Skip to content

ci: give dtolnay/rust-toolchain a valid toolchain input - #87

Merged
hyperpolymath merged 3 commits into
mainfrom
ci/rust-toolchain-input
Oct 20, 2026
Merged

ci: give dtolnay/rust-toolchain a valid toolchain input#87
hyperpolymath merged 3 commits into
mainfrom
ci/rust-toolchain-input

Conversation

@hyperpolymath

@hyperpolymath hyperpolymath commented Oct 19, 2026

Copy link
Copy Markdown
Owner

What was wrong

ci.yml sets toolchain: v1 on dtolnay/rust-toolchain@v1. v1 isn't a toolchain rustup can install.

Changes

ci.yml: toolchain: v1 → stable (components: kept).

Testing

YAML parses; standards' check-lock-sync.sh reports no new failures.

Generated by Claude Code

@claude
ci: give dtolnay/rust-toolchain a valid toolchain input
3f49b34 
dtolnay/rust-toolchain at @v1 (and at its master-branch commits)
declares `toolchain` as required with no default; only the
toolchain-named branches such as @stable supply one. Steps here either:

- set no `toolchain:` at all, so the action fails with "'toolchain' is a
  required input";
- set an invalid value (v1, master, or a note), which rustup cannot
  install; or
- carry a second `with:` key injected above the real one by an earlier
  bulk edit. A duplicate key makes GitHub reject the whole workflow file.

Each affected step now has exactly one `with:` with a valid toolchain:
an injected toolchain-only `with:` block is dropped, an invalid value
becomes `stable`, and a step with none gets `toolchain: stable`. An
existing valid value ('1.97.0', ${{ env.RUST_VERSION }}, stable) is
kept as is.

Co-Authored-By: Claude Sonnet 5.5 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_0132Cdz3iwk2QGKv2sUhhsye
@hyperpolymath
hyperpolymath marked this pull request as ready for review October 19, 2026 17:05
@chatgpt-codex-connector

chatgpt-codex-connector Bot commented Oct 19, 2026 •
edited
Loading

Copy link
Copy Markdown

Codex Review Summary

This comment shows the latest Codex review activity on this pull request.

Review Status Commit Review trigger
📝 Code Review ✅ Completed 2026-10-19T17:39:50.229361Z c4f1948 New commits
ℹ️ About Codex in GitHub

Your team has set up Codex to review pull requests in this repo. Reviews are triggered when you

  • Open a pull request for review
  • Mark a draft as ready
  • Comment "@codex review" or "@codex security review".

Codex reacts with 👀 while any review is running, comments if it has suggestions, and reacts with 👍 once all reviews finish with no findings.

@coderabbitai

coderabbitai Bot commented Oct 19, 2026 •
edited
Loading

Copy link
Copy Markdown
Contributor

Review in Change Stack →

Important

  • 🔍 Trigger review

This repository does not receive automatic reviews because it has fewer than 10 stars.

⚙️ Run configuration
  • Configuration used: Organization UI
  • Review profile: ASSERTIVE
  • Plan: Advanced
  • Run ID: ff0fd388-c004-4680-9da2-816ce977d242

No actionable comments were generated in the recent review. 🎉

ℹ️ Recent review info
⚙️ Run configuration
  • Configuration used: Organization UI
  • Review profile: ASSERTIVE
  • Plan: Advanced
  • Run ID: 11fd005f-cd32-4544-87d0-83d294bfd3ee
📥 Commits

Reviewing files that changed from the base of the PR and between c7bf1c2 and 3f49b34.

📒 Files selected for processing: 1
  • .github/workflows/ci.yml

Included review availability: This review used your included allowance. Your plan provides up to 1 included review per hour; 0 remain after this review.

