Skip to content
Snippets Groups Projects
  1. Mar 21, 2025
  2. Mar 20, 2025
  3. Mar 19, 2025
    • Michal Kucharczyk's avatar
      `fatxpool`: report_invalid: do not ban Future/Stale txs from re-entering the view (#7777) · 954d8571
      Michal Kucharczyk authored
      #### Description
      
      Avoid banning future/stale transactions reported as invalid by the
      authorship module.
      
      #### Note for reviewers
      When re-org is handled by transaction pool, the view for new fork
      (`Bn'`) is cloned from the tip of the other existing fork (`Bn`). The
      new view is not entirely re-validated during the maintain process (it
      will be revalidated in the background), so it may happen that it
      contains transactions that are ready on (`Bn`) but actually are not
      ready on (`Bn'`). All required (which are expected to be in retracted
      set) transactions are submitted to the new view, but order of txs in
      ready iterator is not updated.
      
      The proper fix would require to re-build the the iterator - which is not
      trivial as we do not have tags for transactions for block `Bn'` yet. We
      could force retracted txs to be before ready transactions but it also
      does not feel to be a good solution - it still would be best effort
      trial.
      
      For now allowing future transactions to re-enter the view immediately is
      in my opinion a good compromise. This PR is a quick fix and actually
      brings back behavior of txpool from before merging #6008. The bad thing
      is that incorrect transactions are detected during block authorship, but
      this situation to happen requires some specific pre-conditions which
      should be rare.
      
      If this PR is not merged, some transaction will get included into
      blocks, only after
      [`DEFAULT_BAN_TIME_SECS`](https://github.com/paritytech/polkadot-sdk/blob/4b39ff00
      
      /substrate/client/transaction-pool/src/graph/rotator.rs#L37),
      which is pretty bad.
      
      ---------
      
      Co-authored-by: default avatarcmd[bot] <41898282+github-actions[bot]@users.noreply.github.com>
      954d8571
    • Raymond Cheung's avatar
      Fix XCM Barrier Rejection Handling to Return Incomplete with Weight (#7843) · 21927dd4
      Raymond Cheung authored
      
      This PR addresses an issue with the handling of message execution when
      blocked by the barrier. Instead of returning an `Outcome::Error`, we
      modify the behaviour to return `Outcome::Incomplete`, which includes the
      weight consumed up to the point of rejection and the error that caused
      the blockage.
      
      This change ensures more accurate weight tracking during message
      execution, even when interrupted. It improves resource management and
      aligns the XCM executor’s behaviour with better error handling
      practices.
      
      ---------
      
      Co-authored-by: default avatarcmd[bot] <41898282+github-actions[bot]@users.noreply.github.com>
      21927dd4
    • dependabot[bot]'s avatar
      Bump openssl from 0.10.64 to 0.10.70 (#7442) · d1dcd161
      dependabot[bot] authored
      
