Skip to content

Commit e649fb5

Browse files
larseggertlarseggert
committed
chore: Update actions
And add a Claude action
1 parent 3c99b25 commit e649fb5

12 files changed

Lines changed: 52 additions & 27 deletions

File tree

‎.github/actions/check-android/action.yml‎

Lines changed: 3 additions & 3 deletions
Original file line numberDiff line numberDiff line change
@@ -32,7 +32,7 @@ runs:
3232
distribution: zulu
3333
java-version: 23
3434

35-
- uses: android-actions/setup-android@9fc6c4e9069bf8d3d10b2204b1fb8f6ef7065407 # v3.2.2
35+
- uses: android-actions/setup-android@40fd30fb8d7440372e1316f5d1809ec01dcd3699 # v4.0.1
3636
with:
3737
accept-android-sdk-licenses: true
3838
log-accepted-android-sdk-licenses: false
@@ -43,14 +43,14 @@ runs:
4343
WD: ${{ inputs.working-directory }}
4444
run: cd "$WD" && sdkmanager --install "ndk;$NDK_VERSION"
4545

46-
- uses: mozilla/actions/rust@b6b1031d2072eb8c2b181887cb5e194ebcc5caab # v1.0.4
46+
- uses: mozilla/actions/rust@25cb84d060946c0ad6d2c3f79da479b16d180d71 # v1.1.0
4747
with:
4848
version: stable
4949
targets: ${{ inputs.target }}
5050
tools: cargo-ndk@^4
5151
token: ${{ inputs.github-token }}
5252

53-
- uses: mozilla/actions/nss@b6b1031d2072eb8c2b181887cb5e194ebcc5caab # v1.0.4
53+
- uses: mozilla/actions/nss@25cb84d060946c0ad6d2c3f79da479b16d180d71 # v1.1.0
5454
if: ${{ inputs.minimum-nss-version != '' }}
5555
with:
5656
minimum-version: ${{ inputs.minimum-nss-version }}

‎.github/actions/check-vm/action.yml‎

Lines changed: 2 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -103,7 +103,7 @@ runs:
103103
echo "envs=CARGO_TERM_COLOR RUST_BACKTRACE RUST_LOG RUST_TEST_TIME_UNIT RUST_TEST_TIME_INTEGRATION RUST_TEST_TIME_DOCTEST WD" >> "$GITHUB_OUTPUT"
104104
105105
- if: ${{ inputs.platform == 'freebsd' }}
106-
uses: vmactions/freebsd-vm@4807432c7cab1c3f97688665332c0b932062d31f # v1.4.3
106+
uses: vmactions/freebsd-vm@7ca82f79fe3078fecded6d3a2bff094995447bbd # v1.4.4
107107
with:
108108
usesh: true
109109
disable-cache: true
@@ -112,7 +112,7 @@ runs:
112112
run: ${{ steps.prep.outputs.run }}
113113

114114
- if: ${{ inputs.platform == 'openbsd' }}
115-
uses: vmactions/openbsd-vm@3fafb45f2e2e696249c583835939323fe1c3448c # v1.3.7
115+
uses: vmactions/openbsd-vm@9004791062e748d95cc87e499e77485f91888ce1 # v1.3.8
116116
with:
117117
usesh: true
118118
disable-cache: true

‎.github/workflows/actionlint.yml‎

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -13,7 +13,7 @@ permissions:
1313

1414
jobs:
1515
actionlint:
16-
uses: mozilla/actions/.github/workflows/actionlint.yml@b6b1031d2072eb8c2b181887cb5e194ebcc5caab # v1.0.4
16+
uses: mozilla/actions/.github/workflows/actionlint.yml@25cb84d060946c0ad6d2c3f79da479b16d180d71 # v1.1.0
1717
permissions:
1818
contents: read
1919
security-events: write # Required for zizmor to upload SARIF results.

‎.github/workflows/check.yml‎

Lines changed: 5 additions & 5 deletions
Original file line numberDiff line numberDiff line change
@@ -36,7 +36,7 @@ jobs:
3636
persist-credentials: false
3737

3838
- id: toolchains
39-
uses: mozilla/actions/toolchains@b6b1031d2072eb8c2b181887cb5e194ebcc5caab # v1.0.4
39+
uses: mozilla/actions/toolchains@25cb84d060946c0ad6d2c3f79da479b16d180d71 # v1.1.0
4040

4141
check:
4242
name: Run checks
@@ -79,14 +79,14 @@ jobs:
7979
with:
8080
persist-credentials: false
8181