📜 Recent review details
⚠️ CI failures not shown inline: 36

GitHub Actions: ci / 0_Rust (seamctl).txt: ci: give dtolnay/rust-toolchain a valid toolchain input

Conclusion: failure

View job details

##[group]Run cargo fmt --manifest-path tools/seamctl/Cargo.toml --all -- --check
 �[36;1mcargo fmt --manifest-path tools/seamctl/Cargo.toml --all -- --check�[0m
 shell: /usr/bin/bash -e {0}
 env:
   CARGO_HOME: /home/runner/.cargo
   CARGO_INCREMENTAL: 0
   CARGO_TERM_COLOR: always
 ##[endgroup]
 Diff in /home/runner/work/seamstress/seamstress/tools/seamctl/src/graph.rs:21:
              continue;
          }
          let s = p.to_string_lossy();
 -        let is_candidate_dir = s.contains("/seams/records/") || (s.contains("/targets/") && s.contains("/seams/records/"));
 +        let is_candidate_dir = s.contains("/seams/records/")
 +            || (s.contains("/targets/") && s.contains("/seams/records/"));
          if !is_candidate_dir {
              continue;
          }
 Diff in /home/runner/work/seamstress/seamstress/tools/seamctl/src/graph.rs:50:
          let raw = std::fs::read_to_string(&f).with_context(|| format!("read {f}"))?;
          let rec: SeamRecord = serde_json::from_str(&raw).with_context(|| format!("decode {f}"))?;
 -        let a_idx = *node_map.entry(rec.side_a.clone()).or_insert_with(|| g.add_node(rec.side_a.clone()));
 -        let b_idx = *node_map.entry(rec.side_b.clone()).or_insert_with(|| g.add_node(rec.side_b.clone()));
 +        let a_idx = *node_map
 +            .entry(rec.side_a.clone())
 +            .or_insert_with(|| g.add_node(rec.side_a.clone()));
 +        let b_idx = *node_map
 +            .entry(rec.side_b.clone())
 +            .or_insert_with(|| g.add_node(rec.side_b.clone()));
          g.add_edge(a_idx, b_idx, rec.id.clone());
          seams.push(rec.id);
      }
 Diff in /home/runner/work/seamstress/seamstress/tools/seamctl/src/graph.rs:58:
      let components: Vec<&String> = g.node_weights().collect();
 -    let edges: Vec<serde_json::Value> = g.edge_indices().map(|ei| {
 -        let (a, b) = g.edge_endpoints(ei).unwrap();
 -        let id = &g[ei];
 -        json!({"from": g[a], "to": g[b], "seam": id})
 -   ...

GitHub Actions: ci / Rust (seamctl): ci: give dtolnay/rust-toolchain a valid toolchain input

Conclusion: failure

View job details

##[group]Run cargo fmt --manifest-path tools/seamctl/Cargo.toml --all -- --check
 �[36;1mcargo fmt --manifest-path tools/seamctl/Cargo.toml --all -- --check�[0m
 shell: /usr/bin/bash -e {0}
 env:
   CARGO_HOME: /home/runner/.cargo
   CARGO_INCREMENTAL: 0
   CARGO_TERM_COLOR: always
 ##[endgroup]
 Diff in /home/runner/work/seamstress/seamstress/tools/seamctl/src/graph.rs:21:
              continue;
          }
          let s = p.to_string_lossy();
 -        let is_candidate_dir = s.contains("/seams/records/") || (s.contains("/targets/") && s.contains("/seams/records/"));
 +        let is_candidate_dir = s.contains("/seams/records/")
 +            || (s.contains("/targets/") && s.contains("/seams/records/"));
          if !is_candidate_dir {
              continue;
          }
 Diff in /home/runner/work/seamstress/seamstress/tools/seamctl/src/graph.rs:50:
          let raw = std::fs::read_to_string(&f).with_context(|| format!("read {f}"))?;
          let rec: SeamRecord = serde_json::from_str(&raw).with_context(|| format!("decode {f}"))?;
 -        let a_idx = *node_map.entry(rec.side_a.clone()).or_insert_with(|| g.add_node(rec.side_a.clone()));
 -        let b_idx = *node_map.entry(rec.side_b.clone()).or_insert_with(|| g.add_node(rec.side_b.clone()));
 +        let a_idx = *node_map
 +            .entry(rec.side_a.clone())
 +            .or_insert_with(|| g.add_node(rec.side_a.clone()));
 +        let b_idx = *node_map
 +            .entry(rec.side_b.clone())
 +            .or_insert_with(|| g.add_node(rec.side_b.clone()));
          g.add_edge(a_idx, b_idx, rec.id.clone());
          seams.push(rec.id);
      }
 Diff in /home/runner/work/seamstress/seamstress/tools/seamctl/src/graph.rs:58:
      let components: Vec<&String> = g.node_weights().collect();
 -    let edges: Vec<serde_json::Value> = g.edge_indices().map(|ei| {
 -        let (a, b) = g.edge_endpoints(ei).unwrap();
 -        let id = &g[ei];
 -        json!({"from": g[a], "to": g[b], "seam": id})
 -   ...

GitHub Actions: Secret Scanner / 0_scan _ rust-secrets.txt: ci: give dtolnay/rust-toolchain a valid toolchain input

Conclusion: failure

View job details

##[group]GITHUB_TOKEN Permissions
 Contents: read
 Metadata: read
 ##[endgroup]
 Secret source: Actions
 Cache mode: write
 Using locked action versions from the workflow's lockfile
 Prepare workflow directory
 Prepare all required actions
 Getting action download info
 ##[error]Unable to resolve action `actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1`: invalid lockfile pin. Run `gh actions-lock` to update the lockfile

GitHub Actions: ci / 1_Elixir (seamstressd).txt: ci: give dtolnay/rust-toolchain a valid toolchain input

Conclusion: failure

View job details

##[group]Run cd services/seamstressd
 �[36;1mcd services/seamstressd�[0m
 �[36;1mmix deps.get�[0m
 shell: /usr/bin/bash -e {0}
 env:
   INSTALL_DIR_FOR_OTP: /home/runner/work/_temp/.setup-beam/otp
   INSTALL_DIR_FOR_ELIXIR: /home/runner/work/_temp/.setup-beam/elixir
 ##[endgroup]
     error: invalid call "run -e 'Seamstressd.Runner.validate!(".")'"
     │
  30 │       "seam.validate": ["run -e 'Seamstressd.Runner.validate!(".")'"]
     │                                                                 ^
     │
     └─ mix.exs:30:65: Seamstressd.MixProject.aliases/0
 ** (CompileError) mix.exs: cannot compile module Seamstressd.MixProject (errors have been logged)
 ##[error]Process completed with exit code 1.

GitHub Actions: Secret Scanner / scan _ rust-secrets: ci: give dtolnay/rust-toolchain a valid toolchain input

Conclusion: failure

View job details

##[group]GITHUB_TOKEN Permissions
 Contents: read
 Metadata: read
 ##[endgroup]
 Secret source: Actions
 Cache mode: write
 Using locked action versions from the workflow's lockfile
 Prepare workflow directory
 Prepare all required actions
 Getting action download info
 ##[error]Unable to resolve action `actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1`: invalid lockfile pin. Run `gh actions-lock` to update the lockfile

GitHub Actions: Secret Scanner / 1_scan _ shell-secrets.txt: ci: give dtolnay/rust-toolchain a valid toolchain input

Conclusion: failure

View job details

##[group]GITHUB_TOKEN Permissions
 Contents: read
 Metadata: read
 ##[endgroup]
 Secret source: Actions
 Cache mode: write
 Using locked action versions from the workflow's lockfile
 Prepare workflow directory
 Prepare all required actions
 Getting action download info
 ##[error]Unable to resolve action `actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1`: invalid lockfile pin. Run `gh actions-lock` to update the lockfile

GitHub Actions: Secret Scanner / scan _ shell-secrets: ci: give dtolnay/rust-toolchain a valid toolchain input

Conclusion: failure

View job details

##[group]GITHUB_TOKEN Permissions
 Contents: read
 Metadata: read
 ##[endgroup]
 Secret source: Actions
 Cache mode: write
 Using locked action versions from the workflow's lockfile
 Prepare workflow directory
 Prepare all required actions
 Getting action download info
 ##[error]Unable to resolve action `actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1`: invalid lockfile pin. Run `gh actions-lock` to update the lockfile

GitHub Actions: Secret Scanner / 2_scan _ gitleaks.txt: ci: give dtolnay/rust-toolchain a valid toolchain input

Conclusion: failure

View job details

##[group]GITHUB_TOKEN Permissions
 Contents: read
 Metadata: read
 ##[endgroup]
 Secret source: Actions
 Cache mode: write
 Using locked action versions from the workflow's lockfile
 Prepare workflow directory
 Prepare all required actions
 Getting action download info
 ##[error]Unable to resolve action `actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1`: invalid lockfile pin. Run `gh actions-lock` to update the lockfile

GitHub Actions: ci / Elixir (seamstressd): ci: give dtolnay/rust-toolchain a valid toolchain input

