From 6bf4baffe5221752d9ef2c6ed06a76c1e3d547bd Mon Sep 17 00:00:00 2001 From: David McKay Date: Thu, 1 Oct 2026 17:36:34 -0700 Subject: [PATCH] Pin dtolnay/rust-toolchain to a master commit The pinned commit came from the action's `stable` branch, which upstream regenerates. On 2026-10-01 it was rewritten and the old commit left every branch and tag, so zizmor reports it as an impostor commit and CI fails on every PR. The pin now names a commit on `master`, which is not rewritten; the workflows already pass `toolchain: stable`. The only runtime change since the old pin is a retry when rustup hits a checksum failure during an upstream release update. --- .github/workflows/desktop-signing.yml | 2 +- .github/workflows/desktop.yml | 4 ++-- 2 files changed, 3 insertions(+), 3 deletions(-) diff --git a/.github/workflows/desktop-signing.yml b/.github/workflows/desktop-signing.yml index 8bf29d3cb..464bf12d8 100644 --- a/.github/workflows/desktop-signing.yml +++ b/.github/workflows/desktop-signing.yml @@ -90,7 +90,7 @@ jobs: - uses: oven-sh/setup-bun@0c5077e51419868618aeaa5fe8019c62421857d6 # v2.2.0 with: bun-version: 1.3.14 - - uses: dtolnay/rust-toolchain@6bed0761d98439e5a578e2877258200ad565ba87 # stable + - uses: dtolnay/rust-toolchain@7e38f4b43b4db5c8dd498af069a4f6196df1d067 # master with: toolchain: stable - uses: Swatinem/rust-cache@6323deb102c322ba6fcbdcafc7e3dddab59af2b6 # v2.9.2 diff --git a/.github/workflows/desktop.yml b/.github/workflows/desktop.yml index e2cf3a7d2..abcaf139a 100644 --- a/.github/workflows/desktop.yml +++ b/.github/workflows/desktop.yml @@ -31,7 +31,7 @@ jobs: with: ref: ${{ github.event.pull_request.head.sha || github.sha }} persist-credentials: false - - uses: dtolnay/rust-toolchain@6bed0761d98439e5a578e2877258200ad565ba87 # stable + - uses: dtolnay/rust-toolchain@7e38f4b43b4db5c8dd498af069a4f6196df1d067 # master with: toolchain: stable components: rustfmt, clippy @@ -71,7 +71,7 @@ jobs: - uses: oven-sh/setup-bun@0c5077e51419868618aeaa5fe8019c62421857d6 # v2.2.0 with: bun-version: 1.3.14 - - uses: dtolnay/rust-toolchain@6bed0761d98439e5a578e2877258200ad565ba87 # stable + - uses: dtolnay/rust-toolchain@7e38f4b43b4db5c8dd498af069a4f6196df1d067 # master with: toolchain: stable - uses: Swatinem/rust-cache@6323deb102c322ba6fcbdcafc7e3dddab59af2b6 # v2.9.2