Skip to content

Commit 8dfe805

Browse files
BlackDexBlackDex
authored
Update Rust, Crates and other deps (#5709)
- Updated Rust to v1.85.1 - Updated crates and fixed breaking changes - Updated datatables js - Updated GitHub Actions Signed-off-by: BlackDex <[email protected]>
1 parent 07b869b commit 8dfe805

14 files changed

+622
-256
lines changed

‎.github/workflows/build.yml

+3-3
Original file line numberDiff line numberDiff line change
@@ -80,7 +80,7 @@ jobs:
8080

8181
# Only install the clippy and rustfmt components on the default rust-toolchain
8282
- name: "Install rust-toolchain version"
83-
uses: dtolnay/rust-toolchain@c5a29ddb4d9d194e7c84ec8c3fba61b1c31fee8c # master @ Jan 30, 2025, 8:16 PM GMT+1
83+
uses: dtolnay/rust-toolchain@56f84321dbccf38fb67ce29ab63e4754056677e0 # master @ Mar 18, 2025, 8:14 PM GMT+1
8484
if: ${{ matrix.channel == 'rust-toolchain' }}
8585
with:
8686
toolchain: "${{steps.toolchain.outputs.RUST_TOOLCHAIN}}"
@@ -90,7 +90,7 @@ jobs:
9090

9191
# Install the any other channel to be used for which we do not execute clippy and rustfmt
9292
- name: "Install MSRV version"
93-
uses: dtolnay/rust-toolchain@c5a29ddb4d9d194e7c84ec8c3fba61b1c31fee8c # master @ Jan 30, 2025, 8:16 PM GMT+1
93+
uses: dtolnay/rust-toolchain@56f84321dbccf38fb67ce29ab63e4754056677e0 # master @ Mar 18, 2025, 8:14 PM GMT+1
9494
if: ${{ matrix.channel != 'rust-toolchain' }}
9595
with:
9696
toolchain: "${{steps.toolchain.outputs.RUST_TOOLCHAIN}}"
@@ -115,7 +115,7 @@ jobs:
115115

116116
# Enable Rust Caching
117117
- name: Rust Caching
118-
uses: Swatinem/rust-cache@f0deed1e0edfc6a9be95417288c0e1099b1eeec3 # v2.7.7
118+
uses: Swatinem/rust-cache@9d47c6ad4b02e050fd481d890b2ea34778fd09d6 # v2.7.8
119119
with:
120120
# Use a custom prefix-key to force a fresh start. This is sometimes needed with bigger changes.
121121
# Like changing the build host from Ubuntu 20.04 to 22.04 for example.

‎.github/workflows/hadolint.yml

+1-1
Original file line numberDiff line numberDiff line change
@@ -14,7 +14,7 @@ jobs:
1414
steps:
1515
# Start Docker Buildx
1616
- name: Setup Docker Buildx
17-
uses: docker/setup-buildx-action@6524bf65af31da8d45b59e8c27de4bd072b392f5 # v3.8.0
17+
uses: docker/setup-buildx-action@b5ca514318bd6ebac0fb2aedd5d36ec1b5c232a2 # v3.10.0
1818
# https://github.com/moby/buildkit/issues/3969
1919
# Also set max parallelism to 2, the default of 4 breaks GitHub Actions and causes OOMKills
2020
with:

‎.github/workflows/release.yml

+14-14
Original file line numberDiff line numberDiff line change
@@ -70,13 +70,13 @@ jobs:
7070

7171
steps:
7272
- name: Initialize QEMU binfmt support
73-
uses: docker/setup-qemu-action@53851d14592bedcffcf25ea515637cff71ef929a # v3.3.0
73+
uses: docker/setup-qemu-action@29109295f81e9208d7d86ff1c6c12d2833863392 # v3.6.0
7474
with:
7575
platforms: "arm64,arm"
7676

7777
# Start Docker Buildx
7878
- name: Setup Docker Buildx
79-
uses: docker/setup-buildx-action@6524bf65af31da8d45b59e8c27de4bd072b392f5 # v3.8.0
79+
uses: docker/setup-buildx-action@b5ca514318bd6ebac0fb2aedd5d36ec1b5c232a2 # v3.10.0
8080
# https://github.com/moby/buildkit/issues/3969
8181
# Also set max parallelism to 2, the default of 4 breaks GitHub Actions and causes OOMKills
8282
with:
@@ -120,7 +120,7 @@ jobs:
120120

