ci: bump action and tool pins, add Lua 5.5 to the test matrix

.github/workflows/build.yml

@@ -15,26 +15,26 @@ jobs:
     runs-on: ubuntu-26.04
     name: Check
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v7
 
       - name: Setup Lua
-        uses: leafo/gh-actions-lua@v11
+        uses: leafo/gh-actions-lua@v13
         with:
           luaVersion: '5.4'
 
       - name: Setup LuaRocks
-        uses: leafo/gh-actions-luarocks@v5
+        uses: leafo/gh-actions-luarocks@v6
         with:
-          luarocksVersion: "3.12.2"
+          luarocksVersion: "3.13.0"
 
       - name: Install luacheck
         run: luarocks install luacheck
 
       - name: Install stylua
-        uses: JohnnyMorganz/stylua-action@v4
+        uses: JohnnyMorganz/stylua-action@v5
         with:
           token: ${{ secrets.GITHUB_TOKEN }}
-          version: v2.1.0
+          version: v2.6.0
           args: false # Will be run as part of `make check`
 
       - name: Install lua-language-server
@@ -43,7 +43,7 @@ jobs:
             | tar -xz -C "$RUNNER_TEMP"
           echo "$RUNNER_TEMP/bin" >> "$GITHUB_PATH"
         env:
-          LUALS: 3.19.0
+          LUALS: 3.19.2
 
       - name: Check
         run: make check
@@ -55,14 +55,14 @@ jobs:
     strategy:
       fail-fast: true
       matrix:
-        lua-version: ['5.1', '5.2', '5.3', '5.4', 'luajit-2.0', 'luajit-2.1']
+        lua-version: ['5.1', '5.2', '5.3', '5.4', '5.5', 'luajit-2.0', 'luajit-2.1']
 
     name: Lua ${{ matrix.lua-version }}
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v7
 
       - name: Setup Lua
-        uses: leafo/gh-actions-lua@v11
+        