 Oliver HamletandGitHub
|
e451822309
|
Merge pull request #87 from loot/dependabot/cargo/regex-1.12.2
Bump regex from 1.11.3 to 1.12.2
|
2025-11-24 22:38:47 +00:00 |
|
Oliver Hamlet
|
c8625a0851
|
Add audits for regex 1.11.3 -> 1.12.2 delta
|
2025-11-24 22:26:02 +00:00 |
|
Oliver Hamlet
|
2047429754
|
Replace use of taiki-e/install-action
The action updates very frequently with irrelevant changes (for other things it can install), making it more of a review burden than it's worth.
|
2025-11-24 20:32:21 +00:00 |
|
 Oliver HamletandGitHub
|
732fab0573
|
Merge pull request #96 from loot/dependabot/github_actions/coverallsapp/github-action-2.3.7
Bump coverallsapp/github-action from 2.3.6 to 2.3.7
|
2025-11-24 09:13:33 +00:00 |
|
 Oliver HamletandGitHub
|
04d9fe7fa5
|
Merge pull request #95 from loot/dependabot/github_actions/actions/checkout-6
Bump actions/checkout from 5 to 6
|
2025-11-24 08:55:56 +00:00 |
|
 dependabot[bot]andGitHub
|
42082b1c2d
|
Bump coverallsapp/github-action from 2.3.6 to 2.3.7
Bumps [coverallsapp/github-action](https://github.com/coverallsapp/github-action) from 2.3.6 to 2.3.7.
- [Release notes](https://github.com/coverallsapp/github-action/releases)
- [Commits](https://github.com/coverallsapp/github-action/compare/648a8eb78e6d50909eff900e4ec85cab4524a45b...5cbfd81b66ca5d10c19b062c04de0199c215fb6e)
---
updated-dependencies:
- dependency-name: coverallsapp/github-action
dependency-version: 2.3.7
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com>
|
2025-11-24 03:45:33 +00:00 |
|
 dependabot[bot]andGitHub
|
db3bb0c77b
|
Bump actions/checkout from 5 to 6
Bumps [actions/checkout](https://github.com/actions/checkout) from 5 to 6.
- [Release notes](https://github.com/actions/checkout/releases)
- [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md)
- [Commits](https://github.com/actions/checkout/compare/v5...v6)
---
updated-dependencies:
- dependency-name: actions/checkout
dependency-version: '6'
dependency-type: direct:production
update-type: version-update:semver-major
...
Signed-off-by: dependabot[bot] <support@github.com>
|
2025-11-24 03:45:30 +00:00 |
|
Oliver Hamlet
|
c7bd60cb74
|
Fix new clippy warning
It seems to have been introduced in Rust v1.91.0.
|
2025-11-10 18:33:49 +00:00 |
|
 Oliver HamletandGitHub
|
f951e2087c
|
Merge pull request #92 from loot/dependabot/github_actions/rust-lang/crates-io-auth-action-1.0.3
Bump rust-lang/crates-io-auth-action from 1.0.1 to 1.0.3
|
2025-11-10 09:07:53 +00:00 |
|
 dependabot[bot]andGitHub
|
8b686c1ad2
|
Bump rust-lang/crates-io-auth-action from 1.0.1 to 1.0.3
Bumps [rust-lang/crates-io-auth-action](https://github.com/rust-lang/crates-io-auth-action) from 1.0.1 to 1.0.3.
- [Release notes](https://github.com/rust-lang/crates-io-auth-action/releases)
- [Commits](https://github.com/rust-lang/crates-io-auth-action/compare/e919bc7605cde86df457cf5b93c5e103838bd879...b7e9a28eded4986ec6b1fa40eeee8f8f165559ec)
---
updated-dependencies:
- dependency-name: rust-lang/crates-io-auth-action
dependency-version: 1.0.3
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com>
|
2025-11-10 03:29:33 +00:00 |
|
Oliver Hamlet
|
67dfd78017
|
Explicitly limit permissions in CI jobs
|
2025-10-31 21:48:59 +00:00 |
|
 dependabot[bot]andGitHub
|
d0979f0b68
|
Bump regex from 1.11.3 to 1.12.2
Bumps [regex](https://github.com/rust-lang/regex) from 1.11.3 to 1.12.2.
- [Release notes](https://github.com/rust-lang/regex/releases)
- [Changelog](https://github.com/rust-lang/regex/blob/master/CHANGELOG.md)
- [Commits](https://github.com/rust-lang/regex/compare/1.11.3...1.12.2)
---
updated-dependencies:
- dependency-name: regex
dependency-version: 1.12.2
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com>
|
2025-10-14 03:01:37 +00:00 |
|
 Oliver HamletandGitHub
|
1d4e84b8d1
|
Merge pull request #80 from loot/dependabot/cargo/regex-1.11.3
Bump regex from 1.11.2 to 1.11.3
|
2025-10-03 18:45:22 +01:00 |
|
Oliver Hamlet
|
966bf75a29
|
Add audits for regex v1.11.2 to v1.11.3 update
|
2025-10-03 18:39:36 +01:00 |
|
 dependabot[bot]andOliver Hamlet
|
33efacb6d8
|
Bump regex from 1.11.2 to 1.11.3
Bumps [regex](https://github.com/rust-lang/regex) from 1.11.2 to 1.11.3.
- [Release notes](https://github.com/rust-lang/regex/releases)
- [Changelog](https://github.com/rust-lang/regex/blob/master/CHANGELOG.md)
- [Commits](https://github.com/rust-lang/regex/compare/1.11.2...1.11.3)
---
updated-dependencies:
- dependency-name: regex
dependency-version: 1.11.3
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com>
|
2025-10-03 18:39:21 +01:00 |
|
 Oliver HamletandGitHub
|
5949e0078c
|
Merge pull request #81 from loot/dependabot/cargo/esplugin-6.1.4
Bump esplugin from 6.1.3 to 6.1.4
|
2025-10-03 18:25:34 +01:00 |
|
Oliver Hamlet
|
6a66d8fcd0
|
Add audit for esplugin v6.1.4 as workaround for trust
|
2025-10-03 18:18:52 +01:00 |
|
 Oliver HamletandGitHub
|
84a78c5b52
|
Merge pull request #78 from loot/dependabot/cargo/libc-0.2.176
Bump libc from 0.2.175 to 0.2.176
|
2025-10-03 18:05:34 +01:00 |
|
Oliver Hamlet
|
a88f424219
|
Update libc entry in cargo-vet lockfile
|
2025-10-03 18:02:03 +01:00 |
|
 dependabot[bot]andGitHub
|
b3bfc160fe
|
Bump libc from 0.2.175 to 0.2.176
Bumps [libc](https://github.com/rust-lang/libc) from 0.2.175 to 0.2.176.
- [Release notes](https://github.com/rust-lang/libc/releases)
- [Changelog](https://github.com/rust-lang/libc/blob/0.2.176/CHANGELOG.md)
- [Commits](https://github.com/rust-lang/libc/compare/0.2.175...0.2.176)
---
updated-dependencies:
- dependency-name: libc
dependency-version: 0.2.176
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com>
|
2025-10-03 13:34:03 +00:00 |
|
Oliver Hamlet
|
4a1fe296ed
|
Check the hashes of files downloaded in CI
|
2025-10-02 17:40:16 +01:00 |
|
 Oliver HamletandGitHub
|
b5f1d0677b
|
Merge pull request #82 from loot/dependabot/github_actions/actions/checkout-5
Bump actions/checkout from 4 to 5
|
2025-10-02 08:02:36 +01:00 |
|
 dependabot[bot]andGitHub
|
53b151db04
|
Bump actions/checkout from 4 to 5
Bumps [actions/checkout](https://github.com/actions/checkout) from 4 to 5.
- [Release notes](https://github.com/actions/checkout/releases)
- [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md)
- [Commits](https://github.com/actions/checkout/compare/v4...v5)
---
updated-dependencies:
- dependency-name: actions/checkout
dependency-version: '5'
dependency-type: direct:production
update-type: version-update:semver-major
...
Signed-off-by: dependabot[bot] <support@github.com>
|
2025-10-01 19:17:28 +00:00 |
|
Oliver Hamlet
|
26b3f2f152
|
Use Dependabot to keep Actions up to date
|
2025-10-01 20:11:36 +01:00 |
|
Oliver Hamlet
|
bd10075c72
|
Pin third-party Action versions
The versions that are installed have not changed: the hashes correspond to the current values of the version tags that were previously used.
|
2025-10-01 20:08:54 +01:00 |
|