From 8df3fd46a7a972ebfaadb884b59bc56427086afa Mon Sep 17 00:00:00 2001 From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com> Date: Tue, 13 Oct 2026 07:30:53 +0000 Subject: [PATCH] deps(actions): bump the actions group with 4 updates Bumps the actions group with 4 updates: [gradle/actions/setup-gradle](https://github.com/gradle/actions), [dtolnay/rust-toolchain](https://github.com/dtolnay/rust-toolchain), [taiki-e/install-action](https://github.com/taiki-e/install-action) and [gradle/actions/wrapper-validation](https://github.com/gradle/actions). Updates `gradle/actions/setup-gradle` from 6.3.0 to 6.4.0 - [Release notes](https://github.com/gradle/actions/releases) - [Commits](https://github.com/gradle/actions/compare/9c971963bec38e04b3d30dcc455b5382be2fdbfb...3f5f9adaf7d9fecd50b5935e54106014257a94e6) Updates `dtolnay/rust-toolchain` from 7e38f4b43b4db5c8dd498af069a4f6196df1d067 to e2a55d2ffb04f378e9626c28d38b36d230d1e12f - [Release notes](https://github.com/dtolnay/rust-toolchain/releases) - [Commits](https://github.com/dtolnay/rust-toolchain/compare/7e38f4b43b4db5c8dd498af069a4f6196df1d067...e2a55d2ffb04f378e9626c28d38b36d230d1e12f) Updates `taiki-e/install-action` from 2.87.20 to 2.87.23 - [Release notes](https://github.com/taiki-e/install-action/releases) - [Changelog](https://github.com/taiki-e/install-action/blob/main/CHANGELOG.md) - [Commits](https://github.com/taiki-e/install-action/compare/9983c65e42da123ff25d1f78505eb6de315aa172...861a07ce7084f55488e375df125cdc99bba60eb7) Updates `gradle/actions/wrapper-validation` from 6.3.0 to 6.4.0 - [Release notes](https://github.com/gradle/actions/releases) - [Commits](https://github.com/gradle/actions/compare/9c971963bec38e04b3d30dcc455b5382be2fdbfb...3f5f9adaf7d9fecd50b5935e54106014257a94e6) --- updated-dependencies: - dependency-name: gradle/actions/setup-gradle dependency-version: 6.4.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: actions - dependency-name: dtolnay/rust-toolchain dependency-version: e2a55d2ffb04f378e9626c28d38b36d230d1e12f dependency-type: direct:production dependency-group: actions - dependency-name: taiki-e/install-action dependency-version: 2.87.23 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: actions - dependency-name: gradle/actions/wrapper-validation dependency-version: 6.4.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: actions ... Signed-off-by: dependabot[bot] --- .github/workflows/codeql.yml | 4 ++-- .github/workflows/live-canary.yml | 2 +- .github/workflows/release-kotlin.yml | 6 +++--- .github/workflows/release-rust.yml | 8 ++++---- .github/workflows/security.yml | 6 +++--- .github/workflows/test.yml | 8 ++++---- 6 files changed, 17 insertions(+), 17 deletions(-) diff --git a/.github/workflows/codeql.yml b/.github/workflows/codeql.yml index a878c3837..aaa2a8451 100644 --- a/.github/workflows/codeql.yml +++ b/.github/workflows/codeql.yml @@ -131,7 +131,7 @@ jobs: - name: Setup Gradle if: matrix.language == 'java-kotlin' - uses: gradle/actions/setup-gradle@9c971963bec38e04b3d30dcc455b5382be2fdbfb # v6.3.0 + uses: gradle/actions/setup-gradle@3f5f9adaf7d9fecd50b5935e54106014257a94e6 # v6.4.0 with: cache-provider: basic @@ -140,7 +140,7 @@ jobs: # Pinned to the same stable the test job uses. - name: Set up Rust if: matrix.language == 'rust' - uses: dtolnay/rust-toolchain@7e38f4b43b4db5c8dd498af069a4f6196df1d067 # upstream moves its only tag, v1 + uses: dtolnay/rust-toolchain@e2a55d2ffb04f378e9626c28d38b36d230d1e12f # upstream moves its only tag, v1 with: toolchain: '1.98.1' diff --git a/.github/workflows/live-canary.yml b/.github/workflows/live-canary.yml index 8a198b6bb..cd9c89526 100644 --- a/.github/workflows/live-canary.yml +++ b/.github/workflows/live-canary.yml @@ -109,7 +109,7 @@ jobs: - name: Setup Gradle if: steps.secrets.outputs.configured == 'true' - uses: gradle/actions/setup-gradle@9c971963bec38e04b3d30dcc455b5382be2fdbfb # v6.3.0 + uses: gradle/actions/setup-gradle@3f5f9adaf7d9fecd50b5935e54106014257a94e6 # v6.4.0 with: cache-provider: basic diff --git a/.github/workflows/release-kotlin.yml b/.github/workflows/release-kotlin.yml index adf894234..5c6edfbaa 100644 --- a/.github/workflows/release-kotlin.yml +++ b/.github/workflows/release-kotlin.yml @@ -38,7 +38,7 @@ jobs: java-version: '17' - name: Setup Gradle - uses: gradle/actions/setup-gradle@9c971963bec38e04b3d30dcc455b5382be2fdbfb # v6.3.0 + uses: gradle/actions/setup-gradle@3f5f9adaf7d9fecd50b5935e54106014257a94e6 # v6.4.0 # zizmor: ignore[cache-poisoning] -- cached deps are for testing, not release artifact generation with: cache-provider: basic @@ -86,7 +86,7 @@ jobs: java-version: '17' - name: Setup Gradle - uses: gradle/actions/setup-gradle@9c971963bec38e04b3d30dcc455b5382be2fdbfb # v6.3.0 + uses: gradle/actions/setup-gradle@3f5f9adaf7d9fecd50b5935e54106014257a94e6 # v6.4.0 # zizmor: ignore[cache-poisoning] -- cache is branch-isolated; fork PRs cannot write to this cache with: cache-provider: basic @@ -139,7 +139,7 @@ jobs: java-version: '17' - name: Setup Gradle - uses: gradle/actions/setup-gradle@9c971963bec38e04b3d30dcc455b5382be2fdbfb # v6.3.0 + uses: gradle/actions/setup-gradle@3f5f9adaf7d9fecd50b5935e54106014257a94e6 # v6.4.0 # zizmor: ignore[cache-poisoning] -- cache is branch-isolated; fork PRs cannot write to this cache with: cache-provider: basic diff --git a/.github/workflows/release-rust.yml b/.github/workflows/release-rust.yml index 8c868df6d..d91d69329 100644 --- a/.github/workflows/release-rust.yml +++ b/.github/workflows/release-rust.yml @@ -39,7 +39,7 @@ jobs: persist-credentials: false - name: Set up Rust - uses: dtolnay/rust-toolchain@7e38f4b43b4db5c8dd498af069a4f6196df1d067 # upstream moves its only tag, v1 + uses: dtolnay/rust-toolchain@e2a55d2ffb04f378e9626c28d38b36d230d1e12f # upstream moves its only tag, v1 with: toolchain: '1.98.1' components: clippy, rustfmt @@ -74,7 +74,7 @@ jobs: run: ../scripts/check-rust-service-drift.sh - name: Install cargo-deny - uses: taiki-e/install-action@9983c65e42da123ff25d1f78505eb6de315aa172 # v2.87.20 + uses: taiki-e/install-action@861a07ce7084f55488e375df125cdc99bba60eb7 # v2.87.23 with: tool: cargo-deny@0.20.2 @@ -122,7 +122,7 @@ jobs: git merge-base --is-ancestor "$GITHUB_SHA" origin/main - name: Set up Rust - uses: dtolnay/rust-toolchain@7e38f4b43b4db5c8dd498af069a4f6196df1d067 # upstream moves its only tag, v1 + uses: dtolnay/rust-toolchain@e2a55d2ffb04f378e9626c28d38b36d230d1e12f # upstream moves its only tag, v1 with: toolchain: '1.98.1' @@ -292,7 +292,7 @@ jobs: - name: Set up Rust if: steps.state.outputs.state == 'publish' - uses: dtolnay/rust-toolchain@7e38f4b43b4db5c8dd498af069a4f6196df1d067 # upstream moves its only tag, v1 + uses: dtolnay/rust-toolchain@e2a55d2ffb04f378e9626c28d38b36d230d1e12f # upstream moves its only tag, v1 with: toolchain: '1.98.1' diff --git a/.github/workflows/security.yml b/.github/workflows/security.yml index e9f73a95e..7c9a0fd74 100644 --- a/.github/workflows/security.yml +++ b/.github/workflows/security.yml @@ -466,12 +466,12 @@ jobs: persist-credentials: false - name: Set up Rust - uses: dtolnay/rust-toolchain@7e38f4b43b4db5c8dd498af069a4f6196df1d067 # upstream moves its only tag, v1 + uses: dtolnay/rust-toolchain@e2a55d2ffb04f378e9626c28d38b36d230d1e12f # upstream moves its only tag, v1 with: toolchain: '1.98.1' - name: Install cargo-deny - uses: taiki-e/install-action@9983c65e42da123ff25d1f78505eb6de315aa172 # v2.87.20 + uses: taiki-e/install-action@861a07ce7084f55488e375df125cdc99bba60eb7 # v2.87.23 with: tool: cargo-deny@0.20.2 @@ -551,7 +551,7 @@ jobs: java-version: '17' - name: Setup Gradle - uses: gradle/actions/setup-gradle@9c971963bec38e04b3d30dcc455b5382be2fdbfb # v6.3.0 + uses: gradle/actions/setup-gradle@3f5f9adaf7d9fecd50b5935e54106014257a94e6 # v6.4.0 with: cache-provider: basic diff --git a/.github/workflows/test.yml b/.github/workflows/test.yml index f130cae38..763e1c487 100644 --- a/.github/workflows/test.yml +++ b/.github/workflows/test.yml @@ -39,7 +39,7 @@ jobs: with: persist-credentials: false - - uses: gradle/actions/wrapper-validation@9c971963bec38e04b3d30dcc455b5382be2fdbfb # v6.3.0 + - uses: gradle/actions/wrapper-validation@3f5f9adaf7d9fecd50b5935e54106014257a94e6 # v6.4.0 smithy: uses: $/.github/workflows/smithy-verify.yml @@ -976,7 +976,7 @@ jobs: persist-credentials: false - name: Set up Rust - uses: dtolnay/rust-toolchain@7e38f4b43b4db5c8dd498af069a4f6196df1d067 # upstream moves its only tag, v1 + uses: dtolnay/rust-toolchain@e2a55d2ffb04f378e9626c28d38b36d230d1e12f # upstream moves its only tag, v1 with: toolchain: ${{ matrix.toolchain }} components: clippy, rustfmt @@ -1017,7 +1017,7 @@ jobs: # --- stable lane: the {lang}-check contract --- - name: Install cargo-deny if: matrix.role == 'stable' - uses: taiki-e/install-action@9983c65e42da123ff25d1f78505eb6de315aa172 # v2.87.20 + uses: taiki-e/install-action@861a07ce7084f55488e375df125cdc99bba60eb7 # v2.87.23 with: tool: cargo-deny@0.20.2 @@ -1178,7 +1178,7 @@ jobs: java-version: '17' - name: Setup Gradle - uses: gradle/actions/setup-gradle@9c971963bec38e04b3d30dcc455b5382be2fdbfb # v6.3.0 + uses: gradle/actions/setup-gradle@3f5f9adaf7d9fecd50b5935e54106014257a94e6 # v6.4.0 with: cache-provider: basic