Conclusion: failure

View job details

##[group]Run cd services/seamstressd
 �[36;1mcd services/seamstressd�[0m
 �[36;1mmix deps.get�[0m
 shell: /usr/bin/bash -e {0}
 env:
   INSTALL_DIR_FOR_OTP: /home/runner/work/_temp/.setup-beam/otp
   INSTALL_DIR_FOR_ELIXIR: /home/runner/work/_temp/.setup-beam/elixir
 ##[endgroup]
     error: invalid call "run -e 'Seamstressd.Runner.validate!(".")'"
     │
  30 │       "seam.validate": ["run -e 'Seamstressd.Runner.validate!(".")'"]
     │                                                                 ^
     │
     └─ mix.exs:30:65: Seamstressd.MixProject.aliases/0
 ** (CompileError) mix.exs: cannot compile module Seamstressd.MixProject (errors have been logged)
 ##[error]Process completed with exit code 1.

GitHub Actions: Secret Scanner / scan _ gitleaks: ci: give dtolnay/rust-toolchain a valid toolchain input

Conclusion: failure

View job details

##[group]GITHUB_TOKEN Permissions
 Contents: read
 Metadata: read
 ##[endgroup]
 Secret source: Actions
 Cache mode: write
 Using locked action versions from the workflow's lockfile
 Prepare workflow directory
 Prepare all required actions
 Getting action download info
 ##[error]Unable to resolve action `actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1`: invalid lockfile pin. Run `gh actions-lock` to update the lockfile

GitHub Actions: Hypatia Security Scan / 0_hypatia _ Hypatia Neurosymbolic Analysis.txt: ci: give dtolnay/rust-toolchain a valid toolchain input

Conclusion: failure

View job details

##[group]GITHUB_TOKEN Permissions
 Actions: read
 Contents: read
 Metadata: read
 SecurityEvents: write
 ##[endgroup]
 Secret source: Actions
 Cache mode: write
 Using locked action versions from the workflow's lockfile
 Prepare workflow directory
 Prepare all required actions
 Getting action download info
 ##[error]lockfile verification did not produce a result for this action. Unable to resolve action `actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1`: invalid lockfile pin. Run `gh actions-lock` to update the lockfile. lockfile verification did not produce a result for this action. lockfile verification did not produce a result for this action. lockfile verification did not produce a result for this action

GitHub Actions: Hypatia Security Scan / hypatia _ Hypatia Neurosymbolic Analysis: ci: give dtolnay/rust-toolchain a valid toolchain input

Conclusion: failure

View job details

##[group]GITHUB_TOKEN Permissions
 Actions: read
 Contents: read
 Metadata: read
 SecurityEvents: write
 ##[endgroup]
 Secret source: Actions
 Cache mode: write
 Using locked action versions from the workflow's lockfile
 Prepare workflow directory
 Prepare all required actions
 Getting action download info
 ##[error]lockfile verification did not produce a result for this action. Unable to resolve action `actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1`: invalid lockfile pin. Run `gh actions-lock` to update the lockfile. lockfile verification did not produce a result for this action. lockfile verification did not produce a result for this action. lockfile verification did not produce a result for this action

GitHub Actions: Governance / 1_governance _ Check Workflow Staleness.txt: ci: give dtolnay/rust-toolchain a valid toolchain input

Conclusion: failure

View job details

##[group]GITHUB_TOKEN Permissions
 Actions: read
 Contents: read
 Metadata: read
 ##[endgroup]
 Secret source: Actions
 Cache mode: write
 Using locked action versions from the workflow's lockfile
 Prepare workflow directory
 Prepare all required actions
 Getting action download info
 ##[error]Unable to resolve action `actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1`: invalid lockfile pin. Run `gh actions-lock` to update the lockfile

GitHub Actions: Governance / governance _ Check Workflow Staleness: ci: give dtolnay/rust-toolchain a valid toolchain input

Conclusion: failure

View job details

##[group]GITHUB_TOKEN Permissions
 Actions: read
 Contents: read
 Metadata: read
 ##[endgroup]
 Secret source: Actions
 Cache mode: write
 Using locked action versions from the workflow's lockfile
 Prepare workflow directory
 Prepare all required actions
 Getting action download info
 ##[error]Unable to resolve action `actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1`: invalid lockfile pin. Run `gh actions-lock` to update the lockfile

GitHub Actions: Governance / 2_governance _ Well-Known (RFC 9116 + RSR).txt: ci: give dtolnay/rust-toolchain a valid toolchain input

