Oliver Hamlet
61a6569d29
Reduce redundancy in Actions matrices
2025-11-24 21:01:16 +00:00
Oliver Hamlet
7e183cc644
Remove obsolete env var from CI workflow
2025-11-24 20:55:20 +00:00
Oliver Hamlet and GitHub
668ae0b82a
Merge pull request #185 from loot/dependabot/github_actions/actions/checkout-6
...
Bump actions/checkout from 5 to 6
2025-11-24 19:48:36 +00:00
Oliver Hamlet and GitHub
9bd132a13a
Merge pull request #183 from loot/dependabot/github_actions/astral-sh/setup-uv-7.1.4
...
Bump astral-sh/setup-uv from 7.1.2 to 7.1.4
2025-11-24 19:46:43 +00:00
dependabot[bot] and GitHub
fe70a82400
Bump actions/checkout from 5 to 6
...
Bumps [actions/checkout](https://github.com/actions/checkout ) from 5 to 6.
- [Release notes](https://github.com/actions/checkout/releases )
- [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md )
- [Commits](https://github.com/actions/checkout/compare/v5...v6 )
---
updated-dependencies:
- dependency-name: actions/checkout
dependency-version: '6'
dependency-type: direct:production
update-type: version-update:semver-major
...
Signed-off-by: dependabot[bot] <support@github.com >
2025-11-24 18:09:33 +00:00
dependabot[bot] and GitHub
5898b7ecb7
Bump astral-sh/setup-uv from 7.1.2 to 7.1.4
...
Bumps [astral-sh/setup-uv](https://github.com/astral-sh/setup-uv ) from 7.1.2 to 7.1.4.
- [Release notes](https://github.com/astral-sh/setup-uv/releases )
- [Commits](https://github.com/astral-sh/setup-uv/compare/85856786d1ce8acfbcc2f13a5f3fbd6b938f9f41...1e862dfacbd1d6d858c55d9b792c756523627244 )
---
updated-dependencies:
- dependency-name: astral-sh/setup-uv
dependency-version: 7.1.4
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com >
2025-11-24 18:09:17 +00:00
dependabot[bot] and GitHub
2c5b141c44
Bump coverallsapp/github-action from 2.3.6 to 2.3.7
...
Bumps [coverallsapp/github-action](https://github.com/coverallsapp/github-action ) from 2.3.6 to 2.3.7.
- [Release notes](https://github.com/coverallsapp/github-action/releases )
- [Commits](https://github.com/coverallsapp/github-action/compare/648a8eb78e6d50909eff900e4ec85cab4524a45b...5cbfd81b66ca5d10c19b062c04de0199c215fb6e )
---
updated-dependencies:
- dependency-name: coverallsapp/github-action
dependency-version: 2.3.7
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com >
2025-11-24 18:09:13 +00:00
dependabot[bot] and GitHub
64ada8c8b8
Bump rust-lang/crates-io-auth-action from 1.0.1 to 1.0.3
...
Bumps [rust-lang/crates-io-auth-action](https://github.com/rust-lang/crates-io-auth-action ) from 1.0.1 to 1.0.3.
- [Release notes](https://github.com/rust-lang/crates-io-auth-action/releases )
- [Commits](https://github.com/rust-lang/crates-io-auth-action/compare/e919bc7605cde86df457cf5b93c5e103838bd879...b7e9a28eded4986ec6b1fa40eeee8f8f165559ec )
---
updated-dependencies:
- dependency-name: rust-lang/crates-io-auth-action
dependency-version: 1.0.3
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com >
2025-11-10 17:06:59 +00:00
Oliver Hamlet
19873b29a0
Explicitly limit permissions in CI jobs
2025-10-31 21:50:34 +00:00
Oliver Hamlet and GitHub
bbafd394c0
Merge pull request #171 from loot/dependabot/github_actions/actions/upload-artifact-5
...
Bump actions/upload-artifact from 4 to 5
2025-10-27 16:39:27 +00:00
dependabot[bot] and GitHub
b45b1fe628
Bump actions/upload-artifact from 4 to 5
...
Bumps [actions/upload-artifact](https://github.com/actions/upload-artifact ) from 4 to 5.
- [Release notes](https://github.com/actions/upload-artifact/releases )
- [Commits](https://github.com/actions/upload-artifact/compare/v4...v5 )
---
updated-dependencies:
- dependency-name: actions/upload-artifact
dependency-version: '5'
dependency-type: direct:production
update-type: version-update:semver-major
...
