From efef8266f621ee24cd71488a2b9679f19a587e34 Mon Sep 17 00:00:00 2001 From: m-nakamura145 Date: Sun, 7 Jan 2024 08:34:29 +0900 Subject: [PATCH 01/20] Use ruby/actions for ruby versions --- .github/workflows/test.yml | 9 ++++++++- 1 file changed, 8 insertions(+), 1 deletion(-) diff --git a/.github/workflows/test.yml b/.github/workflows/test.yml index ece2aae..16018e1 100644 --- a/.github/workflows/test.yml +++ b/.github/workflows/test.yml @@ -3,11 +3,18 @@ name: test on: [push, pull_request] jobs: + ruby-versions: + uses: ruby/actions/.github/workflows/ruby_versions.yml@master + with: + engine: cruby + min_version: 3.0 + build: + needs: ruby-versions name: build (${{ matrix.ruby }} / ${{ matrix.os }}) strategy: matrix: - ruby: [ 3.2, 3.1, "3.0", head ] + ruby: ${{ fromJson(needs.ruby-versions.outputs.versions) }} os: [ ubuntu-latest, macos-latest ] runs-on: ${{ matrix.os }} steps: From 3cf6d11bd2decf56a97161ad1d837aed64f3d5b9 Mon Sep 17 00:00:00 2001 From: Akinori MUSHA Date: Thu, 19 Sep 2024 16:09:21 +0900 Subject: [PATCH 02/20] Reword the document for to_a and clarify the implementation notes ref. https://github.com/ruby/ruby/pull/11453 --- lib/set.rb | 16 ++++++++-------- 1 file changed, 8 insertions(+), 8 deletions(-) diff --git a/lib/set.rb b/lib/set.rb index 4b706b7..531fc91 100644 --- a/lib/set.rb +++ b/lib/set.rb @@ -335,7 +335,7 @@ def replace(enum) end end - # Converts the set to an array. The order of elements is uncertain. + # Returns an array containing all elements in the set. # # Set[1, 2].to_a #=> [1, 2] # Set[1, 'c', :s].to_a #=> [1, "c", :s] @@ -540,11 +540,11 @@ def delete?(o) # Deletes every element of the set for which block evaluates to # true, and returns self. Returns an enumerator if no block is # given. - def delete_if + def delete_if(&block) block_given? or return enum_for(__method__) { size } - # @hash.delete_if should be faster, but using it breaks the order - # of enumeration in subclasses. - select { |o| yield o }.each { |o| @hash.delete(o) } + # Instead of directly using @hash.delete_if, perform enumeration + # using self.each that subclasses may override. + select(&block).each { |o| @hash.delete(o) } self end @@ -553,9 +553,9 @@ def delete_if # given. def keep_if block_given? or return enum_for(__method__) { size } - # @hash.keep_if should be faster, but using it breaks the order of - # enumeration in subclasses. - reject { |o| yield o }.each { |o| @hash.delete(o) } + # Instead of directly using @hash.keep_if, perform enumeration + # using self.each that subclasses may override. + reject(&block).each { |o| @hash.delete(o) } self end From ea95c5a3d2580ccddd7a5c51f6a8d7abb7cfa63f Mon Sep 17 00:00:00 2001 From: Akinori MUSHA Date: Thu, 19 Sep 2024 16:11:33 +0900 Subject: [PATCH 03/20] 2024 --- LICENSE.txt | 2 +- lib/set.rb | 2 +- 2 files changed, 2 insertions(+), 2 deletions(-) diff --git a/LICENSE.txt b/LICENSE.txt index 6ffacb6..4d4df5b 100644 --- a/LICENSE.txt +++ b/LICENSE.txt @@ -1,4 +1,4 @@ -Copyright (c) 2002-2020 Akinori MUSHA +Copyright (c) 2002-2024 Akinori MUSHA All rights reserved. diff --git a/lib/set.rb b/lib/set.rb index 531fc91..da05568 100644 --- a/lib/set.rb +++ b/lib/set.rb @@ -3,7 +3,7 @@ # # set.rb - defines the Set class # -# Copyright (c) 2002-2023 Akinori MUSHA +# Copyright (c) 2002-2024 Akinori MUSHA # # Documentation by Akinori MUSHA and Gavin Sinclair. # From 2393d0e13d4f8ee07f69b62c5958f5c98a06207e Mon Sep 17 00:00:00 2001 From: Hiroshi SHIBATA Date: Thu, 19 Sep 2024 16:23:08 +0900 Subject: [PATCH 04/20] Added missing block arg --- lib/set.rb | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/lib/set.rb b/lib/set.rb index 4b706b7..1d75095 100644 --- a/lib/set.rb +++ b/lib/set.rb @@ -551,7 +551,7 @@ def delete_if # Deletes every element of the set for which block evaluates to # false, and returns self. Returns an enumerator if no block is # given. - def keep_if + def keep_if(&block) block_given? or return enum_for(__method__) { size } # @hash.keep_if should be faster, but using it breaks the order of # enumeration in subclasses. From f88ecdef6b472b482cd1f961402e42e858cfaf82 Mon Sep 17 00:00:00 2001 From: Kouhei Yanagita Date: Fri, 29 Nov 2024 11:10:07 +0900 Subject: [PATCH 05/20] Fix ^ to respect subclasses --- lib/set.rb | 2 +- test/test_set.rb | 5 +++++ 2 files changed, 6 insertions(+), 1 deletion(-) diff --git a/lib/set.rb b/lib/set.rb index a9946c0..0dd642f 100644 --- a/lib/set.rb +++ b/lib/set.rb @@ -659,7 +659,7 @@ def &(enum) # Set[1, 2] ^ Set[2, 3] #=> # # Set[1, 'b', 'c'] ^ ['b', 'd'] #=> # def ^(enum) - n = Set.new(enum) + n = self.class.new(enum) each { |o| n.add(o) unless n.delete?(o) } n end diff --git a/test/test_set.rb b/test/test_set.rb index 49dc58e..5659460 100644 --- a/test/test_set.rb +++ b/test/test_set.rb @@ -643,6 +643,11 @@ def test_xor ret = set ^ [2,4,5,5] assert_not_same(set, ret) assert_equal(Set[1,3,5], ret) + + set2 = Set2[1,2,3,4] + ret2 = set2 ^ [2,4,5,5] + assert_instance_of(Set2, ret2) + assert_equal(Set2[1,3,5], ret2) end def test_eq From cadb686e93e09fed52a4153642f066490bc5ff1b Mon Sep 17 00:00:00 2001 From: Kouhei Yanagita Date: Fri, 29 Nov 2024 12:31:54 +0900 Subject: [PATCH 06/20] Speed up Set#flatten Improved performance by ensuring that identical `Set` objects are processed only once. --- lib/set.rb | 11 +++++++---- 1 file changed, 7 insertions(+), 4 deletions(-) diff --git a/lib/set.rb b/lib/set.rb index a9946c0..280ab0d 100644 --- a/lib/set.rb +++ b/lib/set.rb @@ -353,16 +353,19 @@ def to_set(klass = Set, *args, &block) klass.new(self, *args, &block) end - def flatten_merge(set, seen = Set.new) # :nodoc: + def flatten_merge(set, seen = {}) # :nodoc: set.each { |e| if e.is_a?(Set) - if seen.include?(e_id = e.object_id) + case seen[e_id = e.object_id] + when true raise ArgumentError, "tried to flatten recursive Set" + when false + next end - seen.add(e_id) + seen[e_id] = true flatten_merge(e, seen) - seen.delete(e_id) + seen[e_id] = false else add(e) end From e8883432058ee0103a5a2bb88237cdae0d7e5dff Mon Sep 17 00:00:00 2001 From: Akinori MUSHA Date: Fri, 29 Nov 2024 19:26:30 +0900 Subject: [PATCH 07/20] Update CHANGELOG.md --- CHANGELOG.md | 9 +++++++++ 1 file changed, 9 insertions(+) diff --git a/CHANGELOG.md b/CHANGELOG.md index a74b2c4..3035be0 100644 --- a/CHANGELOG.md +++ b/CHANGELOG.md @@ -1,5 +1,11 @@ # Set Changelog +# 1.1.1 (2024-11-29) + +* Enhancements + * Fix Set#^ to respect subclasses [#38][] ([@kyanagi][]) + * Speed up Set#flatten [#39][] ([@kyanagi][]) + # 1.1.0 (2023-12-23) * Optimize for and require Ruby >=3 @@ -48,6 +54,8 @@ This is the first release of set as a gem. Here lists the changes since the ver [#20]: https://github.com/ruby/set/pull/20 [#29]: https://github.com/ruby/set/pull/29 [#30]: https://github.com/ruby/set/pull/30 +[#38]: https://github.com/ruby/set/pull/38 +[#39]: https://github.com/ruby/set/pull/39 [Feature #17838]: https://bugs.ruby-lang.org/issues/17838 [Feature #16989]: https://bugs.ruby-lang.org/issues/16989 @@ -56,4 +64,5 @@ This is the first release of set as a gem. Here lists the changes since the ver [@jeremyevans]: https://github.com/jeremyevans [@k-tsj]: https://github.com/k-tsj [@knu]: https://github.com/knu +[@kyanagi]: https://github.com/kyanagi [@marcandre]: https://github.com/marcandre From 1c3cded76a150f8c4eaef4049d8a381b373c3048 Mon Sep 17 00:00:00 2001 From: Akinori MUSHA Date: Fri, 29 Nov 2024 19:26:58 +0900 Subject: [PATCH 08/20] Bump VERSION to 1.1.1 --- lib/set.rb | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/lib/set.rb b/lib/set.rb index 122a91e..86bbe40 100644 --- a/lib/set.rb +++ b/lib/set.rb @@ -216,7 +216,7 @@ # has been modified while an element in the set. # class Set - VERSION = "1.1.0" + VERSION = "1.1.1" include Enumerable From 22423dcef3750d7c635553a89c5ac644aac64e01 Mon Sep 17 00:00:00 2001 From: Jeremy Evans Date: Sun, 27 Apr 2025 11:28:43 -0700 Subject: [PATCH 09/20] Exit early if using Ruby 3.5 with core Set Since core Set did not make Ruby 3.5.0-preview1, this currently does some checking to see if Set is already defined and implemented in core. That can be removed after Ruby 3.5.0-preview2 is released. --- lib/set.rb | 8 ++++++++ 1 file changed, 8 insertions(+) diff --git a/lib/set.rb b/lib/set.rb index 86bbe40..a43bf01 100644 --- a/lib/set.rb +++ b/lib/set.rb @@ -1,4 +1,12 @@ # frozen_string_literal: true + +if RUBY_VERSION >= '3.5' + if defined?(Set) && defined?(Set.[]) && Set.method(:[]).source_location.nil? + # Remove defined? ... conditional after Ruby 3.5.0-preview2 + return + end +end + # :markup: markdown # # set.rb - defines the Set class From 6a0b19fc2cc7ecf2eec32de3ce6cd87bb846c4e2 Mon Sep 17 00:00:00 2001 From: Hiroshi SHIBATA Date: Mon, 12 May 2025 17:28:33 +0900 Subject: [PATCH 10/20] Enabled trusted publisher --- .github/workflows/push_gem.yml | 46 ++++++++++++++++++++++++++++++++++ 1 file changed, 46 insertions(+) create mode 100644 .github/workflows/push_gem.yml diff --git a/.github/workflows/push_gem.yml b/.github/workflows/push_gem.yml new file mode 100644 index 0000000..60caca1 --- /dev/null +++ b/.github/workflows/push_gem.yml @@ -0,0 +1,46 @@ +name: Publish gem to rubygems.org + +on: + push: + tags: + - 'v*' + +permissions: + contents: read + +jobs: + push: + if: github.repository == 'ruby/set' + runs-on: ubuntu-latest + + environment: + name: rubygems.org + url: https://rubygems.org/gems/set + + permissions: + contents: write + id-token: write + + steps: + - name: Harden Runner + uses: step-security/harden-runner@0634a2670c59f64b4a01f0f96f84700a4088b9f0 # v2.12.0 + with: + egress-policy: audit + + - uses: actions/checkout@0ad4b8fadaa221de15dcec353f45205ec38ea70b # v4.1.4 + + - name: Set up Ruby + uses: ruby/setup-ruby@a6e6f86333f0a2523ece813039b8b4be04560854 # v1.190.0 + with: + bundler-cache: true + ruby-version: ruby + + - name: Publish to RubyGems + uses: rubygems/release-gem@a25424ba2ba8b387abc8ef40807c2c85b96cbe32 # v1.1.1 + + - name: Create GitHub release + run: | + tag_name="$(git describe --tags --abbrev=0)" + gh release create "${tag_name}" --verify-tag --generate-notes + env: + GITHUB_TOKEN: ${{ secrets.MATZBOT_GITHUB_WORKFLOW_TOKEN }} From 2b8fdf8a768ac65e2138fdbe843c918ae1e84d99 Mon Sep 17 00:00:00 2001 From: Hiroshi SHIBATA Date: Mon, 12 May 2025 17:29:21 +0900 Subject: [PATCH 11/20] Bump up v1.1.2 --- lib/set.rb | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/lib/set.rb b/lib/set.rb index a43bf01..295750f 100644 --- a/lib/set.rb +++ b/lib/set.rb @@ -224,7 +224,7 @@ # has been modified while an element in the set. # class Set - VERSION = "1.1.1" + VERSION = "1.1.2" include Enumerable From aaf610c614d3c7c9dc8632b507834d2b0c184bd9 