build(deps): bump the mozilla-actions group across 4 directories with 6 updates (#3678)

dependabot[bot] · web-flow · commit 334dfff258e9 · 2026-06-09T08:33:48.000Z
Bumps the mozilla-actions group with 6 updates in the / directory: | Package | From | To | | --- | --- | --- | | [mozilla/actions](https://github.com/mozilla/actions) | `1.1.4` | `1.1.7` | | [mozilla/actions/.github/workflows/claude-review.yml](https://github.com/mozilla/actions) | `1.1.4` | `1.1.7` | | [mozilla/actions/.github/workflows/deny.yml](https://github.com/mozilla/actions) | `1.1.4` | `1.1.7` | | [mozilla/actions/.github/workflows/dependency-review.yml](https://github.com/mozilla/actions) | `1.1.4` | `1.1.7` | | [mozilla/actions/.github/workflows/rustfmt.yml](https://github.com/mozilla/actions) | `1.1.4` | `1.1.7` | | [mozilla/actions/.github/workflows/sbom.yml](https://github.com/mozilla/actions) | `1.1.4` | `1.1.7` | Bumps the mozilla-actions group with 1 update in the /.github/actions/build-neqo directory: [mozilla/actions](https://github.com/mozilla/actions). Bumps the mozilla-actions group with 1 update in the /.github/actions/check-android directory: [mozilla/actions](https://github.com/mozilla/actions). Bumps the mozilla-actions group with 1 update in the /.github/actions/quic-build directory: [mozilla/actions](https://github.com/mozilla/actions). Updates `mozilla/actions` from 1.1.4 to 1.1.7 - [Release notes](https://github.com/mozilla/actions/releases) - [Commits](mozilla/actions@v1.1.4...2e46408) Updates `mozilla/actions/.github/workflows/claude-review.yml` from 1.1.4 to 1.1.7 - [Release notes](https://github.com/mozilla/actions/releases) - [Commits](mozilla/actions@312d300...2e46408) Updates `mozilla/actions/.github/workflows/deny.yml` from 1.1.4 to 1.1.7 - [Release notes](https://github.com/mozilla/actions/releases) - [Commits](mozilla/actions@312d300...2e46408) Updates `mozilla/actions/.github/workflows/dependency-review.yml` from 1.1.4 to 1.1.7 - [Release notes](https://github.com/mozilla/actions/releases) - [Commits](mozilla/actions@312d300...2e46408) Updates `mozilla/actions/.github/workflows/rustfmt.yml` from 1.1.4 to 1.1.7 - [Release notes](https://github.com/mozilla/actions/releases) - [Commits](mozilla/actions@312d300...2e46408) Updates `mozilla/actions/.github/workflows/sbom.yml` from 1.1.4 to 1.1.7 - [Release notes](https://github.com/mozilla/actions/releases) - [Commits](mozilla/actions@312d300...2e46408) Updates `mozilla/actions` from 1.1.4 to 1.1.7 - [Release notes](https://github.com/mozilla/actions/releases) - [Commits](mozilla/actions@v1.1.4...2e46408) Updates `mozilla/actions` from 1.1.4 to 1.1.7 - [Release notes](https://github.com/mozilla/actions/releases) - [Commits](mozilla/actions@v1.1.4...2e46408) Updates `mozilla/actions` from 1.1.4 to 1.1.7 - [Release notes](https://github.com/mozilla/actions/releases) - [Commits](mozilla/actions@v1.1.4...2e46408) Updates `mozilla/actions` from 1.1.4 to 1.1.7 - [Release notes](https://github.com/mozilla/actions/releases) - [Commits](mozilla/actions@v1.1.4...2e46408) Updates `mozilla/actions` from 1.1.4 to 1.1.7 - [Release notes](https://github.com/mozilla/actions/releases) - [Commits](mozilla/actions@v1.1.4...2e46408) Updates `mozilla/actions` from 1.1.4 to 1.1.7 - [Release notes](https://github.com/mozilla/actions/releases) - [Commits](mozilla/actions@v1.1.4...2e46408) Updates `mozilla/actions` from 1.1.4 to 1.1.7 - [Release notes](https://github.com/mozilla/actions/releases) - [Commits](mozilla/actions@v1.1.4...2e46408) Updates `mozilla/actions` from 1.1.4 to 1.1.7 - [Release notes](https://github.com/mozilla/actions/releases) - [Commits](mozilla/actions@v1.1.4...2e46408) Updates `mozilla/actions` from 1.1.4 to 1.1.7 - [Release notes](https://github.com/mozilla/actions/releases) - [Commits](mozilla/actions@v1.1.4...2e46408) Updates `mozilla/actions` from 1.1.4 to 1.1.7 - [Release notes](https://github.com/mozilla/actions/releases) - [Commits](mozilla/actions@v1.1.4...2e46408) Updates `mozilla/actions` from 1.1.4 to 1.1.7 - [Release notes](https://github.com/mozilla/actions/releases) - [Commits](mozilla/actions@v1.1.4...2e46408) Updates `mozilla/actions` from 1.1.4 to 1.1.7 - [Release notes](https://github.com/mozilla/actions/releases) - [Commits](mozilla/actions@v1.1.4...2e46408) Updates `mozilla/actions` from 1.1.4 to 1.1.7 - [Release notes](https://github.com/mozilla/actions/releases) - [Commits](mozilla/actions@v1.1.4...2e46408) Updates `mozilla/actions` from 1.1.4 to 1.1.7 - [Release notes](https://github.com/mozilla/actions/releases) - [Commits](mozilla/actions@v1.1.4...2e46408) Updates `mozilla/actions` from 1.1.4 to 1.1.7 - [Release notes](https://github.com/mozilla/actions/releases) - [Commits](mozilla/actions@v1.1.4...2e46408) --- updated-dependencies: - dependency-name: mozilla/actions dependency-version: 1.1.7 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: mozilla-actions - dependency-name: mozilla/actions dependency-version: 1.1.7 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: mozilla-actions - dependency-name: mozilla/actions dependency-version: 1.1.7 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: mozilla-actions - dependency-name: mozilla/actions dependency-version: 1.1.7 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: mozilla-actions - dependency-name: mozilla/actions/.github/workflows/claude-review.yml dependency-version: 1.1.7 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: mozilla-actions - dependency-name: mozilla/actions/.github/workflows/deny.yml dependency-version: 1.1.7 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: mozilla-actions - dependency-name: mozilla/actions/.github/workflows/dependency-review.yml dependency-version: 1.1.7 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: mozilla-actions - dependency-name: mozilla/actions/.github/workflows/rustfmt.yml dependency-version: 1.1.7 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: mozilla-actions - dependency-name: mozilla/actions/.github/workflows/sbom.yml dependency-version: 1.1.7 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: mozilla-actions ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
diff --git a/.github/actions/build-neqo/action.yml b/.github/actions/build-neqo/action.yml
@@ -31,13 +31,13 @@ runs:
         sudo apt-get install -y --no-install-recommends clang lld
 
