1717
1818 services :
1919 postgres :
20- image : postgres:18-alpine@sha256:77f585114c32fbca283dc835b0596f4e52b51b4c6662d7810b2f4084f60a1873
20+ image : postgres:18-alpine@sha256:898c60cb390d1085bc97bdd6a1ae968757421df394b071848b52b1c09c89d6a5
2121 env :
2222 POSTGRES_USER : postgres
2323 POSTGRES_PASSWORD : postgres
3030 --health-timeout 5s
3131 --health-retries 5
3232 redis :
33- image : redis:8-alpine@sha256:3811787313eba226a2ef38658c6ccb91cd5e110edc89c37767de373120a0e5a0
33+ image : redis:8-alpine@sha256:0bf6577d7774e592b29d093e3ac9390eb91e13d72c21e506afce736de5e0eeb0
3434 ports :
3535 - 6379:6379
3636 options : >-
@@ -59,17 +59,17 @@ jobs:
5959 /opt/hostedtoolcache/CodeQL /usr/local/.ghcup
6060 df -h /
6161
62- - uses : dtolnay/rust-toolchain@89b12181fb390509a0842a86cc55eeb8eb928c1d # stable
62+ - uses : dtolnay/rust-toolchain@b725eda525362e7cf34af9a7243cac1e3f01a7ec # stable
6363 with :
6464 toolchain : stable
6565 # Save only on pushes (dev, main). A PR can read its own caches, its
6666 # base branch's and the default branch's, never another PR's, so a cache
6767 # saved on a PR serves only a later push to that same PR, while taking as
6868 # much of the repository's 10 GB cache quota as dev's and evicting it.
69- - uses : Swatinem/rust-cache@6323deb102c322ba6fcbdcafc7e3dddab59af2b6 # v2.9.2
69+ - uses : Swatinem/rust-cache@d1527c8f67ef9af357290475d4af4b0fab8f12e0 # v2.9.3
7070 with :
7171 save-if : ${{ github.event_name == 'push' }}
72- - uses : taiki-e/install-action@183e4297cca2404691e9380e1307288dced5c82a # v2.87.25
72+ - uses : taiki-e/install-action@1e29709c0ec63babbe8f266397a465f29a825f91 # v2.87.31
7373 with :
7474 tool : cargo-nextest
7575
9797
9898 services :
9999 postgres :
100- image : postgres:18-alpine@sha256:77f585114c32fbca283dc835b0596f4e52b51b4c6662d7810b2f4084f60a1873
100+ image : postgres:18-alpine@sha256:898c60cb390d1085bc97bdd6a1ae968757421df394b071848b52b1c09c89d6a5
101101 env :
102102 POSTGRES_USER : postgres
103103 POSTGRES_PASSWORD : postgres
@@ -114,7 +114,7 @@ jobs:
114114 --health-timeout 5s
115115 --health-retries 10
116116 redis :
117- image : redis:8-alpine@sha256:3811787313eba226a2ef38658c6ccb91cd5e110edc89c37767de373120a0e5a0
117+ image : redis:8-alpine@sha256:0bf6577d7774e592b29d093e3ac9390eb91e13d72c21e506afce736de5e0eeb0
118118 ports :
119119 - 6379:6379
120120 options : >-
@@ -123,7 +123,7 @@ jobs:
123123 --health-timeout 5s
124124 --health-retries 10
125125 clickhouse :
126- image : clickhouse/clickhouse-server:26.8-alpine@sha256:652d6997949183f3493f8ff601149e3df4d476be829f0d02b9861454d040c410
126+ image : clickhouse/clickhouse-server:26.8-alpine@sha256:31d60795ca6ac748a20712b5d8d047e415c44d370a86e89a63cd251b0eaed9e9
127127 env :
128128 CLICKHOUSE_USER : default
129129 CLICKHOUSE_PASSWORD : chtest
@@ -160,14 +160,14 @@ jobs:
160160 /opt/hostedtoolcache/CodeQL /usr/local/.ghcup
161161 df -h /
162162
163- - uses : dtolnay/rust-toolchain@89b12181fb390509a0842a86cc55eeb8eb928c1d # stable
163+ - uses : dtolnay/rust-toolchain@b725eda525362e7cf34af9a7243cac1e3f01a7ec # stable
164164 with :
165165 toolchain : stable
166- - uses : Swatinem/rust-cache@6323deb102c322ba6fcbdcafc7e3dddab59af2b6 # v2.9.2
166+ - uses : Swatinem/rust-cache@d1527c8f67ef9af357290475d4af4b0fab8f12e0 # v2.9.3
167167 with :
168168 # See the `rust` job.
