Tracking PR for v0.23.0 release

.github/actionlint.yaml

@@ -0,0 +1,5 @@
+# Allow actionlint to recognize the org's custom Warp runner label used by the
+# blake3 non-regression workflow.
+self-hosted-runner:
+  labels:
+    - warp-ubuntu-latest-x64-4x

.github/actions/workspace-release/action.yml

@@ -32,37 +32,25 @@ runs:
         fi
 
     - name: Install Rust toolchain
-      uses: dtolnay/rust-toolchain@stable
+      shell: bash
+      run: |
+        rustup update --no-self-update stable
+        rustup default stable
 
-    - name: Cache cargo registry and git index
-      uses: actions/cache@v4
-      with:
-        path: |
-          ~/.cargo/registry
-          ~/.cargo/git
-        key: ${{ runner.os }}-cargo-${{ hashFiles('**/Cargo.lock') }}
-        restore-keys: |
-          ${{ runner.os }}-cargo-
+    - name: Cache Rust build artifacts
+      uses: WarpBuilds/rust-cache@9d0cc3090d9c87de74ea67617b246e978735b1a1 # v2.9.1
 
     - name: Cleanup large tools for build space
       uses: ./.github/actions/cleanup-runner
 
     # Install cargo-msrv for MSRV checks
     - name: Install cargo-msrv
       shell: bash
-      env:
-        RUSTUP_TOOLCHAIN: "1.91"
-      run: cargo install cargo-msrv
-
-    - name: Install Rust 1.91 for MSRV check
-      shell: bash
-      run: rustup toolchain install 1.91
+      run: cargo install cargo-msrv --version 0.19.3 --locked
 
     # Keep your existing MSRV check
     - name: Check MSRV
       shell: bash
-      env:
-        RUSTUP_TOOLCHAIN: "1.91"
       run: |
         chmod +x scripts/check-msrv.sh
         ./scripts/check-msrv.sh

.github/workflows/bench.yml

@@ -16,7 +16,9 @@ jobs:
     name: Bench on ubuntu-latest
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5 # v4.3.1
+        with:
+          persist-credentials: false
       - name: Bench for all features
         run: |
           rustup +stable update --no-self-update