diff --git a/.github/workflows/abi-drift.yml b/.github/workflows/abi-drift.yml
index 075a9c6c..cd41cc92 100644
--- a/.github/workflows/abi-drift.yml
+++ b/.github/workflows/abi-drift.yml
@@ -47,7 +47,7 @@ jobs:
outputs:
run: ${{ steps.detect.outputs.run }}
steps:
- - uses: actions/checkout@v6.0.2
+ - uses: actions/checkout@v7.0.1
with:
fetch-depth: 0
- id: detect
@@ -72,7 +72,7 @@ jobs:
runs-on: ubuntu-latest
timeout-minutes: 15
steps:
- - uses: actions/checkout@v6.0.2
+ - uses: actions/checkout@v7.0.1
with:
# Need at least two commits so `git diff origin/...HEAD`
# can compute the changed-cartridge set on pull_request events.
@@ -92,7 +92,7 @@ jobs:
# GADT-skip fix (iseriser#20, merged 2026-05-20) never reached CI.
# Bumping ISERISER_REV invalidates the cache and forces a rebuild.
- name: Cache cargo bin (iseriser install)
- uses: actions/cache@v4.2.2
+ uses: actions/cache@v6.1.0
env:
ISERISER_REV: 741a3b63e7619b6e9cfe7f91b04d7ccfb130b1ca
with:
diff --git a/.github/workflows/actions.lock b/.github/workflows/actions.lock
index 739b3185..af955fe3 100644
--- a/.github/workflows/actions.lock
+++ b/.github/workflows/actions.lock
@@ -1,165 +1,149 @@
# This file is machine-generated by `gh actions-lock`.
# Do not edit by hand; run `gh actions-lock` to update.
# Docs: https://gh.io/actions-lockfile
-version: 'v0.0.2'
+version: 'v0.0.3'
workflows:
'.github/workflows/abi-drift.yml':
- - 'actions/cache@v4.2.2'
- - 'actions/checkout@v6.0.2'
+ - 'actions/cache@v6.1.0'
+ - 'actions/checkout@v7.0.1'
- 'dtolnay/rust-toolchain@v1'
'.github/workflows/backend-assurance.yml':
- - 'actions/cache@v4.2.2'
- - 'actions/checkout@v6.0.2'
- - 'erlef/setup-beam@v1.24.0'
+ - 'actions/cache@v6.1.0'
+ - 'actions/checkout@v7.0.1'
+ - 'erlef/setup-beam@v1.24.1'
'.github/workflows/build.yml':
- - 'actions/checkout@v4.3.1'
- - 'sonarsource/sonarqube-scan-action@v8.1.0'
+ - 'actions/checkout@v7.0.1'
+ - 'sonarsource/sonarqube-scan-action@v8.3.0'
'.github/workflows/codeql.yml':
- - 'actions/checkout@v6.0.2'
- - 'github/codeql-action@v4.34.0'
+ - 'actions/checkout@v7.0.1'
+ - 'github/codeql-action@v4.39.0'
'.github/workflows/container-publish.yml':
- - 'actions/attest-build-provenance@v2.4.0'
- - 'actions/checkout@v6.0.2'
+ - 'actions/attest-build-provenance@v4.2.2'
+ - 'actions/checkout@v7.0.1'
'.github/workflows/dogfood-gate.yml':
- - 'actions/checkout@v6.0.2'
+ - 'actions/checkout@v7.0.1'
'.github/workflows/e2e.yml':
- - 'actions/checkout@v6.0.2'
- - 'actions/github-script@v8.0.0'
- - 'actions/setup-node@v4.4.0'
- - 'actions/upload-artifact@v4.6.2'
- - 'denoland/setup-deno@v2.0.4'
- - 'erlef/setup-beam@v1.24.0'
+ - 'actions/checkout@v7.0.1'
+ - 'actions/github-script@v9.0.0'
+ - 'actions/setup-node@v7.1.0'
+ - 'actions/upload-artifact@v7.0.2'
+ - 'denoland/setup-deno@v2.0.5'
+ - 'erlef/setup-beam@v1.24.1'
- 'mlugg/setup-zig@v2.2.1'
- 'oven-sh/setup-bun@v2.2.0'
'.github/workflows/fuzz.yml':
- - 'actions/checkout@v6.0.2'
+ - 'actions/checkout@v7.0.1'
- 'mlugg/setup-zig@v2.2.1'
'.github/workflows/governance.yml': []
'.github/workflows/hcg-surface-drift.yml':
- - 'actions/checkout@v6.0.2'
+ - 'actions/checkout@v7.0.1'
'.github/workflows/hypatia-scan.yml':
- - 'actions/checkout@v6.0.2'
- - 'actions/github-script@v8.0.0'
- - 'actions/upload-artifact@v4.6.2'
- - 'erlef/setup-beam@v1.24.0'
- - 'github/codeql-action@v4.32.6'
+ - 'actions/checkout@v7.0.1'
+ - 'actions/github-script@v9.0.0'
+ - 'actions/upload-artifact@v7.0.2'
+ - 'erlef/setup-beam@v1.24.1'
+ - 'github/codeql-action@v4.39.0'
'.github/workflows/instant-sync.yml':
- - 'peter-evans/repository-dispatch@v3.0.0'
+ - 'peter-evans/repository-dispatch@v4.0.1'
