Skip to content
This repository was archived by the owner on Oct 27, 2026. It is now read-only.

ci: pin upstream workflows and update TLS root stores #9

Closed
samuelvanderwaal wants to merge 2 commits into from
Closed

ci: pin upstream workflows and update TLS root stores #9

Show file tree
Hide file tree
Changes from all commits
Commits
Show all changes
2 commits
Select commit Hold shift + click to select a range
f71cc72
ci: pin solana-program/actions workflows to a SHA and guard publish jobs
samuelvanderwaal Oct 22, 2026
59e886b
deps: update webpki-roots and rustls-webpki root stores
samuelvanderwaal Oct 22, 2026
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
5 changes: 5 additions & 0 deletions .github/dependabot.yml
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -5,6 +5,11 @@

version: 2
updates:
- package-ecosystem: github-actions
directory: "/"
schedule:
interval: weekly
open-pull-requests-limit: 6
- package-ecosystem: cargo
directory: "/"
schedule:
Expand Down
4 changes: 3 additions & 1 deletion .github/workflows/main.yml
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -42,7 +42,9 @@ jobs:

main:
needs: set_env
uses: solana-program/actions/.github/workflows/main.yml@main
# Pinned to a reviewed commit of the upstream reusable workflow; Dependabot
# (github-actions ecosystem) proposes bumps.
uses: solana-program/actions/.github/workflows/main.yml@2db12a00105e5b260ac43746b69df1658a5dca24 # main 2026-10-02
with:
js-packages: ${{ needs.set_env.outputs.JS_PACKAGES }}
sbpf-program-packages: ${{ needs.set_env.outputs.SBPF_PROGRAM_PACKAGES }}
Expand Down
6 changes: 5 additions & 1 deletion .github/workflows/publish-js.yml
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -55,7 +55,11 @@ jobs:

main:
needs: set_env
uses: solana-program/actions/.github/workflows/publish-js.yml@main
# Only publish from the canonical repository on `main`.
if: github.repository == 'Sphere-Foundation/stake' && github.ref == 'refs/heads/main'
# Pinned to a reviewed commit of the upstream reusable workflow; Dependabot
# (github-actions ecosystem) proposes bumps.
uses: solana-program/actions/.github/workflows/publish-js.yml@2db12a00105e5b260ac43746b69df1658a5dca24 # main 2026-10-02
with:
sbpf-program-packages: "program"
solana-cli-version: ${{ needs.set_env.outputs.SOLANA_CLI_VERSION }}
Expand Down
6 changes: 5 additions & 1 deletion .github/workflows/publish-rust.yml
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -64,7 +64,11 @@ jobs:

main:
needs: set_env
uses: solana-program/actions/.github/workflows/publish-rust.yml@main
# Only publish from the canonical repository on `main`.
if: github.repository == 'Sphere-Foundation/stake' && github.ref == 'refs/heads/main'
# Pinned to a reviewed commit of the upstream reusable workflow; Dependabot
# (github-actions ecosystem) proposes bumps.
uses: solana-program/actions/.github/workflows/publish-rust.yml@2db12a00105e5b260ac43746b69df1658a5dca24 # main 2026-10-02
with:
sbpf-program-packages: "program"
solana-cli-version: ${{ needs.set_env.outputs.SOLANA_CLI_VERSION }}
Expand Down
31 changes: 20 additions & 11 deletions Cargo.lock
View file
Open in desktop

Some generated files are not rendered by default. Learn more about how customized files appear on GitHub.

Loading