From b0e3790e755f249ce0c1b72a38780e9d363f37f2 Mon Sep 17 00:00:00 2001 From: llama Date: Tue, 21 Jul 2026 17:08:40 +0800 Subject: [PATCH 1/4] bump taiki-e/install-action to 2.83.1 for cargo-deny@0.20.2 --- .github/workflows/ci.yml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml index 490ffe22d99..46f72d2424e 100644 --- a/.github/workflows/ci.yml +++ b/.github/workflows/ci.yml @@ -99,7 +99,7 @@ jobs: uses: extractions/setup-just@f8a3cce218d9f83db3a2ecd90e41ac3de6cdfd9b #v3 - name: Install cargo-llvm-cov and cargo-nextest - uses: taiki-e/install-action@c7eb1735f09259a5035e8e5d44b1406b1cddc0fb #v2.83.0 + uses: taiki-e/install-action@2ca9b94c269419b7b0c711c09d0b21c4e1d51145 #v2.83.1 with: tool: | cargo-llvm-cov@0.8.4 From ff21b0e0c7f99be0503f401c7d6a2d85f100692b Mon Sep 17 00:00:00 2001 From: llama Date: Tue, 21 Jul 2026 17:09:29 +0800 Subject: [PATCH 2/4] install cargo-deny@0.20.2 --- .github/workflows/ci.yml | 3 ++- 1 file changed, 2 insertions(+), 1 deletion(-) diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml index 46f72d2424e..813ea1c6a87 100644 --- a/.github/workflows/ci.yml +++ b/.github/workflows/ci.yml @@ -98,12 +98,13 @@ jobs: - name: Install just uses: extractions/setup-just@f8a3cce218d9f83db3a2ecd90e41ac3de6cdfd9b #v3 - - name: Install cargo-llvm-cov and cargo-nextest + - name: Install cargo-llvm-cov, cargo-nextest and cargo-deny uses: taiki-e/install-action@2ca9b94c269419b7b0c711c09d0b21c4e1d51145 #v2.83.1 with: tool: | cargo-llvm-cov@0.8.4 cargo-nextest@0.9.99 + cargo-deny@0.20.2 - name: Symlink node_modules run: ln -sf out/node_modules . From 93e48473c134f93194a9a4d0216c1181ef9794c4 Mon Sep 17 00:00:00 2001 From: llama Date: Tue, 21 Jul 2026 17:10:10 +0800 Subject: [PATCH 3/4] replace use of EmbarkStudios/cargo-deny-action --- .github/workflows/ci.yml | 4 +++- 1 file changed, 3 insertions(+), 1 deletion(-) diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml index 813ea1c6a87..2230ae6750a 100644 --- a/.github/workflows/ci.yml +++ b/.github/workflows/ci.yml @@ -180,8 +180,10 @@ jobs: **/Cargo.toml .deny.toml - - uses: EmbarkStudios/cargo-deny-action@8f84122a46a358a27cb0625d85ad60ab436a1b87 #v2 + - name: Run cargo-deny check if: github.event_name != 'pull_request' || steps.rust-deps.outputs.any_changed == 'true' + shell: bash + run: cargo deny check # out/pyenv contains a venv with absolute Python paths that break # across runs. out/build.ninja is regenerated by configure each time. From dcd6c2296c13bc1b2a8665528a298b4c4d475a24 Mon Sep 17 00:00:00 2001 From: llama Date: Tue, 21 Jul 2026 17:10:29 +0800 Subject: [PATCH 4/4] update version of cargo-deny used in local check --- tools/minilints/src/main.rs | 3 +-- 1 file changed, 1 insertion(+), 2 deletions(-) diff --git a/tools/minilints/src/main.rs b/tools/minilints/src/main.rs index 3b30c5d911b..92aeac567bb 100644 --- a/tools/minilints/src/main.rs +++ b/tools/minilints/src/main.rs @@ -240,8 +240,7 @@ fn sveltekit_temp_file(path: &str) -> bool { } fn check_cargo_deny() -> Result<()> { - // Used by `fix:minilints` locally. CI uses EmbarkStudios/cargo-deny-action. - Command::run("cargo install cargo-deny@0.19.2")?; + Command::run("cargo install cargo-deny@0.20.2")?; Command::run("cargo deny check")?; Ok(()) }