modelcontextprotocol/rust-sdk
Watch
1
0
Fork
You've already forked rust-sdk
 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions 1

ci: pin GitHub Actions to commit SHAs (#1216)

Browse source
This commit is contained in:
Jack Amadeo 2026-08-25 14:50:29 -04:00 • committed by GitHub
commit 78cf9f1cb6
No known key found for this signature in database
GPG key ID: B5690EEEBB952194
7 changed files with 65 additions and 65 deletions
Download patch file Download diff file Expand all files Collapse all files

2
.github/workflows/auto-label-pr.yml vendored
View file

@ -20,7 +20,7 @@ jobs:
PR_URL: ${{ github.event.pull_request.html_url }} PR_URL: ${{ github.event.pull_request.html_url }}
steps: steps:
- uses: actions/labeler@v7 - uses: actions/labeler@bf12e9b00b37c5c0ca2b87b79b2daf7891dbda13 # v7
with: with:
# Auto-include paths starting with dot (e.g. .github) # Auto-include paths starting with dot (e.g. .github)
dot: true dot: true

92
.github/workflows/ci.yml vendored
View file

@ -18,12 +18,12 @@ jobs:
runs-on: ubuntu-latest runs-on: ubuntu-latest
if: github.event_name == 'pull_request' if: github.event_name == 'pull_request'
steps: steps:
- uses: actions/checkout@v7 - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
with: with:
fetch-depth: 0 fetch-depth: 0
- name: Setup Node.js - name: Setup Node.js
uses: actions/setup-node@v7 uses: actions/setup-node@820762786026740c76f36085b0efc47a31fe5020 # v7
with: with:
node-version: '22' node-version: '22'
@ -39,7 +39,7 @@ jobs:
name: Code Formatting name: Code Formatting
runs-on: ubuntu-latest runs-on: ubuntu-latest
steps: steps:
- uses: actions/checkout@v7 - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
- name: Install Rust fmt - name: Install Rust fmt
run: rustup toolchain install nightly --component rustfmt run: rustup toolchain install nightly --component rustfmt
@ -51,12 +51,12 @@ jobs:
name: Lint with Clippy name: Lint with Clippy
runs-on: ubuntu-latest runs-on: ubuntu-latest
steps: steps:
- uses: actions/checkout@v7 - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
- name: Install Rust - name: Install Rust
uses: dtolnay/rust-toolchain@stable uses: dtolnay/rust-toolchain@4360b52568e2003a75bf9bc1d59f33a8e3fc893c # stable
- uses: Swatinem/rust-cache@v2 - uses: Swatinem/rust-cache@6323deb102c322ba6fcbdcafc7e3dddab59af2b6 # v2
- name: Run clippy - name: Run clippy
run: cargo clippy --all-targets --all-features -- -D warnings run: cargo clippy --all-targets --all-features -- -D warnings
@ -66,17 +66,17 @@ jobs:
runs-on: ubuntu-latest runs-on: ubuntu-latest
if: github.event_name == 'pull_request' if: github.event_name == 'pull_request'
steps: steps:
- uses: actions/checkout@v7 - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
with: with:
fetch-depth: 0 fetch-depth: 0
- name: Install Rust - name: Install Rust
uses: dtolnay/rust-toolchain@stable uses: dtolnay/rust-toolchain@4360b52568e2003a75bf9bc1d59f33a8e3fc893c # stable
