Commit Graph
350 Commits
Author SHA1 Message Date
Oliver HamletandGitHub b5f1d0677b Merge pull request #82 from loot/dependabot/github_actions/actions/checkout-5
Bump actions/checkout from 4 to 5
2025-10-02 08:02:36 +01:00
dependabot[bot]andGitHub 53b151db04 Bump actions/checkout from 4 to 5
Bumps [actions/checkout](https://github.com/actions/checkout) from 4 to 5.
- [Release notes](https://github.com/actions/checkout/releases)
- [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md)
- [Commits](https://github.com/actions/checkout/compare/v4...v5)

---
updated-dependencies:
- dependency-name: actions/checkout
  dependency-version: '5'
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
2025-10-01 19:17:28 +00:00
Oliver Hamlet 26b3f2f152 Use Dependabot to keep Actions up to date 2025-10-01 20:11:36 +01:00
Oliver Hamlet bd10075c72 Pin third-party Action versions
The versions that are installed have not changed: the hashes correspond to the current values of the version tags that were previously used.
2025-10-01 20:08:54 +01:00
Oliver Hamlet b8bb06581d Install cargo-vet using a Git commit hash
The hash doubles as a checksum of the code that's downloaded and built. Installing from crates.io doesn't provide equivalent functionality.
2025-10-01 20:06:08 +01:00
Oliver Hamlet a5cb37f203 Install cbindgen using a Git commit hash
The hash doubles as a checksum of the code that's downloaded and built. Installing from crates.io doesn't provide equivalent functionality.
2025-10-01 20:01:52 +01:00
Oliver Hamlet 8cfe561712 Pass ---locked to cargo install 2025-10-01 19:58:01 +01:00
Oliver Hamlet b1a0840690 Update versions and changelog for v5.3.3 5.3.3 2025-09-29 17:19:59 +01:00
Oliver Hamlet 2ac9a9e374 Add a CI job to run cargo vet 2025-09-28 16:27:40 +01:00
Oliver Hamlet bdeeaee9e9 Use more permissive dependency version selectors
So that dependents have more freedom in choosing versions in their dependency tree.

I've run the tests using the oldest versions allowed by the new specifiers, and they all pass.

The current release of esplugin unnecessarily requires at least unicase v2.8.1, but with that fixed, unicase v2.0.0 is fine.
2025-09-28 16:26:13 +01:00
Oliver Hamlet 940aa22f26 Update errno, rustix, winapi-util, windows-sys
To remove several windows* crates.
2025-09-28 16:26:13 +01:00
Oliver Hamlet a3fab8f8c7 Downgrade crossbeam-deque to an audited version
The differences don't seem to be significant for LCI's usage.
2025-09-28 16:26:13 +01:00
Oliver Hamlet 7469c7ba41 Downgrade walkdir to an audited version
The differences don't seem to be significant for LCI's usage.
2025-09-28 16:26:13 +01:00
Oliver Hamlet e1ad153df2 Downgrade ryu to an audited version
The differences don't seem to be significant for LCI's usage.
2025-09-28 16:26:13 +01:00
Oliver Hamlet 185dd20834 Downgrade syn to an audited version
The differences don't seem to be significant for LCI's usage.
2025-09-28 16:26:13 +01:00
Oliver Hamlet c9e9cef47f Add cargo-vet config 2025-09-28 16:26:13 +01:00
Oliver HamletandGitHub 3e052ed8af Merge pull request #77 from loot/dependabot/cargo/tempfile-3.22.0
Bump tempfile from 3.21.0 to 3.22.0
2025-09-10 09:27:14 +01:00
dependabot[bot]andGitHub 45dbdccb50 Bump tempfile from 3.21.0 to 3.22.0
Bumps [tempfile](https://github.com/Stebalien/tempfile) from 3.21.0 to 3.22.0.
- [Changelog](https://github.com/Stebalien/tempfile/blob/master/CHANGELOG.md)
- [Commits](https://github.com/Stebalien/tempfile/compare/v3.21.0...v3.22.0)

---
updated-dependencies:
- dependency-name: tempfile
  dependency-version: 3.22.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
2025-09-10 03:01:07 +00:00
Oliver HamletandGitHub 90205b72fd Merge pull request #76 from loot/dependabot/cargo/regex-1.11.2
Bump regex from 1.11.1 to 1.11.2
2025-08-25 09:09:19 +01:00
dependabot[bot]andGitHub bb03c10217 Bump regex from 1.11.1 to 1.11.2
Bumps [regex](https://github.com/rust-lang/regex) from 1.11.1 to 1.11.2.
- [Release notes](https://github.com/rust-lang/regex/releases)
- [Changelog](https://github.com/rust-lang/regex/blob/master/CHANGELOG.md)
- [Commits](https://github.com/rust-lang/regex/compare/1.11.1...1.11.2)

---
updated-dependencies:
- dependency-name: regex
  dependency-version: 1.11.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
2025-08-25 05:48:48 +00:00
Oliver HamletandGitHub 839821313e Merge pull request #75 from loot/dependabot/cargo/tempfile-3.21.0
Bump tempfile from 3.20.0 to 3.21.0
2025-08-20 17:38:52 +01:00
dependabot[bot]andGitHub d4714b69ce Bump tempfile from 3.20.0 to 3.21.0
Bumps [tempfile](https://github.com/Stebalien/tempfile) from 3.20.0 to 3.21.0.
- [Changelog](https://github.com/Stebalien/tempfile/blob/master/CHANGELOG.md)
- [Commits](https://github.com/Stebalien/tempfile/commits)

---
updated-dependencies:
- dependency-name: tempfile
  dependency-version: 3.21.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
2025-08-20 16:33:24 +00:00
Oliver Hamlet d70bbdd2c9 Fix new clippy lint error
Introduced in Rust 1.89.0 / clippy 0.1.89.
2025-08-20 17:26:17 +01:00
Oliver Hamlet a87b6d95cc Don't fail the CI job if Coveralls is down 2025-08-20 17:26:17 +01:00
Oliver Hamlet 616f0ed144 Check coverage in Windows CI builds 2025-08-20 17:26:17 +01:00