From 4b9061d62ad5f5f0734532054345956295bffaf0 Mon Sep 17 00:00:00 2001
From: "renovate[bot]" <29139614+renovate[bot]@users.noreply.github.com>
Date: Thu, 16 Jul 2026 16:48:37 +0000
Subject: [PATCH 01/17] chore(deps): Update Prek to v0.4.10 (#85)
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit
This PR contains the following updates:
| Package | Update | Change |
|---|---|---|
| [prek](https://redirect.github.com/j178/prek) | patch | `0.4.9` →
`0.4.10` |
---
### Release Notes
j178/prek (prek)
###
[`v0.4.10`](https://redirect.github.com/j178/prek/blob/HEAD/CHANGELOG.md#0410)
[Compare
Source](https://redirect.github.com/j178/prek/compare/v0.4.9...v0.4.10)
Released on 2026-07-16.
##### Enhancements
- Add PHP language support
([#2314](https://redirect.github.com/j178/prek/pull/2314))
- Add freeze option to update settings
([#2323](https://redirect.github.com/j178/prek/pull/2323))
- Add tag filters to update configuration
([#2354](https://redirect.github.com/j178/prek/pull/2354))
- Identify 'mts' and 'cts' as TypeScript files
([#2209](https://redirect.github.com/j178/prek/pull/2209))
- Publish Alpine Docker images
([#2352](https://redirect.github.com/j178/prek/pull/2352))
- Support builtin and meta in try-repo
([#2350](https://redirect.github.com/j178/prek/pull/2350))
##### Bug fixes
- Fix Python discovery order
([#2348](https://redirect.github.com/j178/prek/pull/2348))
- Fix Windows progress rendering
([#2328](https://redirect.github.com/j178/prek/pull/2328))
- Preserve configured repo values for updates
([#2324](https://redirect.github.com/j178/prek/pull/2324))
- Scope synthetic `GIT_WORK_TREE` to git commands
([#2356](https://redirect.github.com/j178/prek/pull/2356))
##### Documentation
- Expand common workflows guide
([#2351](https://redirect.github.com/j178/prek/pull/2351))
##### Contributors
- [@j178](https://redirect.github.com/j178)
---
### Configuration
📅 **Schedule**: (UTC)
- Branch creation
- Every minute (`* * * * *`)
- Automerge
- At any time (no schedule defined)
🚦 **Automerge**: Enabled.
♻ **Rebasing**: Whenever PR is behind base branch, or you tick the
rebase/retry checkbox.
🔕 **Ignore**: Close this PR and you won't be reminded about this update
again.
---
- [ ] If you want to rebase/retry this PR, check
this box
---
This PR was generated by [Mend Renovate](https://mend.io/renovate/).
View the [repository job
log](https://developer.mend.io/github/epage/_rust).
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
---
.github/workflows/pre-commit.yml | 2 +-
1 file changed, 1 insertion(+), 1 deletion(-)
diff --git a/.github/workflows/pre-commit.yml b/.github/workflows/pre-commit.yml
index 7b8fe04..0e72feb 100644
--- a/.github/workflows/pre-commit.yml
+++ b/.github/workflows/pre-commit.yml
@@ -29,4 +29,4 @@ jobs:
- name: prek
uses: j178/prek-action@e98a699c41eb69ab013a45817a0406469a748f8d # v2.0.5
with:
- prek-version: '0.4.9'
+ prek-version: '0.4.10'
From 6b2a60bd3ab154a5aa96d65fdc35ef8641be75ee Mon Sep 17 00:00:00 2001
From: Ed Page
Date: Fri, 17 Jul 2026 19:48:19 -0500
Subject: [PATCH 02/17] chore(ci): Switch to github's coverage reporting
---
.github/workflows/ci.yml | 12 ++++++++----
1 file changed, 8 insertions(+), 4 deletions(-)
diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
index 064cf8b..118b708 100644
--- a/.github/workflows/ci.yml
+++ b/.github/workflows/ci.yml
@@ -196,6 +196,8 @@ jobs:
coverage:
name: Coverage
runs-on: ubuntu-latest
+ permissions:
+ code-quality: write
steps:
- name: Checkout repository
uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6.0.3
@@ -210,8 +212,10 @@ jobs:
- name: Install cargo-tarpaulin
run: cargo install cargo-tarpaulin
- name: Gather coverage
- run: cargo tarpaulin --output-dir coverage --out lcov
- - name: Publish to Coveralls
- uses: coverallsapp/github-action@09b709cf6a16e30b0808ba050c7a6e8a5ef13f8d # master
+ run: cargo tarpaulin --out xml
+ - name: Upload coverage report
+ if: github.event_name != 'pull_request' || github.event.pull_request.head.repo.full_name == github.repository
+ uses: actions/upload-code-coverage@a72ab75b4dee0e479386fb9bf33c8dcf64b9c772 # v1.4.0
with:
- github-token: ${{ secrets.GITHUB_TOKEN }}
+ file: cobertura.xml
+ language: Rust
From ec06cca391825fdca72bc4f1372c896454852afb Mon Sep 17 00:00:00 2001
From: "renovate[bot]" <29139614+renovate[bot]@users.noreply.github.com>
Date: Mon, 20 Jul 2026 21:36:03 +0000
Subject: [PATCH 03/17] chore(deps): Update pre-commit hook crate-ci/committed
to v1.1.11
---
.pre-commit-config.yaml | 2 +-
1 file changed, 1 insertion(+), 1 deletion(-)
diff --git a/.pre-commit-config.yaml b/.pre-commit-config.yaml
index c43d2f2..4eef4a8 100644
--- a/.pre-commit-config.yaml
+++ b/.pre-commit-config.yaml
@@ -14,7 +14,7 @@ repos:
hooks:
- id: typos
- repo: https://github.com/crate-ci/committed
- rev: v1.1.10
+ rev: v1.1.11
hooks:
- id: committed
- repo: https://github.com/zizmorcore/zizmor-pre-commit
From a52cd8ac45cac2f1600c6ba54e38049454e04184 Mon Sep 17 00:00:00 2001
From: "renovate[bot]" <29139614+renovate[bot]@users.noreply.github.com>
Date: Fri, 24 Jul 2026 23:53:14 +0000
Subject: [PATCH 04/17] chore(deps): Update Prek to v0.4.11 (#86)
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit
This PR contains the following updates:
| Package | Update | Change |
|---|---|---|
| [prek](https://redirect.github.com/j178/prek) | patch | `0.4.10` →
`0.4.11` |
---
### Release Notes
j178/prek (prek)
###
[`v0.4.11`](https://redirect.github.com/j178/prek/blob/HEAD/CHANGELOG.md#0411)
[Compare
Source](https://redirect.github.com/j178/prek/compare/v0.4.10...v0.4.11)
Released on 2026-07-25.
##### Highlights
- This release adds two new builtin hooks, `deny-pattern` and
`require-pattern`,
as native alternatives for `pygrep` use cases. `deny-pattern` fails when
a
configured pattern is found, while `require-pattern` ensures every
selected
file contains a match. By matching natively without spawning a Python
subprocess, they run over 4x faster than `pygrep` in benchmarks. Note
that
they use
[Rust `regex` syntax](https://docs.rs/regex/latest/regex/#syntax), which
does
not support look-around features such as negative lookbehind.
- `prek run` now supports `--glob ` to run hooks on tracked
files
matching a glob. It can be repeated or combined with `--files` and
`--directory`.
- Hook priorities now support reusable aliases:
```toml
[priorities]
checks = 10
[[repos]]
repo = "builtin"
hooks = [
{ id = "check-json", priority = "checks" },
{ id = "check-yaml", priority = "checks" },
]
```
This makes parallel scheduling easier to read and maintain.
##### Enhancements
- Add `deny-pattern` and `require-pattern` builtin hooks
([#2359](https://redirect.github.com/j178/prek/pull/2359))
- Support `--glob` patterns in `prek run`
([#2381](https://redirect.github.com/j178/prek/pull/2381))
- Support reusable aliases for hook priorities
([#2331](https://redirect.github.com/j178/prek/pull/2331))
- Implement `requirements-txt-fixer` as a builtin hook
([#2390](https://redirect.github.com/j178/prek/pull/2390))
- Improve user-facing warnings and errors
([#2380](https://redirect.github.com/j178/prek/pull/2380))
- Install Node hooks through git url
([#2394](https://redirect.github.com/j178/prek/pull/2394))
##### Performance
- Reduce blocking-pool overhead in file hooks
([#2384](https://redirect.github.com/j178/prek/pull/2384))
- Speed up mixed-line-ending scans with memchr2
([#2391](https://redirect.github.com/j178/prek/pull/2391))
##### Bug fixes
- Honor filenames in builtin hook entry and args
([#2389](https://redirect.github.com/j178/prek/pull/2389))
- Match identify tags across filename parts
([#2399](https://redirect.github.com/j178/prek/pull/2399))
- Preserve hook output order with a shared pipe
([#2385](https://redirect.github.com/j178/prek/pull/2385))
- Preserve system download policy when applying metadata
([#2395](https://redirect.github.com/j178/prek/pull/2395))
##### Contributors
- [@j178](https://redirect.github.com/j178)
- [@chrisoro](https://redirect.github.com/chrisoro)
---
### Configuration
📅 **Schedule**: (UTC)
- Branch creation
- Every minute (`* * * * *`)
- Automerge
- At any time (no schedule defined)
🚦 **Automerge**: Enabled.
♻ **Rebasing**: Whenever PR is behind base branch, or you tick the
rebase/retry checkbox.
🔕 **Ignore**: Close this PR and you won't be reminded about this update
again.
---
- [ ] If you want to rebase/retry this PR, check
this box
---
This PR was generated by [Mend Renovate](https://mend.io/renovate/).
View the [repository job
log](https://developer.mend.io/github/epage/_rust).