      Bumps [openssl](https://github.com/sfackler/rust-openssl) from 0.10.64
      to 0.10.70.
      <details>
      <summary>Release notes</summary>
      <p><em>Sourced from <a
      href="https://github.com/sfackler/rust-openssl/releases">openssl's
      releases</a>.</em></p>
      <blockquote>
      <h2>openssl v0.10.70</h2>
      <h2>What's Changed</h2>
      <ul>
      <li>Attempt to fix CI by pinning to the Ubuntu 22.04 image by <a
      href="https://github.com/alex"><code>@​alex</code></a> in <a
      href="https://redirect.github.com/sfackler/rust-openssl/pull/2357">sfackler/rust-openssl#2357</a></li>
      <li>Remove EC_METHOD and EC_GROUP_new for LibreSSL 4.1 by <a
      href="https://github.com/botovq"><code>@​botovq</code></a> in <a
      href="https://redirect.github.com/sfackler/rust-openssl/pull/2356">sfackler/rust-openssl#2356</a></li>
      <li>Test against 3.4.0 final release by <a
      href="https://github.com/alex"><code>@​alex</code></a> in <a
      href="https://redirect.github.com/sfackler/rust-openssl/pull/2359">sfackler/rust-openssl#2359</a></li>
      <li>Expose <code>SslMethod::{dtls_client,dtls_server}</code> by <a
      href="https://github.com/alex"><code>@​alex</code></a> in <a
      href="https://redirect.github.com/sfackler/rust-openssl/pull/2358">sfackler/rust-openssl#2358</a></li>
      <li>Fix lifetimes in ssl::select_next_proto by <a
      href="https://github.com/sfackler"><code>@​sfackler</code></a> in <a
      href="https://redirect.github.com/sfackler/rust-openssl/pull/2360">sfackler/rust-openssl#2360</a></li>
      </ul>
      <p><strong>Full Changelog</strong>: <a
      href="https://github.com/sfackler/rust-openssl/compare/openssl-v0.10.69...openssl-v0.10.70">https://github.com/sfackler/rust-openssl/compare/openssl-v0.10.69...openssl-v0.10.70</a></p>
      <h2>openssl v0.10.69</h2>
      <h2>What's Changed</h2>
      <ul>
      <li>build(deps): Update <code>openssl-macro</code> to version
      <code>0.1.1</code> by <a
      href="https://github.com/caspermeijn"><code>@​caspermeijn</code></a> in
      <a
      href="https://redirect.github.com/sfackler/rust-openssl/pull/2324">sfackler/rust-openssl#2324</a></li>
      <li>Enable set_alpn_select_callback for BoringSSL by <a
      href="https://github.com/ViktoriiaKovalova"><code>@​ViktoriiaKovalova</code></a>
      in <a
      href="https://redirect.github.com/sfackler/rust-openssl/pull/2327">sfackler/rust-openssl#2327</a></li>
      <li>Switch the test to use prime256v1 based key by <a
      href="https://github.com/dcermak"><code>@​dcermak</code></a> in <a
      href="https://redirect.github.com/sfackler/rust-openssl/pull/2330">sfackler/rust-openssl#2330</a></li>
      <li>Expose EVP_DigestSqueeze from Hasher by <a
      href="https://github.com/initsecret"><code>@​initsecret</code></a> in <a
      href="https://redirect.github.com/sfackler/rust-openssl/pull/2275">sfackler/rust-openssl#2275</a></li>
      <li>Expose SSL_CTX_load_verify_locations by <a
      href="https://github.com/sfackler"><code>@​sfackler</code></a> in <a
      href="https://redirect.github.com/sfackler/rust-openssl/pull/2353">sfackler/rust-openssl#2353</a></li>
      </ul>
      <h2>New Contributors</h2>
      <ul>
      <li><a
      href="https://github.com/caspermeijn"><code>@​caspermeijn</code></a>
      made their first contribution in <a
      href="https://redirect.github.com/sfackler/rust-openssl/pull/2324">sfackler/rust-openssl#2324</a></li>
      <li><a
      href="https://github.com/ViktoriiaKovalova"><code>@​ViktoriiaKovalova</code></a>
      made their first contribution in <a
      href="https://redirect.github.com/sfackler/rust-openssl/pull/2327">sfackler/rust-openssl#2327</a></li>
      </ul>
      <p><strong>Full Changelog</strong>: <a
      href="https://github.com/sfackler/rust-openssl/compare/openssl-v0.10.68...openssl-v0.10.69">https://github.com/sfackler/rust-openssl/compare/openssl-v0.10.68...openssl-v0.10.69</a></p>
      <h2>openssl-v0.10.68</h2>
      <h2>What's Changed</h2>
      <ul>
      <li>fixes <a
      href="https://redirect.github.com/sfackler/rust-openssl/issues/2317">#2317</a>
      -- restore compatibility with our MSRV and release openssl 0.9.68 by <a
      href="https://github.com/alex"><code>@​alex</code></a> in <a
      href="https://redirect.github.com/sfackler/rust-openssl/pull/2318">sfackler/rust-openssl#2318</a></li>
      </ul>
      <p><strong>Full Changelog</strong>: <a
      href="https://github.com/sfackler/rust-openssl/compare/openssl-v0.10.67...openssl-v0.10.68">https://github.com/sfackler/rust-openssl/compare/openssl-v0.10.67...openssl-v0.10.68</a></p>
      <h2>openssl-v0.10.67</h2>
      <h2>What's Changed</h2>
      <ul>
      <li>Added a utility function to ensure we never have an issue with
      0-length slices from pointers again by <a
      href="https://github.com/alex"><code>@​alex</code></a> in <a
      href="https://redirect.github.com/sfackler/rust-openssl/pull/2268">sfackler/rust-openssl#2268</a></li>
      <li>Fix CI for the latest rustc by <a
      href="https://github.com/alex"><code>@​alex</code></a> in <a
      href="https://redirect.github.com/sfackler/rust-openssl/pull/2271">sfackler/rust-openssl#2271</a></li>
      <li>Add binding for EVP_DigestSqueeze by <a
      href="https://github.com/initsecret"><code>@​initsecret</code></a> in <a
      href="https://redirect.github.com/sfackler/rust-openssl/pull/2270">sfackler/rust-openssl#2270</a></li>
      <li>libressl 4.0: const correctness for X509_LOOKUP_METHOD by <a
      href="https://github.com/botovq"><code>@​botovq</code></a> in <a
      href="https://redirect.github.com/sfackler/rust-openssl/pull/2276">sfackler/rust-openssl#2276</a></li>
      <li>Bump hex dev-dependency version by <a
      href="https://github.com/alex"><code>@​alex</code></a> in <a
      href="https://redirect.github.com/sfackler/rust-openssl/pull/2277">sfackler/rust-openssl#2277</a></li>
      <li>Raise bindgen version by <a
      href="https://github.com/alex"><code>@​alex</code></a> in <a
      href="https://redirect.github.com/sfackler/rust-openssl/pull/2278">sfackler/rust-openssl#2278</a></li>
      <li>Ensure Rsa::check_key doesn't leave errors on the stack by <a
      href="https://github.com/alex"><code>@​alex</code></a> in <a
      href="https://redirect.github.com/sfackler/rust-openssl/pull/2279">sfackler/rust-openssl#2279</a></li>
      <li>Update some docs to use the corresponds macro by <a
      href="https://github.com/rushilmehra"><code>@​rushilmehra</code></a> in
      <a
      href="https://redirect.github.com/sfackler/rust-openssl/pull/2282">sfackler/rust-openssl#2282</a></li>
      <li>Don't leave errors on the stack in
      <code>MdCtxRef::digest_verify_final</code> by <a
      href="https://github.com/alex"><code>@​alex</code></a> in <a
      href="https://redirect.github.com/sfackler/rust-openssl/pull/2283">sfackler/rust-openssl#2283</a></li>
      <li>Adjustments for LibreSSL 4 by <a
      href="https://github.com/botovq"><code>@​botovq</code></a> in <a
      href="https://redirect.github.com/sfackler/rust-openssl/pull/2287">sfackler/rust-openssl#2287</a></li>
      <li>Explicit rustfmt config by <a
      href="https://github.com/kornelski"><code>@​kornelski</code></a> in <a
      href="https://redirect.github.com/sfackler/rust-openssl/pull/2285">sfackler/rust-openssl#2285</a></li>
      <li>add basic EVP_KDF bindings by <a
      href="https://github.com/reaperhulk"><code>@​reaperhulk</code></a> in <a
      href="https://redirect.github.com/sfackler/rust-openssl/pull/2289">sfackler/rust-openssl#2289</a></li>
      <li>add ossl3 thread pool bindings by <a
      href="https://github.com/reaperhulk"><code>@​reaperhulk</code></a> in <a
      href="https://redirect.github.com/sfackler/rust-openssl/pull/2293">sfackler/rust-openssl#2293</a></li>
      <li>add argon2id support for ossl 3.2+ by <a
      href="https://github.com/reaperhulk"><code>@​reaperhulk</code></a> in <a
      href="https://redirect.github.com/sfackler/rust-openssl/pull/2290">sfackler/rust-openssl#2290</a></li>
      <li>fix 3.2.0 thread support and simplify by <a
      href="https://github.com/reaperhulk"><code>@​reaperhulk</code></a> in <a
      href="https://redirect.github.com/sfackler/rust-openssl/pull/2294">sfackler/rust-openssl#2294</a></li>
      <li>add libctx arg to argon2id by <a
      href="https://github.com/reaperhulk"><code>@​reaperhulk</code></a> in <a
      href="https://redirect.github.com/sfackler/rust-openssl/pull/2295">sfackler/rust-openssl#2295</a></li>
      </ul>
      <!-- raw HTML omitted -->
      </blockquote>
      <p>... (truncated)</p>
      </details>
      <details>
      <summary>Commits</summary>
      <ul>
      <li><a
      href="https://github.com/sfackler/rust-openssl/commit/a4d399b0f1a3694cb2d1728edf74d318a3cac890"><code>a4d399b</code></a>
      Release openssl v0.10.70</li>
      <li><a
      href="https://github.com/sfackler/rust-openssl/commit/c9a33e286023f92b869c5f157b349be15985a799"><code>c9a33e2</code></a>
      Release openssl-sys v0.9.105</li>
      <li><a
      href="https://github.com/sfackler/rust-openssl/commit/f014afb230de4d77bc79dea60e7e58c2f47b60f2"><code>f014afb</code></a>
      Merge pull request <a
      href="https://redirect.github.com/sfackler/rust-openssl/issues/2360">#2360</a>
      from sfackler/fix-alpn-lifetimes</li>
      <li><a
      href="https://github.com/sfackler/rust-openssl/commit/8e6e30bbf7e7627845b801f83a3810d6ffc1f157"><code>8e6e30b</code></a>
      Fix lifetimes in ssl::select_next_proto</li>
      <li><a
      href="https://github.com/sfackler/rust-openssl/commit/1aff2801ca1dd756a0566a4d4fa9a00967280114"><code>1aff280</code></a>
      Merge pull request <a
      href="https://redirect.github.com/sfackler/rust-openssl/issues/2358">#2358</a>
      from alex/expose-dlts</li>
      <li><a
      href="https://github.com/sfackler/rust-openssl/commit/16ca5b278b99bb667321b4d88da230ee8f820e08"><code>16ca5b2</code></a>
      Merge pull request <a
      href="https://redirect.github.com/sfackler/rust-openssl/issues/2359">#2359</a>
      from sfackler/alex-patch-1</li>
      <li><a
      href="https://github.com/sfackler/rust-openssl/commit/4c9fbb0c18e8a3ac1de9671d7828862b49c1cb87"><code>4c9fbb0</code></a>
      Test against 3.4.0 final release</li>
      <li><a
      href="https://github.com/sfackler/rust-openssl/commit/5ecb31d3fd252c54dbae5e0b5b7ad495b26ac339"><code>5ecb31d</code></a>
      Update openssl/src/ssl/mod.rs</li>
      <li><a
      href="https://github.com/sfackler/rust-openssl/commit/4830f5bb93dafeeeddf32bf41dda83e2560f3d49"><code>4830f5b</code></a>
      Expose <code>SslMethod::{dtls_client,dtls_server}</code></li>
      <li><a
      href="https://github.com/sfackler/rust-openssl/commit/bab03c4093ef626c9564354ae7c2484f4f9ad6a9"><code>bab03c4</code></a>
      Merge pull request <a
      href="https://redirect.github.com/sfackler/rust-openssl/issues/2356">#2356</a>
      from botovq/rm-ec-method</li>
      <li>Additional commits viewable in <a
      href="https://github.com/sfackler/rust-openssl/compare/openssl-v0.10.64...openssl-v0.10.70">compare
      view</a></li>
      </ul>
      </details>
      <br />
      