82-
- uses: mozilla/actions/rust@b6b1031d2072eb8c2b181887cb5e194ebcc5caab # v1.0.4
82+
- uses: mozilla/actions/rust@25cb84d060946c0ad6d2c3f79da479b16d180d71 # v1.1.0
8383
with:
8484
version: ${{ matrix.rust-toolchain }}
8585
components: ${{ matrix.rust-toolchain == 'stable' && 'llvm-tools' || '' }} ${{ matrix.rust-toolchain == 'nightly' && startsWith(matrix.os, 'ubuntu') && !endsWith(matrix.os, 'arm') && 'rust-src ' || '' }}
8686
tools: ${{ matrix.rust-toolchain == 'stable' && 'cargo-llvm-cov' || '' }} ${{ matrix.rust-toolchain == 'nightly' && startsWith(matrix.os, 'ubuntu') && !endsWith(matrix.os, 'arm') && 'cargo-careful ' || '' }}
8787
token: ${{ secrets.GITHUB_TOKEN }}
8888

89-
- uses: mozilla/actions/nss@b6b1031d2072eb8c2b181887cb5e194ebcc5caab # v1.0.4
89+
- uses: mozilla/actions/nss@25cb84d060946c0ad6d2c3f79da479b16d180d71 # v1.1.0
9090
with:
9191
version-file: min_version.txt
9292
token: ${{ secrets.GITHUB_TOKEN }}
@@ -139,7 +139,7 @@ jobs:
139139

140140
- name: Save simulation seeds artifact
141141
if: ${{ always() }}
142-
uses: actions/upload-artifact@bbbca2ddaa5d8feaa63e36b76fdaad77386f024f # v7.0.0
142+
uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7.0.1
143143
with:
144144
name: simulation-seeds-${{ matrix.os }}-${{ matrix.rust-toolchain }}-${{ matrix.type }}
145145
path: simulation-seeds
@@ -152,7 +152,7 @@ jobs:
152152
- uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
153153
with:
154154
persist-credentials: false
155-
- uses: mozilla/actions/rust@b6b1031d2072eb8c2b181887cb5e194ebcc5caab # v1.0.4
155+
- uses: mozilla/actions/rust@25cb84d060946c0ad6d2c3f79da479b16d180d71 # v1.1.0
156156
with:
157157
version: stable
158158
tools: cargo-hack

‎.github/workflows/claude.yml‎

Lines changed: 25 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,25 @@
1+
name: Claude Code Review
2+
on:
3+
# Use pull_request_target to allow secrets access for fork PRs.
4+
# The reusable workflow only runs for trusted contributors (OWNER/MEMBER/COLLABORATOR).
5+
pull_request_target: # zizmor: ignore[dangerous-triggers] See rationale above.
6+
branches: ["main"]
7+
types: [opened, synchronize, ready_for_review, reopened]
8+
9+
concurrency:
10+
group: ${{ github.workflow }}-${{ github.event.pull_request.number }}
11+
cancel-in-progress: true
12+
13+
permissions:
14+
contents: read
15+
16+
jobs:
17+
claude-review:
18+
uses: mozilla/actions/.github/workflows/claude-review.yml@25cb84d060946c0ad6d2c3f79da479b16d180d71 # v1.1.0
19+
permissions:
20+
contents: read
21+
pull-requests: write # Required to post review comments.
22+
issues: read # Required to read issue context via MCP tools.
23+
actions: read # Required to read workflow run context via MCP tools.
24+
secrets:
25+
ANTHROPIC_API_KEY: ${{ secrets.ANTHROPIC_API_KEY }}

‎.github/workflows/clippy.yml‎

Lines changed: 3 additions & 3 deletions
Original file line numberDiff line numberDiff line change
@@ -23,7 +23,7 @@ jobs:
2323
persist-credentials: false
2424

2525
- id: toolchains
26-
uses: mozilla/actions/toolchains@b6b1031d2072eb8c2b181887cb5e194ebcc5caab # v1.0.4
26+
uses: mozilla/actions/toolchains@25cb84d060946c0ad6d2c3f79da479b16d180d71 # v1.1.0
2727

2828
clippy:
2929
name: cargo clippy
@@ -43,14 +43,14 @@ jobs:
4343
with:
4444
persist-credentials: false
4545

46-
- uses: mozilla/actions/rust@b6b1031d2072eb8c2b181887cb5e194ebcc5caab # v1.0.4
46+
- uses: mozilla/actions/rust@25cb84d060946c0ad6d2c3f79da479b16d180d71 # v1.1.0
4747
with:
4848
version: ${{ matrix.rust-toolchain }}
4949
components: clippy
5050
tools: cargo-hack
5151
token: ${{ secrets.GITHUB_TOKEN }}
5252

