Skip to content

ci: repin dtolnay/rust-toolchain to where v1 points now - #185

Merged
vyncint merged 1 commit into
mainfrom
ci/repin-rust-toolchain
Oct 27, 2026
Merged

vyncint merged 1 commit into
mainfrom
ci/repin-rust-toolchain

Conversation

@vyncint

@vyncint vyncint commented Oct 27, 2026

Copy link
Copy Markdown
Owner

The action's v1 tag moved twice after the last repin. On 2026-10-09
it moved from 7e38f4b4 to e2a55d2f (upstream #187, "Safely handle action
inputs": action.yml +29/-20). On 2026-10-16 it moved to 683b588c, which
adds the 1.99.1 patch release to scripts/update-revs.sh. zizmor's online
audits fail on the stale pin (ref-version-mismatch and stale-action-refs),
so the zizmor job fails on every run, and the required gate with it.

The 1 pin(s) move to 683b588c487a. The SHA was read from the upstream tag,
a plain commit, with gh api.

This blocks every PR here, including the termlens 0.11.7 bump. That bump follows once this lands.

Signed-off-by: Vyncint Ng 115854244+vyncint@users.noreply.github.com

The action's `v1` tag moved twice after the last repin. On 2026-10-09
it moved from 7e38f4b4 to e2a55d2f (upstream #187, "Safely handle action
inputs": action.yml +29/-20). On 2026-10-16 it moved to 683b588c, which
adds the 1.99.1 patch release to scripts/update-revs.sh. zizmor's online
audits fail on the stale pin (ref-version-mismatch and stale-action-refs),
so the zizmor job fails on every run, and the required gate with it.

The 1 pin(s) move to 683b588c487a. The SHA was read from the upstream tag,
a plain commit, with `gh api`.

Signed-off-by: Vyncint Ng <115854244+vyncint@users.noreply.github.com>
@vyncint
vyncint merged commit 86f632e into main Oct 27, 2026
16 checks passed
@vyncint
vyncint deleted the ci/repin-rust-toolchain branch October 27, 2026 12:13
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant