From bb7a23c2c6a2eaa25d6ccd97071238ebf4afcc86 Mon Sep 17 00:00:00 2001 From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com> Date: Mon, 10 Aug 2026 05:32:26 +0000 Subject: [PATCH 1/2] Bump the github-actions group with 2 updates Bumps the github-actions group with 2 updates: [actions/checkout](https://github.com/actions/checkout) and [actions/upload-artifact](https://github.com/actions/upload-artifact). Updates `actions/checkout` from 2 to 7 - [Release notes](https://github.com/actions/checkout/releases) - [Commits](https://github.com/actions/checkout/compare/v2...v7) Updates `actions/upload-artifact` from 1 to 7 - [Release notes](https://github.com/actions/upload-artifact/releases) - [Commits](https://github.com/actions/upload-artifact/compare/v1...v7) --- updated-dependencies: - dependency-name: actions/checkout dependency-version: '7' dependency-type: direct:production update-type: version-update:semver-major dependency-group: github-actions - dependency-name: actions/upload-artifact dependency-version: '7' dependency-type: direct:production update-type: version-update:semver-major dependency-group: github-actions ... Signed-off-by: dependabot[bot] --- .github/workflows/generic-dev.yml | 34 +++++++++++++-------------- .github/workflows/generic-release.yml | 10 ++++---- .github/workflows/linux-kernel.yml | 2 +- .github/workflows/main.yml | 2 +- 4 files changed, 24 insertions(+), 24 deletions(-) diff --git a/.github/workflows/generic-dev.yml b/.github/workflows/generic-dev.yml index bb88de57c..ddb2ffd9f 100644 --- a/.github/workflows/generic-dev.yml +++ b/.github/workflows/generic-dev.yml @@ -25,21 +25,21 @@ jobs: benchmarking: runs-on: ubuntu-latest steps: - - uses: actions/checkout@v2 + - uses: actions/checkout@v7 - name: make benchmarking run: make benchmarking test: runs-on: ubuntu-latest steps: - - uses: actions/checkout@v2 + - uses: actions/checkout@v7 - name: make test run: make test gcc-6-7-libzstd: runs-on: ubuntu-latest steps: - - uses: actions/checkout@v2 + - uses: actions/checkout@v7 - name: gcc-6 + gcc-7 + libzstdmt compilation run: | make gcc6install gcc7install @@ -53,7 +53,7 @@ jobs: gcc-8-asan-ubsan-testzstd: runs-on: ubuntu-16.04 # fails on 18.04 steps: - - uses: actions/checkout@v2 + - uses: actions/checkout@v7 - name: gcc-8 + ASan + UBSan + Test Zstd run: | make gcc8install @@ -64,7 +64,7 @@ jobs: gcc-6-asan-ubsan-testzstd-32bit: runs-on: ubuntu-latest steps: - - uses: actions/checkout@v2 + - uses: actions/checkout@v7 - name: gcc-6 + ASan + UBSan + Test Zstd, 32bit mode run: | make gcc6install libc6install @@ -75,7 +75,7 @@ jobs: clang-38-msan-testzstd: runs-on: ubuntu-16.04 # fails on 18.04 steps: - - uses: actions/checkout@v2 + - uses: actions/checkout@v7 - name: clang-3.8 + MSan + Test Zstd run: | # make clang38install (doesn't work) @@ -87,7 +87,7 @@ jobs: cmake-build-and-test-check: runs-on: ubuntu-latest steps: - - uses: actions/checkout@v2 + - uses: actions/checkout@v7 - name: cmake build and test check run: | FUZZERTEST=-T1mn ZSTREAM_TESTTIME=-T1mn make cmakebuild @@ -98,7 +98,7 @@ jobs: gcc-8-asan-ubsan-fuzz: runs-on: ubuntu-latest steps: - - uses: actions/checkout@v2 + - uses: actions/checkout@v7 - name: gcc-8 + ASan + UBSan + Fuzz Test run: | make gcc8install @@ -107,7 +107,7 @@ jobs: gcc-6-asan-ubsan-fuzz32: runs-on: ubuntu-latest steps: - - uses: actions/checkout@v2 + - uses: actions/checkout@v7 - name: gcc-6 + ASan + UBSan + Fuzz Test 32bit run: | make gcc6install libc6install @@ -116,7 +116,7 @@ jobs: clang-38-msan-fuzz: runs-on: ubuntu-16.04 # fails on 18.04 steps: - - uses: actions/checkout@v2 + - uses: actions/checkout@v7 - name: clang-3.8 + MSan + Fuzz Test run: | # make clang38install (doesn't