- uses: Swatinem/rust-cache@v2 - uses: Swatinem/rust-cache@6323deb102c322ba6fcbdcafc7e3dddab59af2b6 # v2
- name: Install cargo-semver-checks - name: Install cargo-semver-checks
uses: taiki-e/install-action@v2.85.13 uses: taiki-e/install-action@82cd3e7658a6f96c86c0234aeeda1748937cb0a1 # v2.85.13
with: with:
tool: cargo-semver-checks tool: cargo-semver-checks
@ -117,7 +117,7 @@ jobs:
runs-on: ubuntu-latest runs-on: ubuntu-latest
if: github.event_name == 'pull_request' if: github.event_name == 'pull_request'
steps: steps:
- uses: actions/checkout@v7 - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
with: with:
fetch-depth: 0 fetch-depth: 0
@ -125,12 +125,12 @@ jobs:
# to be installed (it does not need to be the default; the tool invokes it # to be installed (it does not need to be the default; the tool invokes it
# via `cargo +nightly`). # via `cargo +nightly`).
- name: Install Rust - name: Install Rust
uses: dtolnay/rust-toolchain@nightly uses: dtolnay/rust-toolchain@7c8d7d138f5c09cef361f8214cf96882cd029cdb # nightly
- uses: Swatinem/rust-cache@v2 - uses: Swatinem/rust-cache@6323deb102c322ba6fcbdcafc7e3dddab59af2b6 # v2
- name: Install cargo-public-api - name: Install cargo-public-api
uses: taiki-e/install-action@v2.85.13 uses: taiki-e/install-action@82cd3e7658a6f96c86c0234aeeda1748937cb0a1 # v2.85.13
with: with:
tool: cargo-public-api tool: cargo-public-api
@ -201,9 +201,9 @@ jobs:
name: spell check with typos name: spell check with typos
runs-on: ubuntu-latest runs-on: ubuntu-latest
steps: steps:
- uses: actions/checkout@v7 - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
- name: Spell Check Repo - name: Spell Check Repo
uses: crate-ci/typos@master uses: crate-ci/typos@1a51d4b5a03bb97576af186c813af67e9137ba7c # master
msrv: msrv:
name: Check MSRV name: Check MSRV
@ -211,7 +211,7 @@ jobs:
permissions: permissions:
contents: read contents: read
steps: steps:
- uses: actions/checkout@v7 - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
- name: Read MSRV from Cargo.toml - name: Read MSRV from Cargo.toml
run: | run: |
@ -220,11 +220,11 @@ jobs:
echo "MSRV=$MSRV" >> "$GITHUB_ENV" echo "MSRV=$MSRV" >> "$GITHUB_ENV"
- name: Install MSRV Rust - name: Install MSRV Rust
uses: dtolnay/rust-toolchain@master uses: dtolnay/rust-toolchain@6c977a6ca4077a0ceb28ffbe03f59d46e9ac8772 # master
with: with:
toolchain: ${{ env.MSRV }} toolchain: ${{ env.MSRV }}
- uses: Swatinem/rust-cache@v2 - uses: Swatinem/rust-cache@6323deb102c322ba6fcbdcafc7e3dddab59af2b6 # v2
- name: Check default workspace members with MSRV - name: Check default workspace members with MSRV
run: cargo +${{ env.MSRV }} check --all-targets --all-features run: cargo +${{ env.MSRV }} check --all-targets --all-features
@ -233,19 +233,19 @@ jobs:
name: Run Tests name: Run Tests
runs-on: ubuntu-latest runs-on: ubuntu-latest
steps: steps:
- uses: actions/checkout@v7 - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
