From fc2ed4a43a79c31aa4f459f81b6f55f4aaded523 Mon Sep 17 00:00:00 2001 From: Ilka Schulz Date: Sun, 19 Jul 2026 13:14:27 +0200 Subject: [PATCH] upgrade all GitHub Action dependencies --- .github/workflows/bench-primitives.yml | 2 +- .github/workflows/bench-protocol.yml | 2 +- .github/workflows/docker.yaml | 6 ++-- .github/workflows/integration.yml | 8 +++--- .github/workflows/nix-mac.yaml | 12 ++++---- .github/workflows/nix.yaml | 40 +++++++++++++------------- .github/workflows/qc.yaml | 4 +-- .github/workflows/release.yaml | 16 +++++------ .github/workflows/supply-chain.yml | 2 +- 9 files changed, 46 insertions(+), 46 deletions(-) diff --git a/.github/workflows/bench-primitives.yml b/.github/workflows/bench-primitives.yml index abbcbd7a..e2eca910 100644 --- a/.github/workflows/bench-primitives.yml +++ b/.github/workflows/bench-primitives.yml @@ -32,7 +32,7 @@ jobs: # Install nix - name: Install Nix - uses: cachix/install-nix-action@v27 # A popular action for installing Nix + uses: cachix/install-nix-action@v31 # A popular action for installing Nix with: extra_nix_config: | experimental-features = nix-command flakes diff --git a/.github/workflows/bench-protocol.yml b/.github/workflows/bench-protocol.yml index dcc14037..9c6a3f7a 100644 --- a/.github/workflows/bench-protocol.yml +++ b/.github/workflows/bench-protocol.yml @@ -32,7 +32,7 @@ jobs: # Install nix - name: Install Nix - uses: cachix/install-nix-action@v27 # A popular action for installing Nix + uses: cachix/install-nix-action@v31 # A popular action for installing Nix with: extra_nix_config: | experimental-features = nix-command flakes diff --git a/.github/workflows/docker.yaml b/.github/workflows/docker.yaml index 64306ac2..15a0fc01 100644 --- a/.github/workflows/docker.yaml +++ b/.github/workflows/docker.yaml @@ -173,7 +173,7 @@ jobs: touch "${{ runner.temp }}/digests/${digest#sha256:}" - name: Upload digest - uses: actions/upload-artifact@v5 + uses: actions/upload-artifact@v7 with: name: digests-rp-${{ matrix.arch }} path: ${{ runner.temp }}/digests/* @@ -237,7 +237,7 @@ jobs: touch "${{ runner.temp }}/digests/${digest#sha256:}" - name: Upload digest - uses: actions/upload-artifact@v5 + uses: actions/upload-artifact@v7 with: name: digests-rosenpass-${{ matrix.arch }} path: ${{ runner.temp }}/digests/* @@ -255,7 +255,7 @@ jobs: target: [rp, rosenpass] steps: - name: Download digests - uses: actions/download-artifact@v5 + uses: actions/download-artifact@v8 with: path: ${{ runner.temp }}/digests pattern: digests-${{ matrix.target }}-* diff --git a/.github/workflows/integration.yml b/.github/workflows/integration.yml index 87c2dc0c..36e53e0a 100644 --- a/.github/workflows/integration.yml +++ b/.github/workflows/integration.yml @@ -16,7 +16,7 @@ jobs: runs-on: ubicloud-standard-2 steps: - uses: actions/checkout@v7 - - uses: cachix/install-nix-action@v30 + - uses: cachix/install-nix-action@v31 with: nix_path: nixpkgs=channel:nixos-unstable - uses: cachix/cachix-action@v17 @@ -53,7 +53,7 @@ jobs: # runs-on: ubicloud-standard-2-arm # steps: # - uses: actions/checkout@v7 - # - uses: cachix/install-nix-action@v30 + # - uses: cachix/install-nix-action@v31 # with: # nix_path: nixpkgs=channel:nixos-unstable # - uses: cachix/cachix-action@v17 @@ -92,7 +92,7 @@ jobs: # runs-on: ubicloud-standard-8 # steps: # - uses: actions/checkout@v7 - # - uses: cachix/install-nix-action@v30 + # - uses: cachix/install-nix-action@v31 # with: # nix_path: nixpkgs=channel:nixos-unstable # - uses: cachix/cachix-action@v17 @@ -129,7 +129,7 @@ jobs: # runs-on: warp-macos-26-arm64-6x # steps: # - uses: actions/checkout@v7 - # - uses: cachix/install-nix-action@v30 + # - uses: cachix/install-nix-action@v31 # with: # nix_path: nixpkgs=channel:nixos-unstable # - uses: cachix/cachix-action@v17 diff --git a/.github/workflows/nix-mac.yaml b/.github/workflows/nix-mac.yaml index 0fe61ae9..103447d8 100644 --- a/.github/workflows/nix-mac.yaml +++ b/.github/workflows/nix-mac.yaml @@ -20,7 +20,7 @@ jobs: - aarch64-darwin---rosenpass steps: - uses: actions/checkout@v7 - - uses: cachix/install-nix-action@v30 + - uses: cachix/install-nix-action@v31 with: nix_path: nixpkgs=channel:nixos-unstable - uses: cachix/cachix-action@v17 @@ -38,7 +38,7 @@ jobs: - aarch64-darwin---rosenpass-oci-image steps: - uses: actions/checkout@v7 - - uses: cachix/install-nix-action@v30 + - uses: cachix/install-nix-action@v31 with: nix_path: nixpkgs=channel:nixos-unstable - uses: cachix/cachix-action@v17 @@ -53,7 +53,7 @@ jobs: needs: [] steps: - uses: actions/checkout@v7 - - uses: cachix/install-nix-action@v30 + - uses: cachix/install-nix-action@v31 with: nix_path: nixpkgs=channel:nixos-unstable - uses: cachix/cachix-action@v17 @@ -68,7 +68,7 @@ jobs: needs: [] steps: - uses: actions/checkout@v7 - - uses: cachix/install-nix-action@v30 + - uses: cachix/install-nix-action@v31 with: nix_path: nixpkgs=channel:nixos-unstable - uses: cachix/cachix-action@v17 @@ -84,7 +84,7 @@ jobs: - aarch64-darwin---rosenpass steps: - uses: actions/checkout@v7 - - uses: cachix/install-nix-action@v30 + - uses: cachix/install-nix-action@v31 with: nix_path: nixpkgs=channel:nixos-unstable - uses: cachix/cachix-action@v17 @@ -98,7 +98,7 @@ jobs: runs-on: warp-macos-26-arm64-6x steps: - uses: actions/checkout@v7 - - uses: cachix/install-nix-action@v30 + - uses: cachix/install-nix-action@v31 with: nix_path: nixpkgs=channel:nixos-unstable - uses: cachix/cachix-action@v17 diff --git a/.github/workflows/nix.yaml b/.github/workflows/nix.yaml index 850ba050..3d96be57 100644 --- a/.github/workflows/nix.yaml +++ b/.github/workflows/nix.yaml @@ -19,7 +19,7 @@ jobs: - i686-linux---rosenpass steps: - uses: actions/checkout@v7 - - uses: cachix/install-nix-action@v30 + - uses: cachix/install-nix-action@v31 with: nix_path: nixpkgs=channel:nixos-unstable - uses: cachix/cachix-action@v17 @@ -34,7 +34,7 @@ jobs: needs: [] steps: - uses: actions/checkout@v7 - - uses: cachix/install-nix-action@v30 + - uses: cachix/install-nix-action@v31 with: nix_path: nixpkgs=channel:nixos-unstable - uses: cachix/cachix-action@v17 @@ -50,7 +50,7 @@ jobs: - i686-linux---rosenpass steps: - uses: actions/checkout@v7 - - uses: cachix/install-nix-action@v30 + - uses: cachix/install-nix-action@v31 with: nix_path: nixpkgs=channel:nixos-unstable - uses: cachix/cachix-action@v17 @@ -67,7 +67,7 @@ jobs: runs-on: ubicloud-standard-8 steps: - uses: actions/checkout@v7 - - uses: cachix/install-nix-action@v30 + - uses: cachix/install-nix-action@v31 with: nix_path: nixpkgs=channel:nixos-unstable - uses: cachix/cachix-action@v17 @@ -84,7 +84,7 @@ jobs: - x86_64-linux---rosenpass steps: - uses: actions/checkout@v7 - - uses: cachix/install-nix-action@v30 + - uses: cachix/install-nix-action@v31 with: nix_path: nixpkgs=channel:nixos-unstable - uses: cachix/cachix-action@v17 @@ -100,7 +100,7 @@ jobs: - x86_64-linux---proverif-patched steps: - uses: actions/checkout@v7 - - uses: cachix/install-nix-action@v30 + - uses: cachix/install-nix-action@v31 with: nix_path: nixpkgs=channel:nixos-unstable - uses: cachix/cachix-action@v17 @@ -115,7 +115,7 @@ jobs: needs: [] steps: - uses: actions/checkout@v7 - - uses: cachix/install-nix-action@v30 + - uses: cachix/install-nix-action@v31 with: nix_path: nixpkgs=channel:nixos-unstable - uses: cachix/cachix-action@v17 @@ -133,7 +133,7 @@ jobs: - x86_64-linux---rp-static steps: - uses: actions/checkout@v7 - - uses: cachix/install-nix-action@v30 + - uses: cachix/install-nix-action@v31 with: nix_path: nixpkgs=channel:nixos-unstable - uses: cachix/cachix-action@v17 @@ -154,7 +154,7 @@ jobs: # DEBIAN_FRONTEND=noninteractive # sudo apt-get update -q -y && sudo apt-get install -q -y qemu-system-aarch64 qemu-efi binfmt-support qemu-user-static # - uses: actions/checkout@v7 - # - uses: cachix/install-nix-action@v30 + # - uses: cachix/install-nix-action@v31 # with: # nix_path: nixpkgs=channel:nixos-unstable # extra_nix_config: | @@ -171,7 +171,7 @@ jobs: needs: [] steps: - uses: actions/checkout@v7 - - uses: cachix/install-nix-action@v30 + - uses: cachix/install-nix-action@v31 with: nix_path: nixpkgs=channel:nixos-unstable - uses: cachix/cachix-action@v17 @@ -189,7 +189,7 @@ jobs: DEBIAN_FRONTEND=noninteractive sudo apt-get update -q -y && sudo apt-get install -q -y qemu-system-aarch64 qemu-efi-aarch64 binfmt-support qemu-user-static - uses: actions/checkout@v7 - - uses: cachix/install-nix-action@v30 + - uses: cachix/install-nix-action@v31 with: nix_path: nixpkgs=channel:nixos-unstable extra_nix_config: | @@ -209,7 +209,7 @@ jobs: DEBIAN_FRONTEND=noninteractive sudo apt-get update -q -y && sudo apt-get install -q -y qemu-system-aarch64 qemu-efi-aarch64 binfmt-support qemu-user-static - uses: actions/checkout@v7 - - uses: cachix/install-nix-action@v30 + - uses: cachix/install-nix-action@v31 with: nix_path: nixpkgs=channel:nixos-unstable extra_nix_config: | @@ -227,7 +227,7 @@ jobs: - x86_64-linux---rosenpass steps: - uses: actions/checkout@v7 - - uses: cachix/install-nix-action@v30 + - uses: cachix/install-nix-action@v31 with: nix_path: nixpkgs=channel:nixos-unstable - uses: cachix/cachix-action@v17 @@ -246,7 +246,7 @@ jobs: DEBIAN_FRONTEND=noninteractive sudo apt-get update -q -y && sudo apt-get install -q -y qemu-system-aarch64 qemu-efi-aarch64 binfmt-support qemu-user-static - uses: actions/checkout@v7 - - uses: cachix/install-nix-action@v30 + - uses: cachix/install-nix-action@v31 with: nix_path: nixpkgs=channel:nixos-unstable extra_nix_config: | @@ -263,7 +263,7 @@ jobs: needs: [] steps: - uses: actions/checkout@v7 - - uses: cachix/install-nix-action@v30 + - uses: cachix/install-nix-action@v31 with: nix_path: nixpkgs=channel:nixos-unstable - uses: cachix/cachix-action@v17 @@ -278,7 +278,7 @@ jobs: needs: [] steps: - uses: actions/checkout@v7 - - uses: cachix/install-nix-action@v30 + - uses: cachix/install-nix-action@v31 with: nix_path: nixpkgs=channel:nixos-unstable - uses: cachix/cachix-action@v17 @@ -294,7 +294,7 @@ jobs: - x86_64-linux---rosenpass-static steps: - uses: actions/checkout@v7 - - uses: cachix/install-nix-action@v30 + - uses: cachix/install-nix-action@v31 with: nix_path: nixpkgs=channel:nixos-unstable - uses: cachix/cachix-action@v17 @@ -309,7 +309,7 @@ jobs: needs: [] steps: - uses: actions/checkout@v7 - - uses: cachix/install-nix-action@v30 + - uses: cachix/install-nix-action@v31 with: nix_path: nixpkgs=channel:nixos-unstable - uses: cachix/cachix-action@v17 @@ -326,7 +326,7 @@ jobs: runs-on: ubicloud-standard-8 steps: - uses: actions/checkout@v7 - - uses: cachix/install-nix-action@v30 + - uses: cachix/install-nix-action@v31 with: nix_path: nixpkgs=channel:nixos-unstable - uses: cachix/cachix-action@v17 @@ -341,7 +341,7 @@ jobs: if: ${{ github.ref == 'refs/heads/main' }} steps: - uses: actions/checkout@v7 - - uses: cachix/install-nix-action@v30 + - uses: cachix/install-nix-action@v31 with: nix_path: nixpkgs=channel:nixos-unstable - uses: cachix/cachix-action@v17 diff --git a/.github/workflows/qc.yaml b/.github/workflows/qc.yaml index c7d3f4e4..29188c36 100644 --- a/.github/workflows/qc.yaml +++ b/.github/workflows/qc.yaml @@ -26,7 +26,7 @@ jobs: runs-on: ubicloud-standard-2 steps: - uses: actions/checkout@v7 - - uses: cachix/install-nix-action@v30 + - uses: cachix/install-nix-action@v31 with: nix_path: nixpkgs=channel:nixos-26.05 - uses: cachix/cachix-action@v17 @@ -133,7 +133,7 @@ jobs: ~/.cargo/git/db/ target/ key: ${{ runner.os }}-cargo-${{ hashFiles('**/Cargo.lock') }} - - uses: cachix/install-nix-action@v30 + - uses: cachix/install-nix-action@v31 with: nix_path: nixpkgs=channel:nixos-unstable - uses: cachix/cachix-action@v17 diff --git a/.github/workflows/release.yaml b/.github/workflows/release.yaml index a0f3fb1f..31164cc3 100644 --- a/.github/workflows/release.yaml +++ b/.github/workflows/release.yaml @@ -11,7 +11,7 @@ jobs: runs-on: ubicloud-standard-2 steps: - uses: actions/checkout@v7 - - uses: cachix/install-nix-action@v30 + - uses: cachix/install-nix-action@v31 - uses: cachix/cachix-action@v17 with: name: rosenpass @@ -19,7 +19,7 @@ jobs: - name: Build release run: nix build .#release-package --print-build-logs - name: Release - uses: softprops/action-gh-release@v2 + uses: softprops/action-gh-release@v3 with: draft: ${{ contains(github.ref_name, 'rc') }} prerelease: ${{ contains(github.ref_name, 'alpha') || contains(github.ref_name, 'beta') }} @@ -29,7 +29,7 @@ jobs: runs-on: macos-13 steps: - uses: actions/checkout@v7 - - uses: cachix/install-nix-action@v30 + - uses: cachix/install-nix-action@v31 - uses: cachix/cachix-action@v17 with: name: rosenpass @@ -37,7 +37,7 @@ jobs: - name: Build release run: nix build .#release-package --print-build-logs - name: Release - uses: softprops/action-gh-release@v2 + uses: softprops/action-gh-release@v3 with: draft: ${{ contains(github.ref_name, 'rc') }} prerelease: ${{ contains(github.ref_name, 'alpha') || contains(github.ref_name, 'beta') }} @@ -47,7 +47,7 @@ jobs: runs-on: ubicloud-standard-2 steps: - uses: actions/checkout@v7 - - uses: cachix/install-nix-action@v30 + - uses: cachix/install-nix-action@v31 with: nix_path: nixpkgs=channel:nixos-unstable - uses: cachix/cachix-action@v17 @@ -57,7 +57,7 @@ jobs: - name: Build release run: nix build .#release-package --print-build-logs - name: Release - uses: softprops/action-gh-release@v2 + uses: softprops/action-gh-release@v3 with: draft: ${{ contains(github.ref_name, 'rc') }} prerelease: ${{ contains(github.ref_name, 'alpha') || contains(github.ref_name, 'beta') }} @@ -67,7 +67,7 @@ jobs: runs-on: ubicloud-standard-2 steps: - uses: actions/checkout@v7 - - uses: cachix/install-nix-action@v30 + - uses: cachix/install-nix-action@v31 - uses: cachix/cachix-action@v17 with: name: rosenpass @@ -77,7 +77,7 @@ jobs: mkdir packages for f in $(nix build .#package-deb .#package-rpm --print-out-paths); do cp "$f" "packages/${f#*-}"; done - name: Release - uses: softprops/action-gh-release@v2 + uses: softprops/action-gh-release@v3 with: draft: ${{ contains(github.ref_name, 'rc') }} prerelease: ${{ contains(github.ref_name, 'alpha') || contains(github.ref_name, 'beta') }} diff --git a/.github/workflows/supply-chain.yml b/.github/workflows/supply-chain.yml index aeeddb14..08f89a6a 100644 --- a/.github/workflows/supply-chain.yml +++ b/.github/workflows/supply-chain.yml @@ -159,7 +159,7 @@ jobs: run: cargo vet regenerate exemptions - name: Commit and push changes if we are in the context of a PR created by dependabot and the last commit is by dependabot or a regeneration of cargo vet exemptions was explicitly requested. if: env.IN_DEPENDABOT_PR_CONTEXT == 'true' && (env.LAST_COMMIT_IS_BY_DEPENDABOT == 'true' || env.REGEN_EXEMP=='true') - uses: stefanzweifel/git-auto-commit-action@v6 + uses: stefanzweifel/git-auto-commit-action@v7 with: commit_message: Regenerate cargo vet exemptions commit_user_name: rosenpass-ci-bot[bot]