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
---
.github/workflows/pre-commit.yml | 2 +-
1 file changed, 1 insertion(+), 1 deletion(-)
diff --git a/.github/workflows/pre-commit.yml b/.github/workflows/pre-commit.yml
index 0e72feb..97a74e9 100644
--- a/.github/workflows/pre-commit.yml
+++ b/.github/workflows/pre-commit.yml
@@ -29,4 +29,4 @@ jobs:
- name: prek
uses: j178/prek-action@e98a699c41eb69ab013a45817a0406469a748f8d # v2.0.5
with:
- prek-version: '0.4.10'
+ prek-version: '0.4.11'
From 58030671344f2b87b09704e8df6eb0f2bfaf0723 Mon Sep 17 00:00:00 2001
From: "renovate[bot]" <29139614+renovate[bot]@users.noreply.github.com>
Date: Sat, 1 Aug 2026 01:38:27 +0000
Subject: [PATCH 05/17] chore(deps): Update dtolnay/rust-toolchain digest to
4cda84d
---
.github/workflows/ci.yml | 18 +++++++++---------
.github/workflows/rust-next.yml | 4 ++--
2 files changed, 11 insertions(+), 11 deletions(-)
diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
index 118b708..e3bd373 100644
--- a/.github/workflows/ci.yml
+++ b/.github/workflows/ci.yml
@@ -47,7 +47,7 @@ jobs:
with:
persist-credentials: false
- name: Install Rust
- uses: dtolnay/rust-toolchain@4be7066ada62dd38de10e7b70166bc74ed198c30 # stable
+ uses: dtolnay/rust-toolchain@4cda84d5c5c54efe2404f9d843567869ab1699d4 # stable
with:
toolchain: ${{ matrix.rust }}
- name: Initialize cache
@@ -72,7 +72,7 @@ jobs:
with:
persist-credentials: false
- name: Install Rust
- uses: dtolnay/rust-toolchain@4be7066ada62dd38de10e7b70166bc74ed198c30 # stable
+ uses: dtolnay/rust-toolchain@4cda84d5c5c54efe2404f9d843567869ab1699d4 # stable
with:
toolchain: stable
- name: Initialize cache
@@ -95,11 +95,11 @@ jobs:
with:
persist-credentials: false
- name: Install stable Rust
- uses: dtolnay/rust-toolchain@4be7066ada62dd38de10e7b70166bc74ed198c30 # stable
+ uses: dtolnay/rust-toolchain@4cda84d5c5c54efe2404f9d843567869ab1699d4 # stable
with:
toolchain: stable
- name: Install nightly Rust
- uses: dtolnay/rust-toolchain@4be7066ada62dd38de10e7b70166bc74ed198c30 # stable
+ uses: dtolnay/rust-toolchain@4cda84d5c5c54efe2404f9d843567869ab1699d4 # stable
with:
toolchain: nightly
- name: Downgrade dependencies to minimal versions
@@ -114,7 +114,7 @@ jobs:
with:
persist-credentials: false
- name: Install Rust
- uses: dtolnay/rust-toolchain@4be7066ada62dd38de10e7b70166bc74ed198c30 # stable
+ uses: dtolnay/rust-toolchain@4cda84d5c5c54efe2404f9d843567869ab1699d4 # stable
with:
toolchain: stable
- name: Initialize cache
@@ -130,7 +130,7 @@ jobs:
with:
persist-credentials: false
- name: Install Rust
- uses: dtolnay/rust-toolchain@4be7066ada62dd38de10e7b70166bc74ed198c30 # stable
+ uses: dtolnay/rust-toolchain@4cda84d5c5c54efe2404f9d843567869ab1699d4 # stable
with:
toolchain: "1.97" # STABLE
- name: Initialize cache
@@ -148,7 +148,7 @@ jobs:
with:
persist-credentials: false
- name: Install Rust
- uses: dtolnay/rust-toolchain@4be7066ada62dd38de10e7b70166bc74ed198c30 # stable
+ uses: dtolnay/rust-toolchain@4cda84d5c5c54efe2404f9d843567869ab1699d4 # stable
with:
toolchain: "1.97" # STABLE
components: rustfmt
@@ -167,7 +167,7 @@ jobs:
with:
persist-credentials: false
- name: Install Rust
- uses: dtolnay/rust-toolchain@4be7066ada62dd38de10e7b70166bc74ed198c30 # stable
+ uses: dtolnay/rust-toolchain@4cda84d5c5c54efe2404f9d843567869ab1699d4 # stable
with:
toolchain: "1.97" # STABLE
components: clippy
@@ -204,7 +204,7 @@ jobs:
with:
persist-credentials: false
- name: Install Rust
- uses: dtolnay/rust-toolchain@4be7066ada62dd38de10e7b70166bc74ed198c30 # stable
+ uses: dtolnay/rust-toolchain@4cda84d5c5c54efe2404f9d843567869ab1699d4 # stable
with:
toolchain: stable
- name: Initialize cache
diff --git a/.github/workflows/rust-next.yml b/.github/workflows/rust-next.yml
index a654572..0320167 100644
--- a/.github/workflows/rust-next.yml
+++ b/.github/workflows/rust-next.yml
@@ -37,7 +37,7 @@ jobs:
with:
persist-credentials: false
- name: Install Rust
- uses: dtolnay/rust-toolchain@4be7066ada62dd38de10e7b70166bc74ed198c30 # stable
+ uses: dtolnay/rust-toolchain@4cda84d5c5c54efe2404f9d843567869ab1699d4 # stable
with:
toolchain: ${{ matrix.rust }}
- name: Initialize cache
@@ -64,7 +64,7 @@ jobs:
with:
persist-credentials: false
- name: Install Rust
- uses: dtolnay/rust-toolchain@4be7066ada62dd38de10e7b70166bc74ed198c30 # stable
+ uses: dtolnay/rust-toolchain@4cda84d5c5c54efe2404f9d843567869ab1699d4 # stable
with:
toolchain: stable
- name: Initialize cache
From bf018bb3575255ff638a1d01c8a466bbaa0ede80 Mon Sep 17 00:00:00 2001
From: "renovate[bot]" <29139614+renovate[bot]@users.noreply.github.com>
Date: Sat, 1 Aug 2026 01:40:14 +0000
Subject: [PATCH 06/17] chore(deps): Update compatible (actions) (#88)
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit
This PR contains the following updates:
| Package | Type | Update | Change |
|---|---|---|---|
|
[EmbarkStudios/cargo-deny-action](https://redirect.github.com/EmbarkStudios/cargo-deny-action)
| action | minor | `v2.0.20` → `v2.1.1` |
| [actions/checkout](https://redirect.github.com/actions/checkout) |
action | minor | `v6.0.3` → `v6.1.0` |
|
[actions/upload-code-coverage](https://redirect.github.com/actions/upload-code-coverage)
| action | patch | `v1.4.0` → `v1.4.1` |
|
[github/codeql-action](https://redirect.github.com/github/codeql-action)
| action | minor | `v4.36.2` → `v4.37.4` |
| [j178/prek-action](https://redirect.github.com/j178/prek-action) |
action | patch | `v2.0.5` → `v2.0.6` |
|
[taiki-e/install-action](https://redirect.github.com/taiki-e/install-action)
| action | minor | `v2.82.7` → `v2.85.5` |
|
[zizmorcore/zizmor-action](https://redirect.github.com/zizmorcore/zizmor-action)
| action | minor | `v0.5.7` → `v0.6.1` |
---
### Release Notes
EmbarkStudios/cargo-deny-action
(EmbarkStudios/cargo-deny-action)
###
[`v2.1.1`](https://redirect.github.com/EmbarkStudios/cargo-deny-action/releases/tag/v2.1.1):
Release 2.1.1 - cargo-deny 0.20.2
[Compare
Source](https://redirect.github.com/EmbarkStudios/cargo-deny-action/compare/v2.1.0...v2.1.1)
#### Fixed
-
[PR#116](https://redirect.github.com/EmbarkStudios/cargo-deny-action/pull/116)
fixed in issue introduced in the 2.1.0 release due the deprecation of
the `use-git-cli` argument. Thanks
[@Firestar99](https://redirect.github.com/Firestar99)!
###
[`v2.1.0`](https://redirect.github.com/EmbarkStudios/cargo-deny-action/releases/tag/v2.1.0):
Release 2.1.0 - cargo-deny 0.20.2
[Compare
Source](https://redirect.github.com/EmbarkStudios/cargo-deny-action/compare/v2.0.20...v2.1.0)
##### Changed
-
[PR#881](https://redirect.github.com/EmbarkStudios/cargo-deny/pull/881)
refactored the CLI, moving some duplicated options/flags into the root
and removing several deprecated options/flags/values. See the PR for a
full list of changes.
##### Added
-
[PR#879](https://redirect.github.com/EmbarkStudios/cargo-deny/pull/879)
resolved
[#873](https://redirect.github.com/EmbarkStudios/cargo-deny/issues/873)
by adding a new
[`bans.std-replacements`](https://embarkstudios.github.io/cargo-deny/checks/bans/cfg.html#the-std-replacements-field-optional)
lint which checks the graph for crates.io sourced crates that have been
partially or fully replaced in `std` and/or `core`.
##### Fixed
-
[PR#880](https://redirect.github.com/EmbarkStudios/cargo-deny/pull/880)
resolved
[#765](https://redirect.github.com/EmbarkStudios/cargo-deny/issues/765)
by respecting non-default build script paths in manifests.
-
[PR#881](https://redirect.github.com/EmbarkStudios/cargo-deny/pull/881)
resolved
[#874](https://redirect.github.com/EmbarkStudios/cargo-deny/issues/874)
by cleaning up the CLI, deduplicating some options/flags that caused bug
in the `list` subcommand.
actions/checkout (actions/checkout)
###
[`v6.1.0`](https://redirect.github.com/actions/checkout/compare/v6.0.3...v6.1.0)
[Compare
Source](https://redirect.github.com/actions/checkout/compare/v6.0.3...v6.1.0)
actions/upload-code-coverage
(actions/upload-code-coverage)
###
[`v1.4.1`](https://redirect.github.com/actions/upload-code-coverage/compare/v1.4.0...v1.4.1)
[Compare
Source](https://redirect.github.com/actions/upload-code-coverage/compare/v1.4.0...v1.4.1)
github/codeql-action (github/codeql-action)
###
[`v4.37.4`](https://redirect.github.com/github/codeql-action/compare/v4.37.3...v4.37.4)
[Compare
Source](https://redirect.github.com/github/codeql-action/compare/v4.37.3...v4.37.4)
###
[`v4.37.3`](https://redirect.github.com/github/codeql-action/releases/tag/v4.37.3)
[Compare
Source](https://redirect.github.com/github/codeql-action/compare/v4.37.2...v4.37.3)
No user facing changes.
###
[`v4.37.2`](https://redirect.github.com/github/codeql-action/releases/tag/v4.37.2)
[Compare
Source](https://redirect.github.com/github/codeql-action/compare/v4.37.1...v4.37.2)
- The new address format for the `config-file` input that was introduced
in CodeQL Action 4.37.0 is now enabled by default. In addition to the
format described there, the `remote=` prefix can now be used to
explicitly indicate that the input refers to a remote file. All previous
input formats continue to be accepted as well.
[#4023](https://redirect.github.com/github/codeql-action/pull/4023)
- The CodeQL Action can now make use of [configured private
registries](https://docs.github.com/en/code-security/how-tos/secure-at-scale/configure-organization-security/manage-usage-and-access/giving-org-access-private-registries)
in Default Setup to retrieve CodeQL configuration files from remote
repositories that require authentication. This will allow customers to
store their CodeQL configuration in a single repository that can then be
referenced by Default Setup workflows in other repositories. We expect
to roll this and other, related changes out to everyone in July.
[#4007](https://redirect.github.com/github/codeql-action/pull/4007)
###
[`v4.37.1`](https://redirect.github.com/github/codeql-action/releases/tag/v4.37.1)
[Compare
Source](https://redirect.github.com/github/codeql-action/compare/v4.37.0...v4.37.1)
- *Upcoming breaking change*: Add a deprecation warning for customers
using CodeQL version 2.20.6 and earlier. These versions of CodeQL were
discontinued on 1 July 2026 alongside GitHub Enterprise Server 3.16, and
will be unsupported by the next minor release of the CodeQL Action.
[#3956](https://redirect.github.com/github/codeql-action/pull/3956)
- Update default CodeQL bundle version to
[2.26.1](https://redirect.github.com/github/codeql-action/releases/tag/codeql-bundle-v2.26.1).
[#4019](https://redirect.github.com/github/codeql-action/pull/4019)
###
[`v4.37.0`](https://redirect.github.com/github/codeql-action/releases/tag/v4.37.0)
[Compare
Source](https://redirect.github.com/github/codeql-action/compare/v4.36.3...v4.37.0)
- Update default CodeQL bundle version to
[2.26.0](https://redirect.github.com/github/codeql-action/releases/tag/codeql-bundle-v2.26.0).
[#3995](https://redirect.github.com/github/codeql-action/pull/3995)
- In addition to the existing input format, the `config-file` input for
the `codeql-action/init` step will soon support a new
`[owner/]repo[@ref][:path]` format. All components except the
repository name are optional. If omitted, `owner` defaults to the same
owner as the repository the analysis is running for, `ref` to `main`,
and `path` to `.github/codeql-action.yaml`. Support for this format
ships in this version of the CodeQL Action, but will only be enabled
over the coming weeks.
[#3973](https://redirect.github.com/github/codeql-action/pull/3973)
###
[`v4.36.3`](https://redirect.github.com/github/codeql-action/releases/tag/v4.36.3)
[Compare
Source](https://redirect.github.com/github/codeql-action/compare/v4.36.2...v4.36.3)
No user facing changes.
j178/prek-action (j178/prek-action)
###
[`v2.0.6`](https://redirect.github.com/j178/prek-action/releases/tag/v2.0.6)
[Compare
Source](https://redirect.github.com/j178/prek-action/compare/v2.0.5...v2.0.6)
#### What's Changed
- Update known versions for prek 0.4.6 by
[@j178](https://redirect.github.com/j178) in
[#159](https://redirect.github.com/j178/prek-action/pull/159)
- Update known versions for prek 0.4.8 by
[@j178](https://redirect.github.com/j178) in
[#162](https://redirect.github.com/j178/prek-action/pull/162)
- Update known versions for prek 0.4.9 by
[@j178](https://redirect.github.com/j178) in
[#163](https://redirect.github.com/j178/prek-action/pull/163)
- Update known versions for prek 0.4.10 by
[@j178](https://redirect.github.com/j178) in
[#167](https://redirect.github.com/j178/prek-action/pull/167)
- Disable color in `prek cache dir` output by
[@KSmanis](https://redirect.github.com/KSmanis) in
[#168](https://redirect.github.com/j178/prek-action/pull/168)
#### New Contributors
- [@KSmanis](https://redirect.github.com/KSmanis) made their
first contribution in
[#168](https://redirect.github.com/j178/prek-action/pull/168)
**Full Changelog**:
taiki-e/install-action (taiki-e/install-action)
###
[`v2.85.5`](https://redirect.github.com/taiki-e/install-action/compare/v2.85.4...v2.85.5)
[Compare
Source](https://redirect.github.com/taiki-e/install-action/compare/v2.85.4...v2.85.5)
###
[`v2.85.4`](https://redirect.github.com/taiki-e/install-action/releases/tag/v2.85.4):
2.85.4
[Compare
Source](https://redirect.github.com/taiki-e/install-action/compare/v2.85.3...v2.85.4)
- Update `uv@latest` to 0.11.33.
- Update `mise@latest` to 2026.7.15.
- Update `biome@latest` to 2.5.6.
###
[`v2.85.3`](https://redirect.github.com/taiki-e/install-action/releases/tag/v2.85.3):
2.85.3
[Compare
Source](https://redirect.github.com/taiki-e/install-action/compare/v2.85.2...v2.85.3)
- Update `xh@latest` to 0.26.2.
- Update `ubi@latest` to 0.10.0.
- Update `mise@latest` to 2026.7.14.
- Update `martin@latest` to 1.13.0.
- Update `cargo-shear@latest` to 1.13.3.
- Update `cargo-binstall@latest` to 1.21.1.
###
[`v2.85.2`](https://redirect.github.com/taiki-e/install-action/releases/tag/v2.85.2):
2.85.2
[Compare
Source](https://redirect.github.com/taiki-e/install-action/compare/v2.85.1...v2.85.2)
- Update `prek@latest` to 0.4.11.
- Update `mise@latest` to 2026.7.13.
- Update `kingfisher@latest` to 1.109.0.
###
[`v2.85.1`](https://redirect.github.com/taiki-e/install-action/releases/tag/v2.85.1):
2.85.1
[Compare
Source](https://redirect.github.com/taiki-e/install-action/compare/v2.85.0...v2.85.1)
- Update `vacuum@latest` to 0.30.0.
- Update `uv@latest` to 0.11.32.
- Update `mise@latest` to 2026.7.12.
- Update `cyclonedx@latest` to 0.33.1.
- Update `cargo-neat@latest` to 0.5.2.
###
[`v2.85.0`](https://redirect.github.com/taiki-e/install-action/releases/tag/v2.85.0):
2.85.0
[Compare
Source](https://redirect.github.com/taiki-e/install-action/compare/v2.84.1...v2.85.0)
- Support `wild` (alias: `wild-linker`).
([#1949](https://redirect.github.com/taiki-e/install-action/pull/1949))
- Support `bpf-linker`.
([#1950](https://redirect.github.com/taiki-e/install-action/pull/1950))
- Support `rafn`.
([#1935](https://redirect.github.com/taiki-e/install-action/pull/1935),
thanks [@DarkWanderer](https://redirect.github.com/DarkWanderer))
- Update `cargo-neat@latest` to 0.5.1.
- Update `zizmor@latest` to 1.28.0.
- Update `wasmtime@latest` to 47.0.2.
- Update `uv@latest` to 0.11.31.
- Update `syft@latest` to 1.49.0.
###
[`v2.84.1`](https://redirect.github.com/taiki-e/install-action/releases/tag/v2.84.1):
2.84.1
[Compare
Source](https://redirect.github.com/taiki-e/install-action/compare/v2.84.0...v2.84.1)
- Update `wasmtime@latest` to 47.0.1.
- Update `wasm-tools@latest` to 1.254.0.
- Update `uv@latest` to 0.11.30.
- Update `mise@latest` to 2026.7.11.
- Update `cargo-neat@latest` to 0.5.0.
- Update `cargo-crap@latest` to 0.3.1.
- Update `biome@latest` to 2.5.5.
###
[`v2.84.0`](https://redirect.github.com/taiki-e/install-action/releases/tag/v2.84.0):
2.84.0
[Compare
Source](https://redirect.github.com/taiki-e/install-action/compare/v2.83.4...v2.84.0)
- Support `d2`.
([#1944](https://redirect.github.com/taiki-e/install-action/pull/1944))
- Support `protoc-gen-connect-openapi`.
([#1922](https://redirect.github.com/taiki-e/install-action/pull/1922),
thanks [@JasterV](https://redirect.github.com/JasterV))
- Update `convco@latest` to 0.7.0.
([#1941](https://redirect.github.com/taiki-e/install-action/pull/1941),
thanks [@graelo](https://redirect.github.com/graelo))
- Update `just@latest` to 1.57.0.
- Update `cargo-semver-checks@latest` to 0.49.0.
- Update `tombi@latest` to 1.2.4.
- Update `cosign@latest` to 3.1.2.
###
[`v2.83.4`](https://redirect.github.com/taiki-e/install-action/releases/tag/v2.83.4):
2.83.4
[Compare
Source](https://redirect.github.com/taiki-e/install-action/compare/v2.83.3...v2.83.4)
- Update `vacuum@latest` to 0.29.10.
- Update `uv@latest` to 0.11.29.
- Update `syft@latest` to 1.48.0.
- Update `prek@latest` to 0.4.10.
- Update `mise@latest` to 2026.7.7.
- Update `cargo-shear@latest` to 1.13.2.
###
[`v2.83.3`](https://redirect.github.com/taiki-e/install-action/releases/tag/v2.83.3):
2.83.3
[Compare
Source](https://redirect.github.com/taiki-e/install-action/compare/v2.83.2...v2.83.3)
- Update `release-plz@latest` to 0.3.160.
- Update `prek@latest` to 0.4.9.
- Update `mise@latest` to 2026.7.6.
- Update `dprint@latest` to 0.55.2.
- Update `cargo-dinghy@latest` to 0.8.5.
- Update `cargo-binstall@latest` to 1.21.0.
- Update `biome@latest` to 2.5.4.
###
[`v2.83.2`](https://redirect.github.com/taiki-e/install-action/releases/tag/v2.83.2):
2.83.2
[Compare
Source](https://redirect.github.com/taiki-e/install-action/compare/v2.83.1...v2.83.2)
- Update `parse-dockerfile@latest` to 0.1.8.
- Update `mise@latest` to 2026.7.5.
- Update `just@latest` to 1.56.0.
- Update `gungraun-runner@latest` to 0.19.4.
- Update `cargo-neat@latest` to 0.4.1.
###
[`v2.83.1`](https://redirect.github.com/taiki-e/install-action/releases/tag/v2.83.1):
2.83.1
[Compare
Source](https://redirect.github.com/taiki-e/install-action/compare/v2.83.0...v2.83.1)
- Update `rclone@latest` to 1.74.4.
- Update `mise@latest` to 2026.7.4.
- Update `cargo-deny@latest` to 0.20.2.
###
[`v2.83.0`](https://redirect.github.com/taiki-e/install-action/releases/tag/v2.83.0):
2.83.0
[Compare
Source](https://redirect.github.com/taiki-e/install-action/compare/v2.82.11...v2.83.0)
- Support `cargo-about`.
([#1924](https://redirect.github.com/taiki-e/install-action/pull/1924),
thanks [@ruffsl](https://redirect.github.com/ruffsl))
- Update `uv@latest` to 0.11.28.