Mon Sep 17 00:00:00 2001 From: Hiroshi SHIBATA Date: Mon, 12 May 2025 19:54:23 +0900 Subject: [PATCH 12/20] Update the latest versions of GitHub Actions --- .github/workflows/push_gem.yml | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/.github/workflows/push_gem.yml b/.github/workflows/push_gem.yml index 60caca1..1d9171e 100644 --- a/.github/workflows/push_gem.yml +++ b/.github/workflows/push_gem.yml @@ -27,10 +27,10 @@ jobs: with: egress-policy: audit - - uses: actions/checkout@0ad4b8fadaa221de15dcec353f45205ec38ea70b # v4.1.4 + - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2 - name: Set up Ruby - uses: ruby/setup-ruby@a6e6f86333f0a2523ece813039b8b4be04560854 # v1.190.0 + uses: ruby/setup-ruby@e34163cd15f4bb403dcd72d98e295997e6a55798 # v1.238.0 with: bundler-cache: true ruby-version: ruby From 58d9ec1679530f39c1ed94fcfe30ca5e70667a7e Mon Sep 17 00:00:00 2001 From: Hiroshi SHIBATA Date: Tue, 17 Jun 2025 17:24:53 +0900 Subject: [PATCH 13/20] Ruby 3.5+ skip to auto-load SortedSet. We should skip that tests too. --- test/test_sorted_set.rb | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/test/test_sorted_set.rb b/test/test_sorted_set.rb index f7ad7af..09a1e7a 100644 --- a/test/test_sorted_set.rb +++ b/test/test_sorted_set.rb @@ -42,4 +42,4 @@ def test_ok_require var = SortedSet.new.to_s RUBY end -end +end if defined?(SortedSet) From 81747b5bc1f209a317456485d19f4a73e28513ae Mon Sep 17 00:00:00 2001 From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com> Date: Tue, 17 Jun 2025 08:28:49 +0000 Subject: [PATCH 14/20] Bump step-security/harden-runner from 2.12.0 to 2.12.1 Bumps [step-security/harden-runner](https://github.com/step-security/harden-runner) from 2.12.0 to 2.12.1. - [Release notes](https://github.com/step-security/harden-runner/releases) - [Commits](https://github.com/step-security/harden-runner/compare/0634a2670c59f64b4a01f0f96f84700a4088b9f0...002fdce3c6a235733a90a27c80493a3241e56863) --- updated-dependencies: - dependency-name: step-security/harden-runner dependency-version: 2.12.1 dependency-type: direct:production update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] --- .github/workflows/push_gem.yml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/.github/workflows/push_gem.yml b/.github/workflows/push_gem.yml index 1d9171e..f8ac314 100644 --- a/.github/workflows/push_gem.yml +++ b/.github/workflows/push_gem.yml @@ -23,7 +23,7 @@ jobs: steps: - name: Harden Runner - uses: step-security/harden-runner@0634a2670c59f64b4a01f0f96f84700a4088b9f0 # v2.12.0 + uses: step-security/harden-runner@002fdce3c6a235733a90a27c80493a3241e56863 # v2.12.1 with: egress-policy: audit From e158c5dc6f8dd915b884c091e7bc8adb4d5db543 Mon Sep 17 00:00:00 2001 From: Hiroshi SHIBATA Date: Fri, 20 Jun 2025 13:45:03 +0900 Subject: [PATCH 15/20] Use GITHUB_TOKEN instead of admin credential --- .github/workflows/push_gem.yml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/.github/workflows/push_gem.yml b/.github/workflows/push_gem.yml index f8ac314..c2f320e 100644 --- a/.github/workflows/push_gem.yml +++ b/.github/workflows/push_gem.yml @@ -43,4 +43,4 @@ jobs: tag_name="$(git describe --tags --abbrev=0)" gh release create "${tag_name}" --verify-tag --generate-notes env: - GITHUB_TOKEN: ${{ secrets.MATZBOT_GITHUB_WORKFLOW_TOKEN }} + GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }} From 38a8d561c0fbba0e9545b2e21061dc01dd5e0d54 Mon Sep 17 00:00:00 2001 From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com> Date: Mon, 30 Jun 2025 11:32:51 +0000 Subject: [PATCH 16/20] Bump step-security/harden-runner from 2.12.1 to 2.12.2 --- updated-dependencies: - dependency-name: step-security/harden-runner dependency-version: 2.12.2 dependency-type: direct:production update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] --- .github/workflows/push_gem.yml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/.github/workflows/push_gem.yml b/.github/workflows/push_gem.yml index c2f320e..361e93b 100644 --- a/.github/workflows/push_gem.yml +++ b/.github/workflows/push_gem.yml @@ -23,7 +23,7 @@ jobs: steps: - name: Harden Runner - uses: step-security/harden-runner@002fdce3c6a235733a90a27c80493a3241e56863 # v2.12.1 + uses: step-security/harden-runner@6c439dc8bdf85cadbbce9ed30d1c7b959517bc49 # v2.12.2 with: egress-policy: audit From a2f5077372efe00be053aef2138eb8209f51ab25 Mon Sep 17 00:00:00 2001 From: Hiroshi SHIBATA Date: Tue, 5 Aug 2025 09:57:25 +0900 Subject: [PATCH 17/20] Backport to inspect and test changes from ruby/ruby https://github.com/ruby/ruby/commit/3a9c091cf393e8a9c4e4b93d4216f2be3678e488 --- test/test_set.rb | 58 +++++++++++++++++++++++++++++++++++------------- 1 file changed, 43 insertions(+), 15 deletions(-) diff --git a/test/test_set.rb b/test/test_set.rb index 5659460..453ace3 100644 --- a/test/test_set.rb +++ b/test/test_set.rb @@ -785,26 +785,54 @@ def test_join assert_equal('1 & 2 & 3', Set[1, 2, 3].join(' & ')) end - def test_inspect - set1 = Set[1, 2] - assert_equal('#', set1.inspect) + if RUBY_VERSION >= '3.5' + def test_inspect + set1 = Set[1, 2] + assert_equal('Set[1, 2]', set1.inspect) - set2 = Set[Set[0], 1, 2, set1] - assert_equal('#, 1, 2, #}>', set2.inspect) + set2 = Set[Set[0], 1, 2, set1] + assert_equal('Set[Set[0], 1, 2, Set[1, 2]]', set2.inspect) - set1.add(set2) - assert_equal('#, 1, 2, #}>}>', set2.inspect) - end + set1.add(set2) + assert_equal('Set[Set[0], 1, 2, Set[1, 2, Set[...]]]', set2.inspect) - def test_to_s - set1 = Set[1, 2] - assert_equal('#', set1.to_s) + c = Class.new(Set) + c.set_temporary_name("_MySet") + assert_equal('_MySet[1, 2]', c[1, 2].inspect) + end - set2 = Set[Set[0], 1, 2, set1] - assert_equal('#, 1, 2, #}>', set2.to_s) + def test_to_s + set1 = Set[1, 2] + assert_equal('Set[1, 2]', set1.to_s) + + set2 = Set[Set[0], 1, 2, set1] + assert_equal('Set[Set[0], 1, 2, Set[1, 2]]', set2.to_s) + + set1.add(set2) + assert_equal('Set[Set[0], 1, 2, Set[1, 2, Set[...]]]', set2.to_s) + end + else + def test_inspect + set1 = Set[1, 2] + assert_equal('#', set1.inspect) - set1.add(set2) - assert_equal('#, 1, 2, #}>}>', set2.to_s) + set2 = Set[Set[0], 1, 2, set1] + assert_equal('#, 1, 2, #}>', set2.inspect) + + set1.add(set2) + assert_equal('#, 1, 2, #}>}>', set2.inspect) + end + + def test_to_s + set1 = Set[1, 2] + assert_equal('#', set1.to_s) + + set2 = Set[Set[0], 1, 2, set1] + assert_equal('#, 1, 2, #}>', set2.to_s) + + set1.add(set2) + assert_equal('#, 1, 2, #}>}>', set2.to_s) + end end def test_compare_by_identity From 7573caec58228ea167adf923b89861c8c3228e51 Mon Sep 17 00:00:00 2001 From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com> Date: Tue, 5 Aug 2025 01:00:46 +0000 Subject: [PATCH 18/20] Bump step-security/harden-runner from 2.12.2 to 2.13.0 Bumps [step-security/harden-runner](https://github.com/step-security/harden-runner) from 2.12.2 to 2.13.0. - [Release notes](https://github.com/step-security/harden-runner/releases) - [Commits](https://github.com/step-security/harden-runner/compare/6c439dc8bdf85cadbbce9ed30d1c7b959517bc49...ec9f2d5744a09debf3a187a3f4f675c53b671911) --- updated-dependencies: - dependency-name: step-security/harden-runner dependency-version: 2.13.0 dependency-type: direct:production update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] --- .github/workflows/push_gem.yml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/.github/workflows/push_gem.yml b/.github/workflows/push_gem.yml index 361e93b..74f18d7 100644 --- a/.github/workflows/push_gem.yml +++ b/.github/workflows/push_gem.yml @@ -23,7 +23,7 @@ jobs: steps: - name: Harden Runner - uses: step-security/harden-runner@6c439dc8bdf85cadbbce9ed30d1c7b959517bc49 # v2.12.2 + uses: step-security/harden-runner@ec9f2d5744a09debf3a187a3f4f675c53b671911 # v2.13.0 with: egress-policy: audit From a8abc5bd6f42b1268b578959b4226b08243433f6 Mon Sep 17 00:00:00 2001 From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com> Date: Mon, 18 Aug 2025 13:06:42 +0000 Subject: [PATCH 19/20] Bump actions/checkout from 4 to 5 Bumps [actions/checkout](https://github.com/actions/checkout) from 4 to 5. - [Release notes](https://github.com/actions/checkout/releases) - [Commits](https://github.com/actions/checkout/compare/v4...v5) --- updated-dependencies: - dependency-name: actions/checkout dependency-version: '5' dependency-type: direct:production update-type: version-update:semver-major ... Signed-off-by: dependabot[bot] --- .github/workflows/push_gem.yml | 2 +- .github/workflows/test.yml | 2 +- 2 files changed, 2 insertions(+), 2 deletions(-) diff --git a/.github/workflows/push_gem.yml b/.github/workflows/push_gem.yml index 74f18d7..ba1f321 100644 --- a/.github/workflows/push_gem.yml +++ b/.github/workflows/push_gem.yml @@ -27,7 +27,7 @@ jobs: with: egress-policy: audit - - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2 + - uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5.0.0 - name: Set up Ruby uses: ruby/setup-ruby@e34163cd15f4bb403dcd72d98e295997e6a55798 # v1.238.0 diff --git a/.github/workflows/test.yml b/.github/workflows/test.yml index 16018e1..9e55565 100644 --- a/.github/workflows/test.yml +++ b/.github/workflows/test.yml @@ -18,7 +18,7 @@ jobs: os: [ ubuntu-latest, macos-latest ] runs-on: ${{ matrix.os }} steps: - - uses: actions/checkout@v4 + - uses: actions/checkout@v5 - name: Set up Ruby uses: ruby/setup-ruby@v1 with: From 5fbadae2de20e95959c96880ec6d5001d507091e Mon Sep 17 00:00:00 2001 From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com> Date: Mon, 15 Sep 2025 09:51:52 +0000 Subject: [PATCH 20/20] Bump step-security/harden-runner from 2.13.0 to 2.13.1 Bumps [step-security/harden-runner](https://github.com/step-security/harden-runner) from 2.13.0 to 2.13.1. - [Release notes](https://github.com/step-security/harden-runner/releases) - [Commits](https://github.com/step-security/harden-runner/compare/ec9f2d5744a09debf3a187a3f4f675c53b671911...f4a75cfd619ee5ce8d5b864b0d183aff3c69b55a) --- updated-dependencies: - dependency-name: step-security/harden-runner dependency-version: 2.13.1 dependency-type: direct:production update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] --- .github/workflows/push_gem.yml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/.github/workflows/push_gem.yml b/.github/workflows/push_gem.yml index ba1f321..633377c 100644 --- a/.github/workflows/push_gem.yml +++ b/.github/workflows/push_gem.yml @@ -23,7 +23,7 @@ jobs: steps: - name: Harden Runner - uses: step-security/harden-runner@ec9f2d5744a09debf3a187a3f4f675c53b671911 # v2.13.0 + uses: step-security/harden-runner@f4a75cfd619ee5ce8d5b864b0d183aff3c69b55a # v2.13.1 with: egress-policy: audit