diff --git a/.github/workflows/_audit.yml b/.github/workflows/_audit.yml index 7f686af..8e5b80b 100644 --- a/.github/workflows/_audit.yml +++ b/.github/workflows/_audit.yml @@ -19,7 +19,7 @@ jobs: contents: read checks: write steps: - - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0 + - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 with: persist-credentials: false - uses: rustsec/audit-check@69366f33c96575abad1ee0dba8212993eecbe998 # v2.0.0 diff --git a/.github/workflows/_build.yml b/.github/workflows/_build.yml index 028e8a0..64abbad 100644 --- a/.github/workflows/_build.yml +++ b/.github/workflows/_build.yml @@ -16,7 +16,7 @@ jobs: runs-on: ubuntu-latest if: inputs.rust_changed == 'true' steps: - - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0 + - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 with: persist-credentials: false - uses: dtolnay/rust-toolchain@2c7215f132e9ebf062739d9130488b56d53c060c # master diff --git a/.github/workflows/_changelog.yml b/.github/workflows/_changelog.yml index 585b8a0..43745b9 100644 --- a/.github/workflows/_changelog.yml +++ b/.github/workflows/_changelog.yml @@ -11,7 +11,7 @@ jobs: name: Update Changelog runs-on: ubuntu-latest steps: - - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0 + - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 with: fetch-depth: 0 token: ${{ secrets.GITHUB_TOKEN }} diff --git a/.github/workflows/_clippy.yml b/.github/workflows/_clippy.yml index c47ec39..8155d88 100644 --- a/.github/workflows/_clippy.yml +++ b/.github/workflows/_clippy.yml @@ -16,7 +16,7 @@ jobs: runs-on: ubuntu-latest if: inputs.rust_changed == 'true' steps: - - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0 + - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 with: persist-credentials: false - uses: dtolnay/rust-toolchain@2c7215f132e9ebf062739d9130488b56d53c060c # master diff --git a/.github/workflows/_deny.yml b/.github/workflows/_deny.yml index b98adac..0e1a231 100644 --- a/.github/workflows/_deny.yml +++ b/.github/workflows/_deny.yml @@ -16,7 +16,7 @@ jobs: runs-on: ubuntu-latest if: inputs.deps_changed == 'true' steps: - - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0 + - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 with: persist-credentials: false - uses: EmbarkStudios/cargo-deny-action@3c6349835b2b7b196a839186cb8b78e02f7b5f25 # v2.1.1 diff --git a/.github/workflows/_detect.yml b/.github/workflows/_detect.yml index 5b8fcab..99ac43f 100644 --- a/.github/workflows/_detect.yml +++ b/.github/workflows/_detect.yml @@ -25,7 +25,7 @@ jobs: deps: ${{ steps.filter.outputs.deps }} reuse: ${{ steps.filter.outputs.reuse }} steps: - - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0 + - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 with: fetch-depth: 2 persist-credentials: false diff --git a/.github/workflows/_doc.yml b/.github/workflows/_doc.yml index 3a4209d..b9ef6bb 100644 --- a/.github/workflows/_doc.yml +++ b/.github/workflows/_doc.yml @@ -16,7 +16,7 @@ jobs: runs-on: ubuntu-latest if: inputs.rust_changed == 'true' steps: - - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0 + - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 with: persist-credentials: false - uses: dtolnay/rust-toolchain@2c7215f132e9ebf062739d9130488b56d53c060c # master diff --git a/.github/workflows/_doctest.yml b/.github/workflows/_doctest.yml index f3e9fc2..8640a42 100644 --- a/.github/workflows/_doctest.yml +++ b/.github/workflows/_doctest.yml @@ -16,7 +16,7 @@ jobs: runs-on: ubuntu-latest if: inputs.rust_changed == 'true' steps: - - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0 + - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 with: persist-credentials: false - uses: dtolnay/rust-toolchain@2c7215f132e9ebf062739d9130488b56d53c060c # master diff --git a/.github/workflows/_fmt.yml b/.github/workflows/_fmt.yml index ea9a656..a2f1781 100644 --- a/.github/workflows/_fmt.yml +++ b/.github/workflows/_fmt.yml @@ -16,7 +16,7 @@ jobs: runs-on: ubuntu-latest if: inputs.rust_changed == 'true' steps: - - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0 + - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 with: persist-credentials: false - uses: dtolnay/rust-toolchain@2c7215f132e9ebf062739d9130488b56d53c060c # master diff --git a/.github/workflows/_machete.yml b/.github/workflows/_machete.yml index 1086f30..87c814d 100644 --- a/.github/workflows/_machete.yml +++ b/.github/workflows/_machete.yml @@ -16,7 +16,7 @@ jobs: runs-on: ubuntu-latest if: inputs.deps_changed == 'true' steps: - - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0 + - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 with: persist-credentials: false - uses: dtolnay/rust-toolchain@2c7215f132e9ebf062739d9130488b56d53c060c # master @@ -25,7 +25,7 @@ jobs: - uses: Swatinem/rust-cache@e18b497796c12c097a38f9edb9d0641fb99eee32 # v2 with: key: machete - - uses: taiki-e/install-action@07b4745e0c39a41822af610387492e3e53aa222b # v2.83.4 + - uses: taiki-e/install-action@41049aa56687c35e0afa74eed4f09cec4f9afabf # v2.85.2 with: tool: cargo-machete - name: Check for unused dependencies diff --git a/.github/workflows/_msrv.yml b/.github/workflows/_msrv.yml index f5120cc..813723d 100644 --- a/.github/workflows/_msrv.yml +++ b/.github/workflows/_msrv.yml @@ -16,7 +16,7 @@ jobs: runs-on: ubuntu-latest if: inputs.rust_changed == 'true' steps: - - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0 + - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 with: persist-credentials: false - name: Get MSRV from Cargo.toml diff --git a/.github/workflows/_pr-size.yml b/.github/workflows/_pr-size.yml index 5ce8c35..7537f3e 100644 --- a/.github/workflows/_pr-size.yml +++ b/.github/workflows/_pr-size.yml @@ -16,7 +16,7 @@ jobs: runs-on: ubuntu-latest if: github.event_name == 'pull_request' && inputs.rust_changed == 'true' steps: - - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0 + - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 with: fetch-depth: 0 persist-credentials: false diff --git a/.github/workflows/_publish.yml b/.github/workflows/_publish.yml index a63b1d2..ec65480 100644 --- a/.github/workflows/_publish.yml +++ b/.github/workflows/_publish.yml @@ -18,7 +18,7 @@ jobs: name: Publish to crates.io runs-on: ubuntu-latest steps: - - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0 + - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 with: persist-credentials: false - uses: dtolnay/rust-toolchain@2c7215f132e9ebf062739d9130488b56d53c060c # master diff --git a/.github/workflows/_qual.yml b/.github/workflows/_qual.yml index 9fcfde9..def2485 100644 --- a/.github/workflows/_qual.yml +++ b/.github/workflows/_qual.yml @@ -16,7 +16,7 @@ jobs: runs-on: ubuntu-latest if: inputs.rust_changed == 'true' steps: - - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0 + - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 with: persist-credentials: false - uses: RAprogramm/cargo-quality@c39e3171d7dc7897690f1e0e103b1c97761059c6 # v0.4.1 diff --git a/.github/workflows/_release-build.yml b/.github/workflows/_release-build.yml index d9894ae..0d8d292 100644 --- a/.github/workflows/_release-build.yml +++ b/.github/workflows/_release-build.yml @@ -43,7 +43,7 @@ jobs: archive: zip cross: false steps: - - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0 + - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 with: persist-credentials: false diff --git a/.github/workflows/_release.yml b/.github/workflows/_release.yml index 7fb28ce..1fb49ee 100644 --- a/.github/workflows/_release.yml +++ b/.github/workflows/_release.yml @@ -22,7 +22,7 @@ jobs: id-token: write attestations: write steps: - - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0 + - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 with: fetch-depth: 0 persist-credentials: false diff --git a/.github/workflows/_reuse.yml b/.github/workflows/_reuse.yml index df5168e..abaece8 100644 --- a/.github/workflows/_reuse.yml +++ b/.github/workflows/_reuse.yml @@ -16,7 +16,7 @@ jobs: runs-on: ubuntu-latest if: inputs.reuse_changed == 'true' steps: - - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0 + - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 with: persist-credentials: false - uses: fsfe/reuse-action@676e2d560c9a403aa252096d99fcab3e1132b0f5 # v6.0.0 diff --git a/.github/workflows/_semver.yml b/.github/workflows/_semver.yml index b8cf29d..a73788c 100644 --- a/.github/workflows/_semver.yml +++ b/.github/workflows/_semver.yml @@ -16,7 +16,7 @@ jobs: runs-on: ubuntu-latest if: github.event_name == 'pull_request' && inputs.rust_changed == 'true' steps: - - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0 + - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 with: fetch-depth: 0 persist-credentials: false @@ -26,7 +26,7 @@ jobs: - uses: Swatinem/rust-cache@e18b497796c12c097a38f9edb9d0641fb99eee32 # v2 with: key: semver - - uses: taiki-e/install-action@07b4745e0c39a41822af610387492e3e53aa222b # v2.83.4 + - uses: taiki-e/install-action@41049aa56687c35e0afa74eed4f09cec4f9afabf # v2.85.2 with: tool: cargo-semver-checks - name: Check semver compatibility diff --git a/.github/workflows/_tag.yml b/.github/workflows/_tag.yml index 023cd57..054e5a0 100644 --- a/.github/workflows/_tag.yml +++ b/.github/workflows/_tag.yml @@ -21,7 +21,7 @@ jobs: new_tag: ${{ steps.check.outputs.new_tag }} version: ${{ steps.check.outputs.version }} steps: - - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0 + - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 with: fetch-depth: 0 diff --git a/.github/workflows/_test.yml b/.github/workflows/_test.yml index df75d0c..0f8b022 100644 --- a/.github/workflows/_test.yml +++ b/.github/workflows/_test.yml @@ -19,7 +19,7 @@ jobs: runs-on: ubuntu-latest if: inputs.rust_changed == 'true' steps: - - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0 + - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 with: persist-credentials: false - uses: dtolnay/rust-toolchain@2c7215f132e9ebf062739d9130488b56d53c060c # master @@ -27,10 +27,10 @@ jobs: toolchain: stable components: llvm-tools-preview - uses: Swatinem/rust-cache@e18b497796c12c097a38f9edb9d0641fb99eee32 # v2 - - uses: taiki-e/install-action@07b4745e0c39a41822af610387492e3e53aa222b # v2.83.4 + - uses: taiki-e/install-action@41049aa56687c35e0afa74eed4f09cec4f9afabf # v2.85.2 with: tool: cargo-llvm-cov - - uses: taiki-e/install-action@07b4745e0c39a41822af610387492e3e53aa222b # v2.83.4 + - uses: taiki-e/install-action@41049aa56687c35e0afa74eed4f09cec4f9afabf # v2.85.2 with: tool: nextest - name: Run tests with coverage diff --git a/.github/workflows/cargo-update.yml b/.github/workflows/cargo-update.yml index e9356ac..774251d 100644 --- a/.github/workflows/cargo-update.yml +++ b/.github/workflows/cargo-update.yml @@ -18,7 +18,7 @@ jobs: runs-on: ubuntu-latest if: github.repository == 'RAprogramm/sql-query-analyzer' steps: - - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0 + - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 with: persist-credentials: false diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml index 5c3af40..15dabc3 100644 --- a/.github/workflows/ci.yml +++ b/.github/workflows/ci.yml @@ -29,7 +29,7 @@ jobs: contents: read pull-requests: write steps: - - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0 + - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 with: fetch-depth: 0 