From 1be697d140a9bf06e857a1dcd682a681eecb1187 Mon Sep 17 00:00:00 2001 From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com> Date: Fri, 17 Jul 2026 20:42:35 +0000 Subject: [PATCH] chore(deps): bump the actions group across 1 directory with 5 updates Bumps the actions group with 5 updates in the / directory: | Package | From | To | | --- | --- | --- | | [actions/checkout](https://github.com/actions/checkout) | `6` | `7` | | [actions/cache](https://github.com/actions/cache) | `5` | `6` | | [actions/upload-artifact](https://github.com/actions/upload-artifact) | `4` | `7` | | [actions/download-artifact](https://github.com/actions/download-artifact) | `4` | `8` | | [cachix/cachix-action](https://github.com/cachix/cachix-action) | `16` | `17` | Updates `actions/checkout` from 6 to 7 - [Release notes](https://github.com/actions/checkout/releases) - [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md) - [Commits](https://github.com/actions/checkout/compare/v6...v7) Updates `actions/cache` from 5 to 6 - [Release notes](https://github.com/actions/cache/releases) - [Changelog](https://github.com/actions/cache/blob/main/RELEASES.md) - [Commits](https://github.com/actions/cache/compare/v5...v6) Updates `actions/upload-artifact` from 4 to 7 - [Release notes](https://github.com/actions/upload-artifact/releases) - [Commits](https://github.com/actions/upload-artifact/compare/v4...v7) Updates `actions/download-artifact` from 4 to 8 - [Release notes](https://github.com/actions/download-artifact/releases) - [Commits](https://github.com/actions/download-artifact/compare/v4...v8) Updates `cachix/cachix-action` from 16 to 17 - [Release notes](https://github.com/cachix/cachix-action/releases) - [Changelog](https://github.com/cachix/cachix-action/blob/master/RELEASE.md) - [Commits](https://github.com/cachix/cachix-action/compare/v16...v17) --- updated-dependencies: - dependency-name: actions/cache dependency-version: '6' dependency-type: direct:production update-type: version-update:semver-major dependency-group: actions - dependency-name: actions/checkout dependency-version: '7' dependency-type: direct:production update-type: version-update:semver-major dependency-group: actions - dependency-name: actions/download-artifact dependency-version: '8' dependency-type: direct:production update-type: version-update:semver-major dependency-group: actions - dependency-name: actions/upload-artifact dependency-version: '7' dependency-type: direct:production update-type: version-update:semver-major dependency-group: actions - dependency-name: cachix/cachix-action dependency-version: '17' dependency-type: direct:production update-type: version-update:semver-major dependency-group: actions ... Signed-off-by: dependabot[bot] --- .github/workflows/bench-main.yml | 44 ++++++++++++++--------------- .github/workflows/bench-pr.yml | 42 +++++++++++++-------------- .github/workflows/bencher-plots.yml | 4 +-- .github/workflows/ci.yml | 8 +++--- .github/workflows/ignored.yml | 8 +++--- .github/workflows/nix.yml | 8 +++--- 6 files changed, 57 insertions(+), 57 deletions(-) diff --git a/.github/workflows/bench-main.yml b/.github/workflows/bench-main.yml index 21f06052..e10f4e59 100644 --- a/.github/workflows/bench-main.yml +++ b/.github/workflows/bench-main.yml @@ -55,7 +55,7 @@ jobs: build: runs-on: warp-ubuntu-latest-x64-32x steps: - - uses: actions/checkout@v6 + - uses: actions/checkout@v7 # Pinned Rust toolchain + cargo cache (~/.cargo + target/, via the action's # built-in rust-cache), so `lake build`'s cargo step doesn't recompile the # Plonky3/multi-stark deps from scratch on every