# install nodejs # install nodejs
- name: Setup Node.js - name: Setup Node.js
uses: actions/setup-node@v7 uses: actions/setup-node@820762786026740c76f36085b0efc47a31fe5020 # v7
with: with:
node-version: '22' node-version: '22'
- name: Install uv - name: Install uv
uses: astral-sh/setup-uv@v7 uses: astral-sh/setup-uv@37802adc94f370d6bfd71619e3f0bf239e1f3b78 # v7
- name: Install Rust - name: Install Rust
uses: dtolnay/rust-toolchain@stable uses: dtolnay/rust-toolchain@4360b52568e2003a75bf9bc1d59f33a8e3fc893c # stable
- name: Set up Python - name: Set up Python
run: uv python install run: uv python install
@ -253,7 +253,7 @@ jobs:
- name: Create venv for python - name: Create venv for python
run: uv venv run: uv venv
- uses: Swatinem/rust-cache@v2 - uses: Swatinem/rust-cache@6323deb102c322ba6fcbdcafc7e3dddab59af2b6 # v2
- name: Run tests - name: Run tests
run: cargo test --all-features run: cargo test --all-features
@ -262,19 +262,19 @@ jobs:
name: Run Tests (no local feature) name: Run Tests (no local feature)
runs-on: ubuntu-latest runs-on: ubuntu-latest
steps: steps:
- uses: actions/checkout@v7 - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
# install nodejs # install nodejs
- name: Setup Node.js - name: Setup Node.js
uses: actions/setup-node@v7 uses: actions/setup-node@820762786026740c76f36085b0efc47a31fe5020 # v7
with: with:
node-version: '22' node-version: '22'
- name: Install uv - name: Install uv
uses: astral-sh/setup-uv@v7 uses: astral-sh/setup-uv@37802adc94f370d6bfd71619e3f0bf239e1f3b78 # v7
- name: Install Rust - name: Install Rust
uses: dtolnay/rust-toolchain@stable uses: dtolnay/rust-toolchain@4360b52568e2003a75bf9bc1d59f33a8e3fc893c # stable
- name: Set up Python - name: Set up Python
run: uv python install run: uv python install
@ -282,7 +282,7 @@ jobs:
- name: Create venv for python - name: Create venv for python
run: uv venv run: uv venv
- uses: Swatinem/rust-cache@v2 - uses: Swatinem/rust-cache@6323deb102c322ba6fcbdcafc7e3dddab59af2b6 # v2
- name: Run tests without local feature - name: Run tests without local feature
run: | run: |
@ -298,19 +298,19 @@ jobs:
permissions: permissions:
contents: write contents: write
steps: steps:
- uses: actions/checkout@v7 - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
# install nodejs # install nodejs
- name: Setup Node.js - name: Setup Node.js
uses: actions/setup-node@v7 uses: actions/setup-node@820762786026740c76f36085b0efc47a31fe5020 # v7
with: with:
node-version: '22' node-version: '22'
- name: Install uv - name: Install uv
uses: astral-sh/setup-uv@v7 uses: astral-sh/setup-uv@37802adc94f370d6bfd71619e3f0bf239e1f3b78 # v7
- name: Install Rust - name: Install Rust
uses: dtolnay/rust-toolchain@stable uses: dtolnay/rust-toolchain@4360b52568e2003a75bf9bc1d59f33a8e3fc893c # stable
- name: Set up Python - name: Set up Python
run: uv python install run: uv python install
@ -318,7 +318,7 @@ jobs:
- name: Create venv for python - name: Create venv for python
run: uv venv run: uv venv
- uses: Swatinem/rust-cache@v2 - uses: Swatinem/rust-cache@6323deb102c322ba6fcbdcafc7e3dddab59af2b6 # v2
- name: Install cargo-llvm-cov - name: Install cargo-llvm-cov
run: cargo install cargo-llvm-cov run: cargo install cargo-llvm-cov
@ -333,19 +333,19 @@ jobs:
name: Example test name: Example test
runs-on: ubuntu-latest runs-on: ubuntu-latest
steps: steps:
- uses: actions/checkout@v7 - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
# install nodejs # install nodejs
- name: Setup Node.js - name: Setup Node.js
uses: actions/setup-node@v7 uses: actions/setup-node@820762786026740c76f36085b0efc47a31fe5020 # v7
with: with:
node-version: '22' node-version: '22'
- name: Install uv - name: Install uv
uses: astral-sh/setup-uv@v7 uses: astral-sh/setup-uv@37802adc94f370d6bfd71619e3f0bf239e1f3b78 # v7
- name: Install Rust - name: Install Rust
uses: dtolnay/rust-toolchain@stable uses: dtolnay/rust-toolchain@4360b52568e2003a75bf9bc1d59f33a8e3fc893c # stable
- name: Set up Python - name: Set up Python
run: uv python install run: uv python install
@ -353,7 +353,7 @@ jobs:
- name: Create venv for python - name: Create venv for python
run: uv venv run: uv venv
- uses: Swatinem/rust-cache@v2 - uses: Swatinem/rust-cache@6323deb102c322ba6fcbdcafc7e3dddab59af2b6 # v2
- name: Add target WASI preview 2 - name: Add target WASI preview 2
run: | run: |
@ -389,12 +389,12 @@ jobs:
name: Security Audit name: Security Audit
runs-on: ubuntu-latest runs-on: ubuntu-latest
steps: steps:
- uses: actions/checkout@v7 - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
- name: Install Rust - name: Install Rust
uses: dtolnay/rust-toolchain@stable uses: dtolnay/rust-toolchain@4360b52568e2003a75bf9bc1d59f33a8e3fc893c # stable
- uses: Swatinem/rust-cache@v2 - uses: Swatinem/rust-cache@6323deb102c322ba6fcbdcafc7e3dddab59af2b6 # v2
- name: Install cargo-audit - name: Install cargo-audit
run: cargo install cargo-audit run: cargo install cargo-audit
@ -406,12 +406,12 @@ jobs:
name: Generate Documentation name: Generate Documentation
runs-on: ubuntu-latest runs-on: ubuntu-latest
steps: steps:
- uses: actions/checkout@v7 - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
- name: Install Rust - name: Install Rust
uses: dtolnay/rust-toolchain@nightly uses: dtolnay/rust-toolchain@7c8d7d138f5c09cef361f8214cf96882cd029cdb # nightly
- uses: Swatinem/rust-cache@v2 - uses: Swatinem/rust-cache@6323deb102c322ba6fcbdcafc7e3dddab59af2b6 # v2
- name: Generate documentation - name: Generate documentation
run: | run: |
@ -432,7 +432,7 @@ jobs:
# This happened recently in the attack on `tj-actions/changed-files`, but # This happened recently in the attack on `tj-actions/changed-files`, but
# has happened many times before as well. # has happened many times before as well.
- uses: actions/checkout@v7 - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
- name: Update Rust - name: Update Rust
run: | run: |