     - name: Install Rust
-      uses: mozilla/actions/rust@312d300af3fb2b6551389bf1cb40b10e86294ec2 # v1.1.4
+      uses: mozilla/actions/rust@2e46408d5c495e59a21e5e125e82008fad0d9408 # v1.1.7
       with:
         version: stable
         token: ${{ inputs.token }}
 
     - name: Install NSS
-      uses: mozilla/actions/nss@312d300af3fb2b6551389bf1cb40b10e86294ec2 # v1.1.4
+      uses: mozilla/actions/nss@2e46408d5c495e59a21e5e125e82008fad0d9408 # v1.1.7
       with:
         minimum-version: ${{ inputs.nss-minimum-version }}
         token: ${{ inputs.token }}
diff --git a/.github/actions/check-android/action.yml b/.github/actions/check-android/action.yml
@@ -43,14 +43,14 @@ runs:
         WD: ${{ inputs.working-directory }}
       run: cd "$WD" && sdkmanager --install "ndk;$NDK_VERSION"
 
-    - uses: mozilla/actions/rust@312d300af3fb2b6551389bf1cb40b10e86294ec2 # v1.1.4
+    - uses: mozilla/actions/rust@2e46408d5c495e59a21e5e125e82008fad0d9408 # v1.1.7
       with:
         version: stable
         targets: ${{ inputs.target }}
         tools: cargo-ndk@^4
         token: ${{ inputs.github-token }}
 
-    - uses: mozilla/actions/nss@312d300af3fb2b6551389bf1cb40b10e86294ec2 # v1.1.4
+    - uses: mozilla/actions/nss@2e46408d5c495e59a21e5e125e82008fad0d9408 # v1.1.7
       if: ${{ inputs.minimum-nss-version != '' }}
       with:
         minimum-version: ${{ inputs.minimum-nss-version }}
diff --git a/.github/actions/quic-build/action.yml b/.github/actions/quic-build/action.yml
@@ -39,7 +39,7 @@ runs:
 
     - name: Install Rust
       if: inputs.impl == 'quiche' || inputs.impl == 's2n'
-      uses: mozilla/actions/rust@312d300af3fb2b6551389bf1cb40b10e86294ec2 # v1.1.4
+      uses: mozilla/actions/rust@2e46408d5c495e59a21e5e125e82008fad0d9408 # v1.1.7
       with:
         version: stable
         token: ${{ inputs.token }}
diff --git a/.github/workflows/bench.yml b/.github/workflows/bench.yml
@@ -77,7 +77,7 @@ jobs:
           echo "$HOME/.cargo/bin" >> "${GITHUB_PATH}"
 
       - name: Install Rust
-        uses: mozilla/actions/rust@312d300af3fb2b6551389bf1cb40b10e86294ec2 # v1.1.4
+        uses: mozilla/actions/rust@2e46408d5c495e59a21e5e125e82008fad0d9408 # v1.1.7
         with:
           version: ${{ env.RUSTUP_TOOLCHAIN }}
           tools: flamegraph, samply
diff --git a/.github/workflows/check-mtu.yml b/.github/workflows/check-mtu.yml
@@ -35,7 +35,7 @@ jobs:
         with:
           persist-credentials: false
 
-      - uses: mozilla/actions/rust@312d300af3fb2b6551389bf1cb40b10e86294ec2 # v1.1.4
+      - uses: mozilla/actions/rust@2e46408d5c495e59a21e5e125e82008fad0d9408 # v1.1.7
         with:
           token: ${{ secrets.GITHUB_TOKEN }}
 
diff --git a/.github/workflows/check.yml b/.github/workflows/check.yml
@@ -36,7 +36,7 @@ jobs:
           persist-credentials: false
 
       - id: toolchains
-        uses: mozilla/actions/toolchains@312d300af3fb2b6551389bf1cb40b10e86294ec2 # v1.1.4
+        uses: mozilla/actions/toolchains@2e46408d5c495e59a21e5e125e82008fad0d9408 # v1.1.7
 
   check:
     name: Run checks
@@ -79,7 +79,7 @@ jobs:
         with:
           persist-credentials: false
 
-      - uses: mozilla/actions/rust@312d300af3fb2b6551389bf1cb40b10e86294ec2 # v1.1.4
+      - uses: mozilla/actions/rust@2e46408d5c495e59a21e5e125e82008fad0d9408 # v1.1.7
         with:
           version: ${{ matrix.rust-toolchain }}
           components: ${{ matrix.rust-toolchain == 'stable' && 'llvm-tools' || '' }} ${{ matrix.rust-toolchain == 'nightly' && startsWith(matrix.os, 'ubuntu') && !endsWith(matrix.os, 'arm') && 'rust-src ' || '' }}
@@ -90,7 +90,7 @@ jobs:
         uses: ./.github/actions/minimum-version
         with:
           directory: .
-      - uses: mozilla/actions/nss@312d300af3fb2b6551389bf1cb40b10e86294ec2 # v1.1.4
+      - uses: mozilla/actions/nss@2e46408d5c495e59a21e5e125e82008fad0d9408 # v1.1.7
         with:
           minimum-version: ${{ steps.nss-version.outputs.minimum }}
           token: ${{ secrets.GITHUB_TOKEN }}
@@ -168,7 +168,7 @@ jobs:
       - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
         with:
           persist-credentials: false
-      - uses: mozilla/actions/rust@312d300af3fb2b6551389bf1cb40b10e86294ec2 # v1.1.4
+      - uses: mozilla/actions/rust@2e46408d5c495e59a21e5e125e82008fad0d9408 # v1.1.7
         with:
           version: stable
           tools: cargo-hack
diff --git a/.github/workflows/claude.yml b/.github/workflows/claude.yml
@@ -15,7 +15,7 @@ permissions:
 
 jobs:
   claude-review:
-    uses: mozilla/actions/.github/workflows/claude-review.yml@312d300af3fb2b6551389bf1cb40b10e86294ec2 # v1.1.4
+    uses: mozilla/actions/.github/workflows/claude-review.yml@2e46408d5c495e59a21e5e125e82008fad0d9408 # v1.1.7
     permissions:
       contents: read
       pull-requests: write # Required to post review comments.
diff --git a/.github/workflows/clippy.yml b/.github/workflows/clippy.yml
@@ -23,7 +23,7 @@ jobs:
           persist-credentials: false
 
       - id: toolchains
-        uses: mozilla/actions/toolchains@312d300af3fb2b6551389bf1cb40b10e86294ec2 # v1.1.4
+        uses: mozilla/actions/toolchains@2e46408d5c495e59a21e5e125e82008fad0d9408 # v1.1.7
 
   clippy:
     name: cargo clippy
@@ -43,7 +43,7 @@ jobs:
         with:
           persist-credentials: false
 
-      - uses: mozilla/actions/rust@312d300af3fb2b6551389bf1cb40b10e86294ec2 # v1.1.4
+      - uses: mozilla/actions/rust@2e46408d5c495e59a21e5e125e82008fad0d9408 # v1.1.7
         with:
           version: ${{ matrix.rust-toolchain }}
           components: clippy
@@ -54,7 +54,7 @@ jobs:
         uses: ./.github/actions/minimum-version
         with:
           directory: .
-      - uses: mozilla/actions/nss@312d300af3fb2b6551389bf1cb40b10e86294ec2 # v1.1.4
+      - uses: mozilla/actions/nss@2e46408d5c495e59a21e5e125e82008fad0d9408 # v1.1.7
         with:
           minimum-version: ${{ steps.nss-version.outputs.minimum }}
           token: ${{ secrets.GITHUB_TOKEN }}
diff --git a/.github/workflows/codspeed.yml b/.github/workflows/codspeed.yml
@@ -50,7 +50,7 @@ jobs:
         with:
           persist-credentials: false
 
-      - uses: mozilla/actions/rust@312d300af3fb2b6551389bf1cb40b10e86294ec2 # v1.1.4
+      - uses: mozilla/actions/rust@2e46408d5c495e59a21e5e125e82008fad0d9408 # v1.1.7
         with:
           version: stable
           tools: cargo-codspeed
@@ -60,7 +60,7 @@ jobs:
         uses: ./.github/actions/minimum-version
         with:
           directory: .
-      - uses: mozilla/actions/nss@312d300af3fb2b6551389bf1cb40b10e86294ec2 # v1.1.4
+      - uses: mozilla/actions/nss@2e46408d5c495e59a21e5e125e82008fad0d9408 # v1.1.7
         with:
           minimum-version: ${{ steps.nss-version.outputs.minimum }}
           token: ${{ secrets.GITHUB_TOKEN }}
diff --git a/.github/workflows/deny.yml b/.github/workflows/deny.yml
@@ -13,4 +13,4 @@ permissions:
 