- Update `martin@latest` to 1.12.0.
- Update `kingfisher@latest` to 1.106.0.
- Update `biome@latest` to 2.5.3.
###
[`v2.82.11`](https://redirect.github.com/taiki-e/install-action/releases/tag/v2.82.11):
2.82.11
[Compare
Source](https://redirect.github.com/taiki-e/install-action/compare/v2.82.10...v2.82.11)
- Update `wasm-tools@latest` to 1.253.0.
- Update `uv@latest` to 0.11.27.
- Update `mise@latest` to 2026.7.2.
- Update `mdbook@latest` to 0.5.4.
###
[`v2.82.10`](https://redirect.github.com/taiki-e/install-action/releases/tag/v2.82.10):
2.82.10
[Compare
Source](https://redirect.github.com/taiki-e/install-action/compare/v2.82.9...v2.82.10)
- Update `tombi@latest` to 1.2.0.
- Update `cargo-nextest@latest` to 0.9.140.
###
[`v2.82.9`](https://redirect.github.com/taiki-e/install-action/releases/tag/v2.82.9):
2.82.9
[Compare
Source](https://redirect.github.com/taiki-e/install-action/compare/v2.82.8...v2.82.9)
- Update `vacuum@latest` to 0.29.9.
- Update `prek@latest` to 0.4.8.
- Update `cargo-tarpaulin@latest` to 0.37.0.
- Update `cargo-leptos@latest` to 0.3.7.
###
[`v2.82.8`](https://redirect.github.com/taiki-e/install-action/releases/tag/v2.82.8):
2.82.8
[Compare
Source](https://redirect.github.com/taiki-e/install-action/compare/v2.82.7...v2.82.8)
- Update `vacuum@latest` to 0.29.8.
- Update `uv@latest` to 0.11.26.
- Update `typos@latest` to 1.48.0.
- Update `trivy@latest` to 0.72.0.
- Update `tombi@latest` to 1.1.7.
- Update `prek@latest` to 0.4.6.
- Update `mise@latest` to 2026.7.0.
- Update `just@latest` to 1.55.1.
- Update `biome@latest` to 2.5.2.
zizmorcore/zizmor-action (zizmorcore/zizmor-action)
###
[`v0.6.1`](https://redirect.github.com/zizmorcore/zizmor-action/releases/tag/v0.6.1)
[Compare
Source](https://redirect.github.com/zizmorcore/zizmor-action/compare/v0.6.0...v0.6.1)
zizmor 1.28.0 is now the default version used by the action.
###
[`v0.6.0`](https://redirect.github.com/zizmorcore/zizmor-action/releases/tag/v0.6.0)
[Compare
Source](https://redirect.github.com/zizmorcore/zizmor-action/compare/v0.5.7...v0.6.0)
zizmor 1.27.0 is now the default version used by the action.
#### What's Changed
- Fold Docker image pull output into a collapsed Actions log group by
[@woodruffw](https://redirect.github.com/woodruffw) with
[@Copilot](https://redirect.github.com/Copilot) in
[#132](https://redirect.github.com/zizmorcore/zizmor-action/pull/132)
- Readme: document missing inputs by
[@staabm](https://redirect.github.com/staabm) in
[#130](https://redirect.github.com/zizmorcore/zizmor-action/pull/130)
- ci: block version sync workflow on forks by
[@shaanmajid](https://redirect.github.com/shaanmajid) in
[#129](https://redirect.github.com/zizmorcore/zizmor-action/pull/129)
- Sync zizmor versions by
[@github-actions](https://redirect.github.com/github-actions)\[bot]
in
[#137](https://redirect.github.com/zizmorcore/zizmor-action/pull/137)
- Add `collect` input by
[@woodruffw](https://redirect.github.com/woodruffw) in
[#139](https://redirect.github.com/zizmorcore/zizmor-action/pull/139)
#### New Contributors
- [@woodruffw](https://redirect.github.com/woodruffw) with
[@Copilot](https://redirect.github.com/Copilot) made their first
contribution in
[#132](https://redirect.github.com/zizmorcore/zizmor-action/pull/132)
- [@staabm](https://redirect.github.com/staabm) made their first
contribution in
[#130](https://redirect.github.com/zizmorcore/zizmor-action/pull/130)
- [@shaanmajid](https://redirect.github.com/shaanmajid) made
their first contribution in
[#129](https://redirect.github.com/zizmorcore/zizmor-action/pull/129)
**Full Changelog**:
---
### Configuration
📅 **Schedule**: (UTC)
- Branch creation
- "before 5am on the first day of the month"
- Automerge
- At any time (no schedule defined)
🚦 **Automerge**: Enabled.
♻ **Rebasing**: Whenever PR is behind base branch, or you tick the
rebase/retry checkbox.
👻 **Immortal**: This PR will be recreated if closed unmerged. Get
[config
help](https://redirect.github.com/renovatebot/renovate/discussions) if
that's undesired.
---
- [ ] If you want to rebase/retry this PR, check
this box
---
This PR was generated by [Mend Renovate](https://mend.io/renovate/).
View the [repository job
log](https://developer.mend.io/github/epage/_rust).
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
---
.github/workflows/audit.yml | 12 ++++++------
.github/workflows/ci.yml | 24 ++++++++++++------------
.github/workflows/committed.yml | 2 +-
.github/workflows/pre-commit.yml | 4 ++--
.github/workflows/rust-next.yml | 8 ++++----
.github/workflows/spelling.yml | 2 +-
.github/workflows/template.yml | 2 +-
7 files changed, 27 insertions(+), 27 deletions(-)
diff --git a/.github/workflows/audit.yml b/.github/workflows/audit.yml
index b1e0bb4..a89f6b5 100644
--- a/.github/workflows/audit.yml
+++ b/.github/workflows/audit.yml
@@ -43,11 +43,11 @@ jobs:
- advisories
steps:
- name: Checkout repository
- uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6.0.3
+ uses: actions/checkout@d23441a48e516b6c34aea4fa41551a30e30af803 # v6.1.0
with:
persist-credentials: false
- name: Lint advisories
- uses: EmbarkStudios/cargo-deny-action@bb137d7af7e4fb67e5f82a49c4fce4fad40782fe # v2.0.20
+ uses: EmbarkStudios/cargo-deny-action@3c6349835b2b7b196a839186cb8b78e02f7b5f25 # v2.1.1
with:
command: check ${{ matrix.checks }}
rust-version: stable
@@ -63,11 +63,11 @@ jobs:
- bans licenses sources
steps:
- name: Checkout repository
- uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6.0.3
+ uses: actions/checkout@d23441a48e516b6c34aea4fa41551a30e30af803 # v6.1.0
with:
persist-credentials: false
- name: Lint bans
- uses: EmbarkStudios/cargo-deny-action@bb137d7af7e4fb67e5f82a49c4fce4fad40782fe # v2.0.20
+ uses: EmbarkStudios/cargo-deny-action@3c6349835b2b7b196a839186cb8b78e02f7b5f25 # v2.1.1
with:
command: check ${{ matrix.checks }}
rust-version: stable
@@ -80,8 +80,8 @@ jobs:
actions: read # only needed for private or internal repos
steps:
- name: Checkout repository
- uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6.0.3
+ uses: actions/checkout@d23441a48e516b6c34aea4fa41551a30e30af803 # v6.1.0
with:
persist-credentials: false
- name: Run zizmor
- uses: zizmorcore/zizmor-action@192e21d79ab29983730a13d1382995c2307fbcaa # v0.5.7
+ uses: zizmorcore/zizmor-action@6fc4b006235f201fdab3722e17240ab420d580e5 # v0.6.1
diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
index 118b708..f361a1e 100644
--- a/.github/workflows/ci.yml
+++ b/.github/workflows/ci.yml
@@ -43,7 +43,7 @@ jobs:
CARGO_PROFILE_DEV_DEBUG: line-tables-only
steps:
- name: Checkout repository
- uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6.0.3
+ uses: actions/checkout@d23441a48e516b6c34aea4fa41551a30e30af803 # v6.1.0
with:
persist-credentials: false
- name: Install Rust
@@ -53,7 +53,7 @@ jobs:
- name: Initialize cache
uses: Swatinem/rust-cache@c19371144df3bb44fab255c43d04cbc2ab54d1c4 # v2.9.1
- name: Install cargo-hack
- uses: taiki-e/install-action@16b05812d776ae1dfaabc8277e421fb6d2506419 # v2.82.7
+ uses: taiki-e/install-action@6a1bd70eaac3c8bdf093356838d7ee09fda951cf # v2.85.5
with:
tool: cargo-hack
- name: Build
@@ -68,7 +68,7 @@ jobs:
runs-on: ${{ matrix.os }}
steps:
- name: Checkout repository
- uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6.0.3
+ uses: actions/checkout@d23441a48e516b6c34aea4fa41551a30e30af803 # v6.1.0
with:
persist-credentials: false
- name: Install Rust
@@ -78,7 +78,7 @@ jobs:
- name: Initialize cache
uses: Swatinem/rust-cache@c19371144df3bb44fab255c43d04cbc2ab54d1c4 # v2.9.1
- name: Install cargo-hack
- uses: taiki-e/install-action@16b05812d776ae1dfaabc8277e421fb6d2506419 # v2.82.7
+ uses: taiki-e/install-action@6a1bd70eaac3c8bdf093356838d7ee09fda951cf # v2.85.5
with:
tool: cargo-hack
- name: Default features
@@ -91,7 +91,7 @@ jobs:
runs-on: ${{ matrix.os }}
steps:
- name: Checkout repository
- uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6.0.3
+ uses: actions/checkout@d23441a48e516b6c34aea4fa41551a30e30af803 # v6.1.0
with:
persist-credentials: false
- name: Install stable Rust
@@ -110,7 +110,7 @@ jobs:
runs-on: ubuntu-latest
steps:
- name: Checkout repository
- uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6.0.3
+ uses: actions/checkout@d23441a48e516b6c34aea4fa41551a30e30af803 # v6.1.0
with:
persist-credentials: false
- name: Install Rust
@@ -126,7 +126,7 @@ jobs:
runs-on: ubuntu-latest
steps:
- name: Checkout repository
- uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6.0.3
+ uses: actions/checkout@d23441a48e516b6c34aea4fa41551a30e30af803 # v6.1.0
with:
persist-credentials: false
- name: Install Rust
@@ -144,7 +144,7 @@ jobs:
runs-on: ubuntu-latest
steps:
- name: Checkout repository
- uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6.0.3
+ uses: actions/checkout@d23441a48e516b6c34aea4fa41551a30e30af803 # v6.1.0
with:
persist-credentials: false
- name: Install Rust
@@ -163,7 +163,7 @@ jobs:
security-events: write # to upload sarif results
steps:
- name: Checkout repository
- uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6.0.3
+ uses: actions/checkout@d23441a48e516b6c34aea4fa41551a30e30af803 # v6.1.0
with:
persist-credentials: false
- name: Install Rust
@@ -185,7 +185,7 @@ jobs:
| sarif-fmt
continue-on-error: true
- name: Upload
- uses: github/codeql-action/upload-sarif@8aad20d150bbac5944a9f9d289da16a4b0d87c1e # v4.36.2
+ uses: github/codeql-action/upload-sarif@f205ea1c3313d32999d8d6a48b4f6530d4437b38 # v4.37.4
with:
sarif_file: clippy-results.sarif
wait-for-processing: true
@@ -200,7 +200,7 @@ jobs:
code-quality: write
steps:
- name: Checkout repository
- uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6.0.3
+ uses: actions/checkout@d23441a48e516b6c34aea4fa41551a30e30af803 # v6.1.0
with:
persist-credentials: false
- name: Install Rust
@@ -215,7 +215,7 @@ jobs:
run: cargo tarpaulin --out xml
- name: Upload coverage report
if: github.event_name != 'pull_request' || github.event.pull_request.head.repo.full_name == github.repository
- uses: actions/upload-code-coverage@a72ab75b4dee0e479386fb9bf33c8dcf64b9c772 # v1.4.0
+ uses: actions/upload-code-coverage@1c15be36fc3733ba839b1dd643bd9556e4426dc1 # v1.4.1
with:
file: cobertura.xml
language: Rust
diff --git a/.github/workflows/committed.yml b/.github/workflows/committed.yml
index cb8222f..509067f 100644
--- a/.github/workflows/committed.yml
+++ b/.github/workflows/committed.yml
@@ -21,7 +21,7 @@ jobs:
runs-on: ubuntu-latest
steps:
- name: Checkout repository
- uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6.0.3
+ uses: actions/checkout@d23441a48e516b6c34aea4fa41551a30e30af803 # v6.1.0
with:
fetch-depth: 0
persist-credentials: false
diff --git a/.github/workflows/pre-commit.yml b/.github/workflows/pre-commit.yml
index 97a74e9..d4b8842 100644
--- a/.github/workflows/pre-commit.yml
+++ b/.github/workflows/pre-commit.yml
@@ -23,10 +23,10 @@ jobs:
runs-on: ubuntu-latest
steps:
- name: Checkout repository
- uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6.0.3
+ uses: actions/checkout@d23441a48e516b6c34aea4fa41551a30e30af803 # v6.1.0
with:
persist-credentials: false
- name: prek
- uses: j178/prek-action@e98a699c41eb69ab013a45817a0406469a748f8d # v2.0.5
+ uses: j178/prek-action@5337cb91e0fa35a7ff31b9ca345126d8bbbcdf16 # v2.0.6
with:
prek-version: '0.4.11'
diff --git a/.github/workflows/rust-next.yml b/.github/workflows/rust-next.yml
index a654572..ff25396 100644
--- a/.github/workflows/rust-next.yml
+++ b/.github/workflows/rust-next.yml
@@ -33,7 +33,7 @@ jobs:
CARGO_PROFILE_DEV_DEBUG: line-tables-only
steps:
- name: Checkout repository
- uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6.0.3
+ uses: actions/checkout@d23441a48e516b6c34aea4fa41551a30e30af803 # v6.1.0
with:
persist-credentials: false
- name: Install Rust
@@ -43,7 +43,7 @@ jobs:
- name: Initialize cache
uses: Swatinem/rust-cache@c19371144df3bb44fab255c43d04cbc2ab54d1c4 # v2.9.1
- name: Install cargo-hack
- uses: taiki-e/install-action@16b05812d776ae1dfaabc8277e421fb6d2506419 # v2.82.7
+ uses: taiki-e/install-action@6a1bd70eaac3c8bdf093356838d7ee09fda951cf # v2.85.5
with:
tool: cargo-hack
- name: Build
@@ -60,7 +60,7 @@ jobs:
CARGO_RESOLVER_INCOMPATIBLE_RUST_VERSIONS: allow
steps:
- name: Checkout repository
- uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6.0.3
+ uses: actions/checkout@d23441a48e516b6c34aea4fa41551a30e30af803 # v6.1.0
with:
persist-credentials: false
- name: Install Rust
@@ -70,7 +70,7 @@ jobs:
- name: Initialize cache
uses: Swatinem/rust-cache@c19371144df3bb44fab255c43d04cbc2ab54d1c4 # v2.9.1
- name: Install cargo-hack
- uses: taiki-e/install-action@16b05812d776ae1dfaabc8277e421fb6d2506419 # v2.82.7
+ uses: taiki-e/install-action@6a1bd70eaac3c8bdf093356838d7ee09fda951cf # v2.85.5
with:
tool: cargo-hack
- name: Update dependencies
diff --git a/.github/workflows/spelling.yml b/.github/workflows/spelling.yml
index 366e7f8..22fc8a3 100644
--- a/.github/workflows/spelling.yml
+++ b/.github/workflows/spelling.yml
@@ -20,7 +20,7 @@ jobs:
runs-on: ubuntu-latest
steps:
- name: Checkout Actions Repository
- uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6.0.3
+ uses: actions/checkout@d23441a48e516b6c34aea4fa41551a30e30af803 # v6.1.0
with:
persist-credentials: false
- name: Spell Check Repo
diff --git a/.github/workflows/template.yml b/.github/workflows/template.yml
index 36a9c00..755b829 100644
--- a/.github/workflows/template.yml
+++ b/.github/workflows/template.yml
@@ -28,7 +28,7 @@ jobs:
runs-on: ubuntu-latest
steps:
- name: Checkout repository
- uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6.0.3
+ uses: actions/checkout@d23441a48e516b6c34aea4fa41551a30e30af803 # v6.1.0
with:
fetch-depth: 0
persist-credentials: true # to push the branch and create PR
From 076ba2e5b79c965c811541ec952da7577980f574 Mon Sep 17 00:00:00 2001
From: "renovate[bot]" <29139614+renovate[bot]@users.noreply.github.com>
Date: Mon, 3 Aug 2026 14:01:03 +0000
Subject: [PATCH 07/17] chore(deps): Update Prek to v0.4.12 (#89)
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit
This PR contains the following updates:
| Package | Update | Change |
|---|---|---|
| [prek](https://redirect.github.com/j178/prek) | patch | `0.4.11` →
`0.4.12` |
---
### Release Notes
j178/prek (prek)
###
[`v0.4.12`](https://redirect.github.com/j178/prek/blob/HEAD/CHANGELOG.md#0412)
[Compare
Source](https://redirect.github.com/j178/prek/compare/v0.4.11...v0.4.12)
Released on 2026-08-03.
##### Enhancements
- Add `--require-group` for hook group intersections
([#2472](https://redirect.github.com/j178/prek/pull/2472))
- Align fast-path and builtin pre-commit hooks
([#2433](https://redirect.github.com/j178/prek/pull/2433))
- Do not shuffle file list for verbose output
([#2431](https://redirect.github.com/j178/prek/pull/2431))
- Improve top-level command descriptions
([#2429](https://redirect.github.com/j178/prek/pull/2429))
- Install `uv` from Astral CDN and drop source racing
([#2455](https://redirect.github.com/j178/prek/pull/2455))
- Make `prek install --force` bypass external hooks paths
([#2437](https://redirect.github.com/j178/prek/pull/2437))
- Show builtin hook flags in verbose list output
([#2427](https://redirect.github.com/j178/prek/pull/2427))
- Verify uv release archive checksums
([#2456](https://redirect.github.com/j178/prek/pull/2456))
##### Performance
- Precompute file tags in parallel
([#2440](https://redirect.github.com/j178/prek/pull/2440))
- Skip diffs after known hook modifications
([#2447](https://redirect.github.com/j178/prek/pull/2447))
- Skip worktree diffs for read-only languages
([#2432](https://redirect.github.com/j178/prek/pull/2432))
- Track builtin hook file changes directly
([#2404](https://redirect.github.com/j178/prek/pull/2404))
##### Bug fixes
- Use full object IDs in diff snapshots
([#2448](https://redirect.github.com/j178/prek/pull/2448))
##### Documentation
- Add a multi-repository configuration example
([#2434](https://redirect.github.com/j178/prek/pull/2434))
- Rewrite benchmark documentation
([#2469](https://redirect.github.com/j178/prek/pull/2469))
##### Contributors
- [@j178](https://redirect.github.com/j178)
- [@BitWeaverDev](https://redirect.github.com/BitWeaverDev)
- [@allanlewis](https://redirect.github.com/allanlewis)
---
### Configuration
📅 **Schedule**: (UTC)
- Branch creation
- Every minute (`* * * * *`)
- Automerge
- At any time (no schedule defined)
🚦 **Automerge**: Enabled.
♻ **Rebasing**: Whenever PR is behind base branch, or you tick the
rebase/retry checkbox.
🔕 **Ignore**: Close this PR and you won't be reminded about this update
again.
---
- [ ] If you want to rebase/retry this PR, check
this box
---
This PR was generated by [Mend Renovate](https://mend.io/renovate/).
View the [repository job
log](https://developer.mend.io/github/epage/_rust).
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
---
.github/workflows/pre-commit.yml | 2 +-
1 file changed, 1 insertion(+), 1 deletion(-)
diff --git a/.github/workflows/pre-commit.yml b/.github/workflows/pre-commit.yml
index d4b8842..c094619 100644
--- a/.github/workflows/pre-commit.yml
+++ b/.github/workflows/pre-commit.yml
@@ -29,4 +29,4 @@ jobs:
- name: prek
uses: j178/prek-action@5337cb91e0fa35a7ff31b9ca345126d8bbbcdf16 # v2.0.6
with:
- prek-version: '0.4.11'
+ prek-version: '0.4.12'
From a6e48641629fd0fe7193a7c11d60780d54308245 Mon Sep 17 00:00:00 2001
From: Ed Page
Date: Mon, 3 Aug 2026 10:16:23 -0500
Subject: [PATCH 08/17] chore(ci): Don't update prek immediately
---
.github/renovate.json5 | 3 ---
1 file changed, 3 deletions(-)
diff --git a/.github/renovate.json5 b/.github/renovate.json5
index c02c2a6..ef23c0d 100644
--- a/.github/renovate.json5
+++ b/.github/renovate.json5
@@ -66,9 +66,6 @@
'prek',
],
extractVersion: '^v(?\\d+\\.\\d+\\.\\d+)',
- schedule: [
- '* * * * *',
- ],
automerge: true,
},
{
From bbc78aafa06dded898a6cc7d5ce41a3c0fad7237 Mon Sep 17 00:00:00 2001
From: Ed Page
Date: Mon, 3 Aug 2026 10:25:00 -0500
Subject: [PATCH 09/17] chore(ci): Experiment with min-release-age
---
.github/renovate.json5 | 2 ++
1 file changed, 2 insertions(+)
diff --git a/.github/renovate.json5 b/.github/renovate.json5
index ef23c0d..e11fcd5 100644
--- a/.github/renovate.json5
+++ b/.github/renovate.json5
@@ -3,6 +3,8 @@
schedule: [
'before 5am on the first day of the month',
],
+ minimumReleaseAge: "3 days",
+ internalChecksFilter: "strict",
semanticCommits: 'enabled',
commitMessageLowerCase: 'never',
configMigration: true,
From 3d30c8cc57fda434bf25e8e2ee801b8c44e92b76 Mon Sep 17 00:00:00 2001
From: "renovate[bot]" <29139614+renovate[bot]@users.noreply.github.com>
Date: Mon, 3 Aug 2026 15:30:34 +0000
Subject: [PATCH 10/17] chore(deps): Update pre-commit hook crate-ci/typos to
v1.48.0
---
.pre-commit-config.yaml | 2 +-
1 file changed, 1 insertion(+), 1 deletion(-)
diff --git a/.pre-commit-config.yaml b/.pre-commit-config.yaml
index 4eef4a8..1bf783d 100644
--- a/.pre-commit-config.yaml
+++ b/.pre-commit-config.yaml
@@ -10,7 +10,7 @@ repos:
- id: check-case-conflict
- id: detect-private-key
- repo: https://github.com/crate-ci/typos
- rev: v1.47.0
+ rev: v1.48.0
hooks:
- id: typos
- repo: https://github.com/crate-ci/committed
From 9725108899fd524e435950876323fb9b33e246f1 Mon Sep 17 00:00:00 2001
From: "renovate[bot]" <29139614+renovate[bot]@users.noreply.github.com>
Date: Mon, 3 Aug 2026 15:30:41 +0000
Subject: [PATCH 11/17] chore(deps): Update pre-commit hook
zizmorcore/zizmor-pre-commit to v1.28.0
---
.pre-commit-config.yaml | 2 +-
1 file changed, 1 insertion(+), 1 deletion(-)
diff --git a/.pre-commit-config.yaml b/.pre-commit-config.yaml
index 4eef4a8..80b94bf 100644
--- a/.pre-commit-config.yaml
+++ b/.pre-commit-config.yaml
@@ -18,6 +18,6 @@ repos:
hooks:
- id: committed
- repo: https://github.com/zizmorcore/zizmor-pre-commit
- rev: v1.22.0
+ rev: v1.28.0
hooks:
- id: zizmor
From 51198499528e61a308baa1498e5eeffc1ad6bac9 Mon Sep 17 00:00:00 2001
From: "renovate[bot]" <29139614+renovate[bot]@users.noreply.github.com>
Date: Mon, 3 Aug 2026 15:30:49 +0000
Subject: [PATCH 12/17] chore(deps): Update actions/checkout action to v7
---
.github/workflows/audit.yml | 6 +++---
.github/workflows/ci.yml | 16 ++++++++--------
.github/workflows/committed.yml | 2 +-
.github/workflows/pre-commit.yml | 2 +-
.github/workflows/rust-next.yml | 4 ++--
.github/workflows/spelling.yml | 2 +-
.github/workflows/template.yml | 2 +-
7 files changed, 17 insertions(+), 17 deletions(-)
diff --git a/.github/workflows/audit.yml b/.github/workflows/audit.yml
index a89f6b5..426ad96 100644
--- a/.github/workflows/audit.yml
+++ b/.github/workflows/audit.yml
@@ -43,7 +43,7 @@ jobs:
- advisories
steps:
- name: Checkout repository
- uses: actions/checkout@d23441a48e516b6c34aea4fa41551a30e30af803 # v6.1.0
+ uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
with:
persist-credentials: false
- name: Lint advisories
@@ -63,7 +63,7 @@ jobs:
- bans licenses sources
steps:
- name: Checkout repository
- uses: actions/checkout@d23441a48e516b6c34aea4fa41551a30e30af803 # v6.1.0
+ uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
with:
persist-credentials: false
- name: Lint bans
@@ -80,7 +80,7 @@ jobs:
actions: read # only needed for private or internal repos
steps:
- name: Checkout repository
- uses: actions/checkout@d23441a48e516b6c34aea4fa41551a30e30af803 # v6.1.0
+ uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
with:
persist-credentials: false
- name: Run zizmor
diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
index e8e6af3..b854c5f 100644
--- a/.github/workflows/ci.yml
+++ b/.github/workflows/ci.yml
@@ -43,7 +43,7 @@ jobs:
CARGO_PROFILE_DEV_DEBUG: line-tables-only
steps:
- name: Checkout repository
- uses: actions/checkout@d23441a48e516b6c34aea4fa41551a30e30af803 # v6.1.0
+ uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
with:
persist-credentials: false
- name: Install Rust
@@ -68,7 +68,7 @@ jobs:
runs-on: ${{ matrix.os }}
steps:
- name: Checkout repository
- uses: actions/checkout@d23441a48e516b6c34aea4fa41551a30e30af803 # v6.1.0
+ uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
with:
persist-credentials: false
- name: Install Rust
@@ -91,7 +91,7 @@ jobs:
runs-on: ${{ matrix.os }}
steps:
- name: Checkout repository
- uses: actions/checkout@d23441a48e516b6c34aea4fa41551a30e30af803 # v6.1.0
+ uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
with:
persist-credentials: false
- name: Install stable Rust
@@ -110,7 +110,7 @@ jobs:
runs-on: ubuntu-latest
steps:
- name: Checkout repository
- uses: actions/checkout@d23441a48e516b6c34aea4fa41551a30e30af803 # v6.1.0
+ uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
with:
persist-credentials: false
- name: Install Rust
@@ -126,7 +126,7 @@ jobs:
runs-on: ubuntu-latest
steps:
- name: Checkout repository
- uses: actions/checkout@d23441a48e516b6c34aea4fa41551a30e30af803 # v6.1.0
+ uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
with:
persist-credentials: false
- name: Install Rust
@@ -144,7 +144,7 @@ jobs:
runs-on: ubuntu-latest
steps:
- name: Checkout repository
- uses: actions/checkout@d23441a48e516b6c34aea4fa41551a30e30af803 # v6.1.0
+ uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
with:
persist-credentials: false
- name: Install Rust
@@ -163,7 +163,7 @@ jobs:
security-events: write # to upload sarif results
steps:
- name: Checkout repository
- uses: actions/checkout@d23441a48e516b6c34aea4fa41551a30e30af803 # v6.1.0
+ uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
with:
persist-credentials: false
- name: Install Rust
@@ -200,7 +200,7 @@ jobs:
code-quality: write
steps:
- name: Checkout repository
- uses: actions/checkout@d23441a48e516b6c34aea4fa41551a30e30af803 # v6.1.0
+ uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
with:
persist-credentials: false
- name: Install Rust
diff --git a/.github/workflows/committed.yml b/.github/workflows/committed.yml
index 509067f..20b437c 100644
--- a/.github/workflows/committed.yml
+++ b/.github/workflows/committed.yml
@@ -21,7 +21,7 @@ jobs:
runs-on: ubuntu-latest
steps:
- name: Checkout repository
- uses: actions/checkout@d23441a48e516b6c34aea4fa41551a30e30af803 # v6.1.0
+ uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
with:
fetch-depth: 0
persist-credentials: false
diff --git a/.github/workflows/pre-commit.yml b/.github/workflows/pre-commit.yml
index c094619..744d40b 100644
--- a/.github/workflows/pre-commit.yml
+++ b/.github/workflows/pre-commit.yml
@@ -23,7 +23,7 @@ jobs:
runs-on: ubuntu-latest
steps:
- name: Checkout repository
- uses: actions/checkout@d23441a48e516b6c34aea4fa41551a30e30af803 # v6.1.0
+ uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
with:
persist-credentials: false
- name: prek
diff --git a/.github/workflows/rust-next.yml b/.github/workflows/rust-next.yml
index 724e6cc..a9875b2 100644
--- a/.github/workflows/rust-next.yml
+++ b/.github/workflows/rust-next.yml
@@ -33,7 +33,7 @@ jobs:
CARGO_PROFILE_DEV_DEBUG: line-tables-only
steps:
- name: Checkout repository
- uses: actions/checkout@d23441a48e516b6c34aea4fa41551a30e30af803 # v6.1.0
+ uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
with:
persist-credentials: false
- name: Install Rust
@@ -60,7 +60,7 @@ jobs:
CARGO_RESOLVER_INCOMPATIBLE_RUST_VERSIONS: allow
steps:
- name: Checkout repository
- uses: actions/checkout@d23441a48e516b6c34aea4fa41551a30e30af803 # v6.1.0
+ uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
with:
persist-credentials: false
- name: Install Rust
diff --git a/.github/workflows/spelling.yml b/.github/workflows/spelling.yml
index 22fc8a3..9049cf3 100644
--- a/.github/workflows/spelling.yml
+++ b/.github/workflows/spelling.yml
@@ -20,7 +20,7 @@ jobs:
runs-on: ubuntu-latest
steps:
- name: Checkout Actions Repository
- uses: actions/checkout@d23441a48e516b6c34aea4fa41551a30e30af803 # v6.1.0
+ uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
with:
persist-credentials: false
- name: Spell Check Repo
diff --git a/.github/workflows/template.yml b/.github/workflows/template.yml