Conclusion: failure

View job details

##[group]GITHUB_TOKEN Permissions
 Contents: read
 Metadata: read
 ##[endgroup]
 Secret source: Actions
 Cache mode: write
 Using locked action versions from the workflow's lockfile
 Prepare workflow directory
 Prepare all required actions
 Getting action download info
 ##[error]Unable to resolve action `actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1`: invalid lockfile pin. Run `gh actions-lock` to update the lockfile

GitHub Actions: Governance / governance _ Well-Known (RFC 9116 + RSR): ci: give dtolnay/rust-toolchain a valid toolchain input

Conclusion: failure

View job details

##[group]GITHUB_TOKEN Permissions
 Contents: read
 Metadata: read
 ##[endgroup]
 Secret source: Actions
 Cache mode: write
 Using locked action versions from the workflow's lockfile
 Prepare workflow directory
 Prepare all required actions
 Getting action download info
 ##[error]Unable to resolve action `actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1`: invalid lockfile pin. Run `gh actions-lock` to update the lockfile

GitHub Actions: Governance / 3_governance _ Exemption ratchet.txt: ci: give dtolnay/rust-toolchain a valid toolchain input

Conclusion: failure

View job details

##[group]GITHUB_TOKEN Permissions
 Contents: read
 Metadata: read
 ##[endgroup]
 Secret source: Actions
 Cache mode: write
 Using locked action versions from the workflow's lockfile
 Prepare workflow directory
 Prepare all required actions
 Getting action download info
 ##[error]Unable to resolve action `actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1`: invalid lockfile pin. Run `gh actions-lock` to update the lockfile

GitHub Actions: Governance / governance _ Exemption ratchet: ci: give dtolnay/rust-toolchain a valid toolchain input

Conclusion: failure

View job details

##[group]GITHUB_TOKEN Permissions
 Contents: read
 Metadata: read
 ##[endgroup]
 Secret source: Actions
 Cache mode: write
 Using locked action versions from the workflow's lockfile
 Prepare workflow directory
 Prepare all required actions
 Getting action download info
 ##[error]Unable to resolve action `actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1`: invalid lockfile pin. Run `gh actions-lock` to update the lockfile

GitHub Actions: Governance / 4_governance _ Workflow security linter.txt: ci: give dtolnay/rust-toolchain a valid toolchain input

Conclusion: failure

View job details

##[group]GITHUB_TOKEN Permissions
 Contents: read
 Metadata: read
 ##[endgroup]
 Secret source: Actions
 Cache mode: write
 Using locked action versions from the workflow's lockfile
 Prepare workflow directory
 Prepare all required actions
 Getting action download info
 ##[error]Unable to resolve action `actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1`: invalid lockfile pin. Run `gh actions-lock` to update the lockfile

GitHub Actions: Governance / governance _ Workflow security linter: ci: give dtolnay/rust-toolchain a valid toolchain input

Conclusion: failure

View job details

##[group]GITHUB_TOKEN Permissions
 Contents: read
 Metadata: read
 ##[endgroup]
 Secret source: Actions
 Cache mode: write
 Using locked action versions from the workflow's lockfile
 Prepare workflow directory
 Prepare all required actions
 Getting action download info
 ##[error]Unable to resolve action `actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1`: invalid lockfile pin. Run `gh actions-lock` to update the lockfile

GitHub Actions: Governance / 5_governance _ Debt ratchet.txt: ci: give dtolnay/rust-toolchain a valid toolchain input

Conclusion: failure

View job details

##[group]GITHUB_TOKEN Permissions
 Contents: read
 Metadata: read
 ##[endgroup]
 Secret source: Actions
 Cache mode: write
 Using locked action versions from the workflow's lockfile
 Prepare workflow directory
 Prepare all required actions
 Getting action download info
 ##[error]Unable to resolve action `actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1`: invalid lockfile pin. Run `gh actions-lock` to update the lockfile

GitHub Actions: Governance / governance _ Debt ratchet: ci: give dtolnay/rust-toolchain a valid toolchain input

Conclusion: failure

View job details

##[group]GITHUB_TOKEN Permissions
 Contents: read
 Metadata: read
 ##[endgroup]
 Secret source: Actions
 Cache mode: write
 Using locked action versions from the workflow's lockfile
 Prepare workflow directory
 Prepare all required actions
 Getting action download info
 ##[error]Unable to resolve action `actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1`: invalid lockfile pin. Run `gh actions-lock` to update the lockfile