'.github/workflows/label-triage.yml': []
'.github/workflows/labels.yml': []
'.github/workflows/lsp-dap-bsp.yml':
- - 'actions/checkout@v6.0.2'
+ - 'actions/checkout@v7.0.1'
- 'mlugg/setup-zig@v2.2.1'
'.github/workflows/mirror.yml': []
'.github/workflows/pages-deploy.yml':
- - 'actions/checkout@v4.4.0'
+ - 'actions/checkout@v7.0.1'
'.github/workflows/pages.yml':
- - 'actions/checkout@v4.4.0'
- - 'actions/deploy-pages@v4.0.5'
- - 'actions/upload-pages-artifact@v3.0.1'
+ - 'actions/checkout@v7.0.1'
+ - 'actions/deploy-pages@v5.0.1'
+ - 'actions/upload-pages-artifact@v5.0.0'
'.github/workflows/proofs.yml':
- - 'actions/cache@v4.2.2'
- - 'actions/checkout@v6.0.2'
+ - 'actions/cache@v6.1.0'
+ - 'actions/checkout@v7.0.1'
'.github/workflows/publish.yml':
- - 'actions/checkout@v6.0.2'
- - 'denoland/setup-deno@v2.0.4'
+ - 'actions/checkout@v7.0.1'
+ - 'denoland/setup-deno@v2.0.5'
- 'oven-sh/setup-bun@v2.2.0'
'.github/workflows/push-email-notify.yml':
- - 'hyperpolymath/smtp-notify-action@v0.2.0'
+ - 'hyperpolymath/smtp-notify-action@v0.5.0'
'.github/workflows/readme-derive.yml': []
'.github/workflows/release.yml':
- - 'actions/checkout@v6.0.2'
- - 'actions/download-artifact@v4.2.1'
- - 'actions/upload-artifact@v4.6.2'
+ - 'actions/checkout@v7.0.1'
+ - 'actions/download-artifact@v8.0.2'
+ - 'actions/upload-artifact@v7.0.2'
- 'mlugg/setup-zig@v2.2.1'
- - 'softprops/action-gh-release@v2.6.2'
+ - 'softprops/action-gh-release@v3.0.3'
'.github/workflows/scorecard.yml': []
'.github/workflows/secret-scanner.yml': []
'.github/workflows/truthfulness.yml':
- - 'actions/checkout@v6.0.2'
+ - 'actions/checkout@v7.0.1'
- 'mlugg/setup-zig@v2.2.1'
'.github/workflows/zig-test.yml':
- - 'actions/checkout@v6.0.2'
+ - 'actions/checkout@v7.0.1'
- 'mlugg/setup-zig@v2.2.1'
dependencies:
- 'actions/attest-build-provenance@1176ef556905f349f669722abf30bce1a6e16e01':
- ref: 'predicate@1.1.5'
- commit: 'sha1-1176ef556905f349f669722abf30bce1a6e16e01'
- owner_id: 44036562
- repo_id: 760702757
- 'actions/attest-build-provenance@v2.4.0':
- ref: 'v2.4.0'
- commit: 'sha1-e8998f949152b193b063cb0ec769d69d929409be'
+ 'actions/attest-build-provenance@v4.2.2':
+ ref: 'v4.2.2'
+ commit: 'sha1-4d101475d8b20a2381f78447822ac1eab6504dd8'
owner_id: 44036562
repo_id: 760702757
uses:
- - 'actions/attest-build-provenance@1176ef556905f349f669722abf30bce1a6e16e01'
- - 'actions/attest@ce27ba3b4a9a139d9a20a4a07d69fabb52f1e5bc'
- 'actions/attest@ce27ba3b4a9a139d9a20a4a07d69fabb52f1e5bc':
- ref: 'v2.4.0'
- commit: 'sha1-ce27ba3b4a9a139d9a20a4a07d69fabb52f1e5bc'
+ - 'actions/attest@508db95dd578ae2727ebd6217d5ba78e4fbda05d'
+ 'actions/attest@508db95dd578ae2727ebd6217d5ba78e4fbda05d':
+ ref: 'v4.2.1'
+ commit: 'sha1-508db95dd578ae2727ebd6217d5ba78e4fbda05d'
owner_id: 44036562
repo_id: 760701061
- 'actions/cache@v4.2.2':
- ref: 'v4.2.2'
- commit: 'sha1-d4323d4df104b026a6aa633fdb11d772146be0bf'
+ 'actions/cache@v6.1.0':
+ ref: 'v6.1.0'
+ commit: 'sha1-55cc8345863c7cc4c66a329aec7e433d2d1c52a9'
owner_id: 44036562
repo_id: 215566462
- 'actions/checkout@v4.3.1':
- ref: 'v4.3.1'
- commit: 'sha1-34e114876b0b11c390a56381ad16ebd13914f8d5'
- owner_id: 44036562
- repo_id: 197814629
- 'actions/checkout@v4.4.0':
- ref: 'v4.4.0'
- commit: 'sha1-11d5960a326750d5838078e36cf38b85af677262'
- owner_id: 44036562
- repo_id: 197814629
- 'actions/checkout@v6.0.2':
- ref: 'v6.0.2'
- commit: 'sha1-de0fac2e4500dabe0009e67214ff5f5447ce83dd'
+ 'actions/checkout@v7.0.1':
+ ref: 'v7.0.1'
+ commit: 'sha1-3d3c42e5aac5ba805825da76410c181273ba90b1'
owner_id: 44036562
repo_id: 197814629
- 'actions/deploy-pages@v4.0.5':
- ref: 'v4.0.5'
- commit: 'sha1-d6db90164ac5ed86f2b6aed7e0febac5b3c0c03e'