index 755b829..76121ee 100644
--- a/.github/workflows/template.yml
+++ b/.github/workflows/template.yml
@@ -28,7 +28,7 @@ jobs:
runs-on: ubuntu-latest
steps:
- name: Checkout repository
- uses: actions/checkout@d23441a48e516b6c34aea4fa41551a30e30af803 # v6.1.0
+ uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
with:
fetch-depth: 0
persist-credentials: true # to push the branch and create PR
From 70d0dca36c64f8f638bb34f69654c3938fa8b9c1 Mon Sep 17 00:00:00 2001
From: "renovate[bot]" <29139614+renovate[bot]@users.noreply.github.com>
Date: Mon, 3 Aug 2026 15:30:56 +0000
Subject: [PATCH 13/17] chore(deps): Update j178/prek-action action to v3
---
.github/workflows/pre-commit.yml | 2 +-
1 file changed, 1 insertion(+), 1 deletion(-)
diff --git a/.github/workflows/pre-commit.yml b/.github/workflows/pre-commit.yml
index c094619..8dd4126 100644
--- a/.github/workflows/pre-commit.yml
+++ b/.github/workflows/pre-commit.yml
@@ -27,6 +27,6 @@ jobs:
with:
persist-credentials: false
- name: prek
- uses: j178/prek-action@5337cb91e0fa35a7ff31b9ca345126d8bbbcdf16 # v2.0.6
+ uses: j178/prek-action@4e14d07f9231acabce116ccfca13b13dd9755ece # v3.0.0
with:
prek-version: '0.4.12'
From f1016dff7859defa5950d5c8ff2d57f327e319c4 Mon Sep 17 00:00:00 2001
From: Scott Schafer
Date: Sat, 8 Aug 2026 20:19:00 -0600
Subject: [PATCH 14/17] fix: Remove lint config for
clippy::from_iter_instead_of_collect
---
Cargo.toml | 1 -
1 file changed, 1 deletion(-)
diff --git a/Cargo.toml b/Cargo.toml
index 4a41143..882fb8a 100644
--- a/Cargo.toml
+++ b/Cargo.toml
@@ -56,7 +56,6 @@ float_cmp = "warn"
float_cmp_const = "warn"
fn_params_excessive_bools = "warn"
fn_to_numeric_cast_any = "warn"
-from_iter_instead_of_collect = "warn"
if_same_then_else = "allow"
implicit_clone = "warn"
imprecise_flops = "warn"
From 059ebedc85d3d3d4dc6f980d7c9d59394143486a Mon Sep 17 00:00:00 2001
From: Ed Page
Date: Mon, 10 Aug 2026 08:37:35 -0500
Subject: [PATCH 15/17] chore(ci): Remove dtolnay/rust-toolchain
This causes enough issues with zizmor
---
.github/workflows/ci.yml | 44 +++++++++++----------------------
.github/workflows/rust-next.yml | 9 +++----
.github/zizmor.yml | 4 ---
3 files changed, 18 insertions(+), 39 deletions(-)
delete mode 100644 .github/zizmor.yml
diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
index b854c5f..5cdca38 100644
--- a/.github/workflows/ci.yml
+++ b/.github/workflows/ci.yml
@@ -13,6 +13,8 @@ env:
RUST_BACKTRACE: 1
CARGO_TERM_COLOR: always
CLICOLOR: 1
+ CARGO_INCREMENTAL: 0
+ RUST_TOOLCHAIN_STABLE: "1.97" # STABLE
concurrency:
group: "${{ github.workflow }}-${{ github.ref }}"
@@ -47,9 +49,7 @@ jobs:
with:
persist-credentials: false
- name: Install Rust
- uses: dtolnay/rust-toolchain@4cda84d5c5c54efe2404f9d843567869ab1699d4 # stable
- with:
- toolchain: ${{ matrix.rust }}
+ run: rustup update --no-self-update ${{ matrix.rust }} && rustup default ${{ matrix.rust }}
- name: Initialize cache
uses: Swatinem/rust-cache@c19371144df3bb44fab255c43d04cbc2ab54d1c4 # v2.9.1
- name: Install cargo-hack
@@ -72,9 +72,7 @@ jobs:
with:
persist-credentials: false
- name: Install Rust
- uses: dtolnay/rust-toolchain@4cda84d5c5c54efe2404f9d843567869ab1699d4 # stable
- with:
- toolchain: stable
+ run: rustup update --no-self-update stable && rustup default stable
- name: Initialize cache
uses: Swatinem/rust-cache@c19371144df3bb44fab255c43d04cbc2ab54d1c4 # v2.9.1
- name: Install cargo-hack
@@ -95,13 +93,9 @@ jobs:
with:
persist-credentials: false
- name: Install stable Rust
- uses: dtolnay/rust-toolchain@4cda84d5c5c54efe2404f9d843567869ab1699d4 # stable
- with:
- toolchain: stable
+ run: rustup update --no-self-update stable && rustup default stable
- name: Install nightly Rust
- uses: dtolnay/rust-toolchain@4cda84d5c5c54efe2404f9d843567869ab1699d4 # stable
- with:
- toolchain: nightly
+ run: rustup update --no-self-update nightly && rustup default nightly
- name: Downgrade dependencies to minimal versions
run: cargo +nightly generate-lockfile -Z minimal-versions
- name: Compile with minimal versions
@@ -114,9 +108,7 @@ jobs:
with:
persist-credentials: false
- name: Install Rust
- uses: dtolnay/rust-toolchain@4cda84d5c5c54efe2404f9d843567869ab1699d4 # stable
- with:
- toolchain: stable
+ run: rustup update --no-self-update stable && rustup default stable
- name: Initialize cache
uses: Swatinem/rust-cache@c19371144df3bb44fab255c43d04cbc2ab54d1c4 # v2.9.1
- name: "Is lockfile updated?"
@@ -130,9 +122,7 @@ jobs:
with:
persist-credentials: false
- name: Install Rust
- uses: dtolnay/rust-toolchain@4cda84d5c5c54efe2404f9d843567869ab1699d4 # stable
- with:
- toolchain: "1.97" # STABLE
+ run: rustup update --no-self-update $RUST_TOOLCHAIN_STABLE && rustup default $RUST_TOOLCHAIN_STABLE
- name: Initialize cache
uses: Swatinem/rust-cache@c19371144df3bb44fab255c43d04cbc2ab54d1c4 # v2.9.1
- name: Check documentation
@@ -148,10 +138,9 @@ jobs:
with:
persist-credentials: false
- name: Install Rust
- uses: dtolnay/rust-toolchain@4cda84d5c5c54efe2404f9d843567869ab1699d4 # stable
- with:
- toolchain: "1.97" # STABLE
- components: rustfmt
+ run: rustup update --no-self-update $RUST_TOOLCHAIN_STABLE && rustup default $RUST_TOOLCHAIN_STABLE
+ - name: Install rustfmt
+ run: rustup component add rustfmt
- name: Initialize cache
uses: Swatinem/rust-cache@c19371144df3bb44fab255c43d04cbc2ab54d1c4 # v2.9.1
- name: Check formatting
@@ -167,10 +156,9 @@ jobs:
with:
persist-credentials: false
- name: Install Rust
- uses: dtolnay/rust-toolchain@4cda84d5c5c54efe2404f9d843567869ab1699d4 # stable
- with:
- toolchain: "1.97" # STABLE
- components: clippy
+ run: rustup update --no-self-update $RUST_TOOLCHAIN_STABLE && rustup default $RUST_TOOLCHAIN_STABLE
+ - name: Install clippy
+ run: rustup component add clippy
- name: Initialize cache
uses: Swatinem/rust-cache@c19371144df3bb44fab255c43d04cbc2ab54d1c4 # v2.9.1
- name: Install SARIF tools
@@ -204,9 +192,7 @@ jobs:
with:
persist-credentials: false
- name: Install Rust
- uses: dtolnay/rust-toolchain@4cda84d5c5c54efe2404f9d843567869ab1699d4 # stable
- with:
- toolchain: stable
+ run: rustup update --no-self-update stable && rustup default stable
- name: Initialize cache
uses: Swatinem/rust-cache@c19371144df3bb44fab255c43d04cbc2ab54d1c4 # v2.9.1
- name: Install cargo-tarpaulin
diff --git a/.github/workflows/rust-next.yml b/.github/workflows/rust-next.yml
index a9875b2..16c5b74 100644
--- a/.github/workflows/rust-next.yml
+++ b/.github/workflows/rust-next.yml
@@ -11,6 +11,7 @@ env:
RUST_BACKTRACE: 1
CARGO_TERM_COLOR: always
CLICOLOR: 1
+ CARGO_INCREMENTAL: 0
concurrency:
group: "${{ github.workflow }}-${{ github.ref }}"
@@ -37,9 +38,7 @@ jobs:
with:
persist-credentials: false
- name: Install Rust
- uses: dtolnay/rust-toolchain@4cda84d5c5c54efe2404f9d843567869ab1699d4 # stable
- with:
- toolchain: ${{ matrix.rust }}
+ run: rustup update --no-self-update ${{ matrix.rust }} && rustup default ${{ matrix.rust }}
- name: Initialize cache
uses: Swatinem/rust-cache@c19371144df3bb44fab255c43d04cbc2ab54d1c4 # v2.9.1
- name: Install cargo-hack
@@ -64,9 +63,7 @@ jobs:
with:
persist-credentials: false
- name: Install Rust
- uses: dtolnay/rust-toolchain@4cda84d5c5c54efe2404f9d843567869ab1699d4 # stable
- with:
- toolchain: stable
+ run: rustup update --no-self-update stable && rustup default stable
- name: Initialize cache
uses: Swatinem/rust-cache@c19371144df3bb44fab255c43d04cbc2ab54d1c4 # v2.9.1
- name: Install cargo-hack
diff --git a/.github/zizmor.yml b/.github/zizmor.yml
deleted file mode 100644
index 45aa9c9..0000000
--- a/.github/zizmor.yml
+++ /dev/null
@@ -1,4 +0,0 @@
-rules:
- superfluous-actions:
- # https://github.com/zizmorcore/zizmor/issues/1817
- disable: true
From d7a910fc83cdf3cf6a66d2316c7fb96ab288e40f Mon Sep 17 00:00:00 2001
From: "renovate[bot]" <29139614+renovate[bot]@users.noreply.github.com>
Date: Sun, 23 Aug 2026 21:41:41 +0000
Subject: [PATCH 16/17] chore(deps): Update Rust Stable to v1.98 (#97)
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit
This PR contains the following updates:
| Package | Update | Change |
|---|---|---|
| [STABLE](https://redirect.github.com/rust-lang/rust) | minor | `1.97`
→ `1.98` |
---
### Release Notes
rust-lang/rust (STABLE)
###
[`v1.98`](https://redirect.github.com/rust-lang/rust/blob/HEAD/RELEASES.md#Version-1980-2026-08-20)
[Compare
Source](https://redirect.github.com/rust-lang/rust/compare/1.97.0...1.98.0)
\==========================
## Language
- [Allow shortening lifetime of `&mut` when unsize-coercing, even in an
invariant
position.](https://redirect.github.com/rust-lang/rust/pull/149219) For
example, you can now coerce a `Cell<&'long mut i32>` to a `Cell<&'short
mut dyn Send>`. Such shortenings were already previously allowed when
coercing a `&mut` to a `&`, or coercing a `&` to a `&`.
- [Add deny-by-default `invalid_runtime_symbol_definitions` lint and
warn-by-default `suspicious_runtime_symbol_definitions`
lint](https://redirect.github.com/rust-lang/rust/pull/155521)
- The lints currently specifically targets `core` runtime symbols like
`memcmp`, `memset`, `strlen`, ... and is planned to be expanded in the
next few releases.
- [Add warn-by-default `c_void_returns` lint to check
`core::ffi::c_void` as a return
type](https://redirect.github.com/rust-lang/rust/pull/156379)
## Platform Support
- [Add `powerpc64-unknown-linux-gnuelfv2` as Tier
3](https://redirect.github.com/rust-lang/rust/pull/144220)
- [Add `aarch64-unknown-linux-pauthtest` as Tier 3
target](https://redirect.github.com/rust-lang/rust/pull/155722)
- [Promote `thumbv7a-none-eabi` to Tier
2](https://redirect.github.com/rust-lang/rust/pull/155763)
- [Promote `thumbv7a-none-eabihf` to Tier
2](https://redirect.github.com/rust-lang/rust/pull/155763)
- [Promote `thumbv7r-none-eabi` to Tier
2](https://redirect.github.com/rust-lang/rust/pull/155763)
- [Promote `thumbv7r-none-eabihf` to Tier
2](https://redirect.github.com/rust-lang/rust/pull/155763)
- [Promote `thumbv8r-none-eabihf` to Tier
2](https://redirect.github.com/rust-lang/rust/pull/155763)
Refer to Rust's [platform support page][platform-support-doc]
for more information on Rust's tiered platform support.
[platform-support-doc]:
https://doc.rust-lang.org/rustc/platform-support.html
## Libraries
- [Change `Location<'_>` lifetime to `'static` in
`Panic[Hook]Info`](https://redirect.github.com/rust-lang/rust/pull/146561)
- [Document panic in
`RangeInclusive::from(legacy::RangeInclusive)`](https://redirect.github.com/rust-lang/rust/pull/155421)
- [Document that `ManuallyDrop`'s `Box` interaction has been
fixed](https://redirect.github.com/rust-lang/rust/pull/155750)
- [Stabilize LoongArch CRC
Intrinsics](https://redirect.github.com/rust-lang/rust/issues/156908)
- [The `derive` macro is available at
`{core,std}::derive`.](https://redirect.github.com/rust-lang/rust/issues/154645)
This was previously [unintentionally stabilized in
1.96](https://redirect.github.com/rust-lang/rust/issues/159856), but is
now [explicitly
accepted](https://redirect.github.com/rust-lang/rust/issues/154645) as a
stabilized API.
- Please note that the MSRV for `{core,std}::derive` will be 1.96, and
not 1.98.
## Stabilized APIs
-
[`str::substr_range`](https://doc.rust-lang.org/stable/std/primitive.str.html#method.substr_range)
-
[`[T]::subslice_range`](https://doc.rust-lang.org/stable/std/primitive.slice.html#method.subslice_range)
-
[`core::fmt::NumBuffer`](https://doc.rust-lang.org/stable/core/fmt/struct.NumBuffer.html)
-
[`<{integer}>::format_into`](https://doc.rust-lang.org/stable/core/primitive.usize.html#method.format_into)
- [`Send/Sync for
std::process::CommandArgs`](https://doc.rust-lang.org/stable/std/process/struct.CommandArgs.html#impl-Send-for-CommandArgs%3C'a%3E)
-
[`{fN}::algebraic_add`](https://doc.rust-lang.org/stable/core/primitive.f32.html#method.algebraic_add)
-
[`{fN}::algebraic_sub`](https://doc.rust-lang.org/stable/core/primitive.f32.html#method.algebraic_sub)
-
[`{fN}::algebraic_mul`](https://doc.rust-lang.org/stable/core/primitive.f32.html#method.algebraic_mul)
-
[`{fN}::algebraic_div`](https://doc.rust-lang.org/stable/core/primitive.f32.html#method.algebraic_div)
-
[`{fN}::algebraic_rem`](https://doc.rust-lang.org/stable/core/primitive.f32.html#method.algebraic_rem)
-
[`NonZero<{integer}>::from_str_radix`](https://doc.rust-lang.org/stable/core/num/struct.NonZero.html#method.from_str_radix-4)
-
[`String::from_utf16le`](https://doc.rust-lang.org/stable/std/string/struct.String.html#method.from_utf16le)
-
[`String::from_utf16le_lossy`](https://doc.rust-lang.org/stable/std/string/struct.String.html#method.from_utf16le_lossy)
-
[`String::from_utf16be`](https://doc.rust-lang.org/stable/std/string/struct.String.html#method.from_utf16be)
-
[`String::from_utf16be_lossy`](https://doc.rust-lang.org/stable/std/string/struct.String.html#method.from_utf16be_lossy)
-
[`[T]::strip_circumfix`](https://doc.rust-lang.org/stable/core/primitive.slice.html#method.strip_circumfix)
-
[`str::strip_circumfix`](https://doc.rust-lang.org/stable/core/primitive.str.html#method.strip_circumfix)
-
[`Atomic::from_mut`](https://doc.rust-lang.org/stable/core/sync/atomic/struct.Atomic.html#method.from_mut)
-
[`Atomic::get_mut_slice`](https://doc.rust-lang.org/stable/core/sync/atomic/struct.Atomic.html#method.get_mut_slice)
-
[`Atomic::from_mut_slice`](https://doc.rust-lang.org/stable/core/sync/atomic/struct.Atomic.html#method.from_mut_slice)
-
[`std::range::legacy`](https://doc.rust-lang.org/stable/std/range/legacy/index.html)
## Compatibility Notes
- [If fully elided, lifetime bounds of trait object types may now
resolve differently or even get rejected in very specific niche
scenarios](https://redirect.github.com/rust-lang/rust/pull/129543)
- [Error in more cases of ambiguous
imports](https://redirect.github.com/rust-lang/rust/pull/145108)
- [Switch the destructors implementation for thread locals on Windows to
use Fiber Local Storage
(FLS)](https://redirect.github.com/rust-lang/rust/pull/148799)
- [Convert some cases of the `ambiguous_glob_imports` lint into a hard
error](https://redirect.github.com/rust-lang/rust/pull/149195)
- [Where-bounds of the form `Type = Type` and `Type == Type` are no
longer syntactically
allowed](https://redirect.github.com/rust-lang/rust/pull/153513)
- [Ensure Send/Sync is not implemented for
std::env::Vars{,Os}](https://redirect.github.com/rust-lang/rust/pull/155153)
- [Fix that in some attributes, arguments were not properly
rejected](https://redirect.github.com/rust-lang/rust/pull/155193)
- [`repr(transparent)` is now more strict about which fields have
"trivial" layout and hence can be ignored: `repr(C)` types, types with
private fields, and `#[non_exhaustive]` types are no longer considered
"trivial"](https://redirect.github.com/rust-lang/rust/pull/155299)
- [Correctly check whether types have equal size in `transmute()` when
some `repr` attributes are
involved.](https://redirect.github.com/rust-lang/rust/pull/155418)
- [More characters are escaped when printing strings and
chars](https://redirect.github.com/rust-lang/rust/pull/155527)
- [Implement fast path for `derive(PartialOrd)` when deriving
`Ord`](https://redirect.github.com/rust-lang/rust/pull/155598)
This can break crates in practice where a type's PartialOrd and Ord
impls were inconsistent with each other.
- [Add temporary scope to `assert_eq` and
`assert_ne`](https://redirect.github.com/rust-lang/rust/pull/155739)
- Closed a hole in the pattern matching [structural
equality](https://doc.rust-lang.org/reference/patterns.html#constant-patterns)
check, preventing cases where a match of a constant would be allowed,
despite disagreeing with a manually written `PartialEq` implementation,
when a `derive(PartialEq)` implementation for that type also exists.
- [On Emscripten the WASM exception handling ABI is now unconditionally
used](https://redirect.github.com/rust-lang/rust/pull/156928) The
`-Zemscripten-wasm-eh=false` flag to switch back to JS exceptions has
been removed.
- [The UNSAFE\_CODE lint is now consistently emitted for all unsafe
attributes](https://redirect.github.com/rust-lang/rust/pull/157201)
- [Solaris: remove `File::lock` implementation, it has the wrong
semantics (return "unsupported"
instead)](https://redirect.github.com/rust-lang/rust/pull/157509)
- [Windows-gnu targets now specify baseline tools
versions](https://redirect.github.com/rust-lang/rust/pull/158020)
- [rustfmt now discovers module files that are defined in
`cfg_select!`](https://redirect.github.com/rust-lang/rust/pull/158372)
This may cause more code to be formatted which was previously ignored.
---
### Configuration
📅 **Schedule**: (UTC)
- Branch creation
- Every minute (`* * * * *`)
- Automerge
- At any time (no schedule defined)
🚦 **Automerge**: Enabled.
♻ **Rebasing**: Whenever PR is behind base branch, or you tick the
rebase/retry checkbox.
🔕 **Ignore**: Close this PR and you won't be reminded about this update
again.
---
- [ ] If you want to rebase/retry this PR, check
this box
---
This PR was generated by [Mend Renovate](https://mend.io/renovate/).
View the [repository job
log](https://developer.mend.io/github/epage/_rust).
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
---
.github/workflows/ci.yml | 2 +-
1 file changed, 1 insertion(+), 1 deletion(-)
diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
index 5cdca38..6e69c01 100644
--- a/.github/workflows/ci.yml
+++ b/.github/workflows/ci.yml
@@ -14,7 +14,7 @@ env:
CARGO_TERM_COLOR: always
CLICOLOR: 1
CARGO_INCREMENTAL: 0
- RUST_TOOLCHAIN_STABLE: "1.97" # STABLE
+ RUST_TOOLCHAIN_STABLE: "1.98" # STABLE
concurrency:
group: "${{ github.workflow }}-${{ github.ref }}"
From 8d22eae6c462bc3b1d2702a35f77466a0ed02c8c Mon Sep 17 00:00:00 2001
From: Ed Page
Date: Tue, 25 Aug 2026 12:44:36 -0500
Subject: [PATCH 17/17] chore(ci): Also allow renamed_and_removed_lints
---
.github/workflows/ci.yml | 2 +-
1 file changed, 1 insertion(+), 1 deletion(-)
diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
index 6e69c01..6de04da 100644
--- a/.github/workflows/ci.yml
+++ b/.github/workflows/ci.yml
@@ -180,7 +180,7 @@ jobs:
- name: Report status
env:
CARGO_BUILD_WARNINGS: deny
- run: cargo clippy --workspace --all-features --all-targets --keep-going -- --allow deprecated
+ run: cargo clippy --workspace --all-features --all-targets --keep-going -- --allow deprecated --allow renamed_and_removed_lints
coverage:
name: Coverage
runs-on: ubuntu-latest