Oleksii Syniakov
60a39a4689
Merge branch 'main' into claude/fix-issues-5945-5937-eQm1Q
2026-04-28 10:28:23 +02:00
dependabot[bot]
ae0ab907fe
Bump actions/checkout from 4 to 6 ( #2875 )
...
Bumps [actions/checkout](https://github.com/actions/checkout ) from 4 to 6.
- [Release notes](https://github.com/actions/checkout/releases )
- [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md )
- [Commits](https://github.com/actions/checkout/compare/v4...v6 )
---
updated-dependencies:
- dependency-name: actions/checkout
dependency-version: '6'
dependency-type: direct:production
update-type: version-update:semver-major
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-04-25 14:15:27 +02:00
Claude
3a6a3de8d7
ci: update pinned Action SHAs to current latest versions
...
The previous commit pinned actions to commit SHAs but used stale
version tags (v4.2.2, v2.7.5, old nextest/cargo-llvm-cov refs).
Update to the actual current HEAD of each pinned tag:
actions/checkout v4.2.2 → v4.3.1 (34e114876b0b...)
Swatinem/rust-cache v2.7.5 → v2.9.1 (c19371144df3...)
taiki-e/install-action nextest (56cc9adf3a3e...)
taiki-e/install-action cargo-llvm-cov (e4b3a0453201...)
actions-rs/toolchain, actions-rs/clippy-check, and
codecov/codecov-action SHAs were already correct.
https://claude.ai/code/session_01VD7Bo8upj3cQwWDf9ni2Ln
2026-04-16 06:49:47 +00:00
Claude
af3c6c0070
ci: pin GitHub Actions to full commit SHAs and restrict token permissions
...
Fixes two supply chain / token security issues:
- Pin all third-party Actions to immutable full commit SHAs instead of
mutable version tags (addresses unpinned-dependencies risk, analogous
to quickwit-oss/quickwit#5937 ):
actions/checkout v4.2.2
actions-rs/toolchain v1.0.7
Swatinem/rust-cache v2.7.5
taiki-e/install-action nextest / cargo-llvm-cov
actions-rs/clippy-check v1.0.7
codecov/codecov-action v3.1.6
- Add explicit least-privilege `permissions` blocks at workflow and job
level (addresses excessive GITHUB_TOKEN permissions, analogous to
quickwit-oss/quickwit#5945 ):
default: contents: read
check job: also grants checks: write (required by clippy-check)
https://claude.ai/code/session_01VD7Bo8upj3cQwWDf9ni2Ln
2026-04-15 20:55:43 +00:00
dependabot[bot]
03fcdce016
Bump actions/checkout from 3 to 4 ( #2171 )
...
Bumps [actions/checkout](https://github.com/actions/checkout ) from 3 to 4.
- [Release notes](https://github.com/actions/checkout/releases )
- [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md )
- [Commits](https://github.com/actions/checkout/compare/v3...v4 )
---
updated-dependencies:
- dependency-name: actions/checkout
dependency-type: direct:production
update-type: version-update:semver-major
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-09-11 10:47:33 +02:00
Paul Masurel
184a9daa8a
Cancels concurrently running actions for the same PR. ( #2067 )
2023-06-01 12:57:38 +09:00
Adam Reichold
1c3d39677a
Split checking and testing to a bit more parallelism in the CI.
2022-08-24 10:27:57 +02:00
Pascal Seitz
431b5a091e
remove test trigger
2022-07-05 10:32:33 +08:00
Pascal Seitz
e31e78f39f
fix workflow action
2022-07-04 14:04:49 +08:00
dependabot[bot]
d31f045872
Bump actions/checkout from 2 to 3 ( #1300 )
...
Bumps [actions/checkout](https://github.com/actions/checkout ) from 2 to 3.
- [Release notes](https://github.com/actions/checkout/releases )
- [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md )
- [Commits](https://github.com/actions/checkout/compare/v2...v3 )
---
updated-dependencies:
- dependency-name: actions/checkout
dependency-type: direct:production
update-type: version-update:semver-major
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2022-03-07 11:54:26 +09:00
Paul Masurel
e6653228a9
Renamed github workflows ( #1269 )
2022-02-04 15:10:24 +09:00
Pascal Seitz
022ab9d298
don't run as pr
2021-08-02 15:44:00 +01:00
Pascal Seitz
605e8603dc
add positions to long running test
2021-08-02 15:29:49 +01:00
Pascal Seitz
70f160b329
add long running test in ci
2021-08-02 11:35:39 +01:00