run. @@ -77,7 +77,7 @@ jobs: lake build bench-typecheck bench-recursive-verifier cp .lake/build/bin/bench-typecheck .lake/build/bin/bench-recursive-verifier ~/.local/bin/ chmod +x ~/.local/bin/bench-typecheck ~/.local/bin/bench-recursive-verifier - - uses: actions/cache/save@v5 + - uses: actions/cache/save@v6 with: path: ~/.local/bin key: bench-bins-${{ github.sha }} @@ -97,8 +97,8 @@ jobs: bench-envs: ${{ steps.matrix.outputs.bench-envs }} zkvm-cells: ${{ steps.matrix.outputs.zkvm-cells }} steps: - - uses: actions/checkout@v6 - - uses: actions/cache/restore@v5 + - uses: actions/checkout@v7 + - uses: actions/cache/restore@v6 with: path: ~/.local/bin key: bench-bins-${{ github.sha }} @@ -147,8 +147,8 @@ jobs: - { env: FLT, cache_pkg: flt, mathlib: true } # - { env: FC, cache_pkg: formal_conjectures, mathlib: true } steps: - - uses: actions/checkout@v6 - - uses: actions/cache/restore@v5 + - uses: actions/checkout@v7 + - uses: actions/cache/restore@v6 with: path: ~/.local/bin key: bench-bins-${{ github.sha }} @@ -168,7 +168,7 @@ jobs: use-mathlib-cache: ${{ matrix.mathlib && 'true' || 'false' }} # FLT and FC take a few minutes to rebuild, so cache their build artifacts. - if: matrix.cache_pkg - uses: actions/cache@v5 + uses: actions/cache@v6 with: path: ${{ env.COMPILE_DIR }}/.lake/packages/${{ matrix.cache_pkg }}/.lake/build key: ${{ matrix.cache_pkg }}-${{ runner.os }}-${{ runner.arch }}-${{ hashFiles(format('{0}/lean-toolchain', env.COMPILE_DIR)) }}-${{ hashFiles(format('{0}/lake-manifest.json', env.COMPILE_DIR)) }} @@ -209,7 +209,7 @@ jobs: # this key must list the SAME paths — actions/cache versions the entry # by its path list. - if: steps.benched.outputs.yes == 'true' - uses: actions/cache/save@v5 + uses: actions/cache/save@v6 with: path: | ${{ matrix.env }}.ixe @@ -270,8 +270,8 @@ jobs: bench: ${{ fromJson(needs.plan.outputs.bench-envs) }} mode: [execute, prove] steps: - - uses: actions/checkout@v6 - - uses: actions/cache/restore@v5 + - uses: actions/checkout@v7 + - uses: actions/cache/restore@v6 with: path: ~/.local/bin key: bench-bins-${{ github.sha }} @@ -286,7 +286,7 @@ jobs: use-github-cache: false # Pull the `.ixe` the compile job built — do NOT recompile it here. # (The path list must match the compile job's save exactly.) - - uses: actions/cache/restore@v5 + - uses: actions/cache/restore@v6 with: path: | ${{ matrix.bench }}.ixe @@ -371,8 +371,8 @@ jobs: runs-on: warp-ubuntu-latest-x64-32x timeout-minutes: 120 steps: - - uses: actions/checkout@v6 - - uses: actions/cache/restore@v5 + - uses: actions/checkout@v7 + - uses: actions/cache/restore@v6 with: path: ~/.local/bin key: bench-bins-${{ github.sha }} @@ -462,14 +462,14 @@ jobs: # `if: matrix.cell.backend == 'sp1'` install-sp1 step then. cell: ${{ fromJson(needs.plan.outputs.zkvm-cells) }} steps: - - uses: actions/checkout@v6 + - uses: actions/checkout@v7 - uses: actions-rust-lang/setup-rust-toolchain@v1 with: cache-workspaces: ${{ matrix.cell.backend }} - name: Install Zisk if: matrix.cell.backend == 'zisk' uses: ./.github/actions/install-zisk - - uses: actions/cache/restore@v5 + - uses: actions/cache/restore@v6 with: path: ~/.local/bin key: bench-bins-${{ github.sha }} @@ -483,7 +483,7 @@ jobs: # Pull the `.ixe` + the pre-cut closure-shard artifacts the compile job # built — `--ixe` means no recompile, and `ix bench run` skips # re-cutting shards it finds in zkshards-/. - - uses: actions/cache/restore@v5 + - uses: actions/cache/restore@v6 with: path: | ${{ matrix.cell.env }}.ixe @@ -564,8 +564,8 @@ jobs: matrix: bench: ${{ fromJson(needs.plan.outputs.bench-envs) }} steps: - - uses: actions/checkout@v6 - - uses: actions/cache/restore@v5 + - uses: actions/checkout@v7 + - uses: actions/cache/restore@v6 with: path: ~/.local/bin key: bench-bins-${{ github.sha }} @@ -577,7 +577,7 @@ jobs: build: false use-github-cache: false # (The path list must match the compile job's save exactly.) - - uses: actions/cache/restore@v5 + - uses: actions/cache/restore@v6 with: path: | ${{ matrix.bench }}.ixe @@ -638,8 +638,8 @@ jobs: matrix: bench: ${{ fromJson(needs.plan.outputs.bench-envs) }} steps: - - uses: actions/checkout@v6 - - uses: actions/cache/restore@v5 + - uses: actions/checkout@v7 + - uses: actions/cache/restore@v6 with: path: ~/.local/bin key: bench-bins-${{ github.sha }} @@ -651,7 +651,7 @@ jobs: build: false use-github-cache: false # (The path list must match the compile job's save exactly.) - - uses: actions/cache/restore@v5 + - uses: actions/cache/restore@v6 with: path: | ${{ matrix.bench }}.ixe diff --git a/.github/workflows/bench-pr.yml b/.github/workflows/bench-pr.yml index 097076c4..24816ef0 100644 --- a/.github/workflows/bench-pr.yml +++ b/.github/workflows/bench-pr.yml @@ -147,13 +147,13 @@ jobs: run: | [[ "$BASE" =~ ^[0-9a-f]{40}$ && "$HEAD" =~ ^[0-9a-f]{40}$ ]] \ || { echo "base-sha/head-sha must be full 40-hex SHAs" >&2; exit 1; } - - uses: actions/checkout@v6 + - uses: actions/checkout@v7 with: ref: ${{ inputs.head-sha }} # The job builds and runs PR code; never leave the token in .git. persist-credentials: false - id: bins - uses: actions/cache/restore@v5 + uses: actions/cache/restore@v6 with: path: ~/.local/bin key: bench-bins-${{ inputs.head-sha }} @@ -182,7 +182,7 @@ jobs: cp .lake/build/bin/ix .lake/build/bin/bench-typecheck .lake/build/bin/bench-recursive-verifier ~/.local/bin/ chmod +x ~/.local/bin/ix ~/.local/bin/bench-typecheck ~/.local/bin/bench-recursive-verifier - if: steps.bins.outputs.cache-hit != 'true' - uses: actions/cache/save@v5 + uses: actions/cache/save@v6 with: path: ~/.local/bin key: bench-bins-${{ inputs.head-sha }} @@ -211,7 +211,7 @@ jobs: env: ${{ fromJSON(needs.build.outputs.envs) }} steps: - name: Checkout PR - uses: actions/checkout@v6 + uses: actions/checkout@v7 with: ref: ${{ inputs.head-sha }} # The job runs PR code; never leave the token in .git. @@ -228,14 +228,14 @@ jobs: # .ixe is already published — nothing to do. - name: Check for published .ixe id: pr-ixe - uses: actions/cache/restore@v5 + uses: actions/cache/restore@v6 with: path: ${{ matrix.env }}.ixe key: bench-pr-ixe-${{ inputs.head-sha }}-${{ matrix.env }}-${{ hashFiles('ptenv.txt') }} lookup-only: true - name: Restore PR binaries if: steps.pr-ixe.outputs.cache-hit != 'true' - uses: actions/cache/restore@v5 + uses: actions/cache/restore@v6 with: path: ~/.local/bin key: bench-bins-${{ inputs.head-sha }} @@ -267,7 +267,7 @@ jobs: run: ix bench run --backend compile --env ${{ matrix.env }} --out compile.json - name: Publish .ixe if: steps.pr-ixe.outputs.cache-hit != 'true' - uses: actions/cache/save@v5 + uses: actions/cache/save@v6 with: path: ${{ matrix.env }}.ixe key: bench-pr-ixe-${{ inputs.head-sha }}-${{ matrix.env }}-${{ hashFiles('ptenv.txt') }} @@ -275,7 +275,7 @@ jobs: # runner class, same binaries, same command it would run itself). - name: Publish compile row if: steps.pr-ixe.outputs.cache-hit != 'true' - uses: actions/cache/save@v5 + uses: actions/cache/save@v6 with: path: compile.json key: bench-pr-row-${{ inputs.head-sha }}-${{ matrix.env }}-${{ hashFiles('ptenv.txt') }} @@ -311,7 +311,7 @@ jobs: # PR checked out at the workspace root so the local install actions # resolve; base (bencher-miss fallback only) goes under base/. - name: Checkout PR - uses: actions/checkout@v6 + uses: actions/checkout@v7 with: ref: ${{ env.HEAD_SHA }} # The job runs PR code; never leave the token in .git. @@ -332,7 +332,7 @@ jobs: # PR's `ix bench` orchestrates BOTH sides, with `--repo` selecting # whose tools get measured. - name: Restore PR binaries - uses: actions/cache/restore@v5 + uses: actions/cache/restore@v6 with: path: ~/.local/bin key: bench-bins-${{ env.HEAD_SHA }} @@ -360,7 +360,7 @@ jobs: # the compile job published it; cells pass it via `--ixe` instead of # recompiling. - name: Restore PR .ixe - uses: actions/cache/restore@v5 + uses: actions/cache/restore@v6 with: path: ${{ matrix.cell.env }}.ixe key: bench-pr-ixe-${{ env.HEAD_SHA }}-${{ matrix.cell.env }}-${{ hashFiles('ptenv.txt') }} @@ -368,7 +368,7 @@ jobs: # Compile cells reuse the compile job's measured row as their PR side. - name: Restore compile row if: matrix.cell.backend == 'compile' - uses: actions/cache/restore@v5 + uses: actions/cache/restore@v6 with: path: compile.json key: bench-pr-row-${{ env.HEAD_SHA }}-${{ matrix.cell.env }}-${{ hashFiles('ptenv.txt') }} @@ -471,7 +471,7 @@ jobs: esac - name: Checkout base (bencher data missing or partial) if: steps.bencher.outputs.run-base == 'true' - uses: actions/checkout@v6 + uses: actions/checkout@v7 with: ref: ${{ env.BASE_SHA }} path: base @@ -485,14 +485,14 @@ jobs: - name: Restore base binaries (bench-bins cache) if: steps.bencher.outputs.run-base == 'true' id: base-bins - uses: actions/cache/restore@v5 + uses: actions/cache/restore@v6 with: path: ~/.local/bin key: bench-bins-${{ env.BASE_SHA }} - name: Restore base .ixe (bench-main compile cache) if: steps.bencher.outputs.run-base == 'true' id: base-ixe - uses: actions/cache/restore@v5 + uses: actions/cache/restore@v6 with: # Path list must match bench-main's compile-job save (actions/cache # versions entries by path list); the key suffix is the env name @@ -617,7 +617,7 @@ jobs: - name: Upload table if: always() - uses: actions/upload-artifact@v4 + uses: actions/upload-artifact@v7 with: name: table-${{ env.LABEL }} path: out/table-${{ env.LABEL }}.md @@ -650,11 +650,11 @@ jobs: permissions: contents: read steps: - - uses: actions/checkout@v6 + - uses: actions/checkout@v7 with: ref: ${{ inputs.head-sha }} persist-credentials: false - - uses: actions/cache/restore@v5 + - uses: actions/cache/restore@v6 with: path: ~/.local/bin key: bench-bins-${{ inputs.head-sha }} @@ -667,7 +667,7 @@ jobs: build: false use-github-cache: false - name: Download tables - uses: actions/download-artifact@v4 + uses: actions/download-artifact@v8 with: path: tables pattern: table-* @@ -683,7 +683,7 @@ jobs: --head "$HEAD_SHA" \ --repo-url "${{ github.server_url }}/${{ github.repository }}" \ --run-id "${{ github.run_id }}" --out comment-body.md - - uses: actions/upload-artifact@v4 + - uses: actions/upload-artifact@v7 with: name: comment-body path: comment-body.md @@ -764,7 +764,7 @@ jobs: - name: Download comment body if: needs.assemble.result == 'success' continue-on-error: true - uses: actions/download-artifact@v4 + uses: actions/download-artifact@v8 with: name: comment-body # Any failed stage prepends a red-X header (quoting the parse error diff --git a/.github/workflows/bencher-plots.yml b/.github/workflows/bencher-plots.yml index 2ee6655e..67d958d8 100644 --- a/.github/workflows/bencher-plots.yml +++ b/.github/workflows/bencher-plots.yml @@ -27,12 +27,12 @@ jobs: # calls — cheap host is fine (same rationale as bench-main's plan job). runs-on: ubuntu-latest steps: - - uses: actions/checkout@v6 + - uses: actions/checkout@v7 # The staged binaries