 jobs:
   deny:
-    uses: mozilla/actions/.github/workflows/deny.yml@312d300af3fb2b6551389bf1cb40b10e86294ec2 # v1.1.4
+    uses: mozilla/actions/.github/workflows/deny.yml@2e46408d5c495e59a21e5e125e82008fad0d9408 # v1.1.7
diff --git a/.github/workflows/dependency-review.yml b/.github/workflows/dependency-review.yml
@@ -20,4 +20,4 @@ permissions:
 
 jobs:
   dependency-review:
-    uses: mozilla/actions/.github/workflows/dependency-review.yml@312d300af3fb2b6551389bf1cb40b10e86294ec2 # v1.1.4
+    uses: mozilla/actions/.github/workflows/dependency-review.yml@2e46408d5c495e59a21e5e125e82008fad0d9408 # v1.1.7
diff --git a/.github/workflows/fuzz-bench.yml b/.github/workflows/fuzz-bench.yml
@@ -26,7 +26,7 @@ jobs:
         with:
           persist-credentials: false
 
-      - uses: mozilla/actions/rust@312d300af3fb2b6551389bf1cb40b10e86294ec2 # v1.1.4
+      - uses: mozilla/actions/rust@2e46408d5c495e59a21e5e125e82008fad0d9408 # v1.1.7
         with:
           version: nightly
           token: ${{ secrets.GITHUB_TOKEN }}
@@ -41,7 +41,7 @@ jobs:
         uses: ./.github/actions/minimum-version
         with:
           directory: .
-      - uses: mozilla/actions/nss@312d300af3fb2b6551389bf1cb40b10e86294ec2 # v1.1.4
+      - uses: mozilla/actions/nss@2e46408d5c495e59a21e5e125e82008fad0d9408 # v1.1.7
         with:
           minimum-version: ${{ steps.nss-version.outputs.minimum }}
           token: ${{ secrets.GITHUB_TOKEN }}
diff --git a/.github/workflows/fuzz-corpus.yml b/.github/workflows/fuzz-corpus.yml
@@ -37,7 +37,7 @@ jobs:
         with:
           persist-credentials: true # zizmor: ignore[artipacked] We need to push branches.
 
-      - uses: mozilla/actions/rust@312d300af3fb2b6551389bf1cb40b10e86294ec2 # v1.1.4
+      - uses: mozilla/actions/rust@2e46408d5c495e59a21e5e125e82008fad0d9408 # v1.1.7
         with:
           version: nightly
           token: ${{ secrets.GITHUB_TOKEN }}
@@ -51,7 +51,7 @@ jobs:
         uses: ./.github/actions/minimum-version
         with:
           directory: .
-      - uses: mozilla/actions/nss@312d300af3fb2b6551389bf1cb40b10e86294ec2 # v1.1.4
+      - uses: mozilla/actions/nss@2e46408d5c495e59a21e5e125e82008fad0d9408 # v1.1.7
         with:
           minimum-version: ${{ steps.nss-version.outputs.minimum }}
           token: ${{ secrets.GITHUB_TOKEN }}
diff --git a/.github/workflows/mutants-pr.yml b/.github/workflows/mutants-pr.yml
@@ -28,12 +28,12 @@ jobs:
         uses: ./.github/actions/minimum-version
         with:
           directory: .
-      - uses: mozilla/actions/nss@312d300af3fb2b6551389bf1cb40b10e86294ec2 # v1.1.4
+      - uses: mozilla/actions/nss@2e46408d5c495e59a21e5e125e82008fad0d9408 # v1.1.7
         with:
           minimum-version: ${{ steps.nss-version.outputs.minimum }}
           token: ${{ secrets.GITHUB_TOKEN }}
 
