Skip to content
Open
Changes from all commits
Commits
File filter

Filter by extension

Filter by extension


Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
2 changes: 1 addition & 1 deletion .github/workflows/security.yml
Original file line number Diff line number Diff line change
Expand Up @@ -350,7 +350,7 @@ jobs:
- name: Install Rust toolchain
uses: dtolnay/rust-toolchain@3c5f7ea28cd621ae0bf5283f0e981fb97b8a7af9 # master
with:
toolchain: "1.85"
toolchain: "1.99"

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

kody code-review Bug medium

Version mismatch in the cargo-vet job's 'Install Rust toolchain' step: the step pins toolchain "1.99", while the PR title and update table specify 1.98 and the PR lists 1.99.0 as 'Pending' behind Renovate's release-age gate. When rustup fails to install the unapproved 1.99 toolchain, the scheduled and pull_request Cargo Vet (Supply Chain) job never runs cargo vet, so supply-chain checks stop and the build goes red. Fix: pin "1.98" as the PR states, and bump to 1.99 in a later update once it is released and approved.

toolchain: "1.98"
Prompt for LLM

File .github/workflows/security.yml:

Line 353:

Version mismatch in the cargo-vet job's 'Install Rust toolchain' step: the step pins toolchain "1.99", while the PR title and update table specify 1.98 and the PR lists 1.99.0 as 'Pending' behind Renovate's release-age gate. When rustup fails to install the unapproved 1.99 toolchain, the scheduled and pull_request Cargo Vet (Supply Chain) job never runs `cargo vet`, so supply-chain checks stop and the build goes red. Fix: pin "1.98" as the PR states, and bump to 1.99 in a later update once it is released and approved.

Suggested Code:

          toolchain: "1.98"

Talk to Kody by mentioning @kody

Was this suggestion helpful? React with 👍 or 👎 to help Kody learn from this interaction.

​

​


- name: Cache Rust dependencies
uses: actions/cache@27d5ce7f107fe9357f9df03efb73ab90386fccae # v5
Expand Down
Loading