work) @@ -128,7 +128,7 @@ jobs: asan-ubsan-msan-regression: runs-on: ubuntu-latest steps: - - uses: actions/checkout@v2 + - uses: actions/checkout@v7 - name: ASan + UBSan + MSan + Regression Test run: | make -j uasanregressiontest @@ -138,7 +138,7 @@ jobs: cpp-gnu90-c99-compatibility: runs-on: ubuntu-latest steps: - - uses: actions/checkout@v2 + - uses: actions/checkout@v7 - name: C++, gnu90 and c99 compatibility run: | make cxxtest @@ -152,7 +152,7 @@ jobs: mingw-cross-compilation: runs-on: ubuntu-latest steps: - - uses: actions/checkout@v2 + - uses: actions/checkout@v7 - name: mingw cross-compilation run: | # sudo update-alternatives --set x86_64-w64-mingw32-g++ /usr/bin/x86_64-w64-mingw32-g++-posix; (doesn't work) @@ -163,7 +163,7 @@ jobs: # armbuild: # runs-on: ubuntu-16.04 # doesn't work on latest # steps: -# - uses: actions/checkout@v2 +# - uses: actions/checkout@v7 # - name: ARM Build Test # run: | # make arminstall @@ -173,7 +173,7 @@ jobs: # armfuzz: # runs-on: ubuntu-16.04 # doesn't work on latest # steps: -# - uses: actions/checkout@v2 +# - uses: actions/checkout@v7 # - name: Qemu ARM emulation + Fuzz Test # run: | # make arminstall @@ -182,7 +182,7 @@ jobs: bourne-shell: runs-on: ubuntu-latest steps: - - uses: actions/checkout@v2 + - uses: actions/checkout@v7 - name: Bourne shell compatibility (shellcheck) run: | wget https://github.com/koalaman/shellcheck/releases/download/v0.7.1/shellcheck-v0.7.1.linux.x86_64.tar.xz @@ -203,7 +203,7 @@ jobs: sudo add-apt-repository "deb https://apt.repos.intel.com/oneapi all main" sudo apt-get update sudo apt-get install -y intel-basekit intel-hpckit - - uses: actions/checkout@v2 + - uses: actions/checkout@v7 - name: make check run: | make CC=/opt/intel/oneapi/compiler/latest/linux/bin/intel64/icc check diff --git a/.github/workflows/generic-release.yml b/.github/workflows/generic-release.yml index de4a1cb91..a50af39eb 100644 --- a/.github/workflows/generic-release.yml +++ b/.github/workflows/generic-release.yml @@ -19,7 +19,7 @@ jobs: osx: runs-on: macos-10.15 steps: - - uses: actions/checkout@v2 + - uses: actions/checkout@v7 - name: OS-X run: | make test @@ -28,7 +28,7 @@ jobs: zbuff: runs-on: ubuntu-16.04 steps: - - uses: actions/checkout@v2 + - uses: actions/checkout@v7 - name: zbuff test run: | make -C tests test-zbuff @@ -36,7 +36,7 @@ jobs: tsan: runs-on: ubuntu-16.04 steps: - - uses: actions/checkout@v2 + - uses: actions/checkout@v7 - name: thread sanitizer run: | sudo apt-add-repository "deb http://llvm.org/apt/trusty/ llvm-toolchain-trusty-3.8 main" @@ -47,7 +47,7 @@ jobs: zlib-wrapper: runs-on: ubuntu-16.04 steps: - - uses: actions/checkout@v2 + - uses: actions/checkout@v7 - name: zlib wrapper test run: | make gpp6install valgrindinstall @@ -57,7 +57,7 @@ jobs: lz4-threadpool-partial-libs: runs-on: ubuntu-16.04 steps: - - uses: actions/checkout@v2 + - uses: actions/checkout@v7 - name: LZ4, thread pool, and partial libs testslib wrapper test run: | make lz4install diff --git a/.github/workflows/linux-kernel.yml b/.github/workflows/linux-kernel.yml index 35871ff08..310c9d40d 100644 --- a/.github/workflows/linux-kernel.yml +++ b/.github/workflows/linux-kernel.yml @@ -8,6 +8,6 @@ jobs: test: runs-on: ubuntu-latest steps: - - uses: actions/checkout@v2 + - uses: actions/checkout@v7 - name: Create linux kernel library + build + test run: make -C contrib/linux-kernel test CFLAGS="-Werror -Wunused-const-variable -Wunused-but-set-variable" diff --git a/.github/workflows/main.yml b/.github/workflows/main.yml index 0e14345dc..bd5f91ddf 100644 --- a/.github/workflows/main.yml +++ b/.github/workflows/main.yml @@ -23,7 +23,7 @@ jobs: dry-run: false sanitizer: ${{ matrix.sanitizer }} - name: Upload