-      - uses: mozilla/actions/rust@312d300af3fb2b6551389bf1cb40b10e86294ec2 # v1.1.4
+      - uses: mozilla/actions/rust@2e46408d5c495e59a21e5e125e82008fad0d9408 # v1.1.7
         with:
           version: nightly
           tools: cargo-mutants
diff --git a/.github/workflows/mutants.yml b/.github/workflows/mutants.yml
@@ -33,12 +33,12 @@ jobs:
         uses: ./.github/actions/minimum-version
         with:
           directory: .
-      - uses: mozilla/actions/nss@312d300af3fb2b6551389bf1cb40b10e86294ec2 # v1.1.4
+      - uses: mozilla/actions/nss@2e46408d5c495e59a21e5e125e82008fad0d9408 # v1.1.7
         with:
           minimum-version: ${{ steps.nss-version.outputs.minimum }}
           token: ${{ secrets.GITHUB_TOKEN }}
 
-      - uses: mozilla/actions/rust@312d300af3fb2b6551389bf1cb40b10e86294ec2 # v1.1.4
+      - uses: mozilla/actions/rust@2e46408d5c495e59a21e5e125e82008fad0d9408 # v1.1.7
         with:
           version: nightly
           token: ${{ secrets.GITHUB_TOKEN }}
@@ -72,12 +72,12 @@ jobs:
         uses: ./.github/actions/minimum-version
         with:
           directory: .
-      - uses: mozilla/actions/nss@312d300af3fb2b6551389bf1cb40b10e86294ec2 # v1.1.4
+      - uses: mozilla/actions/nss@2e46408d5c495e59a21e5e125e82008fad0d9408 # v1.1.7
         with:
           minimum-version: ${{ steps.nss-version.outputs.minimum }}
           token: ${{ secrets.GITHUB_TOKEN }}
 
-      - uses: mozilla/actions/rust@312d300af3fb2b6551389bf1cb40b10e86294ec2 # v1.1.4
+      - uses: mozilla/actions/rust@2e46408d5c495e59a21e5e125e82008fad0d9408 # v1.1.7
         with:
           version: nightly
           tools: cargo-mutants
diff --git a/.github/workflows/perfcompare.yml b/.github/workflows/perfcompare.yml
@@ -136,7 +136,7 @@ jobs:
           echo "$HOME/.cargo/bin" >> "${GITHUB_PATH}"
 
       - name: Install Rust
-        uses: mozilla/actions/rust@312d300af3fb2b6551389bf1cb40b10e86294ec2 # v1.1.4
+        uses: mozilla/actions/rust@2e46408d5c495e59a21e5e125e82008fad0d9408 # v1.1.7
         with:
           version: ${{ env.RUSTUP_TOOLCHAIN }}
           tools: hyperfine, flamegraph, samply
diff --git a/.github/workflows/profile.yml b/.github/workflows/profile.yml
@@ -52,7 +52,7 @@ jobs:
         with:
           persist-credentials: false
 
-      - uses: mozilla/actions/rust@312d300af3fb2b6551389bf1cb40b10e86294ec2 # v1.1.4
+      - uses: mozilla/actions/rust@2e46408d5c495e59a21e5e125e82008fad0d9408 # v1.1.7
         with:
           version: stable
           tools: samply
@@ -62,7 +62,7 @@ jobs:
         uses: ./.github/actions/minimum-version
         with:
           directory: .
-      - uses: mozilla/actions/nss@312d300af3fb2b6551389bf1cb40b10e86294ec2 # v1.1.4
+      - uses: mozilla/actions/nss@2e46408d5c495e59a21e5e125e82008fad0d9408 # v1.1.7
         with:
           minimum-version: ${{ steps.nss-version.outputs.minimum }}
           token: ${{ secrets.GITHUB_TOKEN }}
@@ -123,7 +123,7 @@ jobs:
         with:
           persist-credentials: false
 
