From af9b9088539a00afa3a8ba7023505a7b840ce34c Mon Sep 17 00:00:00 2001 From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com> Date: Mon, 19 Oct 2026 17:17:17 +0000 Subject: [PATCH 1/2] fix(deps): bump devantler-tech/ksail/.github/actions/restore-ksail-binary Bumps [devantler-tech/ksail/.github/actions/restore-ksail-binary](https://github.com/devantler-tech/ksail) from 7.203.14 to 7.203.26. - [Release notes](https://github.com/devantler-tech/ksail/releases) - [Commits](https://github.com/devantler-tech/ksail/compare/ee5fe3922267eb83f074c2fcccdfdc5c8586d3c7...c9c5cb557c2e5945b2f83de1e52d452c1e1f5ab2) --- updated-dependencies: - dependency-name: devantler-tech/ksail/.github/actions/restore-ksail-binary dependency-version: 7.203.26 dependency-type: direct:production update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] --- .github/workflows/ci.yaml | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/.github/workflows/ci.yaml b/.github/workflows/ci.yaml index 19ab26d531..2b3eae0260 100644 --- a/.github/workflows/ci.yaml +++ b/.github/workflows/ci.yaml @@ -1866,7 +1866,7 @@ jobs: # This job already waits for the producer. Reuse its exact sealed bytes # instead of restoring Go modules or compiling again after cache eviction. - name: 📥 Restore KSail binary - uses: devantler-tech/ksail/.github/actions/restore-ksail-binary@ee5fe3922267eb83f074c2fcccdfdc5c8586d3c7 + uses: devantler-tech/ksail/.github/actions/restore-ksail-binary@c9c5cb557c2e5945b2f83de1e52d452c1e1f5ab2 with: artifact-id: ${{ needs.build-artifact.outputs.artifact-id }} binary-sha256: ${{ needs.build-artifact.outputs.binary-sha256 }} @@ -2058,7 +2058,7 @@ jobs: - name: 📥 Restore KSail binary # Pin the identical published action until actionlint supports $/ references. - uses: devantler-tech/ksail/.github/actions/restore-ksail-binary@ee5fe3922267eb83f074c2fcccdfdc5c8586d3c7 + uses: devantler-tech/ksail/.github/actions/restore-ksail-binary@c9c5cb557c2e5945b2f83de1e52d452c1e1f5ab2 with: artifact-id: ${{ needs.build-artifact.outputs.artifact-id }} binary-sha256: ${{ needs.build-artifact.outputs.binary-sha256 }} From 595a5a7d24c72843ffaa247dac3f7e019feead06 Mon Sep 17 00:00:00 2001 From: Nikolai Emil Damm Date: Mon, 19 Oct 2026 19:49:57 +0200 Subject: [PATCH 2/2] test(ciharness): pin the bumped restore-ksail-binary commit The workflow contract test asserts the exact restore action commit the CI workflow uses; move it to c9c5cb55 with the Dependabot bump. Co-Authored-By: Claude Opus 5.5 --- internal/ciharness/binary_artifact_test.go | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/internal/ciharness/binary_artifact_test.go b/internal/ciharness/binary_artifact_test.go index 3b133dfd03..a3885ba781 100644 --- a/internal/ciharness/binary_artifact_test.go +++ b/internal/ciharness/binary_artifact_test.go @@ -57,7 +57,7 @@ func TestKSailBinaryArtifactDockerConsumer(t *testing.T) { restore := findHarnessStep(t, consumer.Steps, "📥 Restore KSail binary") assert.Equal(t, "devantler-tech/ksail/.github/actions/restore-ksail-binary@"+ - "ee5fe3922267eb83f074c2fcccdfdc5c8586d3c7", restore.Uses) + "c9c5cb557c2e5945b2f83de1e52d452c1e1f5ab2", restore.Uses) assert.Equal( t, "${{ needs.build-artifact.outputs.artifact-id }}", @@ -95,7 +95,7 @@ func TestKSailBinaryArtifactMirrorWarmerConsumer(t *testing.T) { restore := findHarnessStep(t, consumer.Steps, "📥 Restore KSail binary") assert.Equal(t, "devantler-tech/ksail/.github/actions/restore-ksail-binary@"+ - "ee5fe3922267eb83f074c2fcccdfdc5c8586d3c7", restore.Uses) + "c9c5cb557c2e5945b2f83de1e52d452c1e1f5ab2", restore.Uses) assert.Equal( t, "${{ needs.build-artifact.outputs.artifact-id }}",