2.9.3
- name: Provision ${{ matrix.backend }} (best-effort via apt / upstream release)
continue-on-error: true # allow-fail: issue=#416 expires=2026-11-30
run: |
Expand Down Expand Up @@ -328,7 +328,7 @@ jobs:
with:
toolchain: stable
- name: Cache Cargo
uses: Swatinem/rust-cache@v2.9.2
uses: Swatinem/rust-cache@v2.9.3
- name: Provision ${{ matrix.backend }} (best-effort)
continue-on-error: true # allow-fail: issue=#416 expires=2026-11-30
run: |
Expand Down Expand Up @@ -458,7 +458,7 @@ jobs:
with:
toolchain: stable
- name: Cache Cargo
uses: Swatinem/rust-cache@v2.9.2
uses: Swatinem/rust-cache@v2.9.3
- name: Provision ${{ matrix.backend }} (best-effort, CUDA/OpenCL required)
continue-on-error: true # allow-fail: issue=#416 expires=2026-11-30
run: |
Expand Down
4 changes: 2 additions & 2 deletions .github/workflows/mvp-smoke.yml
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -38,10 +38,10 @@ jobs:
toolchain: stable

- name: Cache Cargo
uses: Swatinem/rust-cache@v2.9.2
uses: Swatinem/rust-cache@v2.9.3

- name: Install just
uses: taiki-e/install-action@v2.87.28
uses: taiki-e/install-action@v2.87.29
with:
# Governance R1 requires versioned family-tool pins
# (just|must|trust|adjust|bust|dust|intend); bare `tool: just`
Expand Down
2 changes: 1 addition & 1 deletion .github/workflows/proof-safety.yml
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -20,7 +20,7 @@ jobs:
- uses: actions/checkout@v7.0.1
with:
persist-credentials: false
- uses: Swatinem/rust-cache@v2.9.2
- uses: Swatinem/rust-cache@v2.9.3
- name: Install required native provers
run: |
sudo apt-get update
Expand Down
4 changes: 2 additions & 2 deletions .github/workflows/rust-ci.yml
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -110,7 +110,7 @@ jobs:


- name: Cache cargo registry and build
uses: Swatinem/rust-cache@v2.9.2
uses: Swatinem/rust-cache@v2.9.3
with:
workspaces: .

Expand Down Expand Up @@ -158,7 +158,7 @@ jobs:


- name: Cache cargo registry and build
uses: Swatinem/rust-cache@v2.9.2
uses: Swatinem/rust-cache@v2.9.3
with:
workspaces: .

Expand Down
4 changes: 2 additions & 2 deletions .github/workflows/s4-loop.yml
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -22,7 +22,7 @@
contents: read
services:
verisim:
image: ghcr.io/hyperpolymath/verisimdb-api:latest

Check warning on line 25 in .github/workflows/s4-loop.yml

View workflow job for this annotation

GitHub Actions / Hypatia neurosymbolic scan 

[hypatia] workflow .github/workflows/s4-loop.yml:25 pins container `ghcr.io/hyperpolymath/verisimdb-api:latest` by tag — tag is mutable; pin by sha256 digest instead
ports:
- '8080:8080'
options: >-
Expand All @@ -40,9 +40,9 @@
with:
toolchain: stable
- name: Cache Cargo
uses: Swatinem/rust-cache@v2.9.2
uses: Swatinem/rust-cache@v2.9.3
- name: Install just
uses: taiki-e/install-action@v2.87.28
uses: taiki-e/install-action@v2.87.29
with:
tool: just@1.51.0
- name: Install system dependencies
Expand Down
2 changes: 1 addition & 1 deletion .github/workflows/security-scan.yml
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -24,6 +24,6 @@ permissions:

jobs:
scan:
uses: hyperpolymath/panic-attack/.github/workflows/scan-and-report.yml@8955f615f769204e42340e08bdea2de9d72e81cd # main 2026-10-20: dtolnay/rust-toolchain v1 at 683b588 (the b689a74 pin was a commit no tag names any more)
uses: hyperpolymath/panic-attack/.github/workflows/scan-and-report.yml@6933654592debdf0ed9157843a3771c252a63574 # main 2026-10-20: dtolnay/rust-toolchain v1 at 683b588 (the b689a74 pin was a commit no tag names any more)
secrets:
VERISIMDB_PAT: ${{ secrets.VERISIMDB_PAT }}
2 changes: 1 addition & 1 deletion .github/workflows/server-boot-gate.yml
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -32,7 +32,7 @@ jobs:
with:
toolchain: stable
- name: Cache Cargo
uses: Swatinem/rust-cache@v2.9.2
uses: Swatinem/rust-cache@v2.9.3
- name: Install system dependencies
run: sudo apt-get install -y libssl-dev pkg-config
- name: Build echidna binary
Expand Down
Loading