from bench-main's build job: this main tip's # exact cache when bench-main has finished its build, else the newest # available (prefix match) — whose compiled-in registry may then lag # the checkout. - - uses: actions/cache/restore@v5 + - uses: actions/cache/restore@v6 with: path: ~/.local/bin key: bench-bins-${{ github.sha }} diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml index 6d1d2a52..10c13247 100644 --- a/.github/workflows/ci.yml +++ b/.github/workflows/ci.yml @@ -21,7 +21,7 @@ jobs: lean-test: runs-on: warp-ubuntu-latest-x64-16x steps: - - uses: actions/checkout@v6 + - uses: actions/checkout@v7 - uses: actions-rust-lang/setup-rust-toolchain@v1 - uses: leanprover/lean-action@v1 with: @@ -59,7 +59,7 @@ jobs: rust-test: runs-on: ubuntu-latest steps: - - uses: actions/checkout@v6 + - uses: actions/checkout@v7 - uses: actions-rust-lang/setup-rust-toolchain@v1 - uses: taiki-e/install-action@nextest # Install Lean for rust-bindgen step @@ -107,7 +107,7 @@ jobs: name: SP1 host build runs-on: warp-ubuntu-latest-x64-16x steps: - - uses: actions/checkout@v6 + - uses: actions/checkout@v7 - uses: actions-rust-lang/setup-rust-toolchain@v1 with: cache-workspaces: sp1 @@ -155,7 +155,7 @@ jobs: name: Zisk host build runs-on: warp-ubuntu-latest-x64-16x steps: - - uses: actions/checkout@v6 + - uses: actions/checkout@v7 - uses: actions-rust-lang/setup-rust-toolchain@v1 with: cache-workspaces: zisk diff --git a/.github/workflows/ignored.yml b/.github/workflows/ignored.yml index 99751746..37f49f45 100644 --- a/.github/workflows/ignored.yml +++ b/.github/workflows/ignored.yml @@ -16,10 +16,10 @@ jobs: ignored-test: runs-on: warp-ubuntu-latest-x64-32x steps: - - uses: actions/checkout@v6 + - uses: actions/checkout@v7 - uses: actions-rust-lang/setup-rust-toolchain@v1 # Only restore the cache, since `ci.yml` will save the test binary to the cache first - - uses: actions/cache/restore@v5 + - uses: actions/cache/restore@v6 with: path: .lake key: lake-${{ runner.os }}-${{ runner.arch }}-${{ hashFiles('lean-toolchain') }}-${{ hashFiles('lake-manifest.json') }}-${{ github.sha }} @@ -38,10 +38,10 @@ jobs: valgrind-ffi: runs-on: warp-ubuntu-latest-x64-8x steps: - - uses: actions/checkout@v6 + - uses: actions/checkout@v7 - uses: actions-rust-lang/setup-rust-toolchain@v1 # Only restore the cache, since `ci.yml` will save the test binary to the cache first - - uses: actions/cache/restore@v5 + - uses: actions/cache/restore@v6 with: path: .lake key: lake-${{ runner.os }}-${{ runner.arch }}-${{ hashFiles('lean-toolchain') }}-${{ hashFiles('lake-manifest.json') }}-${{ github.sha }} diff --git a/.github/workflows/nix.yml b/.github/workflows/nix.yml index 34d0617e..1221b49f 100644 --- a/.github/workflows/nix.yml +++ b/.github/workflows/nix.yml @@ -19,12 +19,12 @@ jobs: name: Nix Tests runs-on: warp-ubuntu-latest-x64-8x steps: - - uses: actions/checkout@v6 + - uses: actions/checkout@v7 - uses: cachix/install-nix-action@v31 with: nix_path: nixpkgs=channel:nixos-unstable github_access_token: ${{ secrets.GITHUB_TOKEN }} - - uses: cachix/cachix-action@v16 + - uses: cachix/cachix-action@v17 with: name: argumentcomputer authToken: ${{ secrets.CACHIX_AUTH_TOKEN }} @@ -45,12 +45,12 @@ jobs: name: Nix devShell Tests runs-on: warp-ubuntu-latest-x64-8x steps: - - uses: actions/checkout@v6 + - uses: actions/checkout@v7 - uses: cachix/install-nix-action@v31 with: nix_path: nixpkgs=channel:nixos-unstable github_access_token: ${{ secrets.GITHUB_TOKEN }} - - uses: cachix/cachix-action@v16 + - uses: cachix/cachix-action@v17 with: name: argumentcomputer authToken: ${{ secrets.CACHIX_AUTH_TOKEN }}