Skip to content

ci: lock Rust dependencies, pin github actions - #139

Merged
Chris Oo (chris-oo) merged 2 commits into
microsoft:mainfrom
chris-oo:ci-lockfile
Oct 28, 2026
Merged

Chris Oo (chris-oo) merged 2 commits into
microsoft:mainfrom
chris-oo:ci-lockfile

Conversation

@chris-oo

@chris-oo Chris Oo (chris-oo) commented Oct 28, 2026 •

Copy link
Copy Markdown
Member

Add a Cargo.lock file to pin dependencies to make sure that CI continues to work even if newer dependencies are released that do not support the current version of Rust used in ci.

Additionally, pin github actions to well known commit hashes.

Track Cargo.lock with dependencies compatible with Rust 1.86.0, including
uuid 1.26.1. Require the lockfile in CI checks, builds, tests, and Miri,
and pass --locked through the C API Makefile.

Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>
Copilot-Session: b3019edb-c78d-4cf3-a110-c84b6c299f6f
@chris-oo
Chris Oo (chris-oo) requested a review from a team as a code owner October 28, 2026 17:07
Apply the two dtolnay/rust-toolchain SHA pins from microsoft#138
while preserving the Rust 1.86.0 toolchain and locked CI commands.

Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>
Copilot-Session: b3019edb-c78d-4cf3-a110-c84b6c299f6f
@chris-oo Chris Oo (chris-oo) changed the title ci: lock Rust dependencies ci: lock Rust dependencies, pin github actions Oct 28, 2026
@chris-oo
Chris Oo (chris-oo) enabled auto-merge (squash) October 28, 2026 17:12
@chris-oo
Chris Oo (chris-oo) merged commit ba839b7 into microsoft:main Oct 28, 2026
6 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants