ci: Action を最新版に上げて actions.lock で固定する

.github/workflows/actions.lock

@@ -0,0 +1,56 @@
+# This file is machine-generated by `gh actions-lock`.
+# Do not edit by hand; run `gh actions-lock` to update.
+# Docs: https://gh.io/actions-lockfile
+version: 'v0.0.3'
+workflows:
+    '.github/workflows/ci.yml':
+        - 'actions/checkout@v7.0.1'
+        - 'dtolnay/rust-toolchain@stable'
+        - 'mlugg/setup-zig@v2.2.1'
+        - 'swatinem/rust-cache@v2.9.3'
+    '.github/workflows/pr-target-guard.yml': []
+    '.github/workflows/rust-app-bundle.yml':
+        - 'actions/checkout@v7.0.1'
+        - 'actions/upload-artifact@v7.0.2'
+        - 'dtolnay/rust-toolchain@stable'
+        - 'mlugg/setup-zig@v2.2.1'
+        - 'swatinem/rust-cache@v2.9.3'
+    '.github/workflows/rust-cask-bump.yml': []
+    '.github/workflows/rust-release.yml':
+        - 'actions/checkout@v7.0.1'
+        - 'actions/download-artifact@v8.0.2'
+        - 'actions/upload-artifact@v7.0.2'
+        - 'dtolnay/rust-toolchain@stable'
+        - 'mlugg/setup-zig@v2.2.1'
+        - 'swatinem/rust-cache@v2.9.3'
+dependencies:
+    'actions/checkout@v7.0.1':
+        ref: 'v7.0.1'
+        commit: 'sha1-3d3c42e5aac5ba805825da76410c181273ba90b1'
+        owner_id: 44036562
+        repo_id: 197814629
+    'actions/download-artifact@v8.0.2':
+        ref: 'v8.0.2'
+        commit: 'sha1-9000827ccba6bdab643e8b6fd33ac0654aef8333'
+        owner_id: 44036562
+        repo_id: 192626254
+    'actions/upload-artifact@v7.0.2':
+        ref: 'v7.0.2'
+        commit: 'sha1-cf430e030ddbb5b0abf93d22962f4752f3646cd9'
+        owner_id: 44036562
+        repo_id: 192625955
+    'dtolnay/rust-toolchain@stable':
+        ref: 'stable'
+        commit: 'sha1-b725eda525362e7cf34af9a7243cac1e3f01a7ec'
+        owner_id: 1940490
+        repo_id: 260749683
+    'mlugg/setup-zig@v2.2.1':
+        ref: 'v2.2.1'
+        commit: 'sha1-d1434d08867e3ee9daa34448df10607b98908d29'
+        owner_id: 7289241
+        repo_id: 812112570
+    'swatinem/rust-cache@v2.9.3':
+        ref: 'v2.9.3'
+        commit: 'sha1-d1527c8f67ef9af357290475d4af4b0fab8f12e0'
+        owner_id: 580492
+        repo_id: 298565987

.github/workflows/ci.yml

@@ -17,7 +17,7 @@ jobs:
     # 無限ハングする。各試行を 7 分で打ち切り最大 3 回リトライ、全体上限 25 分の保険を掛ける。
     timeout-minutes: 25
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v7.0.1
       - name: Show toolchain
         run: swift --version
       - name: Run tests (retry on flaky runner hang)
@@ -53,7 +53,7 @@ jobs:
     runs-on: ubuntu-latest
     container: swift:6.0
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v7.0.1
       - name: Show toolchain
         run: swift --version
       - name: swift test (LaboLaboEngine only on Linux)
@@ -81,11 +81,11 @@ jobs:
       run:
         working-directory: rust
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v7.0.1
       - uses: dtolnay/rust-toolchain@stable
         with:
           components: rustfmt, clippy
-      - uses: Swatinem/rust-cache@v2
+      - uses: swatinem/rust-cache@v2.9.3
         with:
           workspaces: rust
       - name: cargo fmt --check
@@ -107,11 +107,11 @@ jobs:
       run:
         working-directory: rust
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v7.0.1
       - uses: dtolnay/rust-toolchain@stable
         with:
           components: rustfmt, clippy
-      - uses: Swatinem/rust-cache@v2
+      - uses: swatinem/rust-cache@v2.9.3
         with:
           workspaces: rust
       - name: cargo fmt --check
@@ -142,7 +142,7 @@ jobs:
       run:
         working-directory: rust
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v7.0.1
       - name: Install system dependencies (gpui link-time deps)
         run: |
           sudo apt-get update
@@ -152,7 +152,7 @@ jobs:
       - uses: dtolnay/rust-toolchain@stable
         with:
           components: rustfmt, clippy
-      - uses: Swatinem/rust-cache@v2
+      - uses: swatinem/rust-cache@v2.9.3
         with:
           workspaces: rust
       - name: cargo fmt --check
@@ -181,11 +181,11 @@ jobs:
       run:
         working-directory: rust
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v7.0.1
       - uses: dtolnay/rust-toolchain@stable
         with:
           components: rustfmt, clippy
-      - uses: Swatinem/rust-cache@v2
+      - uses: swatinem/rust-cache@v2.9.3
         with:
           workspaces: rust
       - name: cargo fmt --check
@@ -234,20 +234,20 @@ jobs:
       GHOSTTY_SOURCE_DIR: ${{ github.workspace }}/ghostty-src
       LIBGHOSTTY_VT_SYS_OPTIMIZE: ReleaseFast
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v7.0.1
       - name: Checkout vancluever/ghostty (pinned)
-        uses: actions/checkout@v4
+        uses: actions/checkout@v7.0.1
         with:
           repository: vancluever/ghostty
           ref: ${{ env.GHOSTTY_REF }}
           path: ghostty-src
       - uses: dtolnay/rust-toolchain@stable
         with:
           components: rustfmt, clippy
-      - uses: mlugg/setup-zig@v2
+      - uses: mlugg/setup-zig@v2.2.1
         with:
           version: 0.16.0
-      - uses: Swatinem/rust-cache@v2
+      - uses: swatinem/rust-cache@v2.9.3
         with:
           workspaces: rust
       - name: cargo test (backend-ghostty-vt)
@@ -262,7 +262,7 @@ jobs:
     name: app build & test
     runs-on: macos-15
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v7.0.1
       - name: Show toolchain
         run: |
           swift --version

.github/workflows/rust-app-bundle.yml

@@ -41,30 +41,30 @@ jobs:
       run:
         working-directory: rust
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v7.0.1
 
       - name: Checkout vancluever/ghostty (pinned)
-        uses: actions/checkout@v4
+        uses: actions/checkout@v7.0.1
         with:
           repository: vancluever/ghostty
           ref: ${{ env.GHOSTTY_REF }}
           path: ghostty-src
 
       - uses: dtolnay/rust-toolchain@stable
 
-      - uses: mlugg/setup-zig@v2
+      - uses: mlugg/setup-zig@v2.2.1
         with:
           version: 0.16.0
 
-      - uses: Swatinem/rust-cache@v2
+      - uses: swatinem/rust-cache@v2.9.3
         with:
           workspaces: rust
 
       - name: Bundle (build + package + ad-hoc sign)
         run: ./scripts/bundle-macos.sh
 
       - name: Upload artifact
-        uses: actions/upload-artifact@v4
+        uses: actions/upload-artifact@v7.0.2
         with:
           name: LaboLabo-macos
           path: rust/target/bundle/*.zip
@@ -81,10 +81,10 @@ jobs:
       run:
         working-directory: rust
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v7.0.1
 
       - name: Checkout vancluever/ghostty (pinned)
-        uses: actions/checkout@v4
+        uses: actions/checkout@v7.0.1
         with:
           repository: vancluever/ghostty
           ref: ${{ env.GHOSTTY_REF }}
@@ -100,19 +100,19 @@ jobs:
 
       - uses: dtolnay/rust-toolchain@stable
 
-      - uses: mlugg/setup-zig@v2
+      - uses: mlugg/setup-zig@v2.2.1
         with:
           version: 0.16.0
 
-      - uses: Swatinem/rust-cache@v2
+      - uses: swatinem/rust-cache@v2.9.3
         with:
           workspaces: rust
 
       - name: Package (release build + tar.gz)
         run: ./scripts/package-linux.sh
 
       - name: Upload artifact
-        uses: actions/upload-artifact@v4
+        uses: actions/upload-artifact@v7.0.2
         with:
           name: LaboLabo-linux
           path: rust/target/package/*.tar.gz
@@ -129,11 +129,11 @@ jobs:
       run:
         working-directory: rust
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v7.0.1
 
       - uses: dtolnay/rust-toolchain@stable
 
-      - uses: Swatinem/rust-cache@v2
+      - uses: swatinem/rust-cache@v2.9.3
         with:
           workspaces: rust
 
@@ -142,7 +142,7 @@ jobs:
         run: ./scripts/package-windows.ps1
 
       - name: Upload artifact
-        uses: actions/upload-artifact@v4
+        uses: actions/upload-artifact@v7.0.2
         with:
           name: LaboLabo-windows
           path: rust/target/package/*.zip

.github/workflows/rust-release.yml

@@ -109,30 +109,30 @@ jobs:
       run:
         working-directory: rust
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v7.0.1
 
       - name: Checkout vancluever/ghostty (pinned)
-        uses: actions/checkout@v4
+        uses: actions/checkout@v7.0.1
         with:
           repository: vancluever/ghostty
           ref: ${{ env.GHOSTTY_REF }}
           path: ghostty-src
 
       - uses: dtolnay/rust-toolchain@stable
 
-      - uses: mlugg/setup-zig@v2
+      - uses: mlugg/setup-zig@v2.2.1
         with:
           version: 0.16.0
 
-      - uses: Swatinem/rust-cache@v2
+      - uses: swatinem/rust-cache@v2.9.3
         with:
           workspaces: rust
 
       - name: Bundle (build + package + ad-hoc sign)
         run: ./scripts/bundle-macos.sh "${{ needs.resolve-version.outputs.version }}"
 
       - name: Upload artifact
-        uses: actions/upload-artifact@v4
+        uses: actions/upload-artifact@v7.0.2
         with:
           name: LaboLabo-macos
           path: rust/target/bundle/*.zip
@@ -151,10 +151,10 @@ jobs:
       run:
         working-directory: rust
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v7.0.1
 
       - name: Checkout vancluever/ghostty (pinned)
-        uses: actions/checkout@v4
+        uses: actions/checkout@v7.0.1
         with:
           repository: vancluever/ghostty
           ref: ${{ env.GHOSTTY_REF }}
@@ -171,19 +171,19 @@ jobs:
 
       - uses: dtolnay/rust-toolchain@stable
 
-      - uses: mlugg/setup-zig@v2
+      - uses: mlugg/setup-zig@v2.2.1
         with:
           version: 0.16.0
 
-      - uses: Swatinem/rust-cache@v2
+      - uses: swatinem/rust-cache@v2.9.3
         with:
           workspaces: rust
 
       - name: Package (release build + tar.gz)
         run: ./scripts/package-linux.sh "${{ needs.resolve-version.outputs.version }}"
 
       - name: Upload artifact
-        uses: actions/upload-artifact@v4
+        uses: actions/upload-artifact@v7.0.2
         with:
           name: LaboLabo-linux
           path: rust/target/package/*.tar.gz
@@ -203,11 +203,11 @@ jobs:
       run:
         working-directory: rust
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v7.0.1
 
       - uses: dtolnay/rust-toolchain@stable
 
-      - uses: Swatinem/rust-cache@v2
+      - uses: swatinem/rust-cache@v2.9.3
         with:
           workspaces: rust
 
@@ -216,7 +216,7 @@ jobs:
         run: ./scripts/package-windows.ps1 -Version "${{ needs.resolve-version.outputs.version }}"
 
       - name: Upload artifact
-        uses: actions/upload-artifact@v4
+        uses: actions/upload-artifact@v7.0.2
         with:
           name: LaboLabo-windows
           path: rust/target/package/*.zip
@@ -229,10 +229,10 @@ jobs:
     permissions:
       contents: write
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v7.0.1
 
       - name: Download all platform artifacts
-        uses: actions/download-artifact@v4
+        uses: actions/download-artifact@v8.0.2
         with:
           path: artifacts