diff --git a/.github/workflows/audit.yml b/.github/workflows/audit.yml index 234d960ccb..ab68f12e45 100644 --- a/.github/workflows/audit.yml +++ b/.github/workflows/audit.yml @@ -21,7 +21,7 @@ jobs: security_audit: runs-on: ubuntu-latest steps: - - uses: actions/checkout@v4 + - uses: actions/checkout@v5 - uses: rustsec/audit-check@v2 with: @@ -38,10 +38,10 @@ jobs: pull-requests: write steps: - - uses: actions/checkout@v4 + - uses: actions/checkout@v5 if: github.event_name != 'pull_request' - - uses: actions/checkout@v4 + - uses: actions/checkout@v5 if: github.event_name == 'pull_request' with: # By default github will checkout a ref of the HEAD merged into the @@ -68,7 +68,7 @@ jobs: - name: Comment about audit fix PR on original PR if: github.event_name == 'pull_request' && steps.create-pull-request.outputs.pull-request-number - uses: actions/github-script@v7 + uses: actions/github-script@v8 with: github-token: ${{secrets.GITHUB_TOKEN}} script: | diff --git a/.github/workflows/auto-merge-dependabot.yml b/.github/workflows/auto-merge-dependabot.yml index c55cd43c82..50ab27e5d0 100644 --- a/.github/workflows/auto-merge-dependabot.yml +++ b/.github/workflows/auto-merge-dependabot.yml @@ -13,7 +13,7 @@ jobs: if: ${{ github.actor == 'dependabot[bot]' && github.event_name == 'pull_request'}} steps: - name: Dependabot metadata - uses: dependabot/fetch-metadata@v2.3.0 + uses: dependabot/fetch-metadata@v2.4.0 id: metadata with: github-token: '${{ secrets.GITHUB_TOKEN }}' diff --git a/.github/workflows/backport.yml b/.github/workflows/backport.yml index c065cb255c..c5719ac921 100644 --- a/.github/workflows/backport.yml +++ b/.github/workflows/backport.yml @@ -13,6 +13,6 @@ jobs: # Don't run on closed unmerged pull requests if: github.event.pull_request.merged steps: - - uses: actions/checkout@v4 + - uses: actions/checkout@v5 - name: Create backport pull requests uses: korthout/backport-action@v3 diff --git a/.github/workflows/benchmark-build.yaml b/.github/workflows/benchmark-build.yaml index 35f0677c28..852561fbc7 100644 --- a/.github/workflows/benchmark-build.yaml +++ b/.github/workflows/benchmark-build.yaml @@ -20,7 +20,7 @@ jobs: - uses: taiki-e/install-action@just - name: Checkout Repository - uses: actions/checkout@v4 + uses: actions/checkout@v5 - name: Enable Rust Caching uses: Swatinem/rust-cache@v2 @@ -66,7 +66,7 @@ jobs: runs-on: buildjet-16vcpu-ubuntu-2204-arm steps: - name: Checkout Repository - uses: actions/checkout@v4 + uses: actions/checkout@v5 - name: Enable Rust Caching uses: Swatinem/rust-cache@v2 @@ -125,16 +125,16 @@ jobs: bridge-tag: ${{ steps.bridge.outputs.tags }} steps: - name: Checkout Repository - uses: actions/checkout@v4 + uses: actions/checkout@v5 - name: Download executables AMD - uses: actions/download-artifact@v4 + uses: actions/download-artifact@v5 with: name: x86_64-unknown-linux-gnu-services-bench path: target/amd64/release - name: Download executables ARM - uses: actions/download-artifact@v4 + uses: actions/download-artifact@v5 with: name: aarch64-unknown-linux-gnu-services-bench path: target/arm64/release @@ -378,7 +378,7 @@ jobs: - uses: taiki-e/install-action@just - name: Checkout Repository - uses: actions/checkout@v4 + uses: actions/checkout@v5 - name: Pull docker images run: | diff --git a/.github/workflows/build-crypto-helper.yml b/.github/workflows/build-crypto-helper.yml index aa79f0dad2..5387e2393f 100644 --- a/.github/workflows/build-crypto-helper.yml +++ b/.github/workflows/build-crypto-helper.yml @@ -29,7 +29,7 @@ jobs: steps: - name: Checkout Repository - uses: actions/checkout@v4 + uses: actions/checkout@v5 - name: Install Rust uses: dtolnay/rust-toolchain@stable @@ -89,10 +89,10 @@ jobs: steps: - name: Checkout repository - uses: actions/checkout@v4 + uses: actions/checkout@v5 - name: Download all Artifacts - uses: actions/download-artifact@v4 + uses: actions/download-artifact@v5 with: path: target/lib diff --git a/.github/workflows/build-without-lockfile.yml b/.github/workflows/build-without-lockfile.yml index 087c5713eb..6c6dba8ccc 100644 --- a/.github/workflows/build-without-lockfile.yml +++ b/.github/workflows/build-without-lockfile.yml @@ -26,7 +26,7 @@ jobs: runs-on: ubuntu-latest steps: - name: Checkout Repository - uses: actions/checkout@v4 + uses: actions/checkout@v5 # NOTE: no rust cache, this isn't a time critical job @@ -36,7 +36,7 @@ jobs: cargo check --all-targets - name: Comment on PR - uses: actions/github-script@v7 + uses: actions/github-script@v8 if: failure() && github.event_name == 'pull_request' with: github-token: ${{secrets.GITHUB_TOKEN}} diff --git a/.github/workflows/build.yml b/.github/workflows/build.yml index 94e912abd5..9dd9b222e1 100644 --- a/.github/workflows/build.yml +++ b/.github/workflows/build.yml @@ -65,7 +65,7 @@ jobs: - uses: rui314/setup-mold@v1 - name: Checkout Repository - uses: actions/checkout@v4 + uses: actions/checkout@v5 - name: Enable Rust Caching uses: Swatinem/rust-cache@v2 @@ -130,7 +130,7 @@ jobs: - uses: rui314/setup-mold@v1 - name: Checkout Repository - uses: actions/checkout@v4 + uses: actions/checkout@v5 - name: Enable Rust Caching uses: Swatinem/rust-cache@v2 @@ -188,10 +188,10 @@ jobs: steps: - name: Checkout Repository - uses: actions/checkout@v4 + uses: actions/checkout@v5 - name: Download executables AMD - uses: actions/download-artifact@v4 + uses: actions/download-artifact@v5 with: pattern: amd-* path: target/amd64/release @@ -240,7 +240,7 @@ jobs: - name: Build and push docker (non-PR) if: github.event_name != 'pull_request' - uses: docker/build-push-action@v5 + uses: docker/build-push-action@v6 id: build with: context: . @@ -296,10 +296,10 @@ jobs: steps: - name: Checkout Repository - uses: actions/checkout@v4 + uses: actions/checkout@v5 - name: Download executables ARM - uses: actions/download-artifact@v4 + uses: actions/download-artifact@v5 with: pattern: arm-* path: target/arm64/release @@ -390,7 +390,7 @@ jobs: password: ${{ secrets.GITHUB_TOKEN }} - name: Download digests - uses: actions/download-artifact@v4 + uses: actions/download-artifact@v5 with: pattern: "digests-${{ matrix.service }}-*" path: "${{ runner.temp }}/digests" @@ -429,10 +429,10 @@ jobs: - uses: taiki-e/install-action@just - name: Checkout Repository - uses: actions/checkout@v4 + uses: actions/checkout@v5 - name: Download artifacts - uses: actions/download-artifact@v4 + uses: actions/download-artifact@v5 with: path: ${{ runner.temp }}/docker-images pattern: "*-docker-image" @@ -472,7 +472,7 @@ jobs: - uses: taiki-e/install-action@just - name: Checkout Repository - uses: actions/checkout@v4 + uses: actions/checkout@v5 - name: Set docker image tag for compose run: | diff --git a/.github/workflows/cargo-features.yml b/.github/workflows/cargo-features.yml index 9f6f115717..8b70a735df 100644 --- a/.github/workflows/cargo-features.yml +++ b/.github/workflows/cargo-features.yml @@ -30,7 +30,7 @@ jobs: - uses: taiki-e/install-action@just - name: Checkout Repository - uses: actions/checkout@v4 + uses: actions/checkout@v5 - name: Free Disk Space (Ubuntu) uses: jlumbroso/free-disk-space@main diff --git a/.github/workflows/contracts.yml b/.github/workflows/contracts.yml index 482598ca7d..46f36e478b 100644 --- a/.github/workflows/contracts.yml +++ b/.github/workflows/contracts.yml @@ -39,7 +39,7 @@ jobs: skipPush: ${{ github.actor == 'dependabot[bot]' }} - name: Checkout Repository - uses: actions/checkout@v4 + uses: actions/checkout@v5 with: submodules: recursive @@ -103,7 +103,7 @@ jobs: skipPush: ${{ github.actor == 'dependabot[bot]' }} - name: Checkout Repository - uses: actions/checkout@v4 + uses: actions/checkout@v5 with: submodules: recursive diff --git a/.github/workflows/coverage.yml b/.github/workflows/coverage.yml index 50040bd2a6..eb75785da6 100644 --- a/.github/workflows/coverage.yml +++ b/.github/workflows/coverage.yml @@ -29,7 +29,7 @@ jobs: runs-on: ubuntu-latest steps: - name: Checkout Repository - uses: actions/checkout@v4 + uses: actions/checkout@v5 - uses: dtolnay/rust-toolchain@nightly diff --git a/.github/workflows/doc-rust.yml b/.github/workflows/doc-rust.yml index 4bb080ec84..49d135e06d 100644 --- a/.github/workflows/doc-rust.yml +++ b/.github/workflows/doc-rust.yml @@ -18,7 +18,7 @@ jobs: runs-on: ubuntu-24.04 steps: - name: Checkout Repository - uses: actions/checkout@v4 + uses: actions/checkout@v5 - uses: taiki-e/install-action@just diff --git a/.github/workflows/hotshot.yml b/.github/workflows/hotshot.yml index 652df09ae3..da11e2c194 100644 --- a/.github/workflows/hotshot.yml +++ b/.github/workflows/hotshot.yml @@ -20,7 +20,7 @@ jobs: matrix: ${{ steps.set-matrix.outputs.matrix }} steps: - uses: taiki-e/install-action@just - - uses: actions/checkout@v4 + - uses: actions/checkout@v5 - id: set-matrix run: echo "matrix=$(just hotshot::matrix)" >> "$GITHUB_OUTPUT" @@ -31,7 +31,7 @@ jobs: fail-fast: false runs-on: ubuntu-latest steps: - - uses: actions/checkout@v4 + - uses: actions/checkout@v5 name: Checkout Repository - uses: Swatinem/rust-cache@v2 @@ -71,7 +71,7 @@ jobs: fail-fast: false runs-on: ubuntu-latest steps: - - uses: actions/checkout@v4 + - uses: actions/checkout@v5 name: Checkout Repository - uses: Swatinem/rust-cache@v2 diff --git a/.github/workflows/lint.yml b/.github/workflows/lint.yml index 69d7442743..340c866fee 100644 --- a/.github/workflows/lint.yml +++ b/.github/workflows/lint.yml @@ -21,7 +21,7 @@ jobs: name: cargo fmt runs-on: ubuntu-latest steps: - - uses: actions/checkout@v4 + - uses: actions/checkout@v5 - uses: dtolnay/rust-toolchain@master with: toolchain: nightly @@ -34,7 +34,7 @@ jobs: name: clippy (postgres) runs-on: ubuntu-latest steps: - - uses: actions/checkout@v4 + - uses: actions/checkout@v5 - uses: Swatinem/rust-cache@v2 with: save-if: ${{ github.ref == 'refs/heads/main' }} @@ -48,7 +48,7 @@ jobs: name: clippy (embedded-db) runs-on: ubuntu-latest steps: - - uses: actions/checkout@v4 + - uses: actions/checkout@v5 - uses: Swatinem/rust-cache@v2 with: save-if: false diff --git a/.github/workflows/nix-env-macos-arm.yml b/.github/workflows/nix-env-macos-arm.yml index d6e136e7eb..559215ed0a 100644 --- a/.github/workflows/nix-env-macos-arm.yml +++ b/.github/workflows/nix-env-macos-arm.yml @@ -39,7 +39,7 @@ jobs: skipPush: ${{ github.actor == 'dependabot[bot]' }} - name: Checkout Repository - uses: actions/checkout@v4 + uses: actions/checkout@v5 with: submodules: recursive diff --git a/.github/workflows/slowtest.yaml b/.github/workflows/slowtest.yaml index 018a4463d1..9e4210a15c 100644 --- a/.github/workflows/slowtest.yaml +++ b/.github/workflows/slowtest.yaml @@ -46,7 +46,7 @@ jobs: - uses: rui314/setup-mold@v1 - name: Checkout Repository - uses: actions/checkout@v4 + uses: actions/checkout@v5 # NOTE: no rust cache, these tests are very slow anyway @@ -79,7 +79,7 @@ jobs: - uses: rui314/setup-mold@v1 - name: Checkout Repository - uses: actions/checkout@v4 + uses: actions/checkout@v5 # NOTE: no rust cache, these tests are very slow anyway diff --git a/.github/workflows/test.yml b/.github/workflows/test.yml index 89e6424cf2..84d0688c82 100644 --- a/.github/workflows/test.yml +++ b/.github/workflows/test.yml @@ -31,7 +31,7 @@ jobs: steps: - uses: rui314/setup-mold@v1 - - uses: actions/checkout@v4 + - uses: actions/checkout@v5 - name: Install nextest uses: taiki-e/install-action@nextest @@ -70,7 +70,7 @@ jobs: steps: - uses: rui314/setup-mold@v1 - - uses: actions/checkout@v4 + - uses: actions/checkout@v5 with: submodules: recursive @@ -110,7 +110,7 @@ jobs: steps: - uses: rui314/setup-mold@v1 - - uses: actions/checkout@v4 + - uses: actions/checkout@v5 - name: Enable Rust Caching uses: Swatinem/rust-cache@v2 @@ -156,7 +156,7 @@ jobs: runs-on: ubuntu-latest steps: - uses: rui314/setup-mold@v1 - - uses: actions/checkout@v4 + - uses: actions/checkout@v5 - name: Enable Rust Caching uses: Swatinem/rust-cache@v2 @@ -185,7 +185,7 @@ jobs: runs-on: ubuntu-latest steps: - uses: rui314/setup-mold@v1 - - uses: actions/checkout@v4 + - uses: actions/checkout@v5 - name: Enable Rust Caching uses: Swatinem/rust-cache@v2 @@ -219,7 +219,7 @@ jobs: - name: Install Foundry uses: foundry-rs/foundry-toolchain@v1 - - uses: actions/checkout@v4 + - uses: actions/checkout@v5 - name: Install node deps uses: nick-fields/retry@v3 @@ -233,7 +233,7 @@ jobs: - name: Install nextest uses: taiki-e/install-action@nextest - name: Download archive - uses: actions/download-artifact@v4 + uses: actions/download-artifact@v5 with: name: nextest-archive-postgres @@ -257,7 +257,7 @@ jobs: with: version: nightly - - uses: actions/checkout@v4 + - uses: actions/checkout@v5 with: submodules: recursive @@ -273,7 +273,7 @@ jobs: - name: Install nextest uses: taiki-e/install-action@nextest - name: Download archive - uses: actions/download-artifact@v4 + uses: actions/download-artifact@v5 with: name: nextest-archive-sqlite @@ -300,7 +300,7 @@ jobs: extraPullNames: nix-community skipPush: ${{ github.actor == 'dependabot[bot]' }} - - uses: actions/checkout@v4 + - uses: actions/checkout@v5 - name: Build espresso-dev-node run: | @@ -361,12 +361,12 @@ jobs: - name: Configure PATH run: PATH="$PWD/target/debug:$PATH" - - uses: actions/checkout@v4 + - uses: actions/checkout@v5 - uses: taiki-e/install-action@nextest - name: Download archive - uses: actions/download-artifact@v4 + uses: actions/download-artifact@v5 - name: Move files run: | @@ -416,12 +416,12 @@ jobs: runs-on: ubuntu-latest steps: - uses: cachix/install-nix-action@v31 - - uses: actions/checkout@v4 + - uses: actions/checkout@v5 # TODO: this downloads all (available) artifacts, which is a bit wasteful but artifact # downloads always fail if I try to select a subset. - name: Download archive - uses: actions/download-artifact@v4 + uses: actions/download-artifact@v5 - name: Move files run: | diff --git a/.github/workflows/typos.yml b/.github/workflows/typos.yml index ccaba056d4..f99369e8e0 100644 --- a/.github/workflows/typos.yml +++ b/.github/workflows/typos.yml @@ -20,8 +20,8 @@ jobs: typos: runs-on: ubuntu-latest steps: - - uses: actions/checkout@v4 + - uses: actions/checkout@v5 name: Checkout Repository - name: typos-action - uses: crate-ci/typos@v1.32.0 + uses: crate-ci/typos@v1.38.1 diff --git a/.github/workflows/ubuntu-install-without-nix.yml b/.github/workflows/ubuntu-install-without-nix.yml index 3c066b1e15..7e3efa7189 100644 --- a/.github/workflows/ubuntu-install-without-nix.yml +++ b/.github/workflows/ubuntu-install-without-nix.yml @@ -13,7 +13,7 @@ jobs: ubuntu: runs-on: ubuntu-latest steps: - - uses: actions/checkout@v4 + - uses: actions/checkout@v5 with: submodules: recursive diff --git a/.github/workflows/unused-deps.yml b/.github/workflows/unused-deps.yml index 3bca88979b..9c762edd38 100644 --- a/.github/workflows/unused-deps.yml +++ b/.github/workflows/unused-deps.yml @@ -10,7 +10,7 @@ jobs: runs-on: ubuntu-latest steps: - name: Checkout repository - uses: actions/checkout@v4 + uses: actions/checkout@v5 - uses: dtolnay/rust-toolchain@nightly id: toolchain diff --git a/.github/workflows/update_nix.yml b/.github/workflows/update_nix.yml index cbc30b3cb3..682c84279c 100644 --- a/.github/workflows/update_nix.yml +++ b/.github/workflows/update_nix.yml @@ -14,7 +14,7 @@ jobs: runs-on: ubuntu-latest steps: - name: Checkout repository - uses: actions/checkout@v4 + uses: actions/checkout@v5 - name: Install Nix uses: cachix/install-nix-action@v31 @@ -25,6 +25,6 @@ jobs: authToken: "${{ secrets.CACHIX_AUTH_TOKEN }}" - name: Update flake.lock - uses: DeterminateSystems/update-flake-lock@v24 + uses: DeterminateSystems/update-flake-lock@v27 with: pr-title: "Weekly PR to bump flake.nix" # Title of PR to be created