From 1df83938fc2dbe51814d33a9b4e4dfdb3bafa234 Mon Sep 17 00:00:00 2001 From: Derek Miller <1340081+derek-miller@users.noreply.github.com> Date: Sat, 17 Oct 2026 14:23:14 -0500 Subject: [PATCH] ci: bump action and tool pins, add Lua 5.5 to the test matrix action-gh-release v1 runs on the retired Node 16 runtime, which put the release job at risk; the other actions were one or more majors behind. --- .github/workflows/build.yml | 38 +++++++++++++++++------------------ .github/workflows/release.yml | 10 ++++----- CLAUDE.md | 6 +++--- README.md | 2 +- 4 files changed, 28 insertions(+), 28 deletions(-) diff --git a/.github/workflows/build.yml b/.github/workflows/build.yml index e0566e0..828a874 100644 --- a/.github/workflows/build.yml +++ b/.github/workflows/build.yml @@ -15,26 +15,26 @@ jobs: runs-on: ubuntu-26.04 name: Check steps: - - uses: actions/checkout@v4 + - uses: actions/checkout@v7 - name: Setup Lua - uses: leafo/gh-actions-lua@v11 + uses: leafo/gh-actions-lua@v13 with: luaVersion: '5.4' - name: Setup LuaRocks - uses: leafo/gh-actions-luarocks@v5 + uses: leafo/gh-actions-luarocks@v6 with: - luarocksVersion: "3.12.2" + luarocksVersion: "3.13.0" - name: Install luacheck run: luarocks install luacheck - name: Install stylua - uses: JohnnyMorganz/stylua-action@v4 + uses: JohnnyMorganz/stylua-action@v5 with: token: ${{ secrets.GITHUB_TOKEN }} - version: v2.1.0 + version: v2.6.0 args: false # Will be run as part of `make check` - name: Install lua-language-server @@ -43,7 +43,7 @@ jobs: | tar -xz -C "$RUNNER_TEMP" echo "$RUNNER_TEMP/bin" >> "$GITHUB_PATH" env: - LUALS: 3.19.0 + LUALS: 3.19.2 - name: Check run: make check @@ -55,14 +55,14 @@ jobs: strategy: fail-fast: true matrix: - lua-version: ['5.1', '5.2', '5.3', '5.4', 'luajit-2.0', 'luajit-2.1'] + lua-version: ['5.1', '5.2', '5.3', '5.4', '5.5', 'luajit-2.0', 'luajit-2.1'] name: Lua ${{ matrix.lua-version }} steps: - - uses: actions/checkout@v4 + - uses: actions/checkout@v7 - name: Setup Lua - uses: leafo/gh-actions-lua@v11 + uses: leafo/gh-actions-lua@v13 with: luaVersion: ${{ matrix.lua-version }} @@ -119,17 +119,17 @@ jobs: name: lua-openssl ${{ matrix.rock }} (${{ matrix.label }}) steps: - - uses: actions/checkout@v4 + - uses: actions/checkout@v7 - name: Setup Lua - uses: leafo/gh-actions-lua@v11 + uses: leafo/gh-actions-lua@v13 with: luaVersion: '5.4' - name: Setup LuaRocks - uses: leafo/gh-actions-luarocks@v5 + uses: leafo/gh-actions-luarocks@v6 with: - luarocksVersion: "3.12.2" + luarocksVersion: "3.13.0" # GCC 14+ makes incompatible-pointer-types an error, which 0.8.5's ocsp.c trips. - name: Install lua-openssl ${{ matrix.rock }} @@ -181,17 +181,17 @@ jobs: runs-on: ubuntu-26.04 name: Build Combined Module steps: - - uses: actions/checkout@v4 + - uses: actions/checkout@v7 - name: Setup Lua - uses: leafo/gh-actions-lua@v11 + uses: leafo/gh-actions-lua@v13 with: luaVersion: '5.4' - name: Setup LuaRocks - uses: leafo/gh-actions-luarocks@v5 + uses: leafo/gh-actions-luarocks@v6 with: - luarocksVersion: "3.12.2" + luarocksVersion: "3.13.0" - name: Install amalg run: luarocks install amalg @@ -224,7 +224,7 @@ jobs: fi - name: Upload artifacts - uses: actions/upload-artifact@v4 + uses: actions/upload-artifact@v7 with: name: crypto.lua path: build/crypto.lua diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml index 5ca96ef..8b909f6 100644 --- a/.github/workflows/release.yml +++ b/.github/workflows/release.yml @@ -13,19 +13,19 @@ jobs: runs-on: ubuntu-26.04 steps: - name: Checkout code - uses: actions/checkout@v4 + uses: actions/checkout@v7 with: fetch-depth: 0 - name: Setup Lua - uses: leafo/gh-actions-lua@v11 + uses: leafo/gh-actions-lua@v13 with: luaVersion: '5.4' - name: Setup LuaRocks - uses: leafo/gh-actions-luarocks@v5 + uses: leafo/gh-actions-luarocks@v6 with: - luarocksVersion: "3.12.2" + luarocksVersion: "3.13.0" - name: Install amalg run: luarocks install amalg @@ -36,7 +36,7 @@ jobs: make build - name: Create Release - uses: softprops/action-gh-release@v1 + uses: softprops/action-gh-release@v3 with: draft: false prerelease: ${{ contains(github.ref_name, '-rc') || contains(github.ref_name, '-beta') || contains(github.ref_name, '-alpha') }} diff --git a/CLAUDE.md b/CLAUDE.md index f6dc070..485c997 100644 --- a/CLAUDE.md +++ b/CLAUDE.md @@ -114,7 +114,7 @@ code from being diagnosed here, `library` keeps its definitions resolvable. `runtime.version` is pinned to LuaJIT because that is what Control4 runs. The server version is not pinned locally. `install-deps` takes whatever Homebrew -has while CI pins 3.19.0, so compare the version the target prints if a local +has while CI pins 3.19.2, so compare the version the target prints if a local result disagrees with CI. Part of `check`, so CI enforces it. @@ -347,8 +347,8 @@ injected from git tags during release. - **build.yml**: on push/PR to `main` or `master`. - `check` — `make check` (format-check, luacheck, typecheck against - lua-language-server 3.19.0). - - `test` — `make test-all` across Lua 5.1–5.4 and LuaJIT 2.0/2.1. + lua-language-server 3.19.2). + - `test` — `make test-all` across Lua 5.1–5.5 and LuaJIT 2.0/2.1. - `openssl-matrix` — installs the real `lua-openssl` rocks `0.8.5-1`, `0.9.2-2` and `0.11.1-1` and runs the suite against each with acceleration both on and off. This is the only place the DriverWorks feature table above is checked diff --git a/README.md b/README.md index 556456a..a758470 100644 --- a/README.md +++ b/README.md @@ -2,7 +2,7 @@ A pure Lua implementation of common cryptographic primitives with **zero external dependencies** and **optional OpenSSL acceleration**. Runs on Lua 5.1, 5.2, 5.3, -5.4, and LuaJIT. +5.4, 5.5, and LuaJIT. Hashing (SHA-256/512, BLAKE2), AEAD ciphers (ChaCha20-Poly1305, AES-GCM), the Poly1305 MAC, the ChaCha20 stream cipher, and Curve25519/448 Diffie-Hellman —