121121
# Login to Docker Hub
122122
- name: Login to Docker Hub
123-
uses: docker/login-action@9780b0c442fbb1117ed29e0efdff1e18412f7567 # v3.3.0
123+
uses: docker/login-action@74a5d142397b4f367a81961eba4e8cd7edddf772 # v3.4.0
124124
with:
125125
username: ${{ secrets.DOCKERHUB_USERNAME }}
126126
password: ${{ secrets.DOCKERHUB_TOKEN }}
@@ -136,7 +136,7 @@ jobs:
136136
137137
# Login to GitHub Container Registry
138138
- name: Login to GitHub Container Registry
139-
uses: docker/login-action@9780b0c442fbb1117ed29e0efdff1e18412f7567 # v3.3.0
139+
uses: docker/login-action@74a5d142397b4f367a81961eba4e8cd7edddf772 # v3.4.0
140140
with:
141141
registry: ghcr.io
142142
username: ${{ github.repository_owner }}
@@ -153,7 +153,7 @@ jobs:
153153
154154
# Login to Quay.io
155155
- name: Login to Quay.io
156-
uses: docker/login-action@9780b0c442fbb1117ed29e0efdff1e18412f7567 # v3.3.0
156+
uses: docker/login-action@74a5d142397b4f367a81961eba4e8cd7edddf772 # v3.4.0
157157
with:
158158
registry: quay.io
159159
username: ${{ secrets.QUAY_USERNAME }}
@@ -192,7 +192,7 @@ jobs:
192192
193193
- name: Bake ${{ matrix.base_image }} containers
194194
id: bake_vw
195-
uses: docker/bake-action@7bff531c65a5cda33e52e43950a795b91d450f63 # v6.3.0
195+
uses: docker/bake-action@4ba453fbc2db7735392b93edf935aaf9b1e8f747 # v6.5.0
196196
env:
197197
BASE_TAGS: "${{ env.BASE_TAGS }}"
198198
SOURCE_COMMIT: "${{ env.SOURCE_COMMIT }}"
@@ -220,23 +220,23 @@ jobs:
220220
# Attest container images
221221
- name: Attest - docker.io - ${{ matrix.base_image }}
222222
if: ${{ env.HAVE_DOCKERHUB_LOGIN == 'true' && steps.bake_vw.outputs.metadata != ''}}
223-
uses: actions/attest-build-provenance@520d128f165991a6c774bcb264f323e3d70747f4 # v2.2.0
223+
uses: actions/attest-build-provenance@c074443f1aee8d4aeeae555aebba3282517141b2 # v2.2.3
224224
with:
225225
subject-name: ${{ vars.DOCKERHUB_REPO }}
226226
subject-digest: ${{ env.DIGEST_SHA }}
227227
push-to-registry: true
228228

229229
- name: Attest - ghcr.io - ${{ matrix.base_image }}
230230
if: ${{ env.HAVE_GHCR_LOGIN == 'true' && steps.bake_vw.outputs.metadata != ''}}
231-
uses: actions/attest-build-provenance@520d128f165991a6c774bcb264f323e3d70747f4 # v2.2.0
231+
uses: actions/attest-build-provenance@c074443f1aee8d4aeeae555aebba3282517141b2 # v2.2.3
232232
with:
233233
subject-name: ${{ vars.GHCR_REPO }}
234234
subject-digest: ${{ env.DIGEST_SHA }}
235235
push-to-registry: true
236236