Signed-off-by: dependabot[bot] <support@github.com >
2025-10-27 16:34:30 +00:00
dependabot[bot] and GitHub
4bacf5747e
Bump astral-sh/setup-uv from 7.0.0 to 7.1.2
...
Bumps [astral-sh/setup-uv](https://github.com/astral-sh/setup-uv ) from 7.0.0 to 7.1.2.
- [Release notes](https://github.com/astral-sh/setup-uv/releases )
- [Commits](https://github.com/astral-sh/setup-uv/compare/eb1897b8dc4b5d5bfe39a428a8f2304605e0983c...85856786d1ce8acfbcc2f13a5f3fbd6b938f9f41 )
---
updated-dependencies:
- dependency-name: astral-sh/setup-uv
dependency-version: 7.1.2
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com >
2025-10-27 16:04:28 +00:00
Oliver Hamlet
239266a1be
Install uv in CI using a GitHub Action
...
The Action has a couple of advantages over pipx:
- It verifies the checksum of the downloaded binary
- It caches the installed uv
- It caches UV's own package cache
2025-10-09 18:20:02 +01:00
Oliver Hamlet
68fae38aad
Run uv with --locked in CI
2025-10-09 18:20:02 +01:00
Oliver Hamlet
cfda074b2e
Grant contents write permission to release jobs
...
Since I restricted the default GitHub Actions token to read-only permissions, this permission needs to be explicitly granted to allow the creation of a release and the upload of release assets.
2025-10-03 19:47:59 +01:00
Oliver Hamlet
24e3f99d9e
Don't treat compiler warnings as errors by default
...
So that new warnings don't cause issues for library consumers.
Instead use CMake's CMAKE_COMPILE_WARNING_AS_ERROR option to treat them as errors in CI.
2025-10-03 17:39:11 +01:00
Oliver Hamlet and GitHub
6c951c648d
Merge pull request #154 from loot/dependabot/github_actions/actions/checkout-5
...
Bump actions/checkout from 4 to 5
2025-10-02 08:03:50 +01:00
dependabot[bot] and GitHub
a36be2a63e
Bump actions/setup-python from 5 to 6
...
Bumps [actions/setup-python](https://github.com/actions/setup-python ) from 5 to 6.
- [Release notes](https://github.com/actions/setup-python/releases )
- [Commits](https://github.com/actions/setup-python/compare/v5...v6 )
---
updated-dependencies:
- dependency-name: actions/setup-python
dependency-version: '6'
dependency-type: direct:production
update-type: version-update:semver-major
...
Signed-off-by: dependabot[bot] <support@github.com >
2025-10-01 19:53:46 +00:00
dependabot[bot] and GitHub
493b0ef099
Bump actions/checkout from 4 to 5
...
Bumps [actions/checkout](https://github.com/actions/checkout ) from 4 to 5.
- [Release notes](https://github.com/actions/checkout/releases )
- [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md )
- [Commits](https://github.com/actions/checkout/compare/v4...v5 )
---
updated-dependencies:
- dependency-name: actions/checkout
dependency-version: '5'
dependency-type: direct:production
update-type: version-update:semver-major
...
Signed-off-by: dependabot[bot] <support@github.com >
2025-10-01 19:53:43 +00:00
Oliver Hamlet
d9179544c9
Verify the hash of downloaded Doxygen in CI
2025-10-01 20:31:07 +01:00
Oliver Hamlet
d859edc2ba
Use Dependabot to keep Actions up to date
2025-10-01 20:11:33 +01:00
Oliver Hamlet
14410e5908
Pin third-party Action versions
...
The versions that are installed have not changed: the hashes correspond to the current values of the version tags that were previously used.
2025-10-01 20:08:50 +01:00
Oliver Hamlet
dba3ba6902
Install cargo-vet using a Git commit hash
...
The hash doubles as a checksum of the code that's downloaded and built. Installing from crates.io doesn't provide equivalent functionality.
2025-10-01 20:06:00 +01:00
Oliver Hamlet
f2b27e629f
Pass ---locked to cargo install
2025-10-01 19:57:54 +01:00
Oliver Hamlet
fc8ab80552
Add a CI job to run cargo vet
2025-09-29 21:25:10 +01:00