Skip to content

build(deps): bump actions/checkout from 3.5.0 to 4.1.0 #1436

build(deps): bump actions/checkout from 3.5.0 to 4.1.0

build(deps): bump actions/checkout from 3.5.0 to 4.1.0 #1436

Workflow file for this run

# Audits dependencies with cargo-deny
name: deps
permissions:
contents: read
on:
pull_request:
paths:
- justfile
- Cargo.lock
- deny.toml
- .github/workflows/deps.yml
env:
CARGO_INCREMENTAL: 0
CARGO_NET_RETRY: 10
RUSTFLAGS: "-D warnings -A deprecated"
RUSTUP_MAX_RETRIES: 10
jobs:
# Check for security advisories.
#
# Failures are not fatal, since issues are opened in the linkerd2 repo via rustsecbot.
advisories:
timeout-minutes: 10
runs-on: ubuntu-latest
continue-on-error: true
steps:
- uses: actions/checkout@8ade135a41bc03ea155e62e844d188df1ea18608
- uses: EmbarkStudios/cargo-deny-action@a50c7d5f86370e02fae8472c398f15a36e517bb8
with:
command: check advisories
# Audit licenses, unreleased crates, and unexpected duplicate versions.
bans:
timeout-minutes: 10
runs-on: ubuntu-latest
steps:
- uses: actions/checkout@8ade135a41bc03ea155e62e844d188df1ea18608
- uses: EmbarkStudios/cargo-deny-action@a50c7d5f86370e02fae8472c398f15a36e517bb8
with:
command: check bans licenses sources
# Check for upstream deprecations
deprecated:
timeout-minutes: 20
runs-on: ubuntu-latest
container: ghcr.io/linkerd/dev:v40-rust
steps:
- uses: actions/checkout@8ade135a41bc03ea155e62e844d188df1ea18608
- run: git config --global --add safe.directory "$PWD" # actions/runner#2033
- run: just fetch
- run: RUSTFLAGS="-D deprecated" just check --exclude=linkerd-meshtls-boring