GitHub Actions: Governance / 6_governance _ Trusted-base reduction policy.txt: ci: give dtolnay/rust-toolchain a valid toolchain input

Conclusion: failure

View job details

##[group]GITHUB_TOKEN Permissions
 Contents: read
 Metadata: read
 ##[endgroup]
 Secret source: Actions
 Cache mode: write
 Using locked action versions from the workflow's lockfile
 Prepare workflow directory
 Prepare all required actions
 Getting action download info
 ##[error]Unable to resolve action `actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1`: invalid lockfile pin. Run `gh actions-lock` to update the lockfile

GitHub Actions: Governance / governance _ Trusted-base reduction policy: ci: give dtolnay/rust-toolchain a valid toolchain input

Conclusion: failure

View job details

##[group]GITHUB_TOKEN Permissions
 Contents: read
 Metadata: read
 ##[endgroup]
 Secret source: Actions
 Cache mode: write
 Using locked action versions from the workflow's lockfile
 Prepare workflow directory
 Prepare all required actions
 Getting action download info
 ##[error]Unable to resolve action `actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1`: invalid lockfile pin. Run `gh actions-lock` to update the lockfile

GitHub Actions: Governance / 7_governance _ Licence consistency.txt: ci: give dtolnay/rust-toolchain a valid toolchain input

Conclusion: failure

View job details

##[group]GITHUB_TOKEN Permissions
 Contents: read
 Metadata: read
 ##[endgroup]
 Secret source: Actions
 Cache mode: write
 Using locked action versions from the workflow's lockfile
 Prepare workflow directory
 Prepare all required actions
 Getting action download info
 ##[error]Unable to resolve action `actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1`: invalid lockfile pin. Run `gh actions-lock` to update the lockfile

GitHub Actions: Governance / governance _ Licence consistency: ci: give dtolnay/rust-toolchain a valid toolchain input

Conclusion: failure

View job details

##[group]GITHUB_TOKEN Permissions
 Contents: read
 Metadata: read
 ##[endgroup]
 Secret source: Actions
 Cache mode: write
 Using locked action versions from the workflow's lockfile
 Prepare workflow directory
 Prepare all required actions
 Getting action download info
 ##[error]Unable to resolve action `actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1`: invalid lockfile pin. Run `gh actions-lock` to update the lockfile

GitHub Actions: Governance / 8_governance _ Security policy checks.txt: ci: give dtolnay/rust-toolchain a valid toolchain input

Conclusion: failure

View job details

##[group]GITHUB_TOKEN Permissions
 Contents: read
 Metadata: read
 ##[endgroup]
 Secret source: Actions
 Cache mode: write
 Using locked action versions from the workflow's lockfile
 Prepare workflow directory
 Prepare all required actions
 Getting action download info
 ##[error]Unable to resolve action `actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1`: invalid lockfile pin. Run `gh actions-lock` to update the lockfile

GitHub Actions: Governance / governance _ Security policy checks: ci: give dtolnay/rust-toolchain a valid toolchain input

Conclusion: failure

View job details

##[group]GITHUB_TOKEN Permissions
 Contents: read
 Metadata: read
 ##[endgroup]
 Secret source: Actions
 Cache mode: write
 Using locked action versions from the workflow's lockfile
 Prepare workflow directory
 Prepare all required actions
 Getting action download info
 ##[error]Unable to resolve action `actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1`: invalid lockfile pin. Run `gh actions-lock` to update the lockfile

GitHub Actions: Governance / 9_governance _ Language _ package anti-pattern policy.txt: ci: give dtolnay/rust-toolchain a valid toolchain input

Conclusion: failure

View job details

##[group]GITHUB_TOKEN Permissions
 Contents: read
 Metadata: read
 ##[endgroup]
 Secret source: Actions
 Cache mode: write
 Using locked action versions from the workflow's lockfile
 Prepare workflow directory
 Prepare all required actions
 Getting action download info
 ##[error]Unable to resolve action `actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1`: invalid lockfile pin. Run `gh actions-lock` to update the lockfile. lockfile verification did not produce a result for this action

GitHub Actions: Governance / governance _ Language _ package anti-pattern policy: ci: give dtolnay/rust-toolchain a valid toolchain input

