From d35a44cbb1d6d56c2c7307fa80fc644ecec92b70 Mon Sep 17 00:00:00 2001 From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com> Date: Sun, 25 Oct 2026 00:44:37 +0000 Subject: [PATCH] build(deps): bump the actions group across 1 directory with 5 updates Bumps the actions group with 5 updates in the / directory: | Package | From | To | | --- | --- | --- | | [CodSpeedHQ/action](https://github.com/codspeedhq/action) | `5.4.2` | `5.6.0` | | [step-security/harden-runner](https://github.com/step-security/harden-runner) | `2.22.1` | `2.22.2` | | [jdx/mise-action](https://github.com/jdx/mise-action) | `5.1.1` | `5.2.2` | | [elide-dev/toolchain/action](https://github.com/elide-dev/toolchain) | `2026.10.0` | `2026.10.1` | | [actions/setup-python](https://github.com/actions/setup-python) | `7.0.0` | `7.1.0` | Updates `CodSpeedHQ/action` from 5.4.2 to 5.6.0 - [Release notes](https://github.com/codspeedhq/action/releases) - [Changelog](https://github.com/CodSpeedHQ/action/blob/main/CHANGELOG.md) - [Commits](https://github.com/codspeedhq/action/compare/f842b9a3ffe213dbb81768fd7f7eeb4dfcf1c369...78102a468f96d8e0ccb92d0ec49425753fc42062) Updates `step-security/harden-runner` from 2.22.1 to 2.22.2 - [Release notes](https://github.com/step-security/harden-runner/releases) - [Commits](https://github.com/step-security/harden-runner/compare/ccd8616d44fd3846e67624a50d5aad6d37bf2d25...dc2769abcc0fcfbadfc1df54081c1608579ef6b2) Updates `jdx/mise-action` from 5.1.1 to 5.2.2 - [Release notes](https://github.com/jdx/mise-action/releases) - [Changelog](https://github.com/jdx/mise-action/blob/main/CHANGELOG.md) - [Commits](https://github.com/jdx/mise-action/compare/2d8d4cafcbd33be2ea37d2b6f5ad595363d1f1ca...8418fedb1110381a0d3ba51a7a415d7c1b884550) Updates `elide-dev/toolchain/action` from 2026.10.0 to 2026.10.1 - [Release notes](https://github.com/elide-dev/toolchain/releases) - [Commits](https://github.com/elide-dev/toolchain/compare/53b07cdc93ca8d9ba1be65725aa3362e1d4c1c09...171eb7cde379e17822e042cfbda26c9740c10b03) Updates `actions/setup-python` from 7.0.0 to 7.1.0 - [Release notes](https://github.com/actions/setup-python/releases) - [Commits](https://github.com/actions/setup-python/compare/5fda3b95a4ea91299a34e894583c3862153e4b97...6d4fd22b20465ccc0f7354476588e8df7c9ca0e0) --- updated-dependencies: - dependency-name: CodSpeedHQ/action dependency-version: 5.6.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: actions - dependency-name: step-security/harden-runner dependency-version: 2.22.2 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: actions - dependency-name: jdx/mise-action dependency-version: 5.2.2 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: actions - dependency-name: elide-dev/toolchain/action dependency-version: 2026.10.1 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: actions - dependency-name: actions/setup-python dependency-version: 7.1.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: actions ... Signed-off-by: dependabot[bot] --- .github/workflows/check.bench.yml | 4 ++-- .github/workflows/check.jvm.yml | 4 ++-- .github/workflows/check.native-image.yml | 2 +- .github/workflows/check.rust.yml | 6 +++--- .github/workflows/job.build.yml | 4 ++-- .github/workflows/job.central.yml | 2 +- 6 files changed, 11 insertions(+), 11 deletions(-) diff --git a/.github/workflows/check.bench.yml b/.github/workflows/check.bench.yml index 4d3b706..637311b 100644 --- a/.github/workflows/check.bench.yml +++ b/.github/workflows/check.bench.yml @@ -22,7 +22,7 @@ jobs: - name: Build deterministic CPU benchmarks run: cargo codspeed build -p bemo --bench buffers --bench handles --bench http --locked -m simulation - name: Track CPU performance - uses: CodSpeedHQ/action@f842b9a3ffe213dbb81768fd7f7eeb4dfcf1c369 # v5.4.2 + uses: CodSpeedHQ/action@78102a468f96d8e0ccb92d0ec49425753fc42062 # v5.6.0 with: mode: simulation runner-version: '5.2.1' @@ -106,7 +106,7 @@ jobs: - run: cargo codspeed build -p bemo --bench tls --locked -m walltime - run: make bench-prepare - name: Track TLS and end-to-end wall time - uses: CodSpeedHQ/action@f842b9a3ffe213dbb81768fd7f7eeb4dfcf1c369 # v5.4.2 + uses: CodSpeedHQ/action@78102a468f96d8e0ccb92d0ec49425753fc42062 # v5.6.0 with: mode: walltime runner-version: '5.2.1' diff --git a/.github/workflows/check.jvm.yml b/.github/workflows/check.jvm.yml index 5413669..e3dafb8 100644 --- a/.github/workflows/check.jvm.yml +++ b/.github/workflows/check.jvm.yml @@ -16,14 +16,14 @@ jobs: steps: - name: Harden runner if: runner.os == 'Linux' - uses: step-security/harden-runner@ccd8616d44fd3846e67624a50d5aad6d37bf2d25 # v2.22.1 + uses: step-security/harden-runner@dc2769abcc0fcfbadfc1df54081c1608579ef6b2 # v2.22.2 with: egress-policy: audit - name: Checkout uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 with: persist-credentials: false - - uses: jdx/mise-action@2d8d4cafcbd33be2ea37d2b6f5ad595363d1f1ca # v5.1.1 + - uses: jdx/mise-action@8418fedb1110381a0d3ba51a7a415d7c1b884550 # v5.2.2 with: version: '2026.9.10' # Keep the stock JVM test matrix authoritative after Mise's development JDK. diff --git a/.github/workflows/check.native-image.yml b/.github/workflows/check.native-image.yml index 0da9cdb..c2e3a5e 100644 --- a/.github/workflows/check.native-image.yml +++ b/.github/workflows/check.native-image.yml @@ -10,7 +10,7 @@ jobs: steps: - name: Harden runner if: runner.os == 'Linux' - uses: step-security/harden-runner@ccd8616d44fd3846e67624a50d5aad6d37bf2d25 # v2.22.1 + uses: step-security/harden-runner@dc2769abcc0fcfbadfc1df54081c1608579ef6b2 # v2.22.2 with: egress-policy: audit - name: Checkout diff --git a/.github/workflows/check.rust.yml b/.github/workflows/check.rust.yml index fdce2b1..5c5694b 100644 --- a/.github/workflows/check.rust.yml +++ b/.github/workflows/check.rust.yml @@ -15,7 +15,7 @@ jobs: steps: - name: Harden runner if: runner.os == 'Linux' - uses: step-security/harden-runner@ccd8616d44fd3846e67624a50d5aad6d37bf2d25 # v2.22.1 + uses: step-security/harden-runner@dc2769abcc0fcfbadfc1df54081c1608579ef6b2 # v2.22.2 with: egress-policy: audit - name: Checkout @@ -29,7 +29,7 @@ jobs: - name: Check generated C exports if: runner.os == 'Linux' run: python3 tools/generate_exports.py --check - - uses: jdx/mise-action@2d8d4cafcbd33be2ea37d2b6f5ad595363d1f1ca # v5.1.1 + - uses: jdx/mise-action@8418fedb1110381a0d3ba51a7a415d7c1b884550 # v5.2.2 if: runner.os == 'Linux' with: version: '2026.9.10' @@ -73,7 +73,7 @@ jobs: timeout-minutes: 45 steps: - name: Harden runner - uses: step-security/harden-runner@ccd8616d44fd3846e67624a50d5aad6d37bf2d25 # v2.22.1 + uses: step-security/harden-runner@dc2769abcc0fcfbadfc1df54081c1608579ef6b2 # v2.22.2 with: egress-policy: audit - name: Checkout diff --git a/.github/workflows/job.build.yml b/.github/workflows/job.build.yml index 5f46402..916f8a9 100644 --- a/.github/workflows/job.build.yml +++ b/.github/workflows/job.build.yml @@ -13,7 +13,7 @@ jobs: steps: - name: Harden runner if: runner.os == 'Linux' - uses: step-security/harden-runner@ccd8616d44fd3846e67624a50d5aad6d37bf2d25 # v2.22.1 + uses: step-security/harden-runner@dc2769abcc0fcfbadfc1df54081c1608579ef6b2 # v2.22.2 with: egress-policy: audit - name: Checkout @@ -26,7 +26,7 @@ jobs: run: python3 -c 'import json; print("version=" + json.load(open("tools/versions.json"))["llvm"]["toolchain_version"])' >> "$GITHUB_OUTPUT" - name: Install Elide native toolchain id: native-toolchain - uses: elide-dev/toolchain/action@53b07cdc93ca8d9ba1be65725aa3362e1d4c1c09 + uses: elide-dev/toolchain/action@171eb7cde379e17822e042cfbda26c9740c10b03 with: version: ${{ steps.native-version.outputs.version }} target: ${{ runner.os == 'Linux' && 'x86_64-unknown-linux-gnu' || 'arm64-apple-darwin' }} diff --git a/.github/workflows/job.central.yml b/.github/workflows/job.central.yml index 0cb88bc..e54708a 100644 --- a/.github/workflows/job.central.yml +++ b/.github/workflows/job.central.yml @@ -21,7 +21,7 @@ jobs: - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 with: persist-credentials: false - - uses: actions/setup-python@5fda3b95a4ea91299a34e894583c3862153e4b97 # v7.0.0 + - uses: actions/setup-python@6d4fd22b20465ccc0f7354476588e8df7c9ca0e0 # v7.1.0 with: python-version: '3.13' - uses: sigstore/cosign-installer@6f9f17788090df1f26f669e9d70d6ae9567deba6 # v4.1.2