persist-credentials: false diff --git a/.github/workflows/codeql.yml b/.github/workflows/codeql.yml index 0a9810d..3e693be 100644 --- a/.github/workflows/codeql.yml +++ b/.github/workflows/codeql.yml @@ -34,7 +34,7 @@ jobs: steps: - name: Checkout repository - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0 + uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 with: persist-credentials: false @@ -44,15 +44,15 @@ jobs: toolchain: stable - name: Initialize CodeQL - uses: github/codeql-action/init@7188fc363630916deb702c7fdcf4e481b751f97a # v4.37.1 + uses: github/codeql-action/init@e4fba868fa4b1b91e1fdab776edc8cfbe6e9fb81 # v4.37.3 with: languages: ${{ matrix.language }} queries: security-extended,security-and-quality - name: Autobuild - uses: github/codeql-action/autobuild@7188fc363630916deb702c7fdcf4e481b751f97a # v4.37.1 + uses: github/codeql-action/autobuild@e4fba868fa4b1b91e1fdab776edc8cfbe6e9fb81 # v4.37.3 - name: Perform CodeQL analysis - uses: github/codeql-action/analyze@7188fc363630916deb702c7fdcf4e481b751f97a # v4.37.1 + uses: github/codeql-action/analyze@e4fba868fa4b1b91e1fdab776edc8cfbe6e9fb81 # v4.37.3 with: category: "/language:${{ matrix.language }}" diff --git a/.github/workflows/pages.yml b/.github/workflows/pages.yml index b2552c7..ded5268 100644 --- a/.github/workflows/pages.yml +++ b/.github/workflows/pages.yml @@ -25,12 +25,12 @@ jobs: runs-on: ubuntu-latest timeout-minutes: 10 steps: - - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0 + - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 with: persist-credentials: false - name: Install mdBook - uses: taiki-e/install-action@07b4745e0c39a41822af610387492e3e53aa222b # v2.83.4 + uses: taiki-e/install-action@41049aa56687c35e0afa74eed4f09cec4f9afabf # v2.85.2 with: tool: mdbook diff --git a/.github/workflows/publish-version.yml b/.github/workflows/publish-version.yml index fb0d6fa..543ad1d 100644 --- a/.github/workflows/publish-version.yml +++ b/.github/workflows/publish-version.yml @@ -24,7 +24,7 @@ jobs: runs-on: ubuntu-latest timeout-minutes: 15 steps: - - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0 + - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 with: ref: ${{ inputs.tag }} persist-credentials: false diff --git a/.github/workflows/scorecard.yml b/.github/workflows/scorecard.yml index c80228e..bd890a3 100644 --- a/.github/workflows/scorecard.yml +++ b/.github/workflows/scorecard.yml @@ -28,12 +28,12 @@ jobs: actions: read steps: - name: Checkout repository - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0 + uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 with: persist-credentials: false - name: Run analysis - uses: ossf/scorecard-action@4eaacf0543bb3f2c246792bd56e8cdeffafb205a # v2.4.3 + uses: ossf/scorecard-action@2d1146689b8cda280b9bc96326124645441f03bc # v2.4.4 with: results_file: scorecard-results.sarif results_format: sarif @@ -47,6 +47,6 @@ jobs: retention-days: 5 - name: Upload to GitHub Code Scanning - uses: github/codeql-action/upload-sarif@7188fc363630916deb702c7fdcf4e481b751f97a # v4.37.1 + uses: github/codeql-action/upload-sarif@e4fba868fa4b1b91e1fdab776edc8cfbe6e9fb81 # v4.37.3 with: sarif_file: scorecard-results.sarif diff --git a/.github/workflows/zizmor.yml b/.github/workflows/zizmor.yml index 75dfc19..2d09ed3 100644 --- a/.github/workflows/zizmor.yml +++ b/.github/workflows/zizmor.yml @@ -34,11 +34,11 @@ jobs: security-events: write steps: - name: Checkout repository - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0 + uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 with: persist-credentials: false - name: Run zizmor - uses: zizmorcore/zizmor-action@6599ee8b7a49aef6a770f63d261d214911a7ce02 # v0.6.0 + uses: zizmorcore/zizmor-action@6fc4b006235f201fdab3722e17240ab420d580e5 # v0.6.1 with: advanced-security: true