      
      [![Dependabot compatibility
      score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=openssl&package-manager=cargo&previous-version=0.10.64&new-version=0.10.70)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)
      
      You can trigger a rebase of this PR by commenting `@dependabot rebase`.
      
      [//]: # (dependabot-automerge-start)
      [//]: # (dependabot-automerge-end)
      
      ---
      
      <details>
      <summary>Dependabot commands and options</summary>
      <br />
      
      You can trigger Dependabot actions by commenting on this PR:
      - `@dependabot rebase` will rebase this PR
      - `@dependabot recreate` will recreate this PR, overwriting any edits
      that have been made to it
      - `@dependabot merge` will merge this PR after your CI passes on it
      - `@dependabot squash and merge` will squash and merge this PR after
      your CI passes on it
      - `@dependabot cancel merge` will cancel a previously requested merge
      and block automerging
      - `@dependabot reopen` will reopen this PR if it is closed
      - `@dependabot close` will close this PR and stop Dependabot recreating
      it. You can achieve the same result by closing it manually
      - `@dependabot show <dependency name> ignore conditions` will show all
      of the ignore conditions of the specified dependency
      - `@dependabot ignore this major version` will close this PR and stop
      Dependabot creating any more for this major version (unless you reopen
      the PR or upgrade to it yourself)
      - `@dependabot ignore this minor version` will close this PR and stop
      Dependabot creating any more for this minor version (unless you reopen
      the PR or upgrade to it yourself)
      - `@dependabot ignore this dependency` will close this PR and stop
      Dependabot creating any more for this dependency (unless you reopen the
      PR or upgrade to it yourself)
      You can disable automated security fix PRs for this repo from the
      [Security Alerts
      page](https://github.com/paritytech/polkadot-sdk/network/alerts).
      
      </details>
      
      > **Note**
      > Automatic rebases have been disabled on this pull request as it has
      been open for over 30 days.
      
      Signed-off-by: default avatardependabot[bot] <support@github.com>
      Co-authored-by: default avatardependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
      Co-authored-by: default avatarBastian Köcher <git@kchr.de>
      d1dcd161
    • Stephane Gurgenidze's avatar
      runtime-api: remove redundant version checks (#7610) · 45492e39
      Stephane Gurgenidze authored
      
      ## Issue
      - [[#1940] Cleanup boilerplate code when DisabledValidators runtime api
      call is
      released](https://github.com/paritytech/polkadot-sdk/issues/1940)
      - Includes other runtime APIs, such as `MinimumBackingVotes` and
      `NodeFeatures`, that are already supported by Polkadot.
      
      ## Description
      This PR removes unnecessary runtime API version checks from
      `subsystem-util/src/runtime` for APIs supported by Polkadot (the most
      recent network to upgrade). Specifically, it applies to the
      `DisabledValidators`, `MinimumBackingVotes` and `NodeFeatures` APIs.
      
      ---------
      
      Co-authored-by: default avatarBastian Köcher <git@kchr.de>
      45492e39
  4. Mar 18, 2025
    • Sebastian Kunert's avatar
      Upgrade link-checker cache to v4 (#7874) · 1abdb7f3
      Sebastian Kunert authored
      Link-checker broke once more.
      
      To get it green, cache action needs to upgrade to v4
      1abdb7f3
    • seemantaggarwal's avatar
      Updating readmes (#7950) · 28a7ae71
      seemantaggarwal authored
      README for all templates still points to polkadot.network.
      update them to:
      
      1. point to [docs.polkadot.com](http://docs.polkadot.com/)
      2. point to official polkadot discord and @substratedevs in TG for
      support
      28a7ae71
    • Bastian Köcher's avatar
      15aa3ae9
    • Tiago Tavares ⭕️'s avatar
      pallet-bounties: allow bounties to never expire (#7723) · e4f7814c
      Tiago Tavares ⭕️ authored
      # Description
      
      Fixes polkadot-fellows/runtimes#509
      
      The Bounties expiration and renewal heavily depends on manual
      interactions through UI. This PR refactors the duration of the bounty to
      be an optional configuration constant. If set to None, bounties remain
      active indefinitely, removing the need for calling`extend_bounty_expiry`
      and preventing automatic curator slashing for inactivity, which often
      penalises unnecessarily.
      
      ## Integration
      
      Remove
      [BountyUpdatePeriod](https://github.com/polkadot-fellows/runtimes/blob/db4bb534cb411c0d6a2fe57eb331e6ec93ace825/relay/polkadot/src/lib.rs#L774)
      
      ## Review Notes
      
      Modifies how bounty expiry is handled
      <details>
      <summary>🔍 Code Diff Summary</summary>
      
      ```diff
      - #[pallet::constant]
      - type BountyUpdatePeriod: Get<BlockNumberFor<Self, I>>;
      + #[pallet::constant]
      + type BountyUpdatePeriod: Get<Option<BlockNumberFor<Self, I>>>;
      
      - *update_due = (Self::treasury_block_number() + T::BountyUpdatePeriod::get()).max(*update_due);
      + *update_due = Self::treasury_block_number().saturating_add(
      +     T::BountyUpdatePeriod::get().unwrap_or(BlockNumberFor::<T, I>::MAX)
      + ); 
      ```
      </details>
      e4f7814c
  5. Mar 17, 2025
  6. Mar 15, 2025
    • dependabot[bot]'s avatar
      Bump the ci_dependencies group across 1 directory with 4 updates (#7855) · 88a31f2d
      dependabot[bot] authored
      Bumps the ci_dependencies group with 4 updates in the / directory:
      [actions-rust-lang/setup-rust-toolchain](https://github.com/actions-rust-lang/setup-rust-toolchain),
      [peter-evans/create-pull-request](https://github.com/peter-evans/create-pull-request),
      [docker/setup-buildx-action](https://github.com/docker/setup-buildx-action)
      and
      [actions/attest-build-provenance](https://github.com/actions/attest-build-provenance).
      
      Updates `actions-rust-lang/setup-rust-toolchain` from 1.10.1 to 1.11.0
      <details>
      <summary>Release notes</summary>
      <p><em>Sourced from <a
      href="https://github.com/actions-rust-lang/setup-rust-toolchain/releases">actions-rust-lang/setup-rust-toolchain's
      releases</a>.</em></p>
      <blockquote>
      <h2>v1.11.0</h2>
      <h2>What's Changed</h2>
      <ul>
      <li>feat: add shared-cache-key to inputs by <a
      href="https://github.com/skanehira"><code>@​skanehira</code></a> in <a
      href="https://redirect.github.com/actions-rust-lang/setup-rust-toolchain/pull/52">actions-rust-lang/setup-rust-toolchain#52</a></li>
      <li>fix: add cache-bin input with true as default value by <a
      href="https://github.com/enkhjile"><code>@​enkhjile</code></a> in <a
      href="https://redirect.github.com/actions-rust-lang/setup-rust-toolchain/pull/51">actions-rust-lang/setup-rust-toolchain#51</a></li>
      <li>chore: prepare release 1.11.0 by <a
      href="https://github.com/robjtede"><code>@​robjtede</code></a> in <a
      href="https://redirect.github.com/actions-rust-lang/setup-rust-toolchain/pull/53">actions-rust-lang/setup-rust-toolchain#53</a></li>
      </ul>
      <h2>New Contributors</h2>
      <ul>
      <li><a href="https://github.com/skanehira"><code>@​skanehira</code></a>
      made their first contribution in <a
      href="https://redirect.github.com/actions-rust-lang/setup-rust-toolchain/pull/52">actions-rust-lang/setup-rust-toolchain#52</a></li>
      <li><a href="https://github.com/enkhjile"><code>@​enkhjile</code></a>
      made their first contribution in <a
      href="https://redirect.github.com/actions-rust-lang/setup-rust-toolchain/pull/51">actions-rust-lang/setup-rust-toolchain#51</a></li>
      </ul>
      <p><strong>Full Changelog</strong>: <a
      href="https://github.com/actions-rust-lang/setup-rust-toolchain/compare/v1...v1.11.0">https://github.com/actions-rust-lang/setup-rust-toolchain/compare/v1...v1.11.0</a></p>
      </blockquote>
      </details>
      <details>
      <summary>Changelog</summary>
      <p><em>Sourced from <a
      href="https://github.com/actions-rust-lang/setup-rust-toolchain/blob/main/CHANGELOG.md">actions-rust-lang/setup-rust-toolchain's
      changelog</a>.</em></p>
      <blockquote>
      <h1>Changelog</h1>
      <p>All notable changes to this project will be documented in this
      file.</p>
      <p>The format is based on <a
      href="https://keepachangelog.com/en/1.0.0/">Keep a Changelog</a>,
      and this project adheres to <a
      href="https://semver.org/spec/v2.0.0.html">Semantic Versioning</a>.</p>
      <h2>[Unreleased]</h2>
      <h2>[1.11.0] - 2025-02-24</h2>
      <ul>
      <li>Add new parameter <code>cache-bin</code> that is propagated to
      <code>Swatinem/rust-cache</code> as <code>cache-bin</code> (<a
      href="https://redirect.github.com/actions-rust-lang/setup-rust-toolchain/issues/51">#51</a>
      by <a
      href="https://github.com/enkhjile"><code>@​enkhjile</code></a>)</li>
      <li>Add new parameter <code>cache-shared-key</code> that is propagated
      to <code>Swatinem/rust-cache</code> as <code>shared-key</code> (<a
      href="https://redirect.github.com/actions-rust-lang/setup-rust-toolchain/issues/52">#52</a>
      by <a
      href="https://github.com/skanehira"><code>@​skanehira</code></a>)</li>
      </ul>
      <h2>[1.10.1] - 2024-10-01</h2>
      <ul>
      <li>Fix problem matcher for rustfmt output.
      The format has changed since <a
      href="https://redirect.github.com/rust-lang/rustfmt/pull/5971">rust-lang/rustfmt#5971</a>
      and now follows the form &quot;filename:line&quot;.
      Thanks to <a
      href="https://github.com/0xcypher02"><code>@​0xcypher02</code></a> for
      pointing out the problem.</li>
      </ul>
      <h2>[1.10.0] - 2024-09-23</h2>
      <ul>
      <li>Add new parameter <code>cache-directories</code> that is propagated
      to <code>Swatinem/rust-cache</code> (<a
      href="https://redirect.github.com/actions-rust-lang/setup-rust-toolchain/issues/44">#44</a>
      by <a
      href="https://github.com/pranc1ngpegasus"><code>@​pranc1ngpegasus</code></a>)</li>
      <li>Add new parameter <code>cache-key</code> that is propagated to
      <code>Swatinem/rust-cache</code> as <code>key</code> (<a
      href="https://redirect.github.com/actions-rust-lang/setup-rust-toolchain/issues/41">#41</a>
      by <a
      href="https://github.com/iainlane"><code>@​iainlane</code></a>)</li>
      <li>Make rustup toolchain installation more robust in light of planned
      changes <a
      href="https://redirect.github.com/rust-lang/rustup/issues/3635">rust-lang/rustup#3635</a>
      and <a
      href="https://redirect.github.com/rust-lang/rustup/pull/3985">rust-lang/rustup#3985</a></li>
      <li>Allow installing multiple Rust toolchains by specifying multiple
      versions in the <code>toolchain</code> input parameter.</li>
      <li>Configure the <code>rustup override</code> behavior via the new
      <code>override</code> input. (<a
      href="https://redirect.github.com/actions-rust-lang/setup-rust-toolchain/issues/38">#38</a>)</li>
      </ul>
      <h2>[1.9.0] - 2024-06-08</h2>
      <ul>
      <li>Add extra argument <code>cache-on-failure</code> and forward it to
      <code>Swatinem/rust-cache</code>. (<a
      href="https://redirect.github.com/actions-rust-lang/setup-rust-toolchain/issues/39">#39</a>
      by <a
      href="https://github.com/samuelhnrq"><code>@​samuelhnrq</code></a>)<br
      />
      Set the default the value to true.
      This will result in more caching than previously.
      This helps when large dependencies are compiled only for testing to
      fail.</li>
      </ul>
      <h2>[1.8.0] - 2024-01-13</h2>
      <ul>
      <li>Allow specifying subdirectories for cache.</li>
      <li>Fix toolchain file overriding.</li>
      </ul>
      <h2>[1.7.0] - 2024-01-11</h2>
      <ul>
      <li>Allow overriding the toolchain file with explicit
      <code>toolchain</code> input. (<a
      href="https://redirect.github.com/actions-rust-lang/setup-rust-toolchain/issues/26">#26</a>)</li>
      </ul>
      <h2>[1.6.0] - 2023-12-04</h2>
      <h3>Added</h3>
      <ul>
      <li>Allow disabling problem matchers (<a
      href="https://redirect.github.com/actions-rust-lang/setup-rust-toolchain/issues/27">#27</a>)
      This can be useful when having a matrix of jobs, that produce the same
      errors.</li>
      </ul>
      <!-- raw HTML omitted -->
      </blockquote>
      <p>... (truncated)</p>
      </details>
      <details>
      <summary>Commits</summary>
      <ul>
      <li><a
      href="https://github.com/actions-rust-lang/setup-rust-toolchain/commit/9399c7bb15d4c7d47b27263d024f0a4978346ba4"><code>9399c7b</code></a>
      Merge pull request <a
      href="https://redirect.github.com/actions-rust-lang/setup-rust-toolchain/issues/53">#53</a>
      from actions-rust-lang/rel-1110</li>
      <li><a
      href="https://github.com/actions-rust-lang/setup-rust-toolchain/commit/3c7cfa82dce6b98e8759adf3e77a4a6da317505e"><code>3c7cfa8</code></a>
      Merge branch 'main' into rel-1110</li>
      <li><a
      href="https://github.com/actions-rust-lang/setup-rust-toolchain/commit/b38f618be2096d3fc834d239085766ecdc8f4b62"><code>b38f618</code></a>
      Merge pull request <a
      href="https://redirect.github.com/actions-rust-lang/setup-rust-toolchain/issues/51">#51</a>
      from enkhjile/main</li>
      <li><a
      href="https://github.com/actions-rust-lang/setup-rust-toolchain/commit/6cbea1a7947962ed471795015128faa83769af2d"><code>6cbea1a</code></a>
      chore: prepare release 1.11.0</li>
      <li><a
      href="https://github.com/actions-rust-lang/setup-rust-toolchain/commit/6f9a9da9f9383fbd8dc2dd0963f5d436a8288ff0"><code>6f9a9da</code></a>
      Merge branch 'main' into main</li>
      <li><a
      href="https://github.com/actions-rust-lang/setup-rust-toolchain/commit/2ad14f9ee2ec38c91546181e5760932ab73676ee"><code>2ad14f9</code></a>
      Merge pull request <a
      href="https://redirect.github.com/actions-rust-lang/setup-rust-toolchain/issues/52">#52</a>
      from skanehira/main</li>
      <li><a
      href="https://github.com/actions-rust-lang/setup-rust-toolchain/commit/30081c4da55e5f2a707c228afc2c7d6f422a676c"><code>30081c4</code></a>
      fix: add cache-bin input with true as default value</li>
      <li><a
      href="https://github.com/actions-rust-lang/setup-rust-toolchain/commit/f8efd60d2dea71cf378cafb3f494ecf103ae1179"><code>f8efd60</code></a>
      feat: add shared-cache-key to inputs</li>
      <li><a
      href="https://github.com/actions-rust-lang/setup-rust-toolchain/commit/97db979bf844c838b06022f305ca480d01b4d5fe"><code>97db979</code></a>
      Specify dependencies in README</li>
      <li>See full diff in <a
      href="https://github.com/actions-rust-lang/setup-rust-toolchain/compare/11df97af8e8102fd60b60a77dfbf58d40cd843b8...9399c7bb15d4c7d47b27263d024f0a4978346ba4">compare
      view</a></li>
      </ul>
      </details>
      <br />
      
      Updates `peter-evans/create-pull-request` from 7.0.6 to 7.0.8
      <details>
      <summary>Release notes</summary>
      <p><em>Sourced from <a
      href="https://github.com/peter-evans/create-pull-request/releases">peter-evans/create-pull-request's
      releases</a>.</em></p>
      <blockquote>
      <h2>Create Pull Request v7.0.8</h2>
      <h2>What's Changed</h2>
      <ul>
      <li>build(deps-dev): bump ts-jest from 29.2.5 to 29.2.6 by <a
      href="https://github.com/dependabot"><code>@​dependabot</code></a> in <a
      href="https://redirect.github.com/peter-evans/create-pull-request/pull/3751">peter-evans/create-pull-request#3751</a></li>
      <li>build(deps-dev): bump eslint-import-resolver-typescript from 3.8.1
      to 3.8.3 by <a
      href="https://github.com/dependabot"><code>@​dependabot</code></a> in <a
      href="https://redirect.github.com/peter-evans/create-pull-request/pull/3752">peter-evans/create-pull-request#3752</a></li>
      <li>build(deps): bump <code>@​octokit/plugin-paginate-rest</code> from
      11.4.2 to 11.4.3 by <a
      href="https://github.com/dependabot"><code>@​dependabot</code></a> in <a
      href="https://redirect.github.com/peter-evans/create-pull-request/pull/3753">peter-evans/create-pull-request#3753</a></li>
      <li>build(deps-dev): bump prettier from 3.5.1 to 3.5.2 by <a
      href="https://github.com/dependabot"><code>@​dependabot</code></a> in <a
      href="https://redirect.github.com/peter-evans/create-pull-request/pull/3754">peter-evans/create-pull-request#3754</a></li>
      <li>fix: suppress output for some git operations by <a
      href="https://github.com/peter-evans"><code>@​peter-evans</code></a> in
      <a
      href="https://redirect.github.com/peter-evans/create-pull-request/pull/3776">peter-evans/create-pull-request#3776</a></li>
      </ul>
      <p><strong>Full Changelog</strong>: <a
      href="https://github.com/peter-evans/create-pull-request/compare/v7.0.7...v7.0.8">https://github.com/peter-evans/create-pull-request/compare/v7.0.7...v7.0.8</a></p>
      <h2>Create Pull Request v7.0.7</h2>
      <p>
      
      ️ Fixes an issue with commit signing where modifications to the same
      file in multiple commits squash into the first commit.</p>
      <h2>What's Changed</h2>
      <ul>
      <li>build(deps): bump <code>@​octokit/core</code> from 6.1.2 to 6.1.3 by
      <a href="https://github.com/dependabot"><code>@​dependabot</code></a> in
      <a
      href="https://redirect.github.com/peter-evans/create-pull-request/pull/3593">peter-evans/create-pull-request#3593</a></li>
      <li>build(deps-dev): bump <code>@​types/node</code> from 18.19.68 to
      18.19.70 by <a
      href="https://github.com/dependabot"><code>@​dependabot</code></a> in <a
      href="https://redirect.github.com/peter-evans/create-pull-request/pull/3594">peter-evans/create-pull-request#3594</a></li>
      <li>Update distribution by <a
      href="https://github.com/actions-bot"><code>@​actions-bot</code></a> in
      <a
      href="https://redirect.github.com/peter-evans/create-pull-request/pull/3603">peter-evans/create-pull-request#3603</a></li>
      <li>build(deps-dev): bump typescript from 5.7.2 to 5.7.3 by <a
      href="https://github.com/dependabot"><code>@​dependabot</code></a> in <a
      href="https://redirect.github.com/peter-evans/create-pull-request/pull/3610">peter-evans/create-pull-request#3610</a></li>
      <li>build(deps): bump octokit dependencies by <a
      href="https://github.com/peter-evans"><code>@​peter-evans</code></a> in
      <a
      href="https://redirect.github.com/peter-evans/create-pull-request/pull/3618">peter-evans/create-pull-request#3618</a></li>
      <li>docs: add workflow tip for showing message via workflow command by
      <a href="https://github.com/ybiquitous"><code>@​ybiquitous</code></a> in
      <a
      href="https://redirect.github.com/peter-evans/create-pull-request/pull/3626">peter-evans/create-pull-request#3626</a></li>
      <li>build(deps-dev): bump eslint-plugin-prettier from 5.2.1 to 5.2.3 by
      <a href="https://github.com/dependabot"><code>@​dependabot</code></a> in
      <a
      href="https://redirect.github.com/peter-evans/create-pull-request/pull/3628">peter-evans/create-pull-request#3628</a></li>
      <li>build(deps): bump node-fetch-native from 1.6.4 to 1.6.6 by <a
      href="https://github.com/dependabot"><code>@​dependabot</code></a> in <a
      href="https://redirect.github.com/peter-evans/create-pull-request/pull/3627">peter-evans/create-pull-request#3627</a></li>
      <li>build(deps-dev): bump undici from 6.21.0 to 6.21.1 by <a
      href="https://github.com/dependabot"><code>@​dependabot</code></a> in <a
      href="https://redirect.github.com/peter-evans/create-pull-request/pull/3630">peter-evans/create-pull-request#3630</a></li>
      <li>build(deps-dev): bump <code>@​types/node</code> from 18.19.70 to
      18.19.71 by <a
      href="https://github.com/dependabot"><code>@​dependabot</code></a> in <a
      href="https://redirect.github.com/peter-evans/create-pull-request/pull/3629">peter-evans/create-pull-request#3629</a></li>
      <li>Update distribution by <a
      href="https://github.com/actions-bot"><code>@​actions-bot</code></a> in
      <a
      href="https://redirect.github.com/peter-evans/create-pull-request/pull/3647">peter-evans/create-pull-request#3647</a></li>
      <li>build(deps-dev): bump <code>@​types/node</code> from 18.19.71 to
      18.19.74 by <a
      href="https://github.com/dependabot"><code>@​dependabot</code></a> in <a
      href="https://redirect.github.com/peter-evans/create-pull-request/pull/3657">peter-evans/create-pull-request#3657</a></li>
      <li>build(deps-dev): bump <code>@​types/node</code> from 18.19.74 to
      18.19.75 by <a
      href="https://github.com/dependabot"><code>@​dependabot</code></a> in <a
      href="https://redirect.github.com/peter-evans/create-pull-request/pull/3663">peter-evans/create-pull-request#3663</a></li>
      <li>build(deps): bump
      <code>@​octokit/plugin-rest-endpoint-methods</code> from 13.3.0 to
      13.3.1 by <a
      href="https://github.com/dependabot"><code>@​dependabot</code></a> in <a
      href="https://redirect.github.com/peter-evans/create-pull-request/pull/3670">peter-evans/create-pull-request#3670</a></li>
      <li>build(deps-dev): bump prettier from 3.4.2 to 3.5.0 by <a
      href="https://github.com/dependabot"><code>@​dependabot</code></a> in <a
      href="https://redirect.github.com/peter-evans/create-pull-request/pull/3671">peter-evans/create-pull-request#3671</a></li>
      <li>Update distribution by <a
      href="https://github.com/actions-bot"><code>@​actions-bot</code></a> in
      <a
      href="https://redirect.github.com/peter-evans/create-pull-request/pull/3680">peter-evans/create-pull-request#3680</a></li>
      <li>build(deps): bump <code>@​octokit/request-error</code> from 6.1.6 to
      6.1.7 by <a
      href="https://github.com/dependabot"><code>@​dependabot</code></a> in <a
      href="https://redirect.github.com/peter-evans/create-pull-request/pull/3685">peter-evans/create-pull-request#3685</a></li>
      <li>build(deps): bump <code>@​octokit/plugin-paginate-rest</code> from
      11.4.0 to 11.4.1 by <a
      href="https://github.com/dependabot"><code>@​dependabot</code></a> in <a
      href="https://redirect.github.com/peter-evans/create-pull-request/pull/3688">peter-evans/create-pull-request#3688</a></li>
      <li>build(deps): bump <code>@​octokit/endpoint</code> from 10.1.2 to
      10.1.3 by <a
      href="https://github.com/dependabot"><code>@​dependabot</code></a> in <a
      href="https://redirect.github.com/peter-evans/create-pull-request/pull/3700">peter-evans/create-pull-request#3700</a></li>
      <li>Update distribution by <a
      href="https://github.com/actions-bot"><code>@​actions-bot</code></a> in
      <a
      href="https://redirect.github.com/peter-evans/create-pull-request/pull/3691">peter-evans/create-pull-request#3691</a></li>
      <li>build(deps-dev): bump prettier from 3.5.0 to 3.5.1 by <a
      href="https://github.com/dependabot"><code>@​dependabot</code></a> in <a
      href="https://redirect.github.com/peter-evans/create-pull-request/pull/3709">peter-evans/create-pull-request#3709</a></li>
      <li>build(deps-dev): bump eslint-import-resolver-typescript from 3.7.0
      to 3.8.1 by <a
      href="https://github.com/dependabot"><code>@​dependabot</code></a> in <a
      href="https://redirect.github.com/peter-evans/create-pull-request/pull/3710">peter-evans/create-pull-request#3710</a></li>
      <li>build(deps): bump <code>@​octokit/plugin-paginate-rest</code> from
      11.4.1 to 11.4.2 by <a
      href="https://github.com/dependabot"><code>@​dependabot</code></a> in <a
      href="https://redirect.github.com/peter-evans/create-pull-request/pull/3713">peter-evans/create-pull-request#3713</a></li>
      <li>build(deps-dev): bump <code>@​types/node</code> from 18.19.75 to
      18.19.76 by <a
      href="https://github.com/dependabot"><code>@​dependabot</code></a> in <a
      href="https://redirect.github.com/peter-evans/create-pull-request/pull/3712">peter-evans/create-pull-request#3712</a></li>
      <li>build(deps): bump <code>@​octokit/core</code> from 6.1.3 to 6.1.4 by
      <a href="https://github.com/dependabot"><code>@​dependabot</code></a> in
      <a
      href="https://redirect.github.com/peter-evans/create-pull-request/pull/3711">peter-evans/create-pull-request#3711</a></li>
      <li>Update distribution by <a
      href="https://github.com/actions-bot"><code>@​actions-bot</code></a> in
      <a
      href="https://redirect.github.com/peter-evans/create-pull-request/pull/3736">peter-evans/create-pull-request#3736</a></li>
      <li>Use showFileAtRefBase64 to read per-commit file contents by <a
      href="https://github.com/grahamc"><code>@​grahamc</code></a> in <a
      href="https://redirect.github.com/peter-evans/create-pull-request/pull/3744">peter-evans/create-pull-request#3744</a></li>
      </ul>
      <h2>New Contributors</h2>
      <ul>
      <li><a
      href="https://github.com/ybiquitous"><code>@​ybiquitous</code></a> made
      their first contribution in <a
      href="https://redirect.github.com/peter-evans/create-pull-request/pull/3626">peter-evans/create-pull-request#3626</a></li>
      <li><a href="https://github.com/grahamc"><code>@​grahamc</code></a> made
      their first contribution in <a
      href="https://redirect.github.com/peter-evans/create-pull-request/pull/3744">peter-evans/create-pull-request#3744</a></li>
      </ul>
      <p><strong>Full Changelog</strong>: <a
      href="https://github.com/peter-evans/create-pull-request/compare/v7.0.6...v7.0.7">https://github.com/peter-evans/create-pull-request/compare/v7.0.6...v7.0.7</a></p>
      </blockquote>
      </details>
      <details>
      <summary>Commits</summary>
      <ul>
      <li><a
      href="https://github.com/peter-evans/create-pull-request/commit/271a8d0340265f705b14b6d32b9829c1cb33d45e"><code>271a8d0</code></a>
      fix: suppress output for some git operations (<a
      href="https://redirect.github.com/peter-evans/create-pull-request/issues/3776">#3776</a>)</li>
      <li><a
      href="https://github.com/peter-evans/create-pull-request/commit/6f7efd1c24d02e0d947dd3f6f9618019afb36781"><code>6f7efd1</code></a>
      test: update cpr-example-command</li>
      <li><a
      href="https://github.com/peter-evans/create-pull-request/commit/13c47c574799c8eb0a033eba252619135e70f392"><code>13c47c5</code></a>
      build(deps-dev): bump prettier from 3.5.1 to 3.5.2 (<a
      href="https://redirect.github.com/peter-evans/create-pull-request/issues/3754">#3754</a>)</li>
      <li><a
      href="https://github.com/peter-evans/create-pull-request/commit/63e58290d72e889603c931363c5169ba1bbe3fed"><code>63e5829</code></a>
      build(deps): bump <code>@​octokit/plugin-paginate-rest</code> from
      11.4.2 to 11.4.3 (<a
      href="https://redirect.github.com/peter-evans/create-pull-request/issues/3753">#3753</a>)</li>
      <li><a
      href="https://github.com/peter-evans/create-pull-request/commit/a92c90fcab983421cc9bc736a06daea58c68d0db"><code>a92c90f</code></a>
      build(deps-dev): bump eslint-import-resolver-typescript (<a
      href="https://redirect.github.com/peter-evans/create-pull-request/issues/3752">#3752</a>)</li>
      <li><a
      href="https://github.com/peter-evans/create-pull-request/commit/b23b62d48799ec46790610dd74b29cb9ba2eef30"><code>b23b62d</code></a>
      build(deps-dev): bump ts-jest from 29.2.5 to 29.2.6 (<a
      href="https://redirect.github.com/peter-evans/create-pull-request/issues/3751">#3751</a>)</li>
      <li><a
      href="https://github.com/peter-evans/create-pull-request/commit/dd2324fc52d5d43c699a5636bcf19fceaa70c284"><code>dd2324f</code></a>
      fix: use showFileAtRefBase64 to read per-commit file contents (<a
      href="https://redirect.github.com/peter-evans/create-pull-request/issues/3744">#3744</a>)</li>
      <li><a
      href="https://github.com/peter-evans/create-pull-request/commit/367180cbdfa0448fc1ca9136e4adb020658cf4e5"><code>367180c</code></a>
      ci: remove testv5 cmd</li>
      <li><a
      href="https://github.com/peter-evans/create-pull-request/commit/25575a12f382fb9c68692ffce1174138b61417d7"><code>25575a1</code></a>
      build: update distribution (<a
      href="https://redirect.github.com/peter-evans/create-pull-request/issues/3736">#3736</a>)</li>
      <li><a
      href="https://github.com/peter-evans/create-pull-request/commit/a56e7a56e9186132269996d8937494f12ff51f77"><code>a56e7a5</code></a>
      build(deps): bump <code>@​octokit/core</code> from 6.1.3 to 6.1.4 (<a
      href="https://redirect.github.com/peter-evans/create-pull-request/issues/3711">#3711</a>)</li>
      <li>Additional commits viewable in <a
      href="https://github.com/peter-evans/create-pull-request/compare/67ccf781d68cd99b580ae25a5c18a1cc84ffff1f...271a8d0340265f705b14b6d32b9829c1cb33d45e">compare
      view</a></li>
      </ul>
      </details>
      <br />
      
      Updates `docker/setup-buildx-action` from 3.9.0 to 3.10.0
      <details>
      <summary>Release notes</summary>
      <p><em>Sourced from <a
      href="https://github.com/docker/setup-buildx-action/releases">docker/setup-buildx-action's
      releases</a>.</em></p>
      <blockquote>
      <h2>v3.10.0</h2>
      <ul>
      <li>Bump <code>@​docker/actions-toolkit</code> from 0.54.0 to 0.56.0 in
      <a
      href="https://redirect.github.com/docker/setup-buildx-action/pull/408">docker/setup-buildx-action#408</a></li>
      </ul>
      <p><strong>Full Changelog</strong>: <a
      href="https://github.com/docker/setup-buildx-action/compare/v3.9.0...v3.10.0">https://github.com/docker/setup-buildx-action/compare/v3.9.0...v3.10.0</a></p>
      </blockquote>
      </details>
      <details>
      <summary>Commits</summary>
      <ul>
      <li><a
      href="https://github.com/docker/setup-buildx-action/commit/b5ca514318bd6ebac0fb2aedd5d36ec1b5c232a2"><code>b5ca514</code></a>
      Merge pull request <a
      href="https://redirect.github.com/docker/setup-buildx-action/issues/408">#408</a>
      from docker/dependabot/npm_and_yarn/docker/actions-to...</li>
      <li><a
      href="https://github.com/docker/setup-buildx-action/commit/1418a4ef330cff3d80e8707b47780be815fb20db"><code>1418a4e</code></a>
      chore: update generated content</li>
      <li><a
      href="https://github.com/docker/setup-buildx-action/commit/93acf831ce48bc806b62b1e892b89fca8bf213e0"><code>93acf83</code></a>
      build(deps): bump <code>@​docker/actions-toolkit</code> from 0.54.0 to
      0.56.0</li>
      <li>See full diff in <a
      href="https://github.com/docker/setup-buildx-action/compare/f7ce87c1d6bead3e36075b2ce75da1f6cc28aaca...b5ca514318bd6ebac0fb2aedd5d36ec1b5c232a2">compare
      view</a></li>
      </ul>
      </details>
      <br />
      
      Updates `actions/attest-build-provenance` from 2.2.0 to 2.2.3
      <details>
      <summary>Release notes</summary>
      <p><em>Sourced from <a
      href="https://github.com/actions/attest-build-provenance/releases">actions/attest-build-provenance's
      releases</a>.</em></p>
      <blockquote>
      <h2>v2.2.3</h2>
      <h2>What's Changed</h2>
      <ul>
      <li>Pin actions/attest reference by commit SHA by <a
      href="https://github.com/bdehamer"><code>@​bdehamer</code></a> in <a
      href="https://redirect.github.com/actions/attest-build-provenance/pull/493">actions/attest-build-provenance#493</a></li>
      </ul>
      <p><strong>Full Changelog</strong>: <a
      href="https://github.com/actions/attest-build-provenance/compare/v2.2.2...v2.2.3">https://github.com/actions/attest-build-provenance/compare/v2.2.2...v2.2.3</a></p>
      <h2>v2.2.2</h2>
      <h2>What's Changed</h2>
      <ul>
      <li>Bump predicate action from 1.1.4 to 1.1.5 by <a
      href="https://github.com/bdehamer"><code>@​bdehamer</code></a> in <a
      href="https://redirect.github.com/actions/attest-build-provenance/pull/485">actions/attest-build-provenance#485</a>
      <ul>
      <li>Bump <code>@​actions/attest</code> from 1.5.0 to 1.6.0 by <a
      href="https://github.com/bdehamer"><code>@​bdehamer</code></a> in <a
      href="https://redirect.github.com/actions/attest-build-provenance/pull/484">actions/attest-build-provenance#484</a>
      <ul>
      <li>Update buildSLSAProvenancePredicate to populate
      <code>workflow.ref</code> field from the <code>ref</code> claim in the
      OIDC token (<a
      href="https://redirect.github.com/actions/toolkit/pull/1969">actions/toolkit#1969</a>)</li>
      </ul>
      </li>
      </ul>
      </li>
      </ul>
      <p><strong>Full Changelog</strong>: <a
      href="https://github.com/actions/attest-build-provenance/compare/v2.2.1...v2.2.2">https://github.com/actions/attest-build-provenance/compare/v2.2.1...v2.2.2</a></p>
      <h2>v2.2.1</h2>
      <h2>What's Changed</h2>
      <ul>
      <li>Bump undici from 5.28.4 to 5.28.5 by <a
      href="https://github.com/dependabot"><code>@​dependabot</code></a> in <a
      href="https://redirect.github.com/actions/attest-build-provenance/pull/457">actions/attest-build-provenance#457</a></li>
      <li>Bump <code>@​octokit/request-error</code> from 5.0.1 to 5.1.1 by <a
      href="https://github.com/dependabot"><code>@​dependabot</code></a> in <a
      href="https://redirect.github.com/actions/attest-build-provenance/pull/469">actions/attest-build-provenance#469</a></li>
      <li>Bump <code>@​octokit/request</code> from 8.2.0 to 8.4.1 by <a
      href="https://github.com/dependabot"><code>@​dependabot</code></a> in <a
      href="https://redirect.github.com/actions/attest-build-provenance/pull/478">actions/attest-build-provenance#478</a></li>
      <li>Bump actions/attest from 2.2.0 to 2.2.1 by <a
      href="https://github.com/bdehamer"><code>@​bdehamer</code></a> in <a
      href="https://redirect.github.com/actions/attest-build-provenance/pull/481">actions/attest-build-provenance#481</a>
      <ul>
      <li>Includes <code>@actions/attest</code> <a
      href="https://github.com/actions/toolkit/blob/main/packages/attest/RELEASES.md#160">v1.6.0</a></li>
      </ul>
      </li>
      </ul>
      <p><strong>Full Changelog</strong>: <a
      href="https://github.com/actions/attest-build-provenance/compare/v2.2.0...v2.2.1">https://github.com/actions/attest-build-provenance/compare/v2.2.0...v2.2.1</a></p>
      </blockquote>
      </details>
      <details>
      <summary>Commits</summary>
      <ul>
      <li><a
      href="https://github.com/actions/attest-build-provenance/commit/c074443f1aee8d4aeeae555aebba3282517141b2"><code>c074443</code></a>
      pin actions/attest reference by commit sha (<a
      href="https://redirect.github.com/actions/attest-build-provenance/issues/493">#493</a>)</li>
      <li><a
      href="https://github.com/actions/attest-build-provenance/commit/bd77c077858b8d561b7a36cbe48ef4cc642ca39d"><code>bd77c07</code></a>
      bump predicate from 1.1.4 to 1.1.5 (<a
      href="https://redirect.github.com/actions/attest-build-provenance/issues/485">#485</a>)</li>
      <li><a
      href="https://github.com/actions/attest-build-provenance/commit/1176ef556905f349f669722abf30bce1a6e16e01"><code>1176ef5</code></a>
      bump <code>@​actions/attest</code> from 1.5.0 to 1.6.0 (<a
      href="https://redirect.github.com/actions/attest-build-provenance/issues/484">#484</a>)</li>
      <li><a
      href="https://github.com/actions/attest-build-provenance/commit/f9eaf234fc1c2e333c1eca18177db0f44fa6ba52"><code>f9eaf23</code></a>
      Bump actions/attest from 2.2.0 to 2.2.1 (<a
      href="https://redirect.github.com/actions/attest-build-provenance/issues/481">#481</a>)</li>
      <li><a
      href="https://github.com/actions/attest-build-provenance/commit/f1321eccb7f66405fe3db013137d2d645e6bc45a"><code>f1321ec</code></a>
      Bump <code>@​octokit/request</code> from 8.2.0 to 8.4.1 (<a
      href="https://redirect.github.com/actions/attest-build-provenance/issues/478">#478</a>)</li>
      <li><a
      href="https://github.com/actions/attest-build-provenance/commit/d8181f545adc18f9aedfb731c23660cb00dc737d"><code>d8181f5</code></a>
      Bump the npm-development group with 6 updates (<a
      href="https://redirect.github.com/actions/attest-build-provenance/issues/476">#476</a>)</li>
      <li><a
      href="https://github.com/actions/attest-build-provenance/commit/1f22f30822a16ae9e0becf164e213808ab322d24"><code>1f22f30</code></a>
      Bump <code>@​octokit/request-error</code> from 5.0.1 to 5.1.1 (<a
      href="https://redirect.github.com/actions/attest-build-provenance/issues/469">#469</a>)</li>
      <li><a
      href="https://github.com/actions/attest-build-provenance/commit/6e5e68c5f71bfc58cbaa918885e585e490479796"><code>6e5e68c</code></a>
      Bump the npm-development group with 4 updates (<a
      href="https://redirect.github.com/actions/attest-build-provenance/issues/471">#471</a>)</li>
      <li><a
      href="https://github.com/actions/attest-build-provenance/commit/555f5b7e366d4d3179de3d1e8859906f6883b2d4"><code>555f5b7</code></a>
      Bump the npm-development group with 6 updates (<a
      href="https://redirect.github.com/actions/attest-build-provenance/issues/465">#465</a>)</li>
      <li><a
      href="https://github.com/actions/attest-build-provenance/commit/2d4fa84118ec070aeab0f526278616ad48b05f47"><code>2d4fa84</code></a>
      Bump the npm-development group with 2 updates (<a
      href="https://redirect.github.com/actions/attest-build-provenance/issues/461">#461</a>)</li>
      <li>Additional commits viewable in <a
      href="https://github.com/actions/attest-build-provenance/compare/520d128f165991a6c774bcb264f323e3d70747f4...c074443f1aee8d4aeeae555aebba3282517141b2">compare
      view</a></li>
      </ul>
      </details>
      <br />
      
      
      Dependabot will resolve any conflicts with this PR as long as you don't
      alter it yourself. You can also trigger a rebase manually by commenting
      `@dependabot rebase`.
      
      [//]: # (dependabot-automerge-start)
      [//]: # (dependabot-automerge-end)
      
      ---
      
      <details>
      <summary>Dependabot commands and options</summary>
      <br />
      
      You can trigger Dependabot actions by commenting on this PR:
      - `@dependabot rebase` will rebase this PR
      - `@dependabot recreate` will recreate this PR, overwriting any edits
      that have been made to it
      - `@dependabot merge` will merge this PR after your CI passes on it
      - `@dependabot squash and merge` will squash and merge this PR after
      your CI passes on it
      - `@dependabot cancel merge` will cancel a previously requested merge
      and block automerging
      - `@dependabot reopen` will reopen this PR if it is closed
      - `@dependabot close` will close this PR and stop Dependabot recreating
      it. You can achieve the same result by closing it manually
      - `@dependabot show <dependency name> ignore conditions` will show all
      of the ignore conditions of the specified dependency
      - `@dependabot ignore <dependency name> major version` will close this
      group update PR and stop Dependabot creating any more for the specific
      dependency's major version (unless you unignore this specific
      dependency's major version or upgrade to it yourself)
      - `@dependabot ignore <dependency name> minor version` will close this
      group update PR and stop Dependabot creating any more for the specific
      dependency's minor version (unless you unignore this specific
      dependency's minor version or upgrade to it yourself)
      - `@dependabot ignore <dependency name>` will close this group update PR
      and stop Dependabot creating any more for the specific dependency
      (unless you unignore this specific dependency or upgrade to it yourself)
      - `@dependabot unignore <dependency name>` will remove all of the ignore
      conditions of the specified dependency
      - `@dependabot unignore <dependency name> <ignore condition>` will
      remove the ignore condition of the specified dependency and ignore
      conditions
      
      
      </details>
      
      Signed-off-by: default avatardependabot[bot] <support@github.com>
      Co-authored-by: default avatardependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
      88a31f2d
    • Eugen Snitko's avatar
      remove compromised action (#7934) · d3f68513
      Eugen Snitko authored
      remove compromised tj-actions/changed-files
      set all related vars to 'true' for now
      https://news.ycombinator.com/item?id=43368870
      d3f68513
  7. Mar 14, 2025
  8. Mar 13, 2025