build(deps): bump dtolnay/rust-toolchain
What the developer wrote
Authored by dependabot[bot]
build(deps): bump dtolnay/rust-toolchain
Bumps [dtolnay/rust-toolchain](https://github.com/dtolnay/rust-toolchain) from 6c977a6ca4077a0ceb28ffbe03f59d46e9ac8772 to 02cb101ec7c40f2c49e1d9714d64511d8e1b74de.
- [Release notes](https://github.com/dtolnay/rust-toolchain/releases)
- [Commits](https://github.com/dtolnay/rust-toolchain/compare/6c977a6ca4077a0ceb28ffbe03f59d46e9ac8772...02cb101ec7c40f2c49e1d9714d64511d8e1b74de)
---
updated-dependencies:
- dependency-name: dtolnay/rust-toolchain
dependency-version: 02cb101ec7c40f2c49e1d9714d64511d8e1b74de
dependency-type: direct:production
...
Signed-off-by: dependabot[bot] <support@github.com>
What changed, and why it matters
This is a routine update by Dependabot that changes which version of a popular GitHub Action (dtolnay/rust-toolchain) is used to install Rust in automated CI workflows. The commit only updates pinned commit hashes in workflow files; it does not change any library code, cryptographic logic, or user-facing behavior of the rust-bitcoin crate itself. There is no indication of a security issue in the diff.
No security action required. Review the updated action hash if desired, and merge as a routine CI maintenance update.
Security signals we found
No strong security signals were identified.
Evidence from the diff
The commit bumps the dtolnay/rust-toolchain GitHub Action from commit 6c977a6ca4077a0ceb28ffbe03f59d46e9ac8772 to 02cb101ec7c40f2c49e1d9714d64511d8e1b74de across four workflow files. This is a standard dependency/maintenance update for CI infrastructure. No source code, tests, or crate APIs are modified. The change is purely in how CI jobs select the Rust toolchain.
Changed components
.github/workflows/cron-daily-audit.yml.github/workflows/cron-daily-miri.yml.github/workflows/rust.yml.github/workflows/semver-checks.ymlInspect captured patch +8 / −8
### .github/workflows/cron-daily-audit.yml
@@ -18,7 +18,7 @@ jobs:
with:
persist-credentials: false
- name: "Install Rustup"
- uses: dtolnay/rust-toolchain@6c977a6ca4077a0ceb28ffbe03f59d46e9ac8772 # v1
+ uses: dtolnay/rust-toolchain@02cb101ec7c40f2c49e1d9714d64511d8e1b74de # v1
with:
toolchain: stable
- name: "Install cargo-binstall"
### .github/workflows/cron-daily-miri.yml
@@ -26,7 +26,7 @@ jobs:
id: read_toolchain
run: echo "nightly_version=$(cargo metadata --format-version 1 | jq -r '.metadata.rbmt.toolchains.nightly')" >> $GITHUB_OUTPUT
- name: "Select toolchain"
- uses: dtolnay/rust-toolchain@6c977a6ca4077a0ceb28ffbe03f59d46e9ac8772 # v1
+ uses: dtolnay/rust-toolchain@02cb101ec7c40f2c49e1d9714d64511d8e1b74de # v1
with:
toolchain: ${{ steps.read_toolchain.outputs.nightly_version }}
components: miri
### .github/workflows/rust.yml
@@ -181,7 +181,7 @@ jobs:
with:
persist-credentials: false
- name: "Select toolchain"
- uses: dtolnay/rust-toolchain@6c977a6ca4077a0ceb28ffbe03f59d46e9ac8772 # v1
+ uses: dtolnay/rust-toolchain@02cb101ec7c40f2c49e1d9714d64511d8e1b74de # v1
with:
toolchain: stable
- name: "Add architecture i386 and install dependencies"
@@ -216,7 +216,7 @@ jobs:
with:
persist-credentials: false
- name: "Select toolchain"
- uses: dtolnay/rust-toolchain@6c977a6ca4077a0ceb28ffbe03f59d46e9ac8772 # v1
+ uses: dtolnay/rust-toolchain@02cb101ec7c40f2c49e1d9714d64511d8e1b74de # v1
with:
toolchain: ${{ needs.Prepare.outputs.nightly_version }}
- name: "Install rust-src"
@@ -254,7 +254,7 @@ jobs:
with:
persist-credentials: false
- name: "Select toolchain"
- uses: dtolnay/rust-toolchain@6c977a6ca4077a0ceb28ffbe03f59d46e9ac8772 # v1
+ uses: dtolnay/rust-toolchain@02cb101ec7c40f2c49e1d9714d64511d8e1b74de # v1
with:
toolchain: stable
- name: "Run policy script"
@@ -292,7 +292,7 @@ jobs:
with:
persist-credentials: false
- name: "Select toolchain"
- uses: dtolnay/rust-toolchain@6c977a6ca4077a0ceb28ffbe03f59d46e9ac8772 # v1
+ uses: dtolnay/rust-toolchain@02cb101ec7c40f2c49e1d9714d64511d8e1b74de # v1
with:
toolchain: stable
- name: "Check Encode coverage"
@@ -308,7 +308,7 @@ jobs:
persist-credentials: false
fetch-depth: 0 # required for full diff context
- name: "Select toolchain"
- uses: dtolnay/rust-toolchain@6c977a6ca4077a0ceb28ffbe03f59d46e9ac8772 # v1
+ uses: dtolnay/rust-toolchain@02cb101ec7c40f2c49e1d9714d64511d8e1b74de # v1
with:
toolchain: stable
- name: "Fetch base branch for diff"
### .github/workflows/semver-checks.yml
@@ -23,7 +23,7 @@ jobs:
fetch-depth: 0 # we need full history for cargo semver-checks
persist-credentials: false
- name: "Install Rustup"
- uses: dtolnay/rust-toolchain@6c977a6ca4077a0ceb28ffbe03f59d46e9ac8772 # v1
+ uses: dtolnay/rust-toolchain@02cb101ec7c40f2c49e1d9714d64511d8e1b74de # v1
with:
toolchain: stable
- name: "Select stable-version"Why this scored 15/100
Community notes
Notes can correct, qualify, or add evidence to the AI analysis. Every note shown here has been validated by a human moderator.
The AI analysis stands alone for now. Submit a note if you can add evidence or important context.