Conclusion: failure

View job details

##[group]GITHUB_TOKEN Permissions
 Contents: read
 Metadata: read
 ##[endgroup]
 Secret source: Actions
 Cache mode: write
 Using locked action versions from the workflow's lockfile
 Prepare workflow directory
 Prepare all required actions
 Getting action download info
 ##[error]Unable to resolve action `actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1`: invalid lockfile pin. Run `gh actions-lock` to update the lockfile. lockfile verification did not produce a result for this action

GitHub Actions: Governance / 10_governance _ Allowlist Preflight.txt: ci: give dtolnay/rust-toolchain a valid toolchain input

Conclusion: failure

View job details

##[group]GITHUB_TOKEN Permissions
 Contents: read
 Metadata: read
 ##[endgroup]
 Secret source: Actions
 Cache mode: write
 Using locked action versions from the workflow's lockfile
 Prepare workflow directory
 Prepare all required actions
 Getting action download info
 ##[error]Unable to resolve action `actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1`: invalid lockfile pin. Run `gh actions-lock` to update the lockfile

GitHub Actions: Governance / governance _ Allowlist Preflight: ci: give dtolnay/rust-toolchain a valid toolchain input

Conclusion: failure

View job details

##[group]GITHUB_TOKEN Permissions
 Contents: read
 Metadata: read
 ##[endgroup]
 Secret source: Actions
 Cache mode: write
 Using locked action versions from the workflow's lockfile
 Prepare workflow directory
 Prepare all required actions
 Getting action download info
 ##[error]Unable to resolve action `actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1`: invalid lockfile pin. Run `gh actions-lock` to update the lockfile

GitHub Actions: Governance / 11_governance _ Code quality + docs.txt: ci: give dtolnay/rust-toolchain a valid toolchain input

Conclusion: failure

View job details

##[group]GITHUB_TOKEN Permissions
 Contents: read
 Metadata: read
 ##[endgroup]
 Secret source: Actions
 Cache mode: write
 Using locked action versions from the workflow's lockfile
 Prepare workflow directory
 Prepare all required actions
 Getting action download info
 ##[error]Unable to resolve action `actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1`: invalid lockfile pin. Run `gh actions-lock` to update the lockfile. lockfile verification did not produce a result for this action

GitHub Actions: Governance / governance _ Code quality + docs: ci: give dtolnay/rust-toolchain a valid toolchain input

Conclusion: failure

View job details

##[group]GITHUB_TOKEN Permissions
 Contents: read
 Metadata: read
 ##[endgroup]
 Secret source: Actions
 Cache mode: write
 Using locked action versions from the workflow's lockfile
 Prepare workflow directory
 Prepare all required actions
 Getting action download info
 ##[error]Unable to resolve action `actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1`: invalid lockfile pin. Run `gh actions-lock` to update the lockfile. lockfile verification did not produce a result for this action

GitHub Actions: Governance / 12_governance _ Guix packaging policy (Nix retired).txt: ci: give dtolnay/rust-toolchain a valid toolchain input

Conclusion: failure

View job details

##[group]GITHUB_TOKEN Permissions
 Contents: read
 Metadata: read
 ##[endgroup]
 Secret source: Actions
 Cache mode: write
 Using locked action versions from the workflow's lockfile
 Prepare workflow directory
 Prepare all required actions
 Getting action download info
 ##[error]Unable to resolve action `actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1`: invalid lockfile pin. Run `gh actions-lock` to update the lockfile

GitHub Actions: Governance / governance _ Guix packaging policy (Nix retired): ci: give dtolnay/rust-toolchain a valid toolchain input

Conclusion: failure

View job details

##[group]GITHUB_TOKEN Permissions
 Contents: read
 Metadata: read
 ##[endgroup]
 Secret source: Actions
 Cache mode: write
 Using locked action versions from the workflow's lockfile
 Prepare workflow directory
 Prepare all required actions
 Getting action download info
 ##[error]Unable to resolve action `actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1`: invalid lockfile pin. Run `gh actions-lock` to update the lockfile
🔇 Additional comments: 1
.github/workflows/ci.yml: 1

25-25: LGTM!

📝 Summary

Summary by CodeRabbit

  • Chores
    • Updated the Rust CI job to use the stable toolchain.

The Rust CI job now selects the stable toolchain instead of the v1 toolchain.