+ 'actions/deploy-pages@v5.0.1':
+ ref: 'v5.0.1'
+ commit: 'sha1-368f82528645a54fb793d4d04e342629a3f51346'
owner_id: 44036562
repo_id: 438112499
- 'actions/download-artifact@v4.2.1':
- ref: 'v4.2.1'
- commit: 'sha1-95815c38cf2ff2164869cbab79da8d1f422bc89e'
+ 'actions/download-artifact@v8.0.2':
+ ref: 'v8.0.2'
+ commit: 'sha1-9000827ccba6bdab643e8b6fd33ac0654aef8333'
owner_id: 44036562
repo_id: 192626254
- 'actions/github-script@v8.0.0':
- ref: 'v8.0.0'
- commit: 'sha1-ed597411d8f924073f98dfc5c65a23a2325f34cd'
+ 'actions/github-script@v9.0.0':
+ ref: 'v9.0.0'
+ commit: 'sha1-3a2844b7e9c422d3c10d287c895573f7108da1b3'
owner_id: 44036562
repo_id: 205262760
- 'actions/setup-node@v4.4.0':
- ref: 'v4.4.0'
- commit: 'sha1-49933ea5288caeca8642d1e84afbd3f7d6820020'
+ 'actions/setup-node@v7.1.0':
+ ref: 'v7.1.0'
+ commit: 'sha1-949feb2413d6458794dcd2491c4babbbce0c15c1'
owner_id: 44036562
repo_id: 189476904
- 'actions/upload-artifact@v4':
- ref: 'v4'
- commit: 'sha1-ea165f8d65b6e75b540449e92b4886f43607fa02'
+ 'actions/upload-artifact@bbbca2ddaa5d8feaa63e36b76fdaad77386f024f':
+ ref: 'v7.0.0'
+ commit: 'sha1-bbbca2ddaa5d8feaa63e36b76fdaad77386f024f'
owner_id: 44036562
repo_id: 192625955
- 'actions/upload-artifact@v4.6.2':
- ref: 'v4.6.2'
- commit: 'sha1-ea165f8d65b6e75b540449e92b4886f43607fa02'
+ 'actions/upload-artifact@v7.0.2':
+ ref: 'v7.0.2'
+ commit: 'sha1-cf430e030ddbb5b0abf93d22962f4752f3646cd9'
owner_id: 44036562
repo_id: 192625955
- 'actions/upload-pages-artifact@v3.0.1':
- ref: 'v3.0.1'
- commit: 'sha1-56afc609e74202658d3ffba0e8f6dda462b719fa'
+ 'actions/upload-pages-artifact@v5.0.0':
+ ref: 'v5.0.0'
+ commit: 'sha1-fc324d3547104276b827a68afc52ff2a11cc49c9'
owner_id: 44036562
repo_id: 496012378
uses:
- - 'actions/upload-artifact@v4'
- 'denoland/setup-deno@v2.0.4':
- ref: 'v2.0.4'
- commit: 'sha1-667a34cdef165d8d2b2e98dde39547c9daac7282'
+ - 'actions/upload-artifact@bbbca2ddaa5d8feaa63e36b76fdaad77386f024f'
+ 'denoland/setup-deno@v2.0.5':
+ ref: 'v2.0.5'
+ commit: 'sha1-22d081ff2d3a40755e97629de92e3bcbfa7cf2ed'
owner_id: 42048915
repo_id: 356423100
'dtolnay/rust-toolchain@v1':
@@ -167,24 +151,19 @@ dependencies:
commit: 'sha1-02cb101ec7c40f2c49e1d9714d64511d8e1b74de'
owner_id: 1940490
repo_id: 260749683
- 'erlef/setup-beam@v1.24.0':
- ref: 'v1.24.0'
- commit: 'sha1-fc68ffb90438ef2936bbb3251622353b3dcb2f93'
+ 'erlef/setup-beam@v1.24.1':
+ ref: 'v1.24.1'
+ commit: 'sha1-54075bcc5e249e4758d363f27d099f55d843f124'
owner_id: 47606891
repo_id: 331103973
- 'github/codeql-action@v4.32.6':
- ref: 'v4.32.6'
- commit: 'sha1-0d579ffd059c29b07949a3cce3983f0780820c98'
+ 'github/codeql-action@v4.39.0':
+ ref: 'v4.39.0'
+ commit: 'sha1-6f2ac81f5cd81fe351a197ba0b00d91d03cd2aee'
owner_id: 9919
repo_id: 259445878
- 'github/codeql-action@v4.34.0':
- ref: 'v4.34.0'
- commit: 'sha1-c6f931105cb2c34c8f901cc885ba1e2e259cf745'
- owner_id: 9919
- repo_id: 259445878
- 'hyperpolymath/smtp-notify-action@v0.2.0':
- ref: 'v0.2.0'
- commit: 'sha1-ede1191ef6ff3ac02c4f4d9efdf837ee517e11d7'
+ 'hyperpolymath/smtp-notify-action@v0.5.0':
+ ref: 'v0.5.0'
+ commit: 'sha1-c1c9fa07992a02c1fd3d67a0dc1b08cccb852aef'
owner_id: 6759885
repo_id: 1352485172
'mlugg/setup-zig@v2.2.1':
@@ -197,73 +176,18 @@ dependencies:
commit: 'sha1-0c5077e51419868618aeaa5fe8019c62421857d6'
owner_id: 108928776
repo_id: 512644635
- 'peter-evans/repository-dispatch@v3.0.0':
- ref: 'v3.0.0'
- commit: 'sha1-ff45666b9427631e3450c54a1bcbee4d9ff4d7c0'
+ 'peter-evans/repository-dispatch@v4.0.1':
+ ref: 'v4.0.1'
+ commit: 'sha1-28959ce8df70de7be546dd1250a005dd32156697'
owner_id: 18365890
repo_id: 220359305
- 'softprops/action-gh-release@v2.6.2':
- ref: 'v2.6.2'
- commit: 'sha1-3bb12739c298aeb8a4eeaf626c5b8d85266b0e65'
+ 'softprops/action-gh-release@v3.0.3':
+ ref: 'v3.0.3'
+ commit: 'sha1-efb35369e0ad2afab669f228072c1b0d510eae64'
owner_id: 2242
repo_id: 204253808
- 'sonarsource/sonarqube-scan-action@v8.1.0':
- ref: 'v8.1.0'
- commit: 'sha1-7006c4492b2e0ee0f816d36501671557c97f5995'
+ 'sonarsource/sonarqube-scan-action@v8.3.0':
+ ref: 'v8.3.0'
+ commit: 'sha1-d209202bc7d53ff1cc128f7f907dac145c9d6ae9'
owner_id: 545988
repo_id: 366408409
- 'actions/cache@55cc8345863c7cc4c66a329aec7e433d2d1c52a9':
- ref: 'v6.1.0'
- commit: 'sha1-55cc8345863c7cc4c66a329aec7e433d2d1c52a9'
- owner_id: 44036562
- repo_id: 215566462
- 'actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1':
- ref: 'v7.0.1'
- commit: 'sha1-3d3c42e5aac5ba805825da76410c181273ba90b1'
- owner_id: 44036562
- repo_id: 197814629
- 'actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a':
- ref: 'v7.0.1'
- commit: 'sha1-043fb46d1a93c77aae656e7c1c64a875d1fc6a0a'
- owner_id: 44036562
- repo_id: 192625955
- 'actions/upload-artifact@65c4c4a1ddee5b72f698fdd19549f0f0fb45cf08':
- ref: 'v4.6.0'
- commit: 'sha1-65c4c4a1ddee5b72f698fdd19549f0f0fb45cf08'
- owner_id: 44036562
- repo_id: 192625955
- 'denoland/setup-deno@22d081ff2d3a40755e97629de92e3bcbfa7cf2ed':
- ref: 'v2.0.5'
- commit: 'sha1-22d081ff2d3a40755e97629de92e3bcbfa7cf2ed'
- owner_id: 42048915
- repo_id: 356423100
- 'dtolnay/rust-toolchain@6c977a6ca4077a0ceb28ffbe03f59d46e9ac8772':
- ref: 'stable'
- commit: 'sha1-6c977a6ca4077a0ceb28ffbe03f59d46e9ac8772'
- owner_id: 1940490
- repo_id: 260749683
- 'editorconfig-checker/action-editorconfig-checker@840e866d93b8e032123c23bac69dece044d4d84c':
- ref: 'v2.2.0'
- commit: 'sha1-840e866d93b8e032123c23bac69dece044d4d84c'
- owner_id: 26415196
- repo_id: 297874902
- 'erlef/setup-beam@54075bcc5e249e4758d363f27d099f55d843f124':
- ref: 'v1.24.1'
- commit: 'sha1-54075bcc5e249e4758d363f27d099f55d843f124'
- owner_id: 47606891
- repo_id: 331103973
- 'ossf/scorecard-action@2d1146689b8cda280b9bc96326124645441f03bc':
- ref: 'v2.4.4'
- commit: 'sha1-2d1146689b8cda280b9bc96326124645441f03bc'
- owner_id: 67707773
- repo_id: 421101922
- 'softprops/action-gh-release@c95fe1489396fe8a9eb87c0abf8aa5b2ef267fda':
- ref: 'v2.2.1'
- commit: 'sha1-c95fe1489396fe8a9eb87c0abf8aa5b2ef267fda'
- owner_id: 2242
- repo_id: 204253808
- 'webfactory/ssh-agent@e83874834305fe9a4a2997156cb26c5de65a8555':
- ref: 'v0.10.0'
- commit: 'sha1-e83874834305fe9a4a2997156cb26c5de65a8555'
- owner_id: 135788
- repo_id: 208510314
diff --git a/.github/workflows/backend-assurance.yml b/.github/workflows/backend-assurance.yml
index 1b83a8e1..7c7255f5 100644
--- a/.github/workflows/backend-assurance.yml
+++ b/.github/workflows/backend-assurance.yml
@@ -48,7 +48,7 @@ jobs:
outputs:
run: ${{ steps.detect.outputs.run }}
steps:
- - uses: actions/checkout@v6.0.2
+ - uses: actions/checkout@v7.0.1
with:
fetch-depth: 0
- id: detect
@@ -80,16 +80,16 @@ jobs:
run:
working-directory: elixir
steps:
- - uses: actions/checkout@v6.0.2
+ - uses: actions/checkout@v7.0.1
- name: Set up BEAM (Elixir + OTP)
- uses: erlef/setup-beam@v1.24.0
+ uses: erlef/setup-beam@v1.24.1
with:
elixir-version: '1.18.4'
otp-version: '27.0'
- name: Cache deps + _build
- uses: actions/cache@v4.2.2
+ uses: actions/cache@v6.1.0
with:
path: |
elixir/deps
diff --git a/.github/workflows/build.yml b/.github/workflows/build.yml
index 9a2dde99..af4d88ca 100644
--- a/.github/workflows/build.yml
+++ b/.github/workflows/build.yml
@@ -28,10 +28,10 @@ jobs:
runs-on: ubuntu-latest
timeout-minutes: 15
steps:
- - uses: actions/checkout@v4.3.1
+ - uses: actions/checkout@v7.0.1
with:
fetch-depth: 0 # Shallow clones should be disabled for a better relevancy of analysis
- name: SonarQube Scan
- uses: SonarSource/sonarqube-scan-action@v8.1.0
+ uses: SonarSource/sonarqube-scan-action@v8.3.0
env:
SONAR_TOKEN: ${{ secrets.SONAR_TOKEN }}
diff --git a/.github/workflows/codeql.yml b/.github/workflows/codeql.yml
index bbf70899..f276d8cf 100644
--- a/.github/workflows/codeql.yml
+++ b/.github/workflows/codeql.yml
@@ -44,15 +44,15 @@ jobs:
steps:
- name: Checkout
- uses: actions/checkout@v6.0.2
+ uses: actions/checkout@v7.0.1
- name: Initialize CodeQL
- uses: github/codeql-action/init@v4.34.0
+ uses: github/codeql-action/init@v4.39.0
with:
languages: ${{ matrix.language }}
build-mode: ${{ matrix.build-mode }}
- name: Perform CodeQL Analysis
- uses: github/codeql-action/analyze@v4.34.0
+ uses: github/codeql-action/analyze@v4.39.0
with:
category: "/language:${{ matrix.language }}"
diff --git a/.github/workflows/container-publish.yml b/.github/workflows/container-publish.yml
index a0cfdcc7..cb0625fd 100644
--- a/.github/workflows/container-publish.yml
+++ b/.github/workflows/container-publish.yml
@@ -29,7 +29,7 @@ jobs:
id-token: write # mint the OIDC token the attestation is signed with
attestations: write # write the build-provenance attestation (the "claim")
steps:
- - uses: actions/checkout@v6.0.2
+ - uses: actions/checkout@v7.0.1
- name: Extract version metadata
id: meta
@@ -95,7 +95,7 @@ jobs:
# gh attest verify oci://ghcr.io/${{ github.repository }}: \
# --repo ${{ github.repository }}
- name: Attest container provenance
- uses: actions/attest-build-provenance@v2.4.0
+ uses: actions/attest-build-provenance@v4.2.2
with:
subject-name: ghcr.io/${{ github.repository }}
subject-digest: ${{ steps.push.outputs.digest }}
diff --git a/.github/workflows/dogfood-gate.yml b/.github/workflows/dogfood-gate.yml
index b78cd483..b7f11e31 100644
--- a/.github/workflows/dogfood-gate.yml
+++ b/.github/workflows/dogfood-gate.yml
@@ -38,7 +38,7 @@ jobs:
steps:
- name: Checkout repository
- uses: actions/checkout@v6.0.2
+ uses: actions/checkout@v7.0.1
- name: Check for A2ML files
id: detect
@@ -79,7 +79,7 @@ jobs:
steps:
- name: Checkout repository
- uses: actions/checkout@v6.0.2
+ uses: actions/checkout@v7.0.1
- name: Check for K9 files
id: detect
@@ -125,7 +125,7 @@ jobs:
steps:
- name: Checkout repository
- uses: actions/checkout@v6.0.2
+ uses: actions/checkout@v7.0.1
- name: Scan for invisible characters
id: lint
@@ -221,7 +221,7 @@ jobs:
steps:
- name: Checkout repository
- uses: actions/checkout@v6.0.2
+ uses: actions/checkout@v7.0.1
- name: Check for Groove manifest
id: groove
@@ -280,7 +280,7 @@ jobs:
steps:
- name: Checkout repository
- uses: actions/checkout@v6.0.2
+ uses: actions/checkout@v7.0.1
- name: Check and validate eclexiaiser manifest
id: eclex
@@ -328,7 +328,7 @@ jobs:
steps:
- name: Checkout repository
- uses: actions/checkout@v6.0.2
+ uses: actions/checkout@v7.0.1
- name: Generate dogfooding scorecard
run: |
diff --git a/.github/workflows/e2e.yml b/.github/workflows/e2e.yml
index d34e9f76..a9d55b68 100644
--- a/.github/workflows/e2e.yml
+++ b/.github/workflows/e2e.yml
@@ -35,7 +35,7 @@ jobs:
outputs:
run: ${{ steps.detect.outputs.run }}
steps:
- - uses: actions/checkout@v6.0.2
+ - uses: actions/checkout@v7.0.1
with:
fetch-depth: 0
- id: detect
@@ -67,7 +67,7 @@ jobs:
steps:
- name: Checkout
- uses: actions/checkout@v6.0.2
+ uses: actions/checkout@v7.0.1
- name: Install Zig
uses: mlugg/setup-zig@v2.2.1
@@ -75,7 +75,7 @@ jobs:
version: 0.16.0
- name: Install Deno
- uses: denoland/setup-deno@v2.0.4
+ uses: denoland/setup-deno@v2.0.5
with:
deno-version: v2.x
@@ -83,7 +83,7 @@ jobs:
# tests/e2e_full.sh requires `mix` on PATH to start the Elixir
# backend (elixir/ — `mix run --no-halt`). Pinned to match the
# estate convention (see hypatia-scan.yml across the org).
- uses: erlef/setup-beam@v1.24.0
+ uses: erlef/setup-beam@v1.24.1
with:
elixir-version: '1.18'
otp-version: '27'
@@ -116,7 +116,7 @@ jobs:
- name: Upload test logs
if: always()
- uses: actions/upload-artifact@v4.6.2
+ uses: actions/upload-artifact@v7.0.2
with:
name: e2e-full-logs
path: /tmp/boj-e2e-test.*
@@ -132,7 +132,7 @@ jobs:
steps:
- name: Checkout
- uses: actions/checkout@v6.0.2
+ uses: actions/checkout@v7.0.1
- name: Install Zig
uses: mlugg/setup-zig@v2.2.1
@@ -155,7 +155,7 @@ jobs:
steps:
- name: Checkout
- uses: actions/checkout@v6.0.2
+ uses: actions/checkout@v7.0.1
- name: Run aspect tests
run: bash tests/aspect_tests.sh
@@ -170,7 +170,7 @@ jobs:
steps:
- name: Checkout
- uses: actions/checkout@v6.0.2
+ uses: actions/checkout@v7.0.1
- name: Install Zig
uses: mlugg/setup-zig@v2.2.1
@@ -185,7 +185,7 @@ jobs:
- name: Upload benchmark results
if: always()
- uses: actions/upload-artifact@v4.6.2
+ uses: actions/upload-artifact@v7.0.2
with:
name: benchmark-results
path: ffi/zig/zig-out/bench*
@@ -224,18 +224,18 @@ jobs:
steps:
- name: Checkout
- uses: actions/checkout@v6.0.2
+ uses: actions/checkout@v7.0.1
- name: Setup Node
# Node is needed on every leg: it is the subject on the node
# leg and the boot-smoke orchestrator on all three.
- uses: actions/setup-node@v4.4.0
+ uses: actions/setup-node@v7.1.0
with:
node-version: '22'
- name: Install Deno
if: matrix.runtime == 'deno'
- uses: denoland/setup-deno@v2.0.4
+ uses: denoland/setup-deno@v2.0.5
with:
deno-version: v2.x
@@ -270,10 +270,10 @@ jobs:
steps:
- name: Checkout
- uses: actions/checkout@v6.0.2
+ uses: actions/checkout@v7.0.1
- name: Setup Node
- uses: actions/setup-node@v4.4.0
+ uses: actions/setup-node@v7.1.0
with:
node-version: '22'
@@ -282,7 +282,7 @@ jobs:
- name: Upload bridge bench artifact
if: always()
- uses: actions/upload-artifact@v4.6.2
+ uses: actions/upload-artifact@v7.0.2
with:
name: bench-bridge-results
path: bench-bridge.txt
@@ -293,7 +293,7 @@ jobs:
# Advisory — a comment failure must never gate the bench job.
# Same reasoning as the hypatia-scan PR-comment step.
continue-on-error: true
- uses: actions/github-script@v8.0.0
+ uses: actions/github-script@v9.0.0
with:
script: |
const fs = require('fs');
diff --git a/.github/workflows/fuzz.yml b/.github/workflows/fuzz.yml
index 7afaeba6..fdf1f47c 100644
--- a/.github/workflows/fuzz.yml
+++ b/.github/workflows/fuzz.yml
@@ -28,7 +28,7 @@ jobs:
permissions:
contents: read
steps:
- - uses: actions/checkout@v6.0.2
+ - uses: actions/checkout@v7.0.1
- name: Install Zig
uses: mlugg/setup-zig@v2.2.1
@@ -56,7 +56,7 @@ jobs:
permissions:
contents: read
steps:
- - uses: actions/checkout@v6.0.2
+ - uses: actions/checkout@v7.0.1
- name: Fuzz JSON-RPC message parsing
run: |
diff --git a/.github/workflows/hcg-surface-drift.yml b/.github/workflows/hcg-surface-drift.yml
index b1e447d0..aea0a2ee 100644
--- a/.github/workflows/hcg-surface-drift.yml
+++ b/.github/workflows/hcg-surface-drift.yml
@@ -53,7 +53,7 @@ jobs:
outputs:
run: ${{ steps.detect.outputs.run }}
steps:
- - uses: actions/checkout@v6.0.2
+ - uses: actions/checkout@v7.0.1
with:
fetch-depth: 0
- id: detect
@@ -88,7 +88,7 @@ jobs:
runs-on: ubuntu-latest
timeout-minutes: 5
steps:
- - uses: actions/checkout@v6.0.2
+ - uses: actions/checkout@v7.0.1
- name: Confirm script + inputs are present
run: |
set -euo pipefail
diff --git a/.github/workflows/hypatia-scan.yml b/.github/workflows/hypatia-scan.yml
index bb2f17c4..964028f7 100644
--- a/.github/workflows/hypatia-scan.yml
+++ b/.github/workflows/hypatia-scan.yml
@@ -51,12 +51,12 @@ jobs:
steps:
- name: Checkout repository
- uses: actions/checkout@v6.0.2
+ uses: actions/checkout@v7.0.1
with:
fetch-depth: 0 # Full history for better pattern analysis
- name: Setup Elixir for Hypatia scanner
- uses: erlef/setup-beam@v1.24.0
+ uses: erlef/setup-beam@v1.24.1
with:
elixir-version: '1.18'
otp-version: '27'
@@ -110,7 +110,7 @@ jobs:
echo "- Medium: $MEDIUM" >> $GITHUB_STEP_SUMMARY
- name: Upload findings artifact
- uses: actions/upload-artifact@v4.6.2
+ uses: actions/upload-artifact@v7.0.2
with:
name: hypatia-findings
path: hypatia-findings.json
@@ -246,7 +246,7 @@ jobs:
always() &&
(github.event_name != 'pull_request' ||
github.event.pull_request.head.repo.fork != true)
- uses: github/codeql-action/upload-sarif@v4.32.6
+ uses: github/codeql-action/upload-sarif@v4.39.0
with:
sarif_file: hypatia.sarif
# Distinct category so Hypatia results coexist with CodeQL's
@@ -386,7 +386,7 @@ jobs:
# the pull-requests: write permission above: a token/API hiccup or
# a fork PR (read-only token) skips the comment, not the check.
continue-on-error: true
- uses: actions/github-script@v8.0.0
+ uses: actions/github-script@v9.0.0
with:
script: |
const fs = require('fs');
diff --git a/.github/workflows/instant-sync.yml b/.github/workflows/instant-sync.yml
index f59819cc..92218f5c 100644
--- a/.github/workflows/instant-sync.yml
+++ b/.github/workflows/instant-sync.yml
@@ -29,7 +29,7 @@ jobs:
timeout-minutes: 5
steps:
- name: Trigger Propagation
- uses: peter-evans/repository-dispatch@v3.0.0
+ uses: peter-evans/repository-dispatch@v4.0.1
with:
token: ${{ secrets.FARM_DISPATCH_TOKEN }}
repository: hyperpolymath/.git-private-farm
diff --git a/.github/workflows/lsp-dap-bsp.yml b/.github/workflows/lsp-dap-bsp.yml
index c04f8594..00321b58 100644
--- a/.github/workflows/lsp-dap-bsp.yml
+++ b/.github/workflows/lsp-dap-bsp.yml
@@ -33,7 +33,7 @@ jobs:
outputs:
run: ${{ steps.detect.outputs.run }}
steps:
- - uses: actions/checkout@v6.0.2
+ - uses: actions/checkout@v7.0.1
with:
fetch-depth: 0
- id: detect
@@ -59,7 +59,7 @@ jobs:
runs-on: ubuntu-latest
timeout-minutes: 10
steps:
- - uses: actions/checkout@v6.0.2
+ - uses: actions/checkout@v7.0.1
- name: Validate ABI modules exist
run: |
echo "=== Checking LSP/DAP/BSP ABI modules ==="
@@ -95,7 +95,7 @@ jobs:
runs-on: ubuntu-latest
timeout-minutes: 15
steps:
- - uses: actions/checkout@v6.0.2
+ - uses: actions/checkout@v7.0.1
# Use the pinned action + .tool-versions' canonical Zig, matching
# e2e.yml. (A previous revision curled ziglang.org/builds/... — the
# nightly dir, not release downloads — and got an error page that
@@ -142,7 +142,7 @@ jobs:
runs-on: ubuntu-latest
timeout-minutes: 10
steps:
- - uses: actions/checkout@v6.0.2
+ - uses: actions/checkout@v7.0.1
# jq (pre-installed on ubuntu-latest) — the repo's no-Python policy
# (dogfood-gate) bans the previous json.tool/json.load approach.
# Same checks: valid JSON + required fields + panel count.
@@ -176,7 +176,7 @@ jobs:
needs: [changes, abi-check, ffi-build, panel-validation]
if: needs.changes.outputs.run == 'true'
steps:
- - uses: actions/checkout@v6.0.2
+ - uses: actions/checkout@v7.0.1
- name: Verify triadic structure
run: |
echo "=== LSP/DAP/BSP Triadic Structure Audit ==="
diff --git a/.github/workflows/pages-deploy.yml b/.github/workflows/pages-deploy.yml
index 332ce492..cd0449f8 100644
--- a/.github/workflows/pages-deploy.yml
+++ b/.github/workflows/pages-deploy.yml
@@ -22,7 +22,7 @@ jobs:
deploy:
runs-on: ubuntu-latest
steps:
- - uses: actions/checkout@v4.4.0
+ - uses: actions/checkout@v7.0.1
- name: Deploy site/ to Cloudflare Workers (static assets)
run: npx wrangler@latest deploy
env:
diff --git a/.github/workflows/pages.yml b/.github/workflows/pages.yml
old mode 100755
new mode 100644
index d614a31b..22ee7726
--- a/.github/workflows/pages.yml
+++ b/.github/workflows/pages.yml
@@ -27,9 +27,9 @@ jobs:
image: ghcr.io/stefan-hoeck/idris2-pack@sha256:f0758996a931fb35d9ecb1de273c4d59dabe2a09b433afc7e357f65a08b7e1ff
steps:
- name: Checkout Site
- uses: actions/checkout@v4.4.0
+ uses: actions/checkout@v7.0.1
- name: Checkout Ddraig SSG
- uses: actions/checkout@v4.4.0
+ uses: actions/checkout@v7.0.1
with:
repository: hyperpolymath/ddraig-ssg
path: .ddraig-ssg
@@ -46,7 +46,7 @@ jobs:
fi
./.ddraig-ssg/build/exec/ddraig build src _site https://hyperpolymath.github.io/${GITHUB_REPOSITORY#*/}
- name: Upload artifact
- uses: actions/upload-pages-artifact@v3.0.1
+ uses: actions/upload-pages-artifact@v5.0.0
with:
path: '_site'
deploy:
@@ -59,4 +59,4 @@ jobs:
steps:
- name: Deploy to GitHub Pages
id: deployment
- uses: actions/deploy-pages@v4.0.5
+ uses: actions/deploy-pages@v5.0.1
diff --git a/.github/workflows/proofs.yml b/.github/workflows/proofs.yml
index b2a9d85f..0277dfc4 100644
--- a/.github/workflows/proofs.yml
+++ b/.github/workflows/proofs.yml
@@ -46,7 +46,7 @@ jobs:
runs-on: ubuntu-latest
timeout-minutes: 10
steps:
- - uses: actions/checkout@v6.0.2
+ - uses: actions/checkout@v7.0.1
- name: Enforce trusted base
run: bash scripts/check-trusted-base.sh
@@ -56,7 +56,7 @@ jobs:
runs-on: ubuntu-latest
timeout-minutes: 45
steps:
