release: 0.27.2

.github/workflows/benches.yml

@@ -17,7 +17,7 @@ jobs:
   benchmarks:
     runs-on: ubuntu-24.04
     steps:
-      - uses: actions/checkout@v5
+      - uses: actions/checkout@v5.0.1
       - uses: actions/setup-python@v6
         with:
           python-version: "3.13"

.github/workflows/build.yml

@@ -32,7 +32,7 @@ jobs:
     runs-on: ${{ inputs.os }}
     if: ${{ !(startsWith(inputs.python-version, 'graalpy') && startsWith(inputs.os, 'windows')) }}
     steps:
-      - uses: actions/checkout@v5
+      - uses: actions/checkout@v5.0.1
         with:
           # For PRs, we need to run on the real PR head, not the resultant merge of the PR into the target branch.
           #

.github/workflows/changelog.yml

@@ -9,7 +9,7 @@ jobs:
     name: Check changelog entry
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v5
+      - uses: actions/checkout@v5.0.1
       - uses: actions/setup-python@v6
         with:
           python-version: '3.13'

.github/workflows/ci-cache-warmup.yml

@@ -9,7 +9,7 @@ jobs:
   cross-compilation-windows:
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v5
+      - uses: actions/checkout@v5.0.1
       - uses: actions/setup-python@v6
         with:
           python-version: "3.13"

.github/workflows/ci.yml

@@ -17,7 +17,7 @@ jobs:
   fmt:
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v5
+      - uses: actions/checkout@v5.0.1
       - uses: actions/setup-python@v6
         with:
           python-version: "3.13"
@@ -38,7 +38,7 @@ jobs:
       MSRV: ${{ steps.resolve-msrv.outputs.MSRV }}
       verbose: ${{ runner.debug == '1' }}
     steps:
-      - uses: actions/checkout@v5
+      - uses: actions/checkout@v5.0.1
       - uses: actions/setup-python@v6
         with:
           python-version: "3.13"
@@ -51,7 +51,7 @@ jobs:
     needs: [fmt]
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v5
+      - uses: actions/checkout@v5.0.1
       - uses: actions/setup-python@v6
         with:
           python-version: "3.13"
@@ -69,7 +69,7 @@ jobs:
     needs: [fmt, resolve]
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v5
+      - uses: actions/checkout@v5.0.1
       - uses: dtolnay/rust-toolchain@master
         with:
           toolchain: ${{ needs.resolve.outputs.MSRV }}
@@ -117,7 +117,7 @@ jobs:
     name: clippy/${{ matrix.target }}/${{ matrix.rust }}
     continue-on-error: ${{ matrix.rust != 'stable' }}
     steps:
-      - uses: actions/checkout@v5
+      - uses: actions/checkout@v5.0.1
       - uses: dtolnay/rust-toolchain@master
         with:
           toolchain: ${{ matrix.rust }}
@@ -390,7 +390,7 @@ jobs:
     needs: [fmt]
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v5
+      - uses: actions/checkout@v5.0.1
       - uses: actions/setup-python@v6
         with:
           python-version: "3.13"
@@ -411,7 +411,7 @@ jobs:
     needs: [fmt]
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v5
+      - uses: actions/checkout@v5.0.1
       - uses: actions/setup-python@v6
         with:
           python-version: "3.13"
@@ -433,7 +433,7 @@ jobs:
     needs: [fmt]
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v5
+      - uses: actions/checkout@v5.0.1
       - uses: actions/setup-python@v6
         with:
           python-version: "3.13"
@@ -451,7 +451,7 @@ jobs:
     needs: [fmt]
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v5
+      - uses: actions/checkout@v5.0.1
       - uses: actions/setup-python@v6
         with:
           # TODO bump emscripten builds to test on 3.13
@@ -462,7 +462,7 @@ jobs:
         with:
           targets: wasm32-unknown-emscripten
           components: rust-src
-      - uses: actions/setup-node@v5
+      - uses: actions/setup-node@v6
         with:
           node-version: 18
       - run: python -m pip install --upgrade pip && pip install nox[uv]
@@ -492,7 +492,7 @@ jobs:
     needs: [fmt]
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v5
+      - uses: actions/checkout@v5.0.1
       - uses: Swatinem/rust-cache@v2
         with:
           save-if: ${{ github.ref == 'refs/heads/main' || contains(github.event.pull_request.labels.*.name, 'CI-save-pr-cache') }}
@@ -536,7 +536,7 @@ jobs:
     if: ${{ contains(github.event.pull_request.labels.*.name, 'CI-build-full') || github.event_name != 'pull_request' }}
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v5
+      - uses: actions/checkout@v5.0.1
       - uses: actions/setup-python@v6
         with:
           python-version: "3.13"
@@ -560,7 +560,7 @@ jobs:
         include:
           - rust: ${{ needs.resolve.outputs.MSRV }}
     steps:
-      - uses: actions/checkout@v5
+      - uses: actions/checkout@v5.0.1
       - uses: actions/setup-python@v6
         with:
           python-version: "3.13"
@@ -605,7 +605,7 @@ jobs:
             target: "aarch64-pc-windows-msvc"
             flags: "-i python3.13 --features generate-import-lib"
     steps:
-      - uses: actions/checkout@v5
+      - uses: actions/checkout@v5.0.1
       - uses: actions/setup-python@v6
         with:
           python-version: "3.13"
@@ -635,7 +635,7 @@ jobs:
     if: ${{ contains(github.event.pull_request.labels.*.name, 'CI-build-full') || github.event_name != 'pull_request' }}
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v5
+      - uses: actions/checkout@v5.0.1
       - uses: actions/setup-python@v6
         with:
           python-version: "3.13"
@@ -685,7 +685,7 @@ jobs:
           ]
     runs-on: ${{ matrix.platform.os }}
     steps:
-      - uses: actions/checkout@v5
+      - uses: actions/checkout@v5.0.1
       - uses: dtolnay/rust-toolchain@stable
         with:
           targets: ${{ matrix.platform.rust-target }}
@@ -707,7 +707,7 @@ jobs:
     if: ${{ !contains(github.event.pull_request.labels.*.name, 'CI-build-full') && github.event_name == 'pull_request' }}
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v5
+      - uses: actions/checkout@v5.0.1
       - uses: dtolnay/rust-toolchain@stable
         with:
           components: rust-src