Changes: Rust CI toolchain

Layer / File(s) Summary
Select stable Rust
.github/workflows/ci.yml		 The Rust CI job now selects stable instead of v1.

Priority: ⬇️ Low

Estimated code review effort: 2 (Simple) | ~5 minutes

Change: Bug fix

Merge Risk: ⚪ Minimal · up to 3f49b

CI now installs stable Rust before running the same checks. The action accepts this input, and no concrete regression is indicated; the change is ready for normal CI.

Security architecture risk: ⚪ Minimal · up to 3f49b

The change corrects Rust toolchain selection without expanding CI permissions or adding credentials, deployment steps, or privileged triggers. No material security risk was identified in this change.

Retained concerns
No architecture-level concerns identified.

Security review details

Security Blast Radius

  • inferred — Correcting installation enables the existing Rust build, test, validation, and caching sequence. The directly affected execution surface is this CI job and its configured Cargo caches; the job declares no deployment step.

Trust Boundaries and Controls

  • observed — The workflow accepts pull requests targeting main and pushes to main. The Rust job runs on ubuntu-latest with contents: read and no explicit secret inputs or write permissions. These controls predate the change; the PR does not switch to a privileged pull_request_target trigger.
Pre-merge checks: Passed 5
Check name Status Explanation
Description check Passed The description clearly explains the invalid Rust toolchain input and the change from v1 to stable. It also records the reported validation results.
Title check Passed The title clearly identifies the CI change and the need to provide a valid toolchain input to dtolnay/rust-toolchain.
Docstring Coverage Passed No functions found in the changed files to evaluate docstring coverage. Skipping docstring coverage check. Docstring coverage is scoped to functions touched by this diff. Analyzed 0 functions across 0…
Linked Issues check Passed Check skipped because no linked issues were found for this pull request.
Out of Scope Changes check Passed Check skipped because no linked issues were found for this pull request.
Full details: Docstring Coverage

Explanation

No functions found in the changed files to evaluate docstring coverage. Skipping docstring coverage check. Docstring coverage is scoped to functions touched by this diff. Analyzed 0 functions across 0 files. (1 skipped: 1 unsupported.)

✨ Finishing Touches
🛠️ Fix failing CI checks
  • Commit to this branch
  • Create a new PR
  • Autofix · Keep fixing CodeRabbit findings and required CI, and resolving merge conflicts

Warning

CI annotation context is incomplete: annotation collection unavailable or limited

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

Comment @coderabbitai help to get the list of available commands.

@hyperpolymath
hyperpolymath enabled auto-merge (squash) October 19, 2026 17:34
@claude
style: cargo fmt seamctl
c4f1948 
Rust (seamctl) never got far enough to report rustfmt drift: its
toolchain step failed first. Mechanical `cargo fmt` only, no behaviour
change.

Co-Authored-By: Claude Sonnet 5.5 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_0132Cdz3iwk2QGKv2sUhhsye
@coderabbitai

coderabbitai Bot commented Oct 19, 2026 •
edited
Loading

Copy link
Copy Markdown
Contributor

✅ Coding Agent task started: View task and status

The task will inspect the CI failures, validate its fix, and commit the fix to this branch automatically.

Note: Fixing CI failures is a beta feature and may encounter errors. Expect some limitations and changes as we gather feedback and continue to improve it.

⏭️ Checks skipped: 2 · already failing on `main` (not caused by this PR)
  • GitHub Actions: Hypatia Security Scan / 0_hypatia _ Hypatia Neurosymbolic Analysis.txt
  • GitHub Actions: Secret Scanner / 1_scan _ rust-secrets.txt

@sonarqubecloud

sonarqubecloud Bot commented Oct 19, 2026

Copy link
Copy Markdown

Quality Gate Passed Quality Gate passed

Issues
0 New issues
0 Accepted issues

Measures
0 Security Hotspots
0.0% Coverage on New Code
0.0% Duplication on New Code

See analysis details on SonarQube Cloud

@hyperpolymath
hyperpolymath enabled auto-merge (squash) October 20, 2026 13:10
@hyperpolymath
hyperpolymath merged commit bd5220a into main Oct 20, 2026
15 of 31 checks passed
@hyperpolymath
hyperpolymath deleted the ci/rust-toolchain-input branch October 20, 2026 13:11
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

None yet

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

2 participants

@hyperpolymath @claude