- - uses: actions/checkout@v6.0.2
+ - uses: actions/checkout@v7.0.1
# The pin lives in .mise.toml (.tool-versions was converted, 4d1fe0c9).
# Fail here on an empty or malformed value rather than asking asdf to
@@ -76,7 +76,7 @@ jobs:
run: sudo apt-get update && sudo apt-get install -y chezscheme libgmp-dev build-essential
- name: Cache asdf + Idris2 toolchain
- uses: actions/cache@v4.2.2
+ uses: actions/cache@v6.1.0
with:
path: ~/.asdf
key: idris2-asdf-${{ runner.os }}-${{ steps.ver.outputs.idris2 }}
diff --git a/.github/workflows/publish.yml b/.github/workflows/publish.yml
index 47cb4322..09c280a5 100644
--- a/.github/workflows/publish.yml
+++ b/.github/workflows/publish.yml
@@ -27,7 +27,7 @@ jobs:
contents: read
id-token: write
steps:
- - uses: actions/checkout@v6.0.2
+ - uses: actions/checkout@v7.0.1
- name: Setup Bun
uses: oven-sh/setup-bun@v2.2.0
@@ -100,10 +100,10 @@ jobs:
contents: read
id-token: write
steps:
- - uses: actions/checkout@v6.0.2
+ - uses: actions/checkout@v7.0.1
- name: Setup Deno
- uses: denoland/setup-deno@v2.0.4
+ uses: denoland/setup-deno@v2.0.5
with:
deno-version: v2.x
diff --git a/.github/workflows/push-email-notify.yml b/.github/workflows/push-email-notify.yml
index 579479c8..3cd69a56 100644
--- a/.github/workflows/push-email-notify.yml
+++ b/.github/workflows/push-email-notify.yml
@@ -41,7 +41,7 @@ jobs:
timeout-minutes: 5
steps:
- name: Send push notification email
- uses: hyperpolymath/smtp-notify-action@v0.2.0
+ uses: hyperpolymath/smtp-notify-action@v0.5.0
with:
server_address: ${{ secrets.SMTP_HOST }}
server_port: ${{ secrets.SMTP_PORT }}
diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml
index 021a5bbd..654c2f08 100644
--- a/.github/workflows/release.yml
+++ b/.github/workflows/release.yml
@@ -28,7 +28,7 @@ jobs:
outputs:
hashes: ${{ steps.hash.outputs.hashes }}
steps:
- - uses: actions/checkout@v6.0.2
+ - uses: actions/checkout@v7.0.1
- name: Install Zig
uses: mlugg/setup-zig@v2.2.1
@@ -77,7 +77,7 @@ jobs:
echo "hashes=${HASHES}" >> "$GITHUB_OUTPUT"
- name: Upload build artifacts
- uses: actions/upload-artifact@v4.6.2
+ uses: actions/upload-artifact@v7.0.2
with:
name: release-artifacts
path: boj-server-*-linux-x86_64.tar.gz
@@ -93,7 +93,7 @@ jobs:
changelog: ${{ steps.cliff.outputs.content }}
version: ${{ steps.version.outputs.version }}
steps:
- - uses: actions/checkout@v6.0.2
+ - uses: actions/checkout@v7.0.1
with:
fetch-depth: 0
@@ -123,7 +123,7 @@ jobs:
git cliff --output CHANGELOG.md
- name: Upload updated CHANGELOG.md
- uses: actions/upload-artifact@v4.6.2
+ uses: actions/upload-artifact@v7.0.2
with:
name: changelog
path: CHANGELOG.md
@@ -137,16 +137,16 @@ jobs:
permissions:
contents: write
steps:
- - uses: actions/checkout@v6.0.2
+ - uses: actions/checkout@v7.0.1
- name: Download build artifacts
- uses: actions/download-artifact@v4.2.1
+ uses: actions/download-artifact@v8.0.2
with:
name: release-artifacts
path: artifacts/
- name: Create GitHub Release
- uses: softprops/action-gh-release@v2.6.2
+ uses: softprops/action-gh-release@v3.0.3
with:
body: ${{ needs.changelog.outputs.changelog }}
draft: false
diff --git a/.github/workflows/truthfulness.yml b/.github/workflows/truthfulness.yml
index 8a526ef8..a92be6c7 100644
--- a/.github/workflows/truthfulness.yml
+++ b/.github/workflows/truthfulness.yml
@@ -37,7 +37,7 @@ jobs:
outputs:
run: ${{ steps.detect.outputs.run }}
steps:
- - uses: actions/checkout@v6.0.2
+ - uses: actions/checkout@v7.0.1
with:
fetch-depth: 0
- id: detect
@@ -68,7 +68,7 @@ jobs:
steps:
- name: Checkout
- uses: actions/checkout@v6.0.2
+ uses: actions/checkout@v7.0.1
- name: Install Zig
uses: mlugg/setup-zig@v2.2.1
diff --git a/.github/workflows/zig-test.yml b/.github/workflows/zig-test.yml
index e886291d..b59328f0 100644
--- a/.github/workflows/zig-test.yml
+++ b/.github/workflows/zig-test.yml
@@ -34,7 +34,7 @@ jobs:
outputs:
run: ${{ steps.detect.outputs.run }}
steps:
- - uses: actions/checkout@v6.0.2
+ - uses: actions/checkout@v7.0.1
with:
fetch-depth: 0
- id: detect
@@ -65,7 +65,7 @@ jobs:
runs-on: ubuntu-latest
timeout-minutes: 30
steps:
- - uses: actions/checkout@v6.0.2
+ - uses: actions/checkout@v7.0.1
- name: Install Zig
uses: mlugg/setup-zig@v2.2.1