diff --git a/.github/workflows/general.yml b/.github/workflows/general.yml index 8c97061..0da5b78 100644 --- a/.github/workflows/general.yml +++ b/.github/workflows/general.yml @@ -32,7 +32,7 @@ jobs: with: path: ~/.cargo/bin/sqlx ~/.cargo/bin/cargo-sqlx key: ${{ runner.os }}-sqlx-${{ env.SQLX_VERSION }} - - uses: dtolnay/rust-toolchain@4f366e621dc8fa63f557ca04b8f4361824a35a45 # stable + - uses: dtolnay/rust-toolchain@ed2356ad628626a6b3f5be6c3e0255c0454fcdb9 # stable - name: Install sqlx-cli if: steps.cache-sqlx.outputs.cache-hit == false run: cargo install sqlx-cli --force --version=${{ env.SQLX_VERSION}} --features=${{ env.SQLX_FEATURES}} --no-default-features @@ -53,7 +53,7 @@ jobs: egress-policy: audit disable-telemetry: true - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2 - - uses: dtolnay/rust-toolchain@4f366e621dc8fa63f557ca04b8f4361824a35a45 # stable + - uses: dtolnay/rust-toolchain@ed2356ad628626a6b3f5be6c3e0255c0454fcdb9 # stable with: components: rustfmt - name: Enforce formatting @@ -85,7 +85,7 @@ jobs: with: path: ~/.cargo/bin/sqlx ~/.cargo/bin/cargo-sqlx key: ${{ runner.os }}-sqlx-${{ env.SQLX_VERSION }} - - uses: dtolnay/rust-toolchain@4f366e621dc8fa63f557ca04b8f4361824a35a45 # stable + - uses: dtolnay/rust-toolchain@ed2356ad628626a6b3f5be6c3e0255c0454fcdb9 # stable with: components: clippy - name: Install sqlx-cli @@ -108,7 +108,7 @@ jobs: - name: Install Linux Dependencies run: sudo apt-get update - name: Install ${{ matrix.msrv }} - uses: dtolnay/rust-toolchain@4f366e621dc8fa63f557ca04b8f4361824a35a45 # stable + uses: dtolnay/rust-toolchain@ed2356ad628626a6b3f5be6c3e0255c0454fcdb9 # stable with: toolchain: ${{ matrix.msrv }} - name: cargo +${{ matrix.msrv }} check @@ -132,7 +132,7 @@ jobs: key: ${{ runner.os }}-sqlx-${{ env.SQLX_VERSION }} - name: Checkout repository uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2 - - uses: dtolnay/rust-toolchain@4f366e621dc8fa63f557ca04b8f4361824a35a45 # stable + - uses: dtolnay/rust-toolchain@ed2356ad628626a6b3f5be6c3e0255c0454fcdb9 # stable with: components: llvm-tools - name: Install sqlx-cli diff --git a/.github/workflows/links.yml b/.github/workflows/links.yml new file mode 100644 index 0000000..9a598c1 --- /dev/null +++ b/.github/workflows/links.yml @@ -0,0 +1,25 @@ +name: Links +on: [push, pull_request] +permissions: + contents: read +jobs: + linkChecker: + runs-on: ubuntu-latest + steps: + - name: Harden Runner + uses: step-security/harden-runner@91182cccc01eb5e619899d80e4e971d6181294a7 # v2.10.1 + with: + egress-policy: audit + disable-telemetry: true + - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2 + - name: Restore lychee cache + uses: actions/cache@6849a6489940f00c2f30c0fb92c6274307ccb58a # v4.1.2 + with: + path: .lycheecache + key: cache-lychee-${{ github.sha }} + restore-keys: cache-lychee- + - name: Run lychee + uses: lycheeverse/lychee-action@f81112d0d2814ded911bd23e3beaa9dda9093915 # v2.1.0 + with: + args: "--base . --cache --max-cache-age 1d --exclude-path \"deny.toml\" . \"**/*.toml\" \"**/*.rs\" \"**/*.yml\"" + fail: true diff --git a/.github/workflows/scorecard.yml b/.github/workflows/scorecard.yml index 7bbba8e..f395671 100644 --- a/.github/workflows/scorecard.yml +++ b/.github/workflows/scorecard.yml @@ -65,6 +65,6 @@ jobs: retention-days: 5 # Upload the results to GitHub's code scanning dashboard. - name: "Upload to code-scanning" - uses: github/codeql-action/upload-sarif@662472033e021d55d94146f66f6058822b0b39fd # v3.27.0 + uses: github/codeql-action/upload-sarif@4f3212b61783c3c68e8309a0f18a699764811cda # v3.27.1 with: sarif_file: results.sarif diff --git a/.github/workflows/typos.yml b/.github/workflows/typos.yml new file mode 100644 index 0000000..8474f31 --- /dev/null +++ b/.github/workflows/typos.yml @@ -0,0 +1,18 @@ +name: Spell Check +on: [pull_request] +permissions: + contents: read +jobs: + run: + name: Spell Check with Typos + runs-on: ubuntu-latest + steps: + - name: Harden Runner + uses: step-security/harden-runner@91182cccc01eb5e619899d80e4e971d6181294a7 # v2.10.1 + with: + egress-policy: audit + disable-telemetry: true + - name: Checkout Actions Repository + uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2 + - name: Check spelling of entire workspace + uses: crate-ci/typos@b74202f74b4346efdbce7801d187ec57b266bac8 # v1.27.3 diff --git a/.pre-commit-config.yaml b/.pre-commit-config.yaml index 153525b..f6a2a74 100644 --- a/.pre-commit-config.yaml +++ b/.pre-commit-config.yaml @@ -1,6 +1,6 @@ repos: - repo: https://github.com/commitizen-tools/commitizen - rev: v3.30.0 + rev: v3.30.1 hooks: - id: commitizen stages: @@ -16,7 +16,7 @@ repos: hooks: - id: gitleaks - repo: https://github.com/google/yamlfmt - rev: v0.13.0 + rev: v0.14.0 hooks: - id: yamlfmt - repo: https://github.com/pre-commit/pre-commit-hooks