8
.github/workflows/codeql.yml vendored
View file

@ -21,16 +21,16 @@ jobs:
language: [rust, javascript-typescript, python, actions] language: [rust, javascript-typescript, python, actions]
steps: steps:
- name: Checkout repository - name: Checkout repository
uses: actions/checkout@v7 uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
- name: Initialize CodeQL - name: Initialize CodeQL
uses: github/codeql-action/init@v4.37.7 uses: github/codeql-action/init@ff2f1c621b7f889edc0d3c761ac2e6a3f8cdb0dd # v4.37.7
with: with:
languages: ${{ matrix.language }} languages: ${{ matrix.language }}
config-file: ./.github/codeql/codeql-config.yml config-file: ./.github/codeql/codeql-config.yml
- name: Autobuild - name: Autobuild
uses: github/codeql-action/autobuild@v4.37.7 uses: github/codeql-action/autobuild@ff2f1c621b7f889edc0d3c761ac2e6a3f8cdb0dd # v4.37.7
- name: Perform CodeQL Analysis - name: Perform CodeQL Analysis
uses: github/codeql-action/analyze@v4.37.7 uses: github/codeql-action/analyze@ff2f1c621b7f889edc0d3c761ac2e6a3f8cdb0dd # v4.37.7

16
.github/workflows/conformance.yml vendored
View file

@ -21,12 +21,12 @@ jobs:
permissions: permissions:
contents: read contents: read
steps: steps:
- uses: actions/checkout@v7 - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
- name: Install Rust toolchain - name: Install Rust toolchain
uses: dtolnay/rust-toolchain@stable uses: dtolnay/rust-toolchain@4360b52568e2003a75bf9bc1d59f33a8e3fc893c # stable
- uses: Swatinem/rust-cache@v2 - uses: Swatinem/rust-cache@6323deb102c322ba6fcbdcafc7e3dddab59af2b6 # v2
- name: Build conformance binaries - name: Build conformance binaries
run: cargo build -p mcp-conformance run: cargo build -p mcp-conformance
@ -91,7 +91,7 @@ jobs:
- name: Upload results - name: Upload results
if: always() if: always()
uses: actions/upload-artifact@v7 uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7.0.1
with: with:
name: conformance-server-results name: conformance-server-results
path: | path: |
@ -104,12 +104,12 @@ jobs:
permissions: permissions:
contents: read contents: read
steps: steps:
- uses: actions/checkout@v7 - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
- name: Install Rust toolchain - name: Install Rust toolchain
uses: dtolnay/rust-toolchain@stable uses: dtolnay/rust-toolchain@4360b52568e2003a75bf9bc1d59f33a8e3fc893c # stable
- uses: Swatinem/rust-cache@v2 - uses: Swatinem/rust-cache@6323deb102c322ba6fcbdcafc7e3dddab59af2b6 # v2
- name: Build conformance binaries - name: Build conformance binaries
run: cargo build -p mcp-conformance run: cargo build -p mcp-conformance
@ -140,7 +140,7 @@ jobs:
- name: Upload results - name: Upload results
if: always() if: always()
uses: actions/upload-artifact@v7 uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7.0.1
with: with:
name: conformance-client-results name: conformance-client-results
path: conformance-client-results path: conformance-client-results

8
.github/workflows/release-plz.yml vendored
View file

@ -20,11 +20,11 @@ jobs:
contents: write contents: write
steps: steps:
- name: Checkout repository - name: Checkout repository
uses: actions/checkout@v7 uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
with: with:
fetch-depth: 0 fetch-depth: 0
- name: Install Rust toolchain - name: Install Rust toolchain
uses: dtolnay/rust-toolchain@stable uses: dtolnay/rust-toolchain@4360b52568e2003a75bf9bc1d59f33a8e3fc893c # stable
with: with:
toolchain: "1.92" toolchain: "1.92"
# Using fork until semver_check_features support is released upstream. # Using fork until semver_check_features support is released upstream.
@ -51,11 +51,11 @@ jobs:
cancel-in-progress: false cancel-in-progress: false
steps: steps:
- name: Checkout repository - name: Checkout repository
uses: actions/checkout@v7 uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
with: with:
fetch-depth: 0 fetch-depth: 0
- name: Install Rust toolchain - name: Install Rust toolchain
uses: dtolnay/rust-toolchain@stable uses: dtolnay/rust-toolchain@4360b52568e2003a75bf9bc1d59f33a8e3fc893c # stable
with: with:
toolchain: "1.92" toolchain: "1.92"
# Using fork until semver_check_features support is released upstream. # Using fork until semver_check_features support is released upstream.

2
.github/workflows/stale.yml vendored
View file

@ -12,7 +12,7 @@ jobs:
issues: write issues: write
pull-requests: write pull-requests: write
steps: steps:
- uses: actions/stale@v11 - uses: actions/stale@4391f3da665fdf50b6810c1a66712fb9ba21aa93 # v11
with: with:
days-before-stale: 60 days-before-stale: 60
days-before-close: 14 days-before-close: 14

2
.github/workflows/triage.yml vendored
View file

@ -39,7 +39,7 @@ jobs:
TRIAGE_MODEL: ${{ vars.TRIAGE_MODEL || 'gpt-4o-mini' }} TRIAGE_MODEL: ${{ vars.TRIAGE_MODEL || 'gpt-4o-mini' }}
steps: steps:
- uses: actions/checkout@v7 - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
- name: Install jq - name: Install jq
run: sudo apt-get install -y jq run: sudo apt-get install -y jq