From 14410e590819f69c31476b05ee20070b966e0861 Mon Sep 17 00:00:00 2001 From: Oliver Hamlet Date: Wed, 1 Oct 2025 20:08:50 +0100 Subject: [PATCH] Pin third-party Action versions The versions that are installed have not changed: the hashes correspond to the current values of the version tags that were previously used. --- .github/workflows/ci.yml | 6 ++++-- .github/workflows/release.yml | 2 +- 2 files changed, 5 insertions(+), 3 deletions(-) diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml index 634a21a3..2796b9e2 100644 --- a/.github/workflows/ci.yml +++ b/.github/workflows/ci.yml @@ -102,7 +102,9 @@ jobs: if: matrix.target.platform == 'Win32' - name: Install cargo-llvm-cov - uses: taiki-e/install-action@cargo-llvm-cov + uses: taiki-e/install-action@d6d752794628f1e1fffa3c4d3c8874e06f043d50 # v2.62.15 + with: + tool: cargo-llvm-cov@0.6.19 - name: Prepare test resources shell: pwsh @@ -120,7 +122,7 @@ jobs: run: cargo llvm-cov --lcov --output-path lcov.info --target ${{ matrix.target.triple }} - name: Upload code coverage to Coveralls - uses: coverallsapp/github-action@v2 + uses: coverallsapp/github-action@648a8eb78e6d50909eff900e4ec85cab4524a45b # v2.3.6 if: github.event_name == 'push' continue-on-error: true diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml index a64d4613..e93b4bf2 100644 --- a/.github/workflows/release.yml +++ b/.github/workflows/release.yml @@ -122,7 +122,7 @@ jobs: steps: - uses: actions/checkout@v4 - - uses: rust-lang/crates-io-auth-action@v1 + - uses: rust-lang/crates-io-auth-action@e919bc7605cde86df457cf5b93c5e103838bd879 # v1.0.1 id: auth - run: cargo publish -p libloot