Rust 1.90 for the image and the bot; the security bump to time 0.3.47 needs 1.88

7ace3b9 · Gabriel Morell · 2026-10-25 20:36

4 files +3 -3

Files changed

modified .github/workflows/dependency-updates.yml
+2 −2
@@ -40,14 +40,14 @@ jobs:
40 40 # changed anything before pushing it.
41 41 fetch-depth: 0
42 42
43 − # The toolchain the Dockerfile builds the image with (rust:1.83): a
43 + # The toolchain the Dockerfile builds the image with (rust:1.90): a
44 44 # lockfile is only as good as the resolver that wrote it, and a bump
45 45 # that needs a newer compiler than the image's should fail here,
46 46 # not there. Installed directly, since this runner sets ImageOS to
47 47 # "selfhosted" over anything a workflow says.
48 48 - name: Rust
49 49 run: |
50 − curl -sSf https://sh.rustup.rs | sh -s -- -y --profile minimal --default-toolchain 1.83
50 + curl -sSf https://sh.rustup.rs | sh -s -- -y --profile minimal --default-toolchain 1.90.0
51 51 echo "$HOME/.cargo/bin" >> "$GITHUB_PATH"
52 52
53 53 # Pinned and checked, as in audit.yml; bump both together.
modified Dockerfile
+1 −1
@@ -1,4 +1,4 @@
1 −FROM rust:1.83 as builder
1 +FROM rust:1.90 as builder
2 2 WORKDIR /app
3 3 COPY . .
4 4 RUN cargo build --release

Parents: f1ad88e