Oliver Hamlet
bd10075c72
Pin third-party Action versions
...
The versions that are installed have not changed: the hashes correspond to the current values of the version tags that were previously used.
2025-10-01 20:08:54 +01:00
Oliver Hamlet
b8bb06581d
Install cargo-vet using a Git commit hash
...
The hash doubles as a checksum of the code that's downloaded and built. Installing from crates.io doesn't provide equivalent functionality.
2025-10-01 20:06:08 +01:00
Oliver Hamlet
a5cb37f203
Install cbindgen using a Git commit hash
...
The hash doubles as a checksum of the code that's downloaded and built. Installing from crates.io doesn't provide equivalent functionality.
2025-10-01 20:01:52 +01:00
Oliver Hamlet
8cfe561712
Pass ---locked to cargo install
2025-10-01 19:58:01 +01:00
Oliver Hamlet
b1a0840690
Update versions and changelog for v5.3.3
5.3.3
2025-09-29 17:19:59 +01:00
Oliver Hamlet
2ac9a9e374
Add a CI job to run cargo vet
2025-09-28 16:27:40 +01:00
Oliver Hamlet
bdeeaee9e9
Use more permissive dependency version selectors
...
So that dependents have more freedom in choosing versions in their dependency tree.
I've run the tests using the oldest versions allowed by the new specifiers, and they all pass.
The current release of esplugin unnecessarily requires at least unicase v2.8.1, but with that fixed, unicase v2.0.0 is fine.
2025-09-28 16:26:13 +01:00
Oliver Hamlet
940aa22f26
Update errno, rustix, winapi-util, windows-sys
...
To remove several windows* crates.
2025-09-28 16:26:13 +01:00
Oliver Hamlet
a3fab8f8c7
Downgrade crossbeam-deque to an audited version
...
The differences don't seem to be significant for LCI's usage.
2025-09-28 16:26:13 +01:00
Oliver Hamlet
7469c7ba41
Downgrade walkdir to an audited version
...
The differences don't seem to be significant for LCI's usage.
2025-09-28 16:26:13 +01:00
Oliver Hamlet
e1ad153df2
Downgrade ryu to an audited version
...
The differences don't seem to be significant for LCI's usage.
2025-09-28 16:26:13 +01:00
Oliver Hamlet
185dd20834
Downgrade syn to an audited version
...
The differences don't seem to be significant for LCI's usage.
2025-09-28 16:26:13 +01:00
Oliver Hamlet
c9e9cef47f
Add cargo-vet config
2025-09-28 16:26:13 +01:00
Oliver Hamlet and GitHub
3e052ed8af
Merge pull request #77 from loot/dependabot/cargo/tempfile-3.22.0
...
Bump tempfile from 3.21.0 to 3.22.0
2025-09-10 09:27:14 +01:00
dependabot[bot] and GitHub
45dbdccb50
Bump tempfile from 3.21.0 to 3.22.0
...
Bumps [tempfile](https://github.com/Stebalien/tempfile ) from 3.21.0 to 3.22.0.
- [Changelog](https://github.com/Stebalien/tempfile/blob/master/CHANGELOG.md )
- [Commits](https://github.com/Stebalien/tempfile/compare/v3.21.0...v3.22.0 )
---
updated-dependencies:
- dependency-name: tempfile
dependency-version: 3.22.0
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com >
2025-09-10 03:01:07 +00:00
Oliver Hamlet and GitHub
90205b72fd
Merge pull request #76 from loot/dependabot/cargo/regex-1.11.2
...
Bump regex from 1.11.1 to 1.11.2
2025-08-25 09:09:19 +01:00
dependabot[bot] and GitHub
bb03c10217
Bump regex from 1.11.1 to 1.11.2
...
Bumps [regex](https://github.com/rust-lang/regex ) from 1.11.1 to 1.11.2.
- [Release notes](https://github.com/rust-lang/regex/releases )
- [Changelog](https://github.com/rust-lang/regex/blob/master/CHANGELOG.md )
- [Commits](https://github.com/rust-lang/regex/compare/1.11.1...1.11.2 )
---
updated-dependencies:
- dependency-name: regex
dependency-version: 1.11.2
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com >
2025-08-25 05:48:48 +00:00
Oliver Hamlet and GitHub
839821313e
Merge pull request #75 from loot/dependabot/cargo/tempfile-3.21.0
...
Bump tempfile from 3.20.0 to 3.21.0
2025-08-20 17:38:52 +01:00
dependabot[bot] and GitHub
d4714b69ce
Bump tempfile from 3.20.0 to 3.21.0
...
Bumps [tempfile](https://github.com/Stebalien/tempfile ) from 3.20.0 to 3.21.0.
- [Changelog](https://github.com/Stebalien/tempfile/blob/master/CHANGELOG.md )
- [Commits](https://github.com/Stebalien/tempfile/commits )
---
updated-dependencies:
- dependency-name: tempfile
dependency-version: 3.21.0
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com >
2025-08-20 16:33:24 +00:00
Oliver Hamlet
d70bbdd2c9
Fix new clippy lint error
...
Introduced in Rust 1.89.0 / clippy 0.1.89.
2025-08-20 17:26:17 +01:00
Oliver Hamlet
a87b6d95cc
Don't fail the CI job if Coveralls is down
2025-08-20 17:26:17 +01:00
Oliver Hamlet
616f0ed144
Check coverage in Windows CI builds
2025-08-20 17:26:17 +01:00
Oliver Hamlet and GitHub
e68ec3ae8f
Merge pull request #74 from loot/dependabot/cargo/libc-0.2.175
...
Bump libc from 0.2.174 to 0.2.175
2025-08-12 14:00:11 +01:00
dependabot[bot] and GitHub
129af6e120
Bump libc from 0.2.174 to 0.2.175
...
Bumps [libc](https://github.com/rust-lang/libc ) from 0.2.174 to 0.2.175.
- [Release notes](https://github.com/rust-lang/libc/releases )
- [Changelog](https://github.com/rust-lang/libc/blob/0.2.175/CHANGELOG.md )
- [Commits](https://github.com/rust-lang/libc/compare/0.2.174...0.2.175 )
---
updated-dependencies:
- dependency-name: libc
dependency-version: 0.2.175
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com >
2025-08-12 12:51:13 +00:00
Oliver Hamlet
7358c180c5
Use --workspace instead of deprecated --all
2025-08-01 18:07:36 +01:00