-      - uses: mozilla/actions/rust@312d300af3fb2b6551389bf1cb40b10e86294ec2 # v1.1.4
+      - uses: mozilla/actions/rust@2e46408d5c495e59a21e5e125e82008fad0d9408 # v1.1.7
         with:
           version: stable
           tools: samply
@@ -133,7 +133,7 @@ jobs:
         uses: ./.github/actions/minimum-version
         with:
           directory: .
-      - uses: mozilla/actions/nss@312d300af3fb2b6551389bf1cb40b10e86294ec2 # v1.1.4
+      - uses: mozilla/actions/nss@2e46408d5c495e59a21e5e125e82008fad0d9408 # v1.1.7
         with:
           minimum-version: ${{ steps.nss-version.outputs.minimum }}
           token: ${{ secrets.GITHUB_TOKEN }}
diff --git a/.github/workflows/readme.yml b/.github/workflows/readme.yml
@@ -19,7 +19,7 @@ jobs:
       - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
         with:
           persist-credentials: false
-      - uses: mozilla/actions/rust@312d300af3fb2b6551389bf1cb40b10e86294ec2 # v1.1.4
+      - uses: mozilla/actions/rust@2e46408d5c495e59a21e5e125e82008fad0d9408 # v1.1.7
         with:
           tools: cargo-readme
           token: ${{ secrets.GITHUB_TOKEN }}
diff --git a/.github/workflows/rustfmt.yml b/.github/workflows/rustfmt.yml
@@ -13,4 +13,4 @@ permissions:
 
 jobs:
   format:
-    uses: mozilla/actions/.github/workflows/rustfmt.yml@312d300af3fb2b6551389bf1cb40b10e86294ec2 # v1.1.4
+    uses: mozilla/actions/.github/workflows/rustfmt.yml@2e46408d5c495e59a21e5e125e82008fad0d9408 # v1.1.7
diff --git a/.github/workflows/sanitize.yml b/.github/workflows/sanitize.yml
@@ -38,7 +38,7 @@ jobs:
         with:
           persist-credentials: false
 
-      - uses: mozilla/actions/rust@312d300af3fb2b6551389bf1cb40b10e86294ec2 # v1.1.4
+      - uses: mozilla/actions/rust@2e46408d5c495e59a21e5e125e82008fad0d9408 # v1.1.7
         with:
           version: nightly
           components: rust-src
@@ -49,7 +49,7 @@ jobs:
         uses: ./.github/actions/minimum-version
         with:
           directory: .
-      - uses: mozilla/actions/nss@312d300af3fb2b6551389bf1cb40b10e86294ec2 # v1.1.4
+      - uses: mozilla/actions/nss@2e46408d5c495e59a21e5e125e82008fad0d9408 # v1.1.7
         with:
           minimum-version: ${{ steps.nss-version.outputs.minimum }}
           token: ${{ secrets.GITHUB_TOKEN }}
diff --git a/.github/workflows/sbom.yml b/.github/workflows/sbom.yml
@@ -9,7 +9,7 @@ permissions: {}
 
 jobs:
   sbom:
-    uses: mozilla/actions/.github/workflows/sbom.yml@312d300af3fb2b6551389bf1cb40b10e86294ec2 # v1.1.4
+    uses: mozilla/actions/.github/workflows/sbom.yml@2e46408d5c495e59a21e5e125e82008fad0d9408 # v1.1.7
     permissions:
       actions: read # Required by anchore/sbom-action to read workflow run context.
       contents: write # Required to upload the SBOM as a release asset.
diff --git a/.github/workflows/semver.yml b/.github/workflows/semver.yml
@@ -15,6 +15,6 @@ jobs:
     name: Check semver
     runs-on: ubuntu-24.04
     steps:
-      - uses: mozilla/actions/semver@95b043d77461064eed6fbffa7b3f240bcbf19d3b # v1.1.5
+      - uses: mozilla/actions/semver@2e46408d5c495e59a21e5e125e82008fad0d9408 # v1.1.7
         with:
           package: mtu