169169 save-if : ${{ github.event_name == 'push' }}
170- - uses : taiki-e/install-action@183e4297cca2404691e9380e1307288dced5c82a # v2.87.25
170+ - uses : taiki-e/install-action@1e29709c0ec63babbe8f266397a465f29a825f91 # v2.87.31
171171 with :
172172 tool : cargo-nextest
173173
@@ -189,8 +189,8 @@ jobs:
189189 with :
190190 # Pinned — matches `packageManager` in web/package.json.
191191 # Bump together with that field, never alone.
192- version : 12.14 .0
193- - uses : actions/setup-node@820762786026740c76f36085b0efc47a31fe5020 # v7.0 .0
192+ version : 12.15 .0
193+ - uses : actions/setup-node@949feb2413d6458794dcd2491c4babbbce0c15c1 # v7.1 .0
194194 with :
195195 node-version : 24
196196 cache : pnpm
@@ -246,7 +246,7 @@ jobs:
246246 images : ${{ env.IMAGE_PREFIX }}/think-watch-server
247247
248248 - name : Log in to GitHub Container Registry
249- uses : docker/login-action@dbcb813823bdd20940b903addbd779551569679f # v4.6 .0
249+ uses : docker/login-action@81c6f93d4bc991e510b342a00b419b3bb4efc5c6 # v4.7 .0
250250 with :
251251 registry : ghcr.io
252252 username : ${{ github.actor }}
@@ -274,7 +274,7 @@ jobs:
274274 touch "${{ runner.temp }}/digests/${digest#sha256:}"
275275
276276 - name : Upload digest
277- uses : actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7.0.1
277+ uses : actions/upload-artifact@cf430e030ddbb5b0abf93d22962f4752f3646cd9 # v7.0.2
278278 with :
279279 name : server-digest-${{ strategy.job-index }}
280280 path : ${{ runner.temp }}/digests
@@ -294,14 +294,14 @@ jobs:
294294 run : echo "IMAGE_PREFIX=ghcr.io/$(echo '${{ github.repository_owner }}' | tr '[:upper:]' '[:lower:]')" >> $GITHUB_ENV
295295
296296 - name : Download digests
297- uses : actions/download-artifact@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c # v8.0.1
297+ uses : actions/download-artifact@9000827ccba6bdab643e8b6fd33ac0654aef8333 # v8.0.2
298298 with :
299299 pattern : server-digest-*
300300 merge-multiple : true
301301 path : ${{ runner.temp }}/digests
302302
303303 - name : Log in to GitHub Container Registry
304- uses : docker/login-action@dbcb813823bdd20940b903addbd779551569679f # v4.6 .0
304+ uses : docker/login-action@81c6f93d4bc991e510b342a00b419b3bb4efc5c6 # v4.7 .0
305305 with :
306306 registry : ghcr.io
307307 username : ${{ github.actor }}
@@ -356,7 +356,7 @@ jobs:
356356 run : echo "IMAGE_PREFIX=ghcr.io/$(echo '${{ github.repository_owner }}' | tr '[:upper:]' '[:lower:]')" >> $GITHUB_ENV
357357
358358 - name : Log in to GitHub Container Registry
359- uses : docker/login-action@dbcb813823bdd20940b903addbd779551569679f # v4.6 .0
359+ uses : docker/login-action@81c6f93d4bc991e510b342a00b419b3bb4efc5c6 # v4.7 .0
360360 with :
361361 registry : ghcr.io
362362 username : ${{ github.actor }}
0 commit comments