53-
- uses: mozilla/actions/nss@b6b1031d2072eb8c2b181887cb5e194ebcc5caab # v1.0.4
53+
- uses: mozilla/actions/nss@25cb84d060946c0ad6d2c3f79da479b16d180d71 # v1.1.0
5454
with:
5555
version-file: min_version.txt
5656
token: ${{ secrets.GITHUB_TOKEN }}

‎.github/workflows/deny.yml‎

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -13,4 +13,4 @@ permissions:
1313

1414
jobs:
1515
deny:
16-
uses: mozilla/actions/.github/workflows/deny.yml@b6b1031d2072eb8c2b181887cb5e194ebcc5caab # v1.0.4
16+
uses: mozilla/actions/.github/workflows/deny.yml@25cb84d060946c0ad6d2c3f79da479b16d180d71 # v1.1.0

‎.github/workflows/dependency-review.yml‎

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -20,4 +20,4 @@ permissions:
2020

2121
jobs:
2222
dependency-review:
23-
uses: mozilla/actions/.github/workflows/dependency-review.yml@b6b1031d2072eb8c2b181887cb5e194ebcc5caab # v1.0.4
23+
uses: mozilla/actions/.github/workflows/dependency-review.yml@25cb84d060946c0ad6d2c3f79da479b16d180d71 # v1.1.0

‎.github/workflows/machete.yml‎

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -13,4 +13,4 @@ permissions:
1313

1414
jobs:
1515
machete:
16-
uses: mozilla/actions/.github/workflows/machete.yml@b6b1031d2072eb8c2b181887cb5e194ebcc5caab # v1.0.4
16+
uses: mozilla/actions/.github/workflows/machete.yml@25cb84d060946c0ad6d2c3f79da479b16d180d71 # v1.1.0

‎.github/workflows/mutants.yml‎

Lines changed: 6 additions & 6 deletions
Original file line numberDiff line numberDiff line change
@@ -29,12 +29,12 @@ jobs:
2929
with:
3030
persist-credentials: false
3131

32-
- uses: mozilla/actions/nss@b6b1031d2072eb8c2b181887cb5e194ebcc5caab # v1.0.4
32+
- uses: mozilla/actions/nss@25cb84d060946c0ad6d2c3f79da479b16d180d71 # v1.1.0
3333
with:
3434
version-file: min_version.txt
3535
token: ${{ secrets.GITHUB_TOKEN }}
3636

37-
- uses: mozilla/actions/rust@b6b1031d2072eb8c2b181887cb5e194ebcc5caab # v1.0.4
37+
- uses: mozilla/actions/rust@25cb84d060946c0ad6d2c3f79da479b16d180d71 # v1.1.0
3838
with:
3939
version: nightly
4040
token: ${{ secrets.GITHUB_TOKEN }}
@@ -64,12 +64,12 @@ jobs:
6464
with:
6565
persist-credentials: false
6666

67-
- uses: mozilla/actions/nss@b6b1031d2072eb8c2b181887cb5e194ebcc5caab # v1.0.4
67+
- uses: mozilla/actions/nss@25cb84d060946c0ad6d2c3f79da479b16d180d71 # v1.1.0
6868
with:
6969
version-file: neqo-crypto/min_version.txt
7070
token: ${{ secrets.GITHUB_TOKEN }}
7171

72-
- uses: mozilla/actions/rust@b6b1031d2072eb8c2b181887cb5e194ebcc5caab # v1.0.4
72+
- uses: mozilla/actions/rust@25cb84d060946c0ad6d2c3f79da479b16d180d71 # v1.1.0
7373
with:
7474
version: nightly
7575
tools: cargo-mutants
@@ -89,7 +89,7 @@ jobs:
8989
# This seems to be a GitHub-internal protection feature that we can't control:
9090
# https://github.com/actions/runner-images/issues/6680
9191
92-
- uses: actions/upload-artifact@bbbca2ddaa5d8feaa63e36b76fdaad77386f024f # v7.0.0
92+
- uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7.0.1
9393
if: always()
9494
with:
9595
name: mutants.out-${{ matrix.shard }}
@@ -120,7 +120,7 @@ jobs:
120120
rm -f mutants.out/shard-*/"$category.txt"
121121
done
122122
123-
- uses: actions/upload-artifact@bbbca2ddaa5d8feaa63e36b76fdaad77386f024f # v7.0.0
123+
- uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7.0.1
124124
id: upload
125125
with:
126126
name: mutants.out

0 commit comments

Comments
 (0)