.github/workflows/coverage-pr-base.yml

@@ -12,7 +12,7 @@ jobs:
   coverage-pr-base:
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v5
+      - uses: actions/checkout@v5.0.1
       - uses: actions/setup-python@v6
         with:
           python-version: '3.13'

.github/workflows/netlify-build.yml

@@ -21,7 +21,7 @@ jobs:
     outputs:
       tag_name: ${{ steps.prepare_tag.outputs.tag_name }}
     steps:
-      - uses: actions/checkout@v5
+      - uses: actions/checkout@v5.0.1
       - uses: actions/setup-python@v6
         with:
           python-version: "3.13"
@@ -31,14 +31,21 @@ jobs:
       - name: Setup mdBook
         uses: taiki-e/install-action@v2
         with:
-          tool: mdbook, mdbook-linkcheck, lychee
+          tool: mdbook@0.4, mdbook-[email protected], lychee
 
       - name: Prepare tag
         id: prepare_tag
         run: |
           TAG_NAME="${GITHUB_REF##*/}"
           echo "tag_name=${TAG_NAME}" >> $GITHUB_OUTPUT
 
+      - name: Restore lychee cache
+        id: restore-cache
+        uses: actions/cache/restore@v4
+        with:
+          path: .lycheecache
+          key: lychee
+
       # This builds the book in target/guide/.
       - name: Build the guide
         run: |
@@ -49,6 +56,13 @@ jobs:
           # allows lychee to get better rate limits from github
           GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
 
+      - name: Save lychee cache
+        uses: actions/cache/save@v4
+        if: ${{ github.ref == 'refs/heads/main' || contains(github.event.pull_request.labels.*.name, 'CI-save-pr-cache') }}
+        with:
+          path: .lycheecache
+          key: ${{ steps.restore-cache.outputs.cache-primary-key }}
+
       # We store the versioned guides on GitHub's gh-pages branch for convenience
       # (the full gh-pages branch is pulled in the build-netlify-site step)
       - name: Deploy the guide
@@ -72,7 +86,7 @@ jobs:
 
       # Upload the built site as an artifact for deploy workflow to consume
       - name: Upload Build Artifact
-        uses: actions/upload-artifact@v4
+        uses: actions/upload-artifact@v5
         with:
           name: site
           path: ./netlify_build

.github/workflows/netlify-deploy.yml

@@ -22,7 +22,7 @@ jobs:
 
     steps:
       - name: Download Build Artifact
-        uses: actions/download-artifact@v5
+        uses: actions/download-artifact@v6
         with:
           name: site
           github-token: ${{ secrets.GITHUB_TOKEN }}

.github/workflows/release.yml

@@ -17,7 +17,7 @@ jobs:
     runs-on: ubuntu-latest
     environment: release
     steps:
-      - uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5.0.0
+      - uses: actions/checkout@93cb6efe18208431cddfb8368fd83d5badbf9bfd # v5.0.1
         with:
           # The tag to build or the tag received by the tag event
           ref: ${{ github.event.inputs.version || github.ref }}

.gitignore

@@ -28,3 +28,4 @@ coverage.json
 netlify_build/
 .nox/
 .vscode/
+.lycheecache