From 5afff7b6d72b45891ef2d0f91b79c73e2238ce14 Mon Sep 17 00:00:00 2001 From: Will Sarg <12886992+willsarg@users.noreply.github.com> Date: Tue, 17 Feb 2026 18:05:31 -0500 Subject: [PATCH] ci(cache): migrate rust cache actions to useblacksmith (#706) --- .github/workflows/benchmarks.yml | 2 +- .github/workflows/ci.yml | 8 ++++---- .github/workflows/e2e.yml | 2 +- .github/workflows/feature-matrix.yml | 2 +- .github/workflows/release.yml | 2 +- .github/workflows/rust-reusable.yml | 2 +- docs/actions-source-policy.md | 3 ++- 7 files changed, 11 insertions(+), 10 deletions(-) diff --git a/.github/workflows/benchmarks.yml b/.github/workflows/benchmarks.yml index 25e9298..ea8e913 100644 --- a/.github/workflows/benchmarks.yml +++ b/.github/workflows/benchmarks.yml @@ -26,7 +26,7 @@ jobs: - uses: dtolnay/rust-toolchain@631a55b12751854ce901bb631d5902ceb48146f7 # stable with: toolchain: 1.92.0 - - uses: Swatinem/rust-cache@779680da715d629ac1d338a641029a2f4372abb5 # v2 + - uses: useblacksmith/rust-cache@f53e7f127245d2a269b3d90879ccf259876842d5 # v3 - name: Run benchmarks run: cargo bench --locked 2>&1 | tee benchmark_output.txt diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml index 2709211..0ab0819 100644 --- a/.github/workflows/ci.yml +++ b/.github/workflows/ci.yml @@ -54,7 +54,7 @@ jobs: with: toolchain: 1.92.0 components: rustfmt, clippy - - uses: Swatinem/rust-cache@779680da715d629ac1d338a641029a2f4372abb5 # v2 + - uses: useblacksmith/rust-cache@f53e7f127245d2a269b3d90879ccf259876842d5 # v3 - name: Run rust quality gate run: ./scripts/ci/rust_quality_gate.sh @@ -72,7 +72,7 @@ jobs: with: toolchain: 1.92.0 components: clippy - - uses: Swatinem/rust-cache@779680da715d629ac1d338a641029a2f4372abb5 # v2 + - uses: useblacksmith/rust-cache@f53e7f127245d2a269b3d90879ccf259876842d5 # v3 - name: Run strict lint delta gate env: BASE_SHA: ${{ needs.changes.outputs.base_sha }} @@ -89,7 +89,7 @@ jobs: - uses: dtolnay/rust-toolchain@631a55b12751854ce901bb631d5902ceb48146f7 # stable with: toolchain: 1.92.0 - - uses: Swatinem/rust-cache@779680da715d629ac1d338a641029a2f4372abb5 # v2 + - uses: useblacksmith/rust-cache@f53e7f127245d2a269b3d90879ccf259876842d5 # v3 - name: Run tests run: cargo test --locked --verbose @@ -105,7 +105,7 @@ jobs: - uses: dtolnay/rust-toolchain@631a55b12751854ce901bb631d5902ceb48146f7 # stable with: toolchain: 1.92.0 - - uses: Swatinem/rust-cache@779680da715d629ac1d338a641029a2f4372abb5 # v2 + - uses: useblacksmith/rust-cache@f53e7f127245d2a269b3d90879ccf259876842d5 # v3 - name: Build release binary run: cargo build --release --locked --verbose diff --git a/.github/workflows/e2e.yml b/.github/workflows/e2e.yml index 2930762..80e42ae 100644 --- a/.github/workflows/e2e.yml +++ b/.github/workflows/e2e.yml @@ -25,6 +25,6 @@ jobs: - uses: dtolnay/rust-toolchain@631a55b12751854ce901bb631d5902ceb48146f7 # stable with: toolchain: 1.92.0 - - uses: Swatinem/rust-cache@779680da715d629ac1d338a641029a2f4372abb5 # v2 + - uses: useblacksmith/rust-cache@f53e7f127245d2a269b3d90879ccf259876842d5 # v3 - name: Run integration / E2E tests run: cargo test --test agent_e2e --locked --verbose diff --git a/.github/workflows/feature-matrix.yml b/.github/workflows/feature-matrix.yml index 67cdd79..875b0c5 100644 --- a/.github/workflows/feature-matrix.yml +++ b/.github/workflows/feature-matrix.yml @@ -49,7 +49,7 @@ jobs: with: toolchain: 1.92.0 - - uses: Swatinem/rust-cache@779680da715d629ac1d338a641029a2f4372abb5 # v2 + - uses: useblacksmith/rust-cache@f53e7f127245d2a269b3d90879ccf259876842d5 # v3 with: key: features-${{ matrix.name }} diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml index e1b70fc..772f641 100644 --- a/.github/workflows/release.yml +++ b/.github/workflows/release.yml @@ -44,7 +44,7 @@ jobs: with: targets: ${{ matrix.target }} - - uses: Swatinem/rust-cache@779680da715d629ac1d338a641029a2f4372abb5 # v2 + - uses: useblacksmith/rust-cache@f53e7f127245d2a269b3d90879ccf259876842d5 # v3 - name: Build release run: cargo build --release --locked --target ${{ matrix.target }} diff --git a/.github/workflows/rust-reusable.yml b/.github/workflows/rust-reusable.yml index 511ccc4..60c5412 100644 --- a/.github/workflows/rust-reusable.yml +++ b/.github/workflows/rust-reusable.yml @@ -53,7 +53,7 @@ jobs: - name: Restore Rust cache if: inputs.use_cache - uses: Swatinem/rust-cache@779680da715d629ac1d338a641029a2f4372abb5 # v2 + uses: useblacksmith/rust-cache@f53e7f127245d2a269b3d90879ccf259876842d5 # v3 - name: Run command shell: bash diff --git a/docs/actions-source-policy.md b/docs/actions-source-policy.md index 026bfe2..22e7c5f 100644 --- a/docs/actions-source-policy.md +++ b/docs/actions-source-policy.md @@ -15,7 +15,6 @@ Selected allowlist patterns: - `actions/*` (covers `actions/cache`, `actions/checkout`, `actions/upload-artifact`, `actions/download-artifact`, and other first-party actions) - `docker/*` - `dtolnay/rust-toolchain@*` -- `Swatinem/rust-cache@*` - `DavidAnson/markdownlint-cli2-action@*` - `lycheeverse/lychee-action@*` - `EmbarkStudios/cargo-deny-action@*` @@ -75,6 +74,8 @@ If encountered, add only the specific trusted missing action, rerun, and documen Latest sweep notes: +- 2026-02-17: Rust dependency cache migrated from `Swatinem/rust-cache` to `useblacksmith/rust-cache` + - No new allowlist pattern required (`useblacksmith/*` already allowlisted) - 2026-02-16: Hidden dependency discovered in `release.yml`: `sigstore/cosign-installer@...` - Added allowlist pattern: `sigstore/cosign-installer@*` - 2026-02-16: Blacksmith migration blocked workflow execution