237237
- name: Attest - quay.io - ${{ matrix.base_image }}
238238
if: ${{ env.HAVE_QUAY_LOGIN == 'true' && steps.bake_vw.outputs.metadata != ''}}
239-
uses: actions/attest-build-provenance@520d128f165991a6c774bcb264f323e3d70747f4 # v2.2.0
239+
uses: actions/attest-build-provenance@c074443f1aee8d4aeeae555aebba3282517141b2 # v2.2.3
240240
with:
241241
subject-name: ${{ vars.QUAY_REPO }}
242242
subject-digest: ${{ env.DIGEST_SHA }}
@@ -290,31 +290,31 @@ jobs:
290290
291291
# Upload artifacts to Github Actions and Attest the binaries
292292
- name: "Upload amd64 artifact ${{ matrix.base_image }}"
293-
uses: actions/upload-artifact@65c4c4a1ddee5b72f698fdd19549f0f0fb45cf08 #v4.6.0
293+
uses: actions/upload-artifact@4cec3d8aa04e39d1a68397de0c4cd6fb9dce8ec1 #v4.6.1
294294
with:
295295
name: vaultwarden-${{ env.SOURCE_VERSION }}-linux-amd64-${{ matrix.base_image }}
296296
path: vaultwarden-amd64-${{ matrix.base_image }}
297297

298298
- name: "Upload arm64 artifact ${{ matrix.base_image }}"
299-
uses: actions/upload-artifact@65c4c4a1ddee5b72f698fdd19549f0f0fb45cf08 #v4.6.0
299+
uses: actions/upload-artifact@4cec3d8aa04e39d1a68397de0c4cd6fb9dce8ec1 #v4.6.1
300300
with:
301301
name: vaultwarden-${{ env.SOURCE_VERSION }}-linux-arm64-${{ matrix.base_image }}
302302
path: vaultwarden-arm64-${{ matrix.base_image }}
303303

304304
- name: "Upload armv7 artifact ${{ matrix.base_image }}"
305-
uses: actions/upload-artifact@65c4c4a1ddee5b72f698fdd19549f0f0fb45cf08 #v4.6.0
305+
uses: actions/upload-artifact@4cec3d8aa04e39d1a68397de0c4cd6fb9dce8ec1 #v4.6.1
306306
with:
307307
name: vaultwarden-${{ env.SOURCE_VERSION }}-linux-armv7-${{ matrix.base_image }}
308308
path: vaultwarden-armv7-${{ matrix.base_image }}
309309

310310
- name: "Upload armv6 artifact ${{ matrix.base_image }}"
311-
uses: actions/upload-artifact@65c4c4a1ddee5b72f698fdd19549f0f0fb45cf08 #v4.6.0
311+
uses: actions/upload-artifact@4cec3d8aa04e39d1a68397de0c4cd6fb9dce8ec1 #v4.6.1
312312
with:
313313
name: vaultwarden-${{ env.SOURCE_VERSION }}-linux-armv6-${{ matrix.base_image }}
314314
path: vaultwarden-armv6-${{ matrix.base_image }}
315315

316316
- name: "Attest artifacts ${{ matrix.base_image }}"
317-
uses: actions/attest-build-provenance@520d128f165991a6c774bcb264f323e3d70747f4 # v2.2.0
317+
uses: actions/attest-build-provenance@c074443f1aee8d4aeeae555aebba3282517141b2 # v2.2.3
318318
with:
319319
subject-path: vaultwarden-*
320320
# End Upload artifacts to Github Actions

‎.github/workflows/trivy.yml

+1-1
Original file line numberDiff line numberDiff line change
@@ -36,7 +36,7 @@ jobs:
3636
persist-credentials: false
3737

3838
- name: Run Trivy vulnerability scanner
39-
uses: aquasecurity/trivy-action@18f2510ee396bbf400402947b394f2dd8c87dbb0 # v0.29.0
39+
uses: aquasecurity/trivy-action@6c175e9c4083a92bbca2f9724c8a5e33bc2d97a5 # v0.30.0
4040
env:
4141
TRIVY_DB_REPOSITORY: docker.io/aquasec/trivy-db:2,public.ecr.aws/aquasecurity/trivy-db:2,ghcr.io/aquasecurity/trivy-db:2
4242
TRIVY_JAVA_DB_REPOSITORY: docker.io/aquasec/trivy-java-db:1,public.ecr.aws/aquasecurity/trivy-java-db:1,ghcr.io/aquasecurity/trivy-java-db:1

‎.pre-commit-config.yaml

+1-1
Original file line numberDiff line numberDiff line change
@@ -1,7 +1,7 @@
11
---
22
repos:
33
- repo: https://github.com/pre-commit/pre-commit-hooks
4-
rev: v4.6.0
4+
rev: v5.0.0
55
hooks:
66
- id: check-yaml
77
- id: check-json

0 commit comments

Comments
 (0)