From 74fb088c79a4b184216f4aae8bc4231e6ef38a9c Mon Sep 17 00:00:00 2001 From: UncleSp1d3r Date: Mon, 21 Sep 2026 11:28:58 -0400 Subject: [PATCH 1/6] ci: updates actions and test tooling Refreshes pinned GitHub Actions and Rust caching components for current fixes and improvements. Ensures CI installs required test and coverage tools explicitly and allows cross-platform jobs to finish independently. Signed-off-by: UncleSp1d3r --- .github/workflows/ci.yml | 19 ++++++++++++------- 1 file changed, 12 insertions(+), 7 deletions(-) diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml index 8cfba53..99d019b 100644 --- a/.github/workflows/ci.yml +++ b/.github/workflows/ci.yml @@ -25,9 +25,10 @@ jobs: runs-on: ubuntu-latest steps: - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 - - uses: jdx/mise-action@3c2e0cf82a5b2e5249f0d3635a4d83d0ae861518 # v4.2.5 + - uses: jdx/mise-action@c2a87611a18de5b3828c5652fe268e992400cb5c # v4.3.0 with: install: true + install_args: rust cache: true github_token: ${{ secrets.GITHUB_TOKEN }} @@ -35,7 +36,7 @@ jobs: run: rustup component add rustfmt clippy - name: Cache Rust dependencies - uses: Swatinem/rust-cache@v2.9.2 + uses: Swatinem/rust-cache@6323deb102c322ba6fcbdcafc7e3dddab59af2b6 # v2.9.2 - name: Rustfmt Check run: cargo fmt --all -- --check @@ -61,7 +62,7 @@ jobs: toolchain: ${{ matrix.toolchain }} - name: Cache Rust dependencies - uses: Swatinem/rust-cache@v2.9.2 + uses: Swatinem/rust-cache@6323deb102c322ba6fcbdcafc7e3dddab59af2b6 # v2.9.2 - name: Check MSRV compliance run: cargo check --all-features @@ -70,9 +71,10 @@ jobs: runs-on: ubuntu-latest steps: - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 - - uses: jdx/mise-action@3c2e0cf82a5b2e5249f0d3635a4d83d0ae861518 # v4.2.5 + - uses: jdx/mise-action@c2a87611a18de5b3828c5652fe268e992400cb5c # v4.3.0 with: install: true + install_args: just zig rust cargo-binstall cargo:cargo-nextest cache: true github_token: ${{ secrets.GITHUB_TOKEN }} @@ -87,6 +89,7 @@ jobs: test-cross-platform: strategy: + fail-fast: false matrix: include: - os: ubuntu-latest @@ -99,9 +102,10 @@ jobs: runs-on: ${{ matrix.os }} steps: - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 - - uses: jdx/mise-action@3c2e0cf82a5b2e5249f0d3635a4d83d0ae861518 # v4.2.5 + - uses: jdx/mise-action@c2a87611a18de5b3828c5652fe268e992400cb5c # v4.3.0 with: install: true + install_args: just zig rust cargo-binstall cargo:cargo-nextest cache: true github_token: ${{ secrets.GITHUB_TOKEN }} @@ -118,9 +122,10 @@ jobs: needs: [test, test-cross-platform] steps: - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 - - uses: jdx/mise-action@3c2e0cf82a5b2e5249f0d3635a4d83d0ae861518 # v4.2.5 + - uses: jdx/mise-action@c2a87611a18de5b3828c5652fe268e992400cb5c # v4.3.0 with: install: true + install_args: just zig rust cargo-binstall cargo:cargo-llvm-cov cache: true github_token: ${{ secrets.GITHUB_TOKEN }} @@ -131,7 +136,7 @@ jobs: run: just coverage - name: Upload to Codecov - uses: codecov/codecov-action@v7.0.0 + uses: codecov/codecov-action@303a32d7a59b442fa8d48b6a1cc6825c09c847a5 # v7.1.1 with: files: lcov.info fail_ci_if_error: false From 485249e730fdeb502756c23b8d5a150aba086e16 Mon Sep 17 00:00:00 2001 From: UncleSp1d3r Date: Mon, 21 Sep 2026 11:29:10 -0400 Subject: [PATCH 2/6] ci: Updates GitHub Actions dependencies Keeps CI, security scanning, and documentation workflows current with the latest action releases, improving reliability and incorporating upstream fixes. Signed-off-by: UncleSp1d3r --- .github/workflows/codeql.yml | 8 ++++---- .github/workflows/copilot-setup-steps.yml | 2 +- .github/workflows/docs.yml | 4 ++-- .github/workflows/scorecard.yml | 8 ++++---- .github/workflows/security.yml | 4 ++-- 5 files changed, 13 insertions(+), 13 deletions(-) diff --git a/.github/workflows/codeql.yml b/.github/workflows/codeql.yml index c59ec3b..c08c114 100644 --- a/.github/workflows/codeql.yml +++ b/.github/workflows/codeql.yml @@ -21,16 +21,16 @@ jobs: steps: - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 - - uses: jdx/mise-action@3c2e0cf82a5b2e5249f0d3635a4d83d0ae861518 # v4.2.5 + - uses: jdx/mise-action@c2a87611a18de5b3828c5652fe268e992400cb5c # v4.3.0 with: install: true cache: true github_token: ${{ secrets.GITHUB_TOKEN }} - - uses: github/codeql-action/init@ff2f1c621b7f889edc0d3c761ac2e6a3f8cdb0dd # v4.37.7 + - uses: github/codeql-action/init@1c5b675653bb5c22dbe9b12b556ec555138e09fd # v4.38.1 with: languages: rust - - uses: github/codeql-action/autobuild@ff2f1c621b7f889edc0d3c761ac2e6a3f8cdb0dd # v4.37.7 + - uses: github/codeql-action/autobuild@1c5b675653bb5c22dbe9b12b556ec555138e09fd # v4.38.1 - - uses: github/codeql-action/analyze@ff2f1c621b7f889edc0d3c761ac2e6a3f8cdb0dd # v4.37.7 + - uses: github/codeql-action/analyze@1c5b675653bb5c22dbe9b12b556ec555138e09fd # v4.38.1 diff --git a/.github/workflows/copilot-setup-steps.yml b/.github/workflows/copilot-setup-steps.yml index c791eb9..b28e9df 100644 --- a/.github/workflows/copilot-setup-steps.yml +++ b/.github/workflows/copilot-setup-steps.yml @@ -24,7 +24,7 @@ jobs: steps: - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 - - uses: jdx/mise-action@3c2e0cf82a5b2e5249f0d3635a4d83d0ae861518 # v4.2.5 + - uses: jdx/mise-action@c2a87611a18de5b3828c5652fe268e992400cb5c # v4.3.0 with: install: true cache: true diff --git a/.github/workflows/docs.yml b/.github/workflows/docs.yml index 56313cc..c4f2608 100644 --- a/.github/workflows/docs.yml +++ b/.github/workflows/docs.yml @@ -27,7 +27,7 @@ jobs: - name: Checkout uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 - - uses: jdx/mise-action@3c2e0cf82a5b2e5249f0d3635a4d83d0ae861518 # v4.2.5 + - uses: jdx/mise-action@c2a87611a18de5b3828c5652fe268e992400cb5c # v4.3.0 with: install: true cache: true @@ -59,4 +59,4 @@ jobs: steps: - name: Deploy to GitHub Pages id: deployment - uses: actions/deploy-pages@v5.0.0 + uses: actions/deploy-pages@368f82528645a54fb793d4d04e342629a3f51346 # v5.0.1 diff --git a/.github/workflows/scorecard.yml b/.github/workflows/scorecard.yml index 748afda..7d6a3cb 100644 --- a/.github/workflows/scorecard.yml +++ b/.github/workflows/scorecard.yml @@ -26,25 +26,25 @@ jobs: steps: - name: "Checkout code" - uses: actions/checkout@v7.0.1 + uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 with: persist-credentials: false - name: "Run analysis" - uses: ossf/scorecard-action@v2.4.4 + uses: ossf/scorecard-action@2d1146689b8cda280b9bc96326124645441f03bc # v2.4.4 with: results_file: results.sarif results_format: sarif publish_results: true - name: "Upload artifact" - uses: actions/upload-artifact@v7 + uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7.0.1 with: name: SARIF file path: results.sarif retention-days: 5 - name: "Upload to code-scanning" - uses: github/codeql-action/upload-sarif@v4.37.7 + uses: github/codeql-action/upload-sarif@1c5b675653bb5c22dbe9b12b556ec555138e09fd # v4.38.1 with: sarif_file: results.sarif diff --git a/.github/workflows/security.yml b/.github/workflows/security.yml index 5c92a42..61cae6a 100644 --- a/.github/workflows/security.yml +++ b/.github/workflows/security.yml @@ -24,9 +24,9 @@ jobs: audit: runs-on: ubuntu-latest steps: - - uses: actions/checkout@v7.0.1 + - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 - - uses: jdx/mise-action@v4.2.5 + - uses: jdx/mise-action@c2a87611a18de5b3828c5652fe268e992400cb5c # v4.3.0 with: install: true cache: true From a0b15fc7152a0ae4b7e9f7fcf685dfbb2406ab6b Mon Sep 17 00:00:00 2001 