Crash - uses: actions/upload-artifact@v1 + uses: actions/upload-artifact@v7 if: failure() && steps.build.outcome == 'success' with: name: ${{ matrix.sanitizer }}-artifacts From cdcbf600c7b130f42b440018bc5d52966d3ac815 Mon Sep 17 00:00:00 2001 From: mweidle73 Date: Mon, 10 Aug 2026 23:03:23 +0200 Subject: [PATCH 2/2] chore(actions): Pin updated action revisions --- .github/workflows/generic-dev.yml | 34 +++++++++++++-------------- .github/workflows/generic-release.yml | 10 ++++---- .github/workflows/linux-kernel.yml | 2 +- .github/workflows/main.yml | 2 +- 4 files changed, 24 insertions(+), 24 deletions(-) diff --git a/.github/workflows/generic-dev.yml b/.github/workflows/generic-dev.yml index ddb2ffd9f..c53cb3b99 100644 --- a/.github/workflows/generic-dev.yml +++ b/.github/workflows/generic-dev.yml @@ -25,21 +25,21 @@ jobs: benchmarking: runs-on: ubuntu-latest steps: - - uses: actions/checkout@v7 + - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 - name: make benchmarking run: make benchmarking test: runs-on: ubuntu-latest steps: - - uses: actions/checkout@v7 + - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 - name: make test run: make test gcc-6-7-libzstd: runs-on: ubuntu-latest steps: - - uses: actions/checkout@v7 + - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 - name: gcc-6 + gcc-7 + libzstdmt compilation run: | make gcc6install gcc7install @@ -53,7 +53,7 @@ jobs: gcc-8-asan-ubsan-testzstd: runs-on: ubuntu-16.04 # fails on 18.04 steps: - - uses: actions/checkout@v7 + - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 - name: gcc-8 + ASan + UBSan + Test Zstd run: | make gcc8install @@ -64,7 +64,7 @@ jobs: gcc-6-asan-ubsan-testzstd-32bit: runs-on: ubuntu-latest steps: - - uses: actions/checkout@v7 + - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 - name: gcc-6 + ASan + UBSan + Test Zstd, 32bit mode run: | make gcc6install libc6install @@ -75,7 +75,7 @@ jobs: clang-38-msan-testzstd: runs-on: ubuntu-16.04 # fails on 18.04 steps: - - uses: actions/checkout@v7 + - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 - name: clang-3.8 + MSan + Test Zstd run: | # make clang38install (doesn't work) @@ -87,7 +87,7 @@ jobs: cmake-build-and-test-check: runs-on: ubuntu-latest steps: - - uses: actions/checkout@v7 + - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 - name: cmake build and test check run: | FUZZERTEST=-T1mn ZSTREAM_TESTTIME=-T1mn make cmakebuild @@ -98,7 +98,7 @@ jobs: gcc-8-asan-ubsan-fuzz: runs-on: ubuntu-latest steps: - - uses: actions/checkout@v7 + - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 - name: gcc-8 + ASan + UBSan + Fuzz Test run: | make gcc8install @@ -107,7 +107,7 @@ jobs: gcc-6-asan-ubsan-fuzz32: runs-on: ubuntu-latest steps: - - uses: actions/checkout@v7 + - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 - name: gcc-6 + ASan + UBSan + Fuzz Test 32bit run: | make gcc6install libc6install @@ -116,7 +116,7 @@ jobs: clang-38-msan-fuzz: runs-on: ubuntu-16.04 # fails on 18.04 steps: - - uses: actions/checkout@v7 + - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 - name: clang-3.8 + MSan + Fuzz Test run: | # make clang38install (doesn't work) @@ -128,7 +128,7 @@ jobs: asan-ubsan-msan-regression: runs-on: ubuntu-latest steps: - - uses: actions/checkout@v7 + - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 - name: ASan + UBSan + MSan + Regression Test run: | make -j uasanregressiontest @@ -138,7 +138,7 @@ jobs: cpp-gnu90-c99-compatibility: runs-on: ubuntu-latest steps: - - uses: actions/checkout@v7 + - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 - name: C++, gnu90 and c99 compatibility run: | make cxxtest @@ -152,7 +152,7 @@ jobs: mingw-cross-compilation: runs-on: ubuntu-latest steps: - - uses: actions/checkout@v7 + - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 - name: mingw cross-compilation run: | # sudo update-alternatives --set x86_64-w64-mingw32-g++ /usr/bin/x86_64-w64-mingw32-g++-posix; (doesn't work) @@ -163,7 +163,7 @@ jobs: # armbuild: # runs-on: ubuntu-16.04 # doesn't work on latest # steps: -# - uses: actions/checkout@v7 +# - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 # - name: ARM Build Test # run: | # make arminstall @@ -173,7 +173,7 @@ jobs: # armfuzz: # runs-on: ubuntu-16.04 # doesn't work on latest # steps: -# - uses: actions/checkout@v7 +# - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 # - name: Qemu ARM emulation + Fuzz Test # run: | # make arminstall @@ -182,7 +182,7 @@ jobs: bourne-shell: runs-on: ubuntu-latest steps: - - uses: actions/checkout@v7 + - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 - name: Bourne shell compatibility (shellcheck) run: | wget https://github.com/koalaman/shellcheck/releases/download/v0.7.1/shellcheck-v0.7.1.linux.x86_64.tar.xz @@ -203,7 +203,7 @@ jobs: sudo add-apt-repository "deb https://apt.repos.intel.com/oneapi all main" sudo apt-get update sudo apt-get install -y intel-basekit intel-hpckit - - uses: actions/checkout@v7 + - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 - name: make check run: | make CC=/opt/intel/oneapi/compiler/latest/linux/bin/intel64/icc check diff --git a/.github/workflows/generic-release.yml b/.github/workflows/generic-release.yml index a50af39eb..9034623e5 100644 --- a/.github/workflows/generic-release.yml +++ b/.github/workflows/generic-release.yml @@ -19,7 +19,7 @@ jobs: osx: runs-on: macos-10.15 steps: - - uses: actions/checkout@v7 + - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 - name: OS-X run: | make test @@ -28,7 +28,7 @@ jobs: zbuff: runs-on: ubuntu-16.04 steps: - - uses: actions/checkout@v7 + - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 - name: zbuff test run: | make -C tests test-zbuff @@ -36,7 +36,7 @@ jobs: tsan: runs-on: ubuntu-16.04 steps: - - uses: actions/checkout@v7 + - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 - name: thread sanitizer run: | sudo apt-add-repository "deb http://llvm.org/apt/trusty/ llvm-toolchain-trusty-3.8 main" @@ -47,7 +47,7 @@ jobs: zlib-wrapper: runs-on: ubuntu-16.04 steps: - - uses: actions/checkout@v7 + - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 - name: zlib wrapper test run: | make gpp6install valgrindinstall @@ -57,7 +57,7 @@ jobs: lz4-threadpool-partial-libs: runs-on: ubuntu-16.04 steps: - - uses: actions/checkout@v7 + - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 - name: LZ4, thread pool, and partial libs testslib wrapper test run: | make lz4install diff --git a/.github/workflows/linux-kernel.yml b/.github/workflows/linux-kernel.yml index 310c9d40d..1ea463bef 100644 --- a/.github/workflows/linux-kernel.yml +++ b/.github/workflows/linux-kernel.yml @@ -8,6 +8,6 @@ jobs: test: runs-on: ubuntu-latest steps: - - uses: actions/checkout@v7 + - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 - name: Create linux kernel library + build + test run: make -C contrib/linux-kernel test CFLAGS="-Werror -Wunused-const-variable -Wunused-but-set-variable" diff --git a/.github/workflows/main.yml b/.github/workflows/main.yml index bd5f91ddf..daa188478 100644 --- a/.github/workflows/main.yml +++ b/.github/workflows/main.yml @@ -23,7 +23,7 @@ jobs: dry-run: false sanitizer: ${{ matrix.sanitizer }} - name: Upload Crash - uses: actions/upload-artifact@v7 + uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7.0.0 if: failure() && steps.build.outcome == 'success' with: name: ${{ matrix.sanitizer }}-artifacts