From c01f46f89a10ad8366ab1649b27ea3ec4009ecec Mon Sep 17 00:00:00 2001 From: Eric Rodrigues Pires Date: Thu, 9 Oct 2025 21:05:30 -0300 Subject: [PATCH] Update Docker base image and GitHub Actions --- .github/workflows/build.yml | 10 +++++----- .github/workflows/mdbook.yml | 4 ++-- .github/workflows/release.yml | 4 ++-- .github/workflows/validate.yml | 20 ++++++++++---------- .github/workflows/zizmor.yml | 5 +++-- CHANGELOG.md | 1 + Dockerfile | 2 +- 7 files changed, 24 insertions(+), 22 deletions(-) diff --git a/.github/workflows/build.yml b/.github/workflows/build.yml index 490a457..0d57e56 100644 --- a/.github/workflows/build.yml +++ b/.github/workflows/build.yml @@ -18,12 +18,12 @@ jobs: contents: read packages: write steps: - - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2 + - uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5.0.0 with: persist-credentials: true - name: Collect Docker metadata id: meta - uses: docker/metadata-action@902fa8ec7d6ecbf8d84d538b9b233a880e428804 # v5.7.0 + uses: docker/metadata-action@c1e51972afc2121e065aed6d45c65596fe445f3f # v5.8.0 with: images: | ${{ vars.DOCKERHUB_USERNAME }}/sandhole @@ -36,16 +36,16 @@ jobs: - name: Set up QEMU uses: docker/setup-qemu-action@29109295f81e9208d7d86ff1c6c12d2833863392 # v3.6.0 - name: Set up Docker Buildx - uses: docker/setup-buildx-action@b5ca514318bd6ebac0fb2aedd5d36ec1b5c232a2 # v3.10.0 + uses: docker/setup-buildx-action@e468171a9de216ec08956ac3ada2f0791b6bd435 # v3.11.1 with: cache-binary: false - name: Login to Docker Hub - uses: docker/login-action@74a5d142397b4f367a81961eba4e8cd7edddf772 # v3.4.0 + uses: docker/login-action@5e57cd118135c172c3672efd75eb46360885c0ef # v3.6.0 with: username: ${{ vars.DOCKERHUB_USERNAME }} password: ${{ secrets.dockerhub-push-token }} - name: Login to Github Container Registry - uses: docker/login-action@74a5d142397b4f367a81961eba4e8cd7edddf772 # v3.4.0 + uses: docker/login-action@5e57cd118135c172c3672efd75eb46360885c0ef # v3.6.0 with: registry: ghcr.io username: ${{ github.actor }} diff --git a/.github/workflows/mdbook.yml b/.github/workflows/mdbook.yml index 714a4e8..a0f5779 100644 --- a/.github/workflows/mdbook.yml +++ b/.github/workflows/mdbook.yml @@ -20,7 +20,7 @@ jobs: MDBOOK_VERSION: 0.4.52 MDBOOK_MERMAID_VERSION: 0.15.0 steps: - - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2 + - uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5.0.0 with: persist-credentials: false - name: Install mdBook @@ -38,7 +38,7 @@ jobs: run: mdbook build book - name: Deploy to Sandhole if: github.ref == 'refs/heads/main' - uses: up9cloud/action-rsync@2978cee625bfb1cd273ae6e146a5e1554e6111b1 # master + uses: up9cloud/action-rsync@e5f52e6a78755fa0ddbfd2d52f61de0490661665 # master env: SOURCE: book/book/ HOST: ${{ secrets.BOOK_SSH_HOST }} diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml index 1329990..2898f23 100644 --- a/.github/workflows/release.yml +++ b/.github/workflows/release.yml @@ -21,11 +21,11 @@ jobs: permissions: contents: write steps: - - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2 + - uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5.0.0 with: persist-credentials: true - name: Download artifact - uses: actions/download-artifact@d3f86a106a0bac45b974a628896c90dbdf5c8093 # v4.3.0 + uses: actions/download-artifact@634f93cb2916e3fdff6788551b99b062d0335ce0 # v5.0.0 with: name: sandhole-binaries path: out/ diff --git a/.github/workflows/validate.yml b/.github/workflows/validate.yml index bd09f72..2fec4a4 100644 --- a/.github/workflows/validate.yml +++ b/.github/workflows/validate.yml @@ -18,7 +18,7 @@ jobs: name: Check rustfmt formatting on MSRV runs-on: ubuntu-latest steps: - - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2 + - uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5.0.0 with: persist-credentials: false - name: Fetch MSRV @@ -33,14 +33,14 @@ jobs: name: Check Clippy lints on MSRV runs-on: ubuntu-latest steps: - - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2 + - uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5.0.0 with: persist-credentials: false - name: Fetch MSRV run: | rustup toolchain install ${RUST_MSRV}-x86_64-unknown-linux-gnu rustup override set ${RUST_MSRV}-x86_64-unknown-linux-gnu - - uses: Swatinem/rust-cache@9d47c6ad4b02e050fd481d890b2ea34778fd09d6 # v2.7.8 + - uses: Swatinem/rust-cache@f13886b937689c021905a6b90929199931d60db1 # v2.8.1 - name: Run Clippy run: | rustup component add clippy @@ -49,14 +49,14 @@ jobs: name: Build on MSRV (default features) runs-on: ubuntu-latest steps: - - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2 + - uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5.0.0 with: persist-credentials: false - name: Fetch MSRV run: | rustup toolchain install ${RUST_MSRV}-x86_64-unknown-linux-gnu rustup override set ${RUST_MSRV}-x86_64-unknown-linux-gnu - - uses: Swatinem/rust-cache@9d47c6ad4b02e050fd481d890b2ea34778fd09d6 # v2.7.8 + - uses: Swatinem/rust-cache@f13886b937689c021905a6b90929199931d60db1 # v2.8.1 - name: Build run: | cargo build --locked @@ -64,14 +64,14 @@ jobs: name: Build on MSRV (no default features) runs-on: ubuntu-latest steps: - - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2 + - uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5.0.0 with: persist-credentials: false - name: Fetch MSRV run: | rustup toolchain install ${RUST_MSRV}-x86_64-unknown-linux-gnu rustup override set ${RUST_MSRV}-x86_64-unknown-linux-gnu - - uses: Swatinem/rust-cache@9d47c6ad4b02e050fd481d890b2ea34778fd09d6 # v2.7.8 + - uses: Swatinem/rust-cache@f13886b937689c021905a6b90929199931d60db1 # v2.8.1 - name: Build run: | cargo build --locked --no-default-features @@ -79,9 +79,9 @@ jobs: name: Run tests on nightly runs-on: ubuntu-latest env: - CARGO_LLVM_COV_VERSION: 0.6.16 + CARGO_LLVM_COV_VERSION: 0.6.20 steps: - - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2 + - uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5.0.0 with: persist-credentials: false - name: Install cargo-llvm-cov @@ -99,7 +99,7 @@ jobs: run: | cargo llvm-cov --verbose --codecov --locked --output-path codecov.json - name: Upload coverage reports to Codecov - uses: codecov/codecov-action@18283e04ce6e62d37312384ff67231eb8fd56d24 # v5.4.3 + uses: codecov/codecov-action@5a1091511ad55cbe89839c7260b706298ca349f7 # v5.5.1 with: files: ./codecov.json token: ${{ secrets.CODECOV_TOKEN }} diff --git a/.github/workflows/zizmor.yml b/.github/workflows/zizmor.yml index f288c9c..f3b71a8 100644 --- a/.github/workflows/zizmor.yml +++ b/.github/workflows/zizmor.yml @@ -14,9 +14,10 @@ jobs: permissions: security-events: write steps: - - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2 + - uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5.0.0 with: persist-credentials: false - - uses: zizmorcore/zizmor-action@f52a838cfabf134edcbaa7c8b3677dde20045018 # v0.1.1 + - name: Check GitHub Actions + uses: zizmorcore/zizmor-action@e673c3917a1aef3c65c972347ed84ccd013ecda4 # v0.2.0 with: inputs: ./.github/ diff --git a/CHANGELOG.md b/CHANGELOG.md index d3fa7f3..6b5da3f 100644 --- a/CHANGELOG.md +++ b/CHANGELOG.md @@ -4,6 +4,7 @@ ### Changed +- Update Docker base image. - Update dependencies. ## 0.8.3 diff --git a/Dockerfile b/Dockerfile index 07a41d6..7cd2f04 100644 --- a/Dockerfile +++ b/Dockerfile @@ -1,5 +1,5 @@ # Compile application with the official Rust image -FROM --platform=$BUILDPLATFORM rust:1.89.0-alpine3.22 AS builder +FROM --platform=$BUILDPLATFORM rust:1.90.0-alpine3.22 AS builder ENV PKGCONFIG_SYSROOTDIR=/ # Add build dependencies and targets RUN apk add --no-cache musl-dev libressl-dev perl build-base zig -- 2.51.2