From: UncleSp1d3r Date: Mon, 21 Sep 2026 11:30:29 -0400 Subject: [PATCH 3/6] chore(toolchain): Refreshes locked binaries Updates checksums and GitHub asset metadata for reproducible tool downloads, switches supported Linux tools to GNU builds, and refreshes the Python and Rust toolchain artifacts. Signed-off-by: UncleSp1d3r --- mise.lock | 177 ++++++++++++++++++++++++++++++++++++++++++------------ 1 file changed, 138 insertions(+), 39 deletions(-) diff --git a/mise.lock b/mise.lock index 6c3ed03..dcdfbff 100644 --- a/mise.lock +++ b/mise.lock @@ -7,46 +7,55 @@ backend = "aqua:rhysd/actionlint" [tools.actionlint."platforms.linux-x64"] checksum = "sha256:8aca8db96f1b94770f1b0d72b6dddcb1ebb8123cb3712530b08cc387b349a3d8" url = "https://github.com/rhysd/actionlint/releases/download/v1.7.12/actionlint_1.7.12_linux_amd64.tar.gz" +url_api = "https://api.github.com/repos/rhysd/actionlint/releases/assets/384924896" provenance = "github-attestations" [tools.actionlint."platforms.linux-x64-baseline"] checksum = "sha256:8aca8db96f1b94770f1b0d72b6dddcb1ebb8123cb3712530b08cc387b349a3d8" url = "https://github.com/rhysd/actionlint/releases/download/v1.7.12/actionlint_1.7.12_linux_amd64.tar.gz" +url_api = "https://api.github.com/repos/rhysd/actionlint/releases/assets/384924896" provenance = "github-attestations" [tools.actionlint."platforms.linux-x64-musl"] checksum = "sha256:8aca8db96f1b94770f1b0d72b6dddcb1ebb8123cb3712530b08cc387b349a3d8" url = "https://github.com/rhysd/actionlint/releases/download/v1.7.12/actionlint_1.7.12_linux_amd64.tar.gz" +url_api = "https://api.github.com/repos/rhysd/actionlint/releases/assets/384924896" provenance = "github-attestations" [tools.actionlint."platforms.linux-x64-musl-baseline"] checksum = "sha256:8aca8db96f1b94770f1b0d72b6dddcb1ebb8123cb3712530b08cc387b349a3d8" url = "https://github.com/rhysd/actionlint/releases/download/v1.7.12/actionlint_1.7.12_linux_amd64.tar.gz" +url_api = "https://api.github.com/repos/rhysd/actionlint/releases/assets/384924896" provenance = "github-attestations" [tools.actionlint."platforms.macos-arm64"] checksum = "sha256:aba9ced2dee8d27fecca3dc7feb1a7f9a52caefa1eb46f3271ea66b6e0e6953f" url = "https://github.com/rhysd/actionlint/releases/download/v1.7.12/actionlint_1.7.12_darwin_arm64.tar.gz" +url_api = "https://api.github.com/repos/rhysd/actionlint/releases/assets/384924893" provenance = "github-attestations" [tools.actionlint."platforms.macos-x64"] checksum = "sha256:5b44c3bc2255115c9b69e30efc0fecdf498fdb63c5d58e17084fd5f16324c644" url = "https://github.com/rhysd/actionlint/releases/download/v1.7.12/actionlint_1.7.12_darwin_amd64.tar.gz" +url_api = "https://api.github.com/repos/rhysd/actionlint/releases/assets/384924880" provenance = "github-attestations" [tools.actionlint."platforms.macos-x64-baseline"] checksum = "sha256:5b44c3bc2255115c9b69e30efc0fecdf498fdb63c5d58e17084fd5f16324c644" url = "https://github.com/rhysd/actionlint/releases/download/v1.7.12/actionlint_1.7.12_darwin_amd64.tar.gz" +url_api = "https://api.github.com/repos/rhysd/actionlint/releases/assets/384924880" provenance = "github-attestations" [tools.actionlint."platforms.windows-x64"] checksum = "sha256:6e7241b51e6817ea6a047693d8e6fed13b31819c9a0dd6c5a726e1592d22f6e9" url = "https://github.com/rhysd/actionlint/releases/download/v1.7.12/actionlint_1.7.12_windows_amd64.zip" +url_api = "https://api.github.com/repos/rhysd/actionlint/releases/assets/384924919" provenance = "github-attestations" [tools.actionlint."platforms.windows-x64-baseline"] checksum = "sha256:6e7241b51e6817ea6a047693d8e6fed13b31819c9a0dd6c5a726e1592d22f6e9" url = "https://github.com/rhysd/actionlint/releases/download/v1.7.12/actionlint_1.7.12_windows_amd64.zip" +url_api = "https://api.github.com/repos/rhysd/actionlint/releases/assets/384924919" provenance = "github-attestations" [[tools.bun]] @@ -94,48 +103,57 @@ version = "1.20.0" backend = "aqua:cargo-bins/cargo-binstall" [tools.cargo-binstall."platforms.linux-x64"] -checksum = "sha256:4d7875788d0505547c220d2b02d3619aac0dd19b7033eba7005a8d09ff1dc433" -url = "https://github.com/cargo-bins/cargo-binstall/releases/download/v1.20.0/cargo-binstall-x86_64-unknown-linux-musl.tgz" +checksum = "sha256:4de7b98d09026101d7b1788c6d92f0e28544741a3f4e393d46d2b00677cbbaa2" +url = "https://github.com/cargo-bins/cargo-binstall/releases/download/v1.20.0/cargo-binstall-x86_64-unknown-linux-gnu.tgz" +url_api = "https://api.github.com/repos/cargo-bins/cargo-binstall/releases/assets/441741158" provenance = "github-attestations" [tools.cargo-binstall."platforms.linux-x64-baseline"] -checksum = "sha256:4d7875788d0505547c220d2b02d3619aac0dd19b7033eba7005a8d09ff1dc433" -url = "https://github.com/cargo-bins/cargo-binstall/releases/download/v1.20.0/cargo-binstall-x86_64-unknown-linux-musl.tgz" +checksum = "sha256:4de7b98d09026101d7b1788c6d92f0e28544741a3f4e393d46d2b00677cbbaa2" +url = "https://github.com/cargo-bins/cargo-binstall/releases/download/v1.20.0/cargo-binstall-x86_64-unknown-linux-gnu.tgz" +url_api = "https://api.github.com/repos/cargo-bins/cargo-binstall/releases/assets/441741158" provenance = "github-attestations" [tools.cargo-binstall."platforms.linux-x64-musl"] checksum = "sha256:4d7875788d0505547c220d2b02d3619aac0dd19b7033eba7005a8d09ff1dc433" url = "https://github.com/cargo-bins/cargo-binstall/releases/download/v1.20.0/cargo-binstall-x86_64-unknown-linux-musl.tgz" +url_api = "https://api.github.com/repos/cargo-bins/cargo-binstall/releases/assets/441741097" provenance = "github-attestations" [tools.cargo-binstall."platforms.linux-x64-musl-baseline"] checksum = "sha256:4d7875788d0505547c220d2b02d3619aac0dd19b7033eba7005a8d09ff1dc433" url = "https://github.com/cargo-bins/cargo-binstall/releases/download/v1.20.0/cargo-binstall-x86_64-unknown-linux-musl.tgz" +url_api = "https://api.github.com/repos/cargo-bins/cargo-binstall/releases/assets/441741097" provenance = "github-attestations" [tools.cargo-binstall."platforms.macos-arm64"] checksum = "sha256:24a9cbf1e4c238881f408d7cca11f4aafba1fdeb0e518887638af5dd40e6ac3d" url = "https://github.com/cargo-bins/cargo-binstall/releases/download/v1.20.0/cargo-binstall-aarch64-apple-darwin.zip" +url_api = "https://api.github.com/repos/cargo-bins/cargo-binstall/releases/assets/441741680" provenance = "github-attestations" [tools.cargo-binstall."platforms.macos-x64"] checksum = "sha256:2ef14fc607859ba238bce73512eba68941e3addc61cb40282171287fbdee5ff4" url = "https://github.com/cargo-bins/cargo-binstall/releases/download/v1.20.0/cargo-binstall-x86_64-apple-darwin.zip" +url_api = "https://api.github.com/repos/cargo-bins/cargo-binstall/releases/assets/441741263" provenance = "github-attestations" [tools.cargo-binstall."platforms.macos-x64-baseline"] checksum = "sha256:2ef14fc607859ba238bce73512eba68941e3addc61cb40282171287fbdee5ff4" url = "https://github.com/cargo-bins/cargo-binstall/releases/download/v1.20.0/cargo-binstall-x86_64-apple-darwin.zip" +url_api = "https://api.github.com/repos/cargo-bins/cargo-binstall/releases/assets/441741263" provenance = "github-attestations" [tools.cargo-binstall."platforms.windows-x64"] checksum = "sha256:185c115ef1977e044e009336c77bf41cc61f144944fdb43e2d84f291b96648dc" url = "https://github.com/cargo-bins/cargo-binstall/releases/download/v1.20.0/cargo-binstall-x86_64-pc-windows-msvc.zip" +url_api = "https://api.github.com/repos/cargo-bins/cargo-binstall/releases/assets/441741207" provenance = "github-attestations" [tools.cargo-binstall."platforms.windows-x64-baseline"] checksum = "sha256:185c115ef1977e044e009336c77bf41cc61f144944fdb43e2d84f291b96648dc" url = "https://github.com/cargo-bins/cargo-binstall/releases/download/v1.20.0/cargo-binstall-x86_64-pc-windows-msvc.zip" +url_api = "https://api.github.com/repos/cargo-bins/cargo-binstall/releases/assets/441741207" provenance = "github-attestations" [[tools.cargo-insta]] @@ -143,40 +161,49 @@ version = "1.48.0" backend = "aqua:mitsuhiko/insta" [tools.cargo-insta."platforms.linux-x64"] -checksum = "sha256:703aa7d151ae59cac0bf8e7c2c27da4aca8070f3cb178f624ae10621ef77f5f5" -url = "https://github.com/mitsuhiko/insta/releases/download/1.48.0/cargo-insta-x86_64-unknown-linux-musl.tar.xz" +checksum = "sha256:1c05a480a5a7f755f0ea15b2d8e2f71ad51b9c3a270d38ac72005c57ac0a1487" +url = "https://github.com/mitsuhiko/insta/releases/download/1.48.0/cargo-insta-x86_64-unknown-linux-gnu.tar.xz" +url_api = "https://api.github.com/repos/mitsuhiko/insta/releases/assets/444757866" [tools.cargo-insta."platforms.linux-x64-baseline"] -checksum = "sha256:703aa7d151ae59cac0bf8e7c2c27da4aca8070f3cb178f624ae10621ef77f5f5" -url = "https://github.com/mitsuhiko/insta/releases/download/1.48.0/cargo-insta-x86_64-unknown-linux-musl.tar.xz" +checksum = "sha256:1c05a480a5a7f755f0ea15b2d8e2f71ad51b9c3a270d38ac72005c57ac0a1487" +url = "https://github.com/mitsuhiko/insta/releases/download/1.48.0/cargo-insta-x86_64-unknown-linux-gnu.tar.xz" +url_api = "https://api.github.com/repos/mitsuhiko/insta/releases/assets/444757866" [tools.cargo-insta."platforms.linux-x64-musl"] checksum = "sha256:703aa7d151ae59cac0bf8e7c2c27da4aca8070f3cb178f624ae10621ef77f5f5" url = "https://github.com/mitsuhiko/insta/releases/download/1.48.0/cargo-insta-x86_64-unknown-linux-musl.tar.xz" +url_api = "https://api.github.com/repos/mitsuhiko/insta/releases/assets/444757872" [tools.cargo-insta."platforms.linux-x64-musl-baseline"] checksum = "sha256:703aa7d151ae59cac0bf8e7c2c27da4aca8070f3cb178f624ae10621ef77f5f5" url = "https://github.com/mitsuhiko/insta/releases/download/1.48.0/cargo-insta-x86_64-unknown-linux-musl.tar.xz" +url_api = "https://api.github.com/repos/mitsuhiko/insta/releases/assets/444757872" [tools.cargo-insta."platforms.macos-arm64"] checksum = "sha256:26f081f5bf62d1dc03aae9c4137188d66a2debe6bcaf2884f2153fcb6eda27cb" url = "https://github.com/mitsuhiko/insta/releases/download/1.48.0/cargo-insta-aarch64-apple-darwin.tar.xz" +url_api = "https://api.github.com/repos/mitsuhiko/insta/releases/assets/444757856" [tools.cargo-insta."platforms.macos-x64"] checksum = "sha256:e2d6d6fa4bcb30f7d4834f6254a6da7f2982a9e9a3882695aca5e83d64231267" url = "https://github.com/mitsuhiko/insta/releases/download/1.48.0/cargo-insta-x86_64-apple-darwin.tar.xz" +url_api = "https://api.github.com/repos/mitsuhiko/insta/releases/assets/444757859" [tools.cargo-insta."platforms.macos-x64-baseline"] checksum = "sha256:e2d6d6fa4bcb30f7d4834f6254a6da7f2982a9e9a3882695aca5e83d64231267" url = "https://github.com/mitsuhiko/insta/releases/download/1.48.0/cargo-insta-x86_64-apple-darwin.tar.xz" +url_api = "https://api.github.com/repos/mitsuhiko/insta/releases/assets/444757859" [tools.cargo-insta."platforms.windows-x64"] checksum = "sha256:7e23929588aaf5daff1e93bfc4addca7ccf55195444e84552b6588c9d864642e" url = "https://github.com/mitsuhiko/insta/releases/download/1.48.0/cargo-insta-x86_64-pc-windows-msvc.zip" +url_api = "https://api.github.com/repos/mitsuhiko/insta/releases/assets/444757862" [tools.cargo-insta."platforms.windows-x64-baseline"] checksum = "sha256:7e23929588aaf5daff1e93bfc4addca7ccf55195444e84552b6588c9d864642e" url = "https://github.com/mitsuhiko/insta/releases/download/1.48.0/cargo-insta-x86_64-pc-windows-msvc.zip" +url_api = "https://api.github.com/repos/mitsuhiko/insta/releases/assets/444757862" [[tools."cargo:cargo-audit"]] version = "0.22.2" @@ -265,78 +292,96 @@ backend = "aqua:CycloneDX/cyclonedx-cli" [tools.cyclonedx."platforms.linux-x64"] checksum = "sha256:454879e6a4a405c8a13bff49b8982adcb0596f3019b26b0811c66e4d7f0783e1" url = "https://github.com/CycloneDX/cyclonedx-cli/releases/download/v0.32.0/cyclonedx-linux-x64" +url_api = "https://api.github.com/repos/CycloneDX/cyclonedx-cli/releases/assets/420201045" [tools.cyclonedx."platforms.linux-x64-baseline"] checksum = "sha256:454879e6a4a405c8a13bff49b8982adcb0596f3019b26b0811c66e4d7f0783e1" url = "https://github.com/CycloneDX/cyclonedx-cli/releases/download/v0.32.0/cyclonedx-linux-x64" +url_api = "https://api.github.com/repos/CycloneDX/cyclonedx-cli/releases/assets/420201045" [tools.cyclonedx."platforms.linux-x64-musl"] checksum = "sha256:29138e6068e6cf2dc60e776d078c2b17cbf45750c485aa12c28e1fef5556a15f" url = "https://github.com/CycloneDX/cyclonedx-cli/releases/download/v0.32.0/cyclonedx-linux-musl-x64" +url_api = "https://api.github.com/repos/CycloneDX/cyclonedx-cli/releases/assets/420201092" [tools.cyclonedx."platforms.linux-x64-musl-baseline"] checksum = "sha256:29138e6068e6cf2dc60e776d078c2b17cbf45750c485aa12c28e1fef5556a15f" url = "https://github.com/CycloneDX/cyclonedx-cli/releases/download/v0.32.0/cyclonedx-linux-musl-x64" +url_api = "https://api.github.com/repos/CycloneDX/cyclonedx-cli/releases/assets/420201092" [tools.cyclonedx."platforms.macos-arm64"] checksum = "sha256:83be8a9599f1dce1252208bd4d0bb15308eca0546814fb72b48b7246d35e832e" url = "https://github.com/CycloneDX/cyclonedx-cli/releases/download/v0.32.0/cyclonedx-osx-arm64" +url_api = "https://api.github.com/repos/CycloneDX/cyclonedx-cli/releases/assets/420202007" [tools.cyclonedx."platforms.macos-x64"] checksum = "sha256:a13a5de12d10cfccf8f222614b99af243fee5491b0ec73850b1d6fa050d4ad4a" url = "https://github.com/CycloneDX/cyclonedx-cli/releases/download/v0.32.0/cyclonedx-osx-x64" +url_api = "https://api.github.com/repos/CycloneDX/cyclonedx-cli/releases/assets/420201423" [tools.cyclonedx."platforms.macos-x64-baseline"] checksum = "sha256:a13a5de12d10cfccf8f222614b99af243fee5491b0ec73850b1d6fa050d4ad4a" url = "https://github.com/CycloneDX/cyclonedx-cli/releases/download/v0.32.0/cyclonedx-osx-x64" +url_api = "https://api.github.com/repos/CycloneDX/cyclonedx-cli/releases/assets/420201423" [tools.cyclonedx."platforms.windows-x64"] checksum = "sha256:b1c00dbb40e628ec8c1252771871341ac4d4aaf032f832d83bd22cb2b1d258ae" url = "https://github.com/CycloneDX/cyclonedx-cli/releases/download/v0.32.0/cyclonedx-win-x64.exe" +url_api = "https://api.github.com/repos/CycloneDX/cyclonedx-cli/releases/assets/420201273" [tools.cyclonedx."platforms.windows-x64-baseline"] checksum = "sha256:b1c00dbb40e628ec8c1252771871341ac4d4aaf032f832d83bd22cb2b1d258ae" url = "https://github.com/CycloneDX/cyclonedx-cli/releases/download/v0.32.0/cyclonedx-win-x64.exe" +url_api = "https://api.github.com/repos/CycloneDX/cyclonedx-cli/releases/assets/420201273" [[tools.git-cliff]] version = "2.13.1" backend = "aqua:orhun/git-cliff" [tools.git-cliff."platforms.linux-x64"] -checksum = "sha256:200d2535da6d9703f3bcc8a4d159c3b55eacdb01cf2148c55b3eee9dd04d5249" -url = "https://github.com/orhun/git-cliff/releases/download/v2.13.1/git-cliff-2.13.1-x86_64-unknown-linux-musl.tar.gz" +checksum = "sha256:9a1263f24e59a2f508c7b3d3283c9dea94a8bf697f96dbc18cc783cac6284546" +url = "https://github.com/orhun/git-cliff/releases/download/v2.13.1/git-cliff-2.13.1-x86_64-unknown-linux-gnu.tar.gz" +url_api = "https://api.github.com/repos/orhun/git-cliff/releases/assets/405850439" [tools.git-cliff."platforms.linux-x64-baseline"] -checksum = "sha256:200d2535da6d9703f3bcc8a4d159c3b55eacdb01cf2148c55b3eee9dd04d5249" -url = "https://github.com/orhun/git-cliff/releases/download/v2.13.1/git-cliff-2.13.1-x86_64-unknown-linux-musl.tar.gz" +checksum = "sha256:9a1263f24e59a2f508c7b3d3283c9dea94a8bf697f96dbc18cc783cac6284546" +url = "https://github.com/orhun/git-cliff/releases/download/v2.13.1/git-cliff-2.13.1-x86_64-unknown-linux-gnu.tar.gz" +url_api = "https://api.github.com/repos/orhun/git-cliff/releases/assets/405850439" [tools.git-cliff."platforms.linux-x64-musl"] checksum = "sha256:200d2535da6d9703f3bcc8a4d159c3b55eacdb01cf2148c55b3eee9dd04d5249" url = "https://github.com/orhun/git-cliff/releases/download/v2.13.1/git-cliff-2.13.1-x86_64-unknown-linux-musl.tar.gz" +url_api = "https://api.github.com/repos/orhun/git-cliff/releases/assets/405850671" [tools.git-cliff."platforms.linux-x64-musl-baseline"] checksum = "sha256:200d2535da6d9703f3bcc8a4d159c3b55eacdb01cf2148c55b3eee9dd04d5249" url = "https://github.com/orhun/git-cliff/releases/download/v2.13.1/git-cliff-2.13.1-x86_64-unknown-linux-musl.tar.gz" +url_api = "https://api.github.com/repos/orhun/git-cliff/releases/assets/405850671" [tools.git-cliff."platforms.macos-arm64"] checksum = "sha256:21547ae4a0421164070ab75c2522864ea5565858a011fabc5f583061b20f1226" url = "https://github.com/orhun/git-cliff/releases/download/v2.13.1/git-cliff-2.13.1-aarch64-apple-darwin.tar.gz" +url_api = "https://api.github.com/repos/orhun/git-cliff/releases/assets/405849885" [tools.git-cliff."platforms.macos-x64"] checksum = "sha256:6e60ae390d375cecb9d8008c49f0e724a8dfe40390b532ef5501e421d2cc8acb" url = "https://github.com/orhun/git-cliff/releases/download/v2.13.1/git-cliff-2.13.1-x86_64-apple-darwin.tar.gz" +url_api = "https://api.github.com/repos/orhun/git-cliff/releases/assets/405850193" [tools.git-cliff."platforms.macos-x64-baseline"] checksum = "sha256:6e60ae390d375cecb9d8008c49f0e724a8dfe40390b532ef5501e421d2cc8acb" url = "https://github.com/orhun/git-cliff/releases/download/v2.13.1/git-cliff-2.13.1-x86_64-apple-darwin.tar.gz" +url_api = "https://api.github.com/repos/orhun/git-cliff/releases/assets/405850193" [tools.git-cliff."platforms.windows-x64"] checksum = "sha256:3ae3a5549e85c7ad5b20192ebcfee4371269deca51255f6f2f2e051c6541f5ca" url = "https://github.com/orhun/git-cliff/releases/download/v2.13.1/git-cliff-2.13.1-x86_64-pc-windows-msvc.zip" +url_api = "https://api.github.com/repos/orhun/git-cliff/releases/assets/405851866" [tools.git-cliff."platforms.windows-x64-baseline"] checksum = "sha256:3ae3a5549e85c7ad5b20192ebcfee4371269deca51255f6f2f2e051c6541f5ca" url = "https://github.com/orhun/git-cliff/releases/download/v2.13.1/git-cliff-2.13.1-x86_64-pc-windows-msvc.zip" +url_api = "https://api.github.com/repos/orhun/git-cliff/releases/assets/405851866" [[tools.goreleaser]] version = "2.16.0" @@ -345,46 +390,55 @@ backend = "aqua:goreleaser/goreleaser" [tools.goreleaser."platforms.linux-x64"] checksum = "sha256:eaae05b5eba07533bd0f06846b68c808399504784df00c62eb219541fc04e5e2" url = "https://github.com/goreleaser/goreleaser/releases/download/v2.16.0/goreleaser_Linux_x86_64.tar.gz" +url_api = "https://api.github.com/repos/goreleaser/goreleaser/releases/assets/428676974" provenance = "github-attestations" [tools.goreleaser."platforms.linux-x64-baseline"] checksum = "sha256:eaae05b5eba07533bd0f06846b68c808399504784df00c62eb219541fc04e5e2" url = "https://github.com/goreleaser/goreleaser/releases/download/v2.16.0/goreleaser_Linux_x86_64.tar.gz" +url_api = "https://api.github.com/repos/goreleaser/goreleaser/releases/assets/428676974" provenance = "github-attestations" [tools.goreleaser."platforms.linux-x64-musl"] checksum = "sha256:eaae05b5eba07533bd0f06846b68c808399504784df00c62eb219541fc04e5e2" url = "https://github.com/goreleaser/goreleaser/releases/download/v2.16.0/goreleaser_Linux_x86_64.tar.gz" +url_api = "https://api.github.com/repos/goreleaser/goreleaser/releases/assets/428676974" provenance = "github-attestations" [tools.goreleaser."platforms.linux-x64-musl-baseline"] checksum = "sha256:eaae05b5eba07533bd0f06846b68c808399504784df00c62eb219541fc04e5e2" url = "https://github.com/goreleaser/goreleaser/releases/download/v2.16.0/goreleaser_Linux_x86_64.tar.gz" +url_api = "https://api.github.com/repos/goreleaser/goreleaser/releases/assets/428676974" provenance = "github-attestations" [tools.goreleaser."platforms.macos-arm64"] checksum = "sha256:6a102e4d588fd3553a9ac7321ca6023a9f205843f4861ca35bd337dfa9e72ece" url = "https://github.com/goreleaser/goreleaser/releases/download/v2.16.0/goreleaser_Darwin_all.tar.gz" +url_api = "https://api.github.com/repos/goreleaser/goreleaser/releases/assets/428677010" provenance = "github-attestations" [tools.goreleaser."platforms.macos-x64"] checksum = "sha256:6a102e4d588fd3553a9ac7321ca6023a9f205843f4861ca35bd337dfa9e72ece" url = "https://github.com/goreleaser/goreleaser/releases/download/v2.16.0/goreleaser_Darwin_all.tar.gz" +url_api = "https://api.github.com/repos/goreleaser/goreleaser/releases/assets/428677010" provenance = "github-attestations" [tools.goreleaser."platforms.macos-x64-baseline"] checksum = "sha256:6a102e4d588fd3553a9ac7321ca6023a9f205843f4861ca35bd337dfa9e72ece" url = "https://github.com/goreleaser/goreleaser/releases/download/v2.16.0/goreleaser_Darwin_all.tar.gz" +url_api = "https://api.github.com/repos/goreleaser/goreleaser/releases/assets/428677010" provenance = "github-attestations" [tools.goreleaser."platforms.windows-x64"] checksum = "sha256:6fe5eda11f0bcac8069aff3ef3dcb0b11816c9e95f89773595564697a5278bc9" url = "https://github.com/goreleaser/goreleaser/releases/download/v2.16.0/goreleaser_Windows_x86_64.zip" +url_api = "https://api.github.com/repos/goreleaser/goreleaser/releases/assets/428676991" provenance = "github-attestations" [tools.goreleaser."platforms.windows-x64-baseline"] checksum = "sha256:6fe5eda11f0bcac8069aff3ef3dcb0b11816c9e95f89773595564697a5278bc9" url = "https://github.com/goreleaser/goreleaser/releases/download/v2.16.0/goreleaser_Windows_x86_64.zip" +url_api = "https://api.github.com/repos/goreleaser/goreleaser/releases/assets/428676991" provenance = "github-attestations" [[tools.just]] @@ -394,78 +448,96 @@ backend = "aqua:casey/just" [tools.just."platforms.linux-x64"] checksum = "sha256:7fedeb22c7e14d9ef1551e8b793700866d80f409f9884b0e80ebb65c11d4874d" url = "https://github.com/casey/just/releases/download/1.53.0/just-1.53.0-x86_64-unknown-linux-musl.tar.gz" +url_api = "https://api.github.com/repos/casey/just/releases/assets/449562852" [tools.just."platforms.linux-x64-baseline"] checksum = "sha256:7fedeb22c7e14d9ef1551e8b793700866d80f409f9884b0e80ebb65c11d4874d" url = "https://github.com/casey/just/releases/download/1.53.0/just-1.53.0-x86_64-unknown-linux-musl.tar.gz" +url_api = "https://api.github.com/repos/casey/just/releases/assets/449562852" [tools.just."platforms.linux-x64-musl"] checksum = "sha256:7fedeb22c7e14d9ef1551e8b793700866d80f409f9884b0e80ebb65c11d4874d" url = "https://github.com/casey/just/releases/download/1.53.0/just-1.53.0-x86_64-unknown-linux-musl.tar.gz" +url_api = "https://api.github.com/repos/casey/just/releases/assets/449562852" [tools.just."platforms.linux-x64-musl-baseline"] checksum = "sha256:7fedeb22c7e14d9ef1551e8b793700866d80f409f9884b0e80ebb65c11d4874d" url = "https://github.com/casey/just/releases/download/1.53.0/just-1.53.0-x86_64-unknown-linux-musl.tar.gz" +url_api = "https://api.github.com/repos/casey/just/releases/assets/449562852" [tools.just."platforms.macos-arm64"] checksum = "sha256:27f1361f2e4fb5d733837f1a9f80f85c237e5a36c75ee14961e59141713aa4ed" url = "https://github.com/casey/just/releases/download/1.53.0/just-1.53.0-aarch64-apple-darwin.tar.gz" +url_api = "https://api.github.com/repos/casey/just/releases/assets/449562761" [tools.just."platforms.macos-x64"] checksum = "sha256:bc345a26d40ae4697cb6b2f2ca04cdf1fbdc8c50eba1b40684c8bf3f98555d72" url = "https://github.com/casey/just/releases/download/1.53.0/just-1.53.0-x86_64-apple-darwin.tar.gz" +url_api = "https://api.github.com/repos/casey/just/releases/assets/449562706" [tools.just."platforms.macos-x64-baseline"] checksum = "sha256:bc345a26d40ae4697cb6b2f2ca04cdf1fbdc8c50eba1b40684c8bf3f98555d72" url = "https://github.com/casey/just/releases/download/1.53.0/just-1.53.0-x86_64-apple-darwin.tar.gz" +url_api = "https://api.github.com/repos/casey/just/releases/assets/449562706" [tools.just."platforms.windows-x64"] checksum = "sha256:02308af0c174d3e0286f6bfc2b020258a3e12cd0c52c1d16fac8ef2c12dea0af" url = "https://github.com/casey/just/releases/download/1.53.0/just-1.53.0-x86_64-pc-windows-msvc.zip" +url_api = "https://api.github.com/repos/casey/just/releases/assets/449564031" [tools.just."platforms.windows-x64-baseline"] checksum = "sha256:02308af0c174d3e0286f6bfc2b020258a3e12cd0c52c1d16fac8ef2c12dea0af" url = "https://github.com/casey/just/releases/download/1.53.0/just-1.53.0-x86_64-pc-windows-msvc.zip" +url_api = "https://api.github.com/repos/casey/just/releases/assets/449564031" [[tools.lychee]] version = "0.24.2" backend = "aqua:lycheeverse/lychee" [tools.lychee."platforms.linux-x64"] -checksum = "sha256:73657a111819a30c47c08352896796f23d64e4eb2b3ed39b6d32149241566fc5" -url = "https://github.com/lycheeverse/lychee/releases/download/lychee-v0.24.2/lychee-x86_64-unknown-linux-musl.tar.gz" +checksum = "sha256:1f4e0ef7f6554a6ed33dd7ac144fb2e1bbed98598e7af973042fc5cd43951c9a" +url = "https://github.com/lycheeverse/lychee/releases/download/lychee-v0.24.2/lychee-x86_64-unknown-linux-gnu.tar.gz" +url_api = "https://api.github.com/repos/lycheeverse/lychee/releases/assets/409959156" [tools.lychee."platforms.linux-x64-baseline"] -checksum = "sha256:73657a111819a30c47c08352896796f23d64e4eb2b3ed39b6d32149241566fc5" -url = "https://github.com/lycheeverse/lychee/releases/download/lychee-v0.24.2/lychee-x86_64-unknown-linux-musl.tar.gz" +checksum = "sha256:1f4e0ef7f6554a6ed33dd7ac144fb2e1bbed98598e7af973042fc5cd43951c9a" +url = "https://github.com/lycheeverse/lychee/releases/download/lychee-v0.24.2/lychee-x86_64-unknown-linux-gnu.tar.gz" +url_api = "https://api.github.com/repos/lycheeverse/lychee/releases/assets/409959156" [tools.lychee."platforms.linux-x64-musl"] checksum = "sha256:73657a111819a30c47c08352896796f23d64e4eb2b3ed39b6d32149241566fc5" url = "https://github.com/lycheeverse/lychee/releases/download/lychee-v0.24.2/lychee-x86_64-unknown-linux-musl.tar.gz" +url_api = "https://api.github.com/repos/lycheeverse/lychee/releases/assets/409959271" [tools.lychee."platforms.linux-x64-musl-baseline"] checksum = "sha256:73657a111819a30c47c08352896796f23d64e4eb2b3ed39b6d32149241566fc5" url = "https://github.com/lycheeverse/lychee/releases/download/lychee-v0.24.2/lychee-x86_64-unknown-linux-musl.tar.gz" +url_api = "https://api.github.com/repos/lycheeverse/lychee/releases/assets/409959271" [tools.lychee."platforms.macos-arm64"] checksum = "sha256:c9d3740ea2d891854d37116c9fba840f37b6e7c89d330e7db84ac333631c4977" url = "https://github.com/lycheeverse/lychee/releases/download/lychee-v0.24.2/lychee-aarch64-apple-darwin.tar.gz" +url_api = "https://api.github.com/repos/lycheeverse/lychee/releases/assets/409957951" [tools.lychee."platforms.macos-x64"] checksum = "sha256:887503a9cff667d322b8d0892b40bf49976eb9507af8483220a3706cdad55978" url = "https://github.com/lycheeverse/lychee/releases/download/lychee-v0.24.2/lychee-x86_64-apple-darwin.tar.gz" +url_api = "https://api.github.com/repos/lycheeverse/lychee/releases/assets/409957687" [tools.lychee."platforms.macos-x64-baseline"] checksum = "sha256:887503a9cff667d322b8d0892b40bf49976eb9507af8483220a3706cdad55978" url = "https://github.com/lycheeverse/lychee/releases/download/lychee-v0.24.2/lychee-x86_64-apple-darwin.tar.gz" +url_api = "https://api.github.com/repos/lycheeverse/lychee/releases/assets/409957687" [tools.lychee."platforms.windows-x64"] checksum = "sha256:32975d1493ee1a975d6bb41e4fb56fe419cb442ded628bb772ba2e614acfacad" url = "https://github.com/lycheeverse/lychee/releases/download/lychee-v0.24.2/lychee-x86_64-pc-windows-msvc.zip" +url_api = "https://api.github.com/repos/lycheeverse/lychee/releases/assets/409959491" [tools.lychee."platforms.windows-x64-baseline"] checksum = "sha256:32975d1493ee1a975d6bb41e4fb56fe419cb442ded628bb772ba2e614acfacad" url = "https://github.com/lycheeverse/lychee/releases/download/lychee-v0.24.2/lychee-x86_64-pc-windows-msvc.zip" +url_api = "https://api.github.com/repos/lycheeverse/lychee/releases/assets/409959491" [[tools.markdownlint-cli2]] version = "0.22.1" @@ -491,52 +563,52 @@ version = "3.14.6" backend = "core:python" [tools.python."platforms.linux-x64"] -checksum = "sha256:0881fbde2c78605720fb2e240d1a6df38652a896e40a5fce2e10908dbee5f5b7" -url = "https://github.com/astral-sh/python-build-standalone/releases/download/20260610/cpython-3.14.6+20260610-x86_64-unknown-linux-gnu-install_only_stripped.tar.gz" +checksum = "sha256:ba960817e542642021135db330d875f410f4e14c64a62e2ae5faf3697ada08b2" +url = "https://github.com/astral-sh/python-build-standalone/releases/download/20260804/cpython-3.14.6+20260804-x86_64-unknown-linux-gnu-install_only_stripped.tar.gz" provenance = "github-attestations" [tools.python."platforms.linux-x64-baseline"] -checksum = "sha256:0881fbde2c78605720fb2e240d1a6df38652a896e40a5fce2e10908dbee5f5b7" -url = "https://github.com/astral-sh/python-build-standalone/releases/download/20260610/cpython-3.14.6+20260610-x86_64-unknown-linux-gnu-install_only_stripped.tar.gz" +checksum = "sha256:ba960817e542642021135db330d875f410f4e14c64a62e2ae5faf3697ada08b2" +url = "https://github.com/astral-sh/python-build-standalone/releases/download/20260804/cpython-3.14.6+20260804-x86_64-unknown-linux-gnu-install_only_stripped.tar.gz" provenance = "github-attestations" [tools.python."platforms.linux-x64-musl"] -checksum = "sha256:54eca143d09ed3c596ecad5e3bfcb7724387818f8f984f44f3d8c0e9f36681d3" -url = "https://github.com/astral-sh/python-build-standalone/releases/download/20260610/cpython-3.14.6+20260610-x86_64-unknown-linux-musl-install_only_stripped.tar.gz" +checksum = "sha256:cbedbddcc6b2de99310015e629df67aeb732f622bbf258ec5d310757f85ab7ac" +url = "https://github.com/astral-sh/python-build-standalone/releases/download/20260804/cpython-3.14.6+20260804-x86_64-unknown-linux-musl-install_only_stripped.tar.gz" provenance = "github-attestations" [tools.python."platforms.linux-x64-musl-baseline"] -checksum = "sha256:54eca143d09ed3c596ecad5e3bfcb7724387818f8f984f44f3d8c0e9f36681d3" -url = "https://github.com/astral-sh/python-build-standalone/releases/download/20260610/cpython-3.14.6+20260610-x86_64-unknown-linux-musl-install_only_stripped.tar.gz" +checksum = "sha256:cbedbddcc6b2de99310015e629df67aeb732f622bbf258ec5d310757f85ab7ac" +url = "https://github.com/astral-sh/python-build-standalone/releases/download/20260804/cpython-3.14.6+20260804-x86_64-unknown-linux-musl-install_only_stripped.tar.gz" provenance = "github-attestations" [tools.python."platforms.macos-arm64"] -checksum = "sha256:875516e13be36296f8f7dd0972b22ba3bed069ed08d27d5f0069caf227522921" -url = "https://github.com/astral-sh/python-build-standalone/releases/download/20260610/cpython-3.14.6+20260610-aarch64-apple-darwin-install_only_stripped.tar.gz" +checksum = "sha256:e0d4e5066aef3248c22e08a07546bfd5edeaca904c91fadc296be720998ec2ec" +url = "https://github.com/astral-sh/python-build-standalone/releases/download/20260804/cpython-3.14.6+20260804-aarch64-apple-darwin-install_only_stripped.tar.gz" provenance = "github-attestations" [tools.python."platforms.macos-x64"] -checksum = "sha256:6f85cbb2a0fef4b90fc63aadcfe383c22db5eb7933066ca6ea384828a6b3f2d2" -url = "https://github.com/astral-sh/python-build-standalone/releases/download/20260610/cpython-3.14.6+20260610-x86_64-apple-darwin-install_only_stripped.tar.gz" +checksum = "sha256:78ded4c4f0b6a931240f09bd20608533bb40dd71c1ff953c7267359075ca8b16" +url = "https://github.com/astral-sh/python-build-standalone/releases/download/20260804/cpython-3.14.6+20260804-x86_64-apple-darwin-install_only_stripped.tar.gz" provenance = "github-attestations" [tools.python."platforms.macos-x64-baseline"] -checksum = "sha256:6f85cbb2a0fef4b90fc63aadcfe383c22db5eb7933066ca6ea384828a6b3f2d2" -url = "https://github.com/astral-sh/python-build-standalone/releases/download/20260610/cpython-3.14.6+20260610-x86_64-apple-darwin-install_only_stripped.tar.gz" +checksum = "sha256:78ded4c4f0b6a931240f09bd20608533bb40dd71c1ff953c7267359075ca8b16" +url = "https://github.com/astral-sh/python-build-standalone/releases/download/20260804/cpython-3.14.6+20260804-x86_64-apple-darwin-install_only_stripped.tar.gz" provenance = "github-attestations" [tools.python."platforms.windows-x64"] -checksum = "sha256:49f0c7e8d1c2eaba70c5516ca6c01b6b766f6ff473f1209a76fd01783e7c75ae" -url = "https://github.com/astral-sh/python-build-standalone/releases/download/20260610/cpython-3.14.6+20260610-x86_64-pc-windows-msvc-install_only_stripped.tar.gz" +checksum = "sha256:ada613a2af32c04cf7c54726243c56d76f0e59f5f61d2f28371d3b9d8efad566" +url = "https://github.com/astral-sh/python-build-standalone/releases/download/20260804/cpython-3.14.6+20260804-x86_64-pc-windows-msvc-install_only_stripped.tar.gz" provenance = "github-attestations" [tools.python."platforms.windows-x64-baseline"] -checksum = "sha256:49f0c7e8d1c2eaba70c5516ca6c01b6b766f6ff473f1209a76fd01783e7c75ae" -url = "https://github.com/astral-sh/python-build-standalone/releases/download/20260610/cpython-3.14.6+20260610-x86_64-pc-windows-msvc-install_only_stripped.tar.gz" +checksum = "sha256:ada613a2af32c04cf7c54726243c56d76f0e59f5f61d2f28371d3b9d8efad566" +url = "https://github.com/astral-sh/python-build-standalone/releases/download/20260804/cpython-3.14.6+20260804-x86_64-pc-windows-msvc-install_only_stripped.tar.gz" provenance = "github-attestations" [[tools.rust]] -version = "1.96.0" +version = "1.98.1" backend = "core:rust" [tools.rust.options] @@ -551,6 +623,7 @@ backend = "aqua:ossf/scorecard" [tools.scorecard."platforms.linux-x64"] checksum = "sha256:83b90a05c1540ef1390db1cd5711e5fd04be9c1d8537fb84d39d02092d6a8dff" url = "https://github.com/ossf/scorecard/releases/download/v5.5.0/scorecard_5.5.0_linux_amd64.tar.gz" +url_api = "https://api.github.com/repos/ossf/scorecard/releases/assets/403812999" [tools.scorecard."platforms.linux-x64".provenance.slsa] url = "https://github.com/ossf/scorecard/releases/download/v5.5.0/multiple.intoto.jsonl" @@ -558,6 +631,7 @@ url = "https://github.com/ossf/scorecard/releases/download/v5.5.0/multiple.intot [tools.scorecard."platforms.linux-x64-baseline"] checksum = "sha256:83b90a05c1540ef1390db1cd5711e5fd04be9c1d8537fb84d39d02092d6a8dff" url = "https://github.com/ossf/scorecard/releases/download/v5.5.0/scorecard_5.5.0_linux_amd64.tar.gz" +url_api = "https://api.github.com/repos/ossf/scorecard/releases/assets/403812999" [tools.scorecard."platforms.linux-x64-baseline".provenance.slsa] url = "https://github.com/ossf/scorecard/releases/download/v5.5.0/multiple.intoto.jsonl" @@ -565,6 +639,7 @@ url = "https://github.com/ossf/scorecard/releases/download/v5.5.0/multiple.intot [tools.scorecard."platforms.linux-x64-musl"] checksum = "sha256:83b90a05c1540ef1390db1cd5711e5fd04be9c1d8537fb84d39d02092d6a8dff" url = "https://github.com/ossf/scorecard/releases/download/v5.5.0/scorecard_5.5.0_linux_amd64.tar.gz" +url_api = "https://api.github.com/repos/ossf/scorecard/releases/assets/403812999" [tools.scorecard."platforms.linux-x64-musl".provenance.slsa] url = "https://github.com/ossf/scorecard/releases/download/v5.5.0/multiple.intoto.jsonl" @@ -572,6 +647,7 @@ url = "https://github.com/ossf/scorecard/releases/download/v5.5.0/multiple.intot [tools.scorecard."platforms.linux-x64-musl-baseline"] checksum = "sha256:83b90a05c1540ef1390db1cd5711e5fd04be9c1d8537fb84d39d02092d6a8dff" url = "https://github.com/ossf/scorecard/releases/download/v5.5.0/scorecard_5.5.0_linux_amd64.tar.gz" +url_api = "https://api.github.com/repos/ossf/scorecard/releases/assets/403812999" [tools.scorecard."platforms.linux-x64-musl-baseline".provenance.slsa] url = "https://github.com/ossf/scorecard/releases/download/v5.5.0/multiple.intoto.jsonl" @@ -579,6 +655,7 @@ url = "https://github.com/ossf/scorecard/releases/download/v5.5.0/multiple.intot [tools.scorecard."platforms.macos-arm64"] checksum = "sha256:bac6371a4f810d6bdd0b65d63c3311906bdfe3ba0d76a5ea743ce24ced170fcf" url = "https://github.com/ossf/scorecard/releases/download/v5.5.0/scorecard_5.5.0_darwin_arm64.tar.gz" +url_api = "https://api.github.com/repos/ossf/scorecard/releases/assets/403812997" [tools.scorecard."platforms.macos-arm64".provenance.slsa] url = "https://github.com/ossf/scorecard/releases/download/v5.5.0/multiple.intoto.jsonl" @@ -586,6 +663,7 @@ url = "https://github.com/ossf/scorecard/releases/download/v5.5.0/multiple.intot [tools.scorecard."platforms.macos-x64"] checksum = "sha256:979487ca20e726f6a4d2bd63a0a4c544184f589724b3d12d2ba8d0ea80889063" url = "https://github.com/ossf/scorecard/releases/download/v5.5.0/scorecard_5.5.0_darwin_amd64.tar.gz" +url_api = "https://api.github.com/repos/ossf/scorecard/releases/assets/403812977" [tools.scorecard."platforms.macos-x64".provenance.slsa] url = "https://github.com/ossf/scorecard/releases/download/v5.5.0/multiple.intoto.jsonl" @@ -593,6 +671,7 @@ url = "https://github.com/ossf/scorecard/releases/download/v5.5.0/multiple.intot [tools.scorecard."platforms.macos-x64-baseline"] checksum = "sha256:979487ca20e726f6a4d2bd63a0a4c544184f589724b3d12d2ba8d0ea80889063" url = "https://github.com/ossf/scorecard/releases/download/v5.5.0/scorecard_5.5.0_darwin_amd64.tar.gz" +url_api = "https://api.github.com/repos/ossf/scorecard/releases/assets/403812977" [tools.scorecard."platforms.macos-x64-baseline".provenance.slsa] url = "https://github.com/ossf/scorecard/releases/download/v5.5.0/multiple.intoto.jsonl" @@ -600,6 +679,7 @@ url = "https://github.com/ossf/scorecard/releases/download/v5.5.0/multiple.intot [tools.scorecard."platforms.windows-x64"] checksum = "sha256:21ca42b37260785e670c58f602b483510099e7b1988e3c6eb5005f143dc2a2ab" url = "https://github.com/ossf/scorecard/releases/download/v5.5.0/scorecard_5.5.0_windows_amd64.tar.gz" +url_api = "https://api.github.com/repos/ossf/scorecard/releases/assets/403812975" [tools.scorecard."platforms.windows-x64".provenance.slsa] url = "https://github.com/ossf/scorecard/releases/download/v5.5.0/multiple.intoto.jsonl" @@ -607,6 +687,7 @@ url = "https://github.com/ossf/scorecard/releases/download/v5.5.0/multiple.intot [tools.scorecard."platforms.windows-x64-baseline"] checksum = "sha256:21ca42b37260785e670c58f602b483510099e7b1988e3c6eb5005f143dc2a2ab" url = "https://github.com/ossf/scorecard/releases/download/v5.5.0/scorecard_5.5.0_windows_amd64.tar.gz" +url_api = "https://api.github.com/repos/ossf/scorecard/releases/assets/403812975" [tools.scorecard."platforms.windows-x64-baseline".provenance.slsa] url = "https://github.com/ossf/scorecard/releases/download/v5.5.0/multiple.intoto.jsonl" @@ -618,86 +699,104 @@ backend = "aqua:koalaman/shellcheck" [tools.shellcheck."platforms.linux-x64"] checksum = "sha256:8c3be12b05d5c177a04c29e3c78ce89ac86f1595681cab149b65b97c4e227198" url = "https://github.com/koalaman/shellcheck/releases/download/v0.11.0/shellcheck-v0.11.0.linux.x86_64.tar.xz" +url_api = "https://api.github.com/repos/koalaman/shellcheck/releases/assets/279056942" [tools.shellcheck."platforms.linux-x64-baseline"] checksum = "sha256:8c3be12b05d5c177a04c29e3c78ce89ac86f1595681cab149b65b97c4e227198" url = "https://github.com/koalaman/shellcheck/releases/download/v0.11.0/shellcheck-v0.11.0.linux.x86_64.tar.xz" +url_api = "https://api.github.com/repos/koalaman/shellcheck/releases/assets/279056942" [tools.shellcheck."platforms.linux-x64-musl"] checksum = "sha256:8c3be12b05d5c177a04c29e3c78ce89ac86f1595681cab149b65b97c4e227198" url = "https://github.com/koalaman/shellcheck/releases/download/v0.11.0/shellcheck-v0.11.0.linux.x86_64.tar.xz" +url_api = "https://api.github.com/repos/koalaman/shellcheck/releases/assets/279056942" [tools.shellcheck."platforms.linux-x64-musl-baseline"] checksum = "sha256:8c3be12b05d5c177a04c29e3c78ce89ac86f1595681cab149b65b97c4e227198" url = "https://github.com/koalaman/shellcheck/releases/download/v0.11.0/shellcheck-v0.11.0.linux.x86_64.tar.xz" +url_api = "https://api.github.com/repos/koalaman/shellcheck/releases/assets/279056942" [tools.shellcheck."platforms.macos-arm64"] checksum = "sha256:56affdd8de5527894dca6dc3d7e0a99a873b0f004d7aabc30ae407d3f48b0a79" url = "https://github.com/koalaman/shellcheck/releases/download/v0.11.0/shellcheck-v0.11.0.darwin.aarch64.tar.xz" +url_api = "https://api.github.com/repos/koalaman/shellcheck/releases/assets/279056932" [tools.shellcheck."platforms.macos-x64"] checksum = "sha256:3c89db4edcab7cf1c27bff178882e0f6f27f7afdf54e859fa041fca10febe4c6" url = "https://github.com/koalaman/shellcheck/releases/download/v0.11.0/shellcheck-v0.11.0.darwin.x86_64.tar.xz" +url_api = "https://api.github.com/repos/koalaman/shellcheck/releases/assets/279056930" [tools.shellcheck."platforms.macos-x64-baseline"] checksum = "sha256:3c89db4edcab7cf1c27bff178882e0f6f27f7afdf54e859fa041fca10febe4c6" url = "https://github.com/koalaman/shellcheck/releases/download/v0.11.0/shellcheck-v0.11.0.darwin.x86_64.tar.xz" +url_api = "https://api.github.com/repos/koalaman/shellcheck/releases/assets/279056930" [tools.shellcheck."platforms.windows-x64"] checksum = "sha256:8a4e35ab0b331c85d73567b12f2a444df187f483e5079ceffa6bda1faa2e740e" url = "https://github.com/koalaman/shellcheck/releases/download/v0.11.0/shellcheck-v0.11.0.zip" +url_api = "https://api.github.com/repos/koalaman/shellcheck/releases/assets/279056944" [tools.shellcheck."platforms.windows-x64-baseline"] checksum = "sha256:8a4e35ab0b331c85d73567b12f2a444df187f483e5079ceffa6bda1faa2e740e" url = "https://github.com/koalaman/shellcheck/releases/download/v0.11.0/shellcheck-v0.11.0.zip" +url_api = "https://api.github.com/repos/koalaman/shellcheck/releases/assets/279056944" [[tools.uv]] version = "0.11.22" backend = "aqua:astral-sh/uv" [tools.uv."platforms.linux-x64"] -checksum = "sha256:b80bd6952ee11b920b5ab2a35dbccddc364f579e5f2e028d115848cdaa72963e" -url = "https://github.com/astral-sh/uv/releases/download/0.11.22/uv-x86_64-unknown-linux-musl.tar.gz" +checksum = "sha256:30075b14624a62021198319f22e08f1651a97d4026a8c84dab6abcbfaba0d81c" +url = "https://github.com/astral-sh/uv/releases/download/0.11.22/uv-x86_64-unknown-linux-gnu.tar.gz" +url_api = "https://api.github.com/repos/astral-sh/uv/releases/assets/451654230" provenance = "github-attestations" [tools.uv."platforms.linux-x64-baseline"] -checksum = "sha256:b80bd6952ee11b920b5ab2a35dbccddc364f579e5f2e028d115848cdaa72963e" -url = "https://github.com/astral-sh/uv/releases/download/0.11.22/uv-x86_64-unknown-linux-musl.tar.gz" +checksum = "sha256:30075b14624a62021198319f22e08f1651a97d4026a8c84dab6abcbfaba0d81c" +url = "https://github.com/astral-sh/uv/releases/download/0.11.22/uv-x86_64-unknown-linux-gnu.tar.gz" +url_api = "https://api.github.com/repos/astral-sh/uv/releases/assets/451654230" provenance = "github-attestations" [tools.uv."platforms.linux-x64-musl"] checksum = "sha256:b80bd6952ee11b920b5ab2a35dbccddc364f579e5f2e028d115848cdaa72963e" url = "https://github.com/astral-sh/uv/releases/download/0.11.22/uv-x86_64-unknown-linux-musl.tar.gz" +url_api = "https://api.github.com/repos/astral-sh/uv/releases/assets/451654240" provenance = "github-attestations" [tools.uv."platforms.linux-x64-musl-baseline"] checksum = "sha256:b80bd6952ee11b920b5ab2a35dbccddc364f579e5f2e028d115848cdaa72963e" url = "https://github.com/astral-sh/uv/releases/download/0.11.22/uv-x86_64-unknown-linux-musl.tar.gz" +url_api = "https://api.github.com/repos/astral-sh/uv/releases/assets/451654240" provenance = "github-attestations" [tools.uv."platforms.macos-arm64"] checksum = "sha256:97a45e2ff8d5ea262623eed57ec2d9c468a42d74496d5c3c3eef11340235bd7f" url = "https://github.com/astral-sh/uv/releases/download/0.11.22/uv-aarch64-apple-darwin.tar.gz" +url_api = "https://api.github.com/repos/astral-sh/uv/releases/assets/451654141" provenance = "github-attestations" [tools.uv."platforms.macos-x64"] checksum = "sha256:9490033dc405b4afc8fa5f9ecd5cc1793e80c727a8c42c32ad456778720d39f2" url = "https://github.com/astral-sh/uv/releases/download/0.11.22/uv-x86_64-apple-darwin.tar.gz" +url_api = "https://api.github.com/repos/astral-sh/uv/releases/assets/451654218" provenance = "github-attestations" [tools.uv."platforms.macos-x64-baseline"] checksum = "sha256:9490033dc405b4afc8fa5f9ecd5cc1793e80c727a8c42c32ad456778720d39f2" url = "https://github.com/astral-sh/uv/releases/download/0.11.22/uv-x86_64-apple-darwin.tar.gz" +url_api = "https://api.github.com/repos/astral-sh/uv/releases/assets/451654218" provenance = "github-attestations" [tools.uv."platforms.windows-x64"] checksum = "sha256:b56939bac92d29996d351647f7c6f15b31cc69cf952d06d136de3e1e62eb64d1" url = "https://github.com/astral-sh/uv/releases/download/0.11.22/uv-x86_64-pc-windows-msvc.zip" +url_api = "https://api.github.com/repos/astral-sh/uv/releases/assets/451654223" provenance = "github-attestations" [tools.uv."platforms.windows-x64-baseline"] checksum = "sha256:b56939bac92d29996d351647f7c6f15b31cc69cf952d06d136de3e1e62eb64d1" url = "https://github.com/astral-sh/uv/releases/download/0.11.22/uv-x86_64-pc-windows-msvc.zip" +url_api = "https://api.github.com/repos/astral-sh/uv/releases/assets/451654223" provenance = "github-attestations" [[tools.zig]] From 001bc63be5d56e5da6111dc5b49a5b60ff6a8e0e Mon Sep 17 00:00:00 2001 From: UncleSp1d3r Date: Mon, 21 Sep 2026 11:54:51 -0400 Subject: [PATCH 4/6] fix(lint): use as_chunks for fixed-size UTF-16 byte pairs clippy 1.98 adds `clippy::chunks_exact_to_as_chunks`, which fires on the four `chunks_exact(2)` calls that decode UTF-16 code units. With `-D warnings` this breaks the quality job. `as_chunks::<2>()` yields `&[u8; 2]` directly, so the byte pair can be passed to `u16::from_{le,be}_bytes` without re-indexing. Behavior is unchanged: every call site already discarded a trailing odd byte. Signed-off-by: UncleSp1d3r --- src/extraction/pe_resources/manifests.rs | 6 ++++-- src/extraction/utf16/extraction.rs | 12 ++++++++---- src/extraction/util.rs | 6 ++++-- 3 files changed, 16 insertions(+), 8 deletions(-) diff --git a/src/extraction/pe_resources/manifests.rs b/src/extraction/pe_resources/manifests.rs index 3621645..ba97e01 100644 --- a/src/extraction/pe_resources/manifests.rs +++ b/src/extraction/pe_resources/manifests.rs @@ -85,8 +85,10 @@ fn decode_manifest(bytes: &[u8]) -> crate::types::Result { Encoding::Utf16Be => { // Convert UTF-16BE to UTF-16LE for decoding let u16_slice: Vec = data - .chunks_exact(2) - .map(|chunk| u16::from_be_bytes([chunk[0], chunk[1]])) + .as_chunks::<2>() + .0 + .iter() + .map(|chunk| u16::from_be_bytes(*chunk)) .collect(); String::from_utf16(&u16_slice) .map(|s| s.trim_end_matches('\0').to_string()) diff --git a/src/extraction/utf16/extraction.rs b/src/extraction/utf16/extraction.rs index 82c03c2..cf79bf4 100644 --- a/src/extraction/utf16/extraction.rs +++ b/src/extraction/utf16/extraction.rs @@ -36,8 +36,10 @@ fn decode_utf16le(bytes: &[u8]) -> Result<(String, Vec), StringyError> { // Convert to u16 slice let u16_slice: Vec = even_bytes - .chunks_exact(2) - .map(|chunk| u16::from_le_bytes([chunk[0], chunk[1]])) + .as_chunks::<2>() + .0 + .iter() + .map(|chunk| u16::from_le_bytes(*chunk)) .collect(); // Decode UTF-16 to String @@ -70,8 +72,10 @@ fn decode_utf16be(bytes: &[u8]) -> Result<(String, Vec), StringyError> { // Convert to u16 slice let u16_slice: Vec = even_bytes - .chunks_exact(2) - .map(|chunk| u16::from_be_bytes([chunk[0], chunk[1]])) + .as_chunks::<2>() + .0 + .iter() + .map(|chunk| u16::from_be_bytes(*chunk)) .collect(); // Decode UTF-16 to String diff --git a/src/extraction/util.rs b/src/extraction/util.rs index 12fc65f..cd50d85 100644 --- a/src/extraction/util.rs +++ b/src/extraction/util.rs @@ -40,8 +40,10 @@ pub fn decode_utf16le_bytes(bytes: &[u8], trim_nulls: bool) -> Result { // Convert to u16 slice let u16_slice: Vec = even_bytes - .chunks_exact(2) - .map(|chunk| u16::from_le_bytes([chunk[0], chunk[1]])) + .as_chunks::<2>() + .0 + .iter() + .map(|chunk| u16::from_le_bytes(*chunk)) .collect(); // Decode UTF-16 to String From 09b277a5020cad722d607f04181d7405a9503c05 Mon Sep 17 00:00:00 2001 From: UncleSp1d3r Date: Mon, 21 Sep 2026 11:55:04 -0400 Subject: [PATCH 5/6] ci: gate costly jobs on quality and scope remaining mise installs `quality` is the cheapest signal in the pipeline (~40s). Gate `msrv`, `test` and `test-cross-platform` on it so a clippy or rustfmt failure stops the pipeline before spending runner time on five MSRV jobs and three cross-platform test matrices. `coverage` is already gated transitively via `needs: [test, test-cross-platform]`. Also scope the two remaining mise-action jobs that were still installing the full ~30-tool toolset, for the same reason as the CI jobs: `codeql` only needs `rust` for autobuild, and `security` only needs the tools its three recipes call. `docs` is left unscoped because it legitimately uses the full mdbook toolchain. Signed-off-by: UncleSp1d3r --- .github/workflows/ci.yml | 3 +++ .github/workflows/codeql.yml | 1 + .github/workflows/security.yml | 1 + 3 files changed, 5 insertions(+) diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml index 99d019b..0f12549 100644 --- a/.github/workflows/ci.yml +++ b/.github/workflows/ci.yml @@ -45,6 +45,7 @@ jobs: run: cargo clippy --all-targets --all-features -- -D warnings msrv: + needs: quality runs-on: ubuntu-latest strategy: matrix: @@ -68,6 +69,7 @@ jobs: run: cargo check --all-features test: + needs: quality runs-on: ubuntu-latest steps: - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 @@ -88,6 +90,7 @@ jobs: run: just build-release test-cross-platform: + needs: quality strategy: fail-fast: false matrix: diff --git a/.github/workflows/codeql.yml b/.github/workflows/codeql.yml index c08c114..00708bb 100644 --- a/.github/workflows/codeql.yml +++ b/.github/workflows/codeql.yml @@ -24,6 +24,7 @@ jobs: - uses: jdx/mise-action@c2a87611a18de5b3828c5652fe268e992400cb5c # v4.3.0 with: install: true + install_args: rust cache: true github_token: ${{ secrets.GITHUB_TOKEN }} diff --git a/.github/workflows/security.yml b/.github/workflows/security.yml index 61cae6a..e96e37b 100644 --- a/.github/workflows/security.yml +++ b/.github/workflows/security.yml @@ -29,6 +29,7 @@ jobs: - uses: jdx/mise-action@c2a87611a18de5b3828c5652fe268e992400cb5c # v4.3.0 with: install: true + install_args: just rust cargo-binstall cargo:cargo-deny cargo:cargo-outdated cargo:cargo-dist cache: true github_token: ${{ secrets.GITHUB_TOKEN }} From 96a7e8b42214d3775c5cca7a12416cc354ce9e4d Mon Sep 17 00:00:00 2001 From: UncleSp1d3r Date: Mon, 21 Sep 2026 12:47:59 -0400 Subject: [PATCH 6/6] ci: serialize mise installs in full-toolset workflows `docs` and `copilot-setup-steps` cannot use the per-job `install_args` scoping that ci.yml uses: `docs` legitimately needs the whole mdbook toolchain (including mdbook-linkcheck, one of the crates with no prebuilt artifact), and `copilot-setup-steps` exists precisely to prove the full developer environment installs. Both fail on ubuntu with the same chain as the macOS CI failure: binstall misses a prebuilt, mise falls back to `cargo install`, that drives rustup against the runner image's ambient 1.93.0 toolchain, and concurrent fallbacks corrupt it: error: could not remove 'component' file: .../1.93.0-x86_64-unknown-linux-gnu/bin/cargo-clippy error: failed to install component: 'llvm-tools-preview-x86_64-unknown-linux-gnu' `MISE_JOBS: 1` removes the concurrency, so the fallbacks can no longer race each other. Slower, but neither workflow is latency-sensitive. Signed-off-by: UncleSp1d3r --- .github/workflows/copilot-setup-steps.yml | 7 +++++++ .github/workflows/docs.yml | 7 +++++++ 2 files changed, 14 insertions(+) diff --git a/.github/workflows/copilot-setup-steps.yml b/.github/workflows/copilot-setup-steps.yml index b28e9df..009c8d0 100644 --- a/.github/workflows/copilot-setup-steps.yml +++ b/.github/workflows/copilot-setup-steps.yml @@ -11,6 +11,13 @@ on: paths: - .github/workflows/copilot-setup-steps.yml +# Serialize mise installs. `cargo:*` tools whose prebuilt artifact is missing fall back to +# `cargo install`, which drives rustup against the runner image's ambient toolchain; running +# several of those at once corrupts it. These jobs need the full toolset, so they cannot use +# the per-job `install_args` scoping that ci.yml uses. +env: + MISE_JOBS: 1 + jobs: # The job MUST be called `copilot-setup-steps` or it will not be picked up by Copilot. copilot-setup-steps: diff --git a/.github/workflows/docs.yml b/.github/workflows/docs.yml index c4f2608..31f6a5d 100644 --- a/.github/workflows/docs.yml +++ b/.github/workflows/docs.yml @@ -20,6 +20,13 @@ concurrency: group: ${{ github.workflow }}-${{ github.ref }} cancel-in-progress: false +# Serialize mise installs. `cargo:*` tools whose prebuilt artifact is missing fall back to +# `cargo install`, which drives rustup against the runner image's ambient toolchain; running +# several of those at once corrupts it. These jobs need the full toolset, so they cannot use +# the per-job `install_args` scoping that ci.yml uses. +env: + MISE_JOBS: 1 + jobs: build: runs-on: ubuntu-latest