What the developer wrote
Authored by Tobin C. Harding
CI: Update to latest cargo-rbmt
We are a few commits back; use the commit hash of current tip of
master.
What changed, and why it matters
This commit simply updates the version (commit hash) of an internal GitHub Actions helper tool used in the project's continuous integration (CI) pipelines. There is no change to the actual Rust Bitcoin library code, no user-facing behavior change, and no security fix or vulnerability patch visible in the diff.
No security action required. Review the upstream cargo-rbmt changes if desired, but this commit itself is a routine CI maintenance update.
Security signals we found
No strong security signals were identified.
Evidence from the diff
The diff updates three references in .github/workflows/rust.yml from rust-bitcoin-maintainer-tools/.github/actions/setup-rbmt@64715bab0d6fa1f3ebd6f9be336c4c5089bb5eb9 to commit af3c2868415b17eedc808da6d0589e10b7482660. This is a routine CI tooling bump for cargo-rbmt. No source code, dependencies consumed by users, or cryptographic logic is modified.
Changed components
.github/workflows/rust.ymlInspect captured patch +3 / −3
diff --git a/.github/workflows/rust.yml b/.github/workflows/rust.yml
index 9deceba4..8bbffa1c 100644
--- a/.github/workflows/rust.yml
+++ b/.github/workflows/rust.yml
@@ -25,7 +25,7 @@ jobs:
- uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5.0.0
with:
persist-credentials: false
- - uses: rust-bitcoin/rust-bitcoin-maintainer-tools/.github/actions/setup-rbmt@64715bab0d6fa1f3ebd6f9be336c4c5089bb5eb9
+ - uses: rust-bitcoin/rust-bitcoin-maintainer-tools/.github/actions/setup-rbmt@af3c2868415b17eedc808da6d0589e10b7482660
- name: "Run tests"
run: cargo rbmt test --toolchain ${{ matrix.toolchain }} --lock-file ${{ matrix.dep }}
@@ -41,7 +41,7 @@ jobs:
- uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5.0.0
with:
persist-credentials: false
- - uses: rust-bitcoin/rust-bitcoin-maintainer-tools/.github/actions/setup-rbmt@64715bab0d6fa1f3ebd6f9be336c4c5089bb5eb9
+ - uses: rust-bitcoin/rust-bitcoin-maintainer-tools/.github/actions/setup-rbmt@af3c2868415b17eedc808da6d0589e10b7482660
- name: "Run ${{ matrix.task }}"
run: cargo rbmt ${{ matrix.task }}
@@ -54,7 +54,7 @@ jobs:
with:
persist-credentials: false
fetch-depth: 0 # History required for version bump detection.
- - uses: rust-bitcoin/rust-bitcoin-maintainer-tools/.github/actions/setup-rbmt@64715bab0d6fa1f3ebd6f9be336c4c5089bb5eb9
+ - uses: rust-bitcoin/rust-bitcoin-maintainer-tools/.github/actions/setup-rbmt@af3c2868415b17eedc808da6d0589e10b7482660
- name: "Run pre-release checks"
run: cargo rbmt prerelease --baseline ${{ github.event.pull_request.base.sha || github.event.before }}
Why this scored 15/100
Community notes
Notes can correct, qualify, or add evidence to the AI analysis. Every note shown here has been validated by a human moderator.
The AI analysis stands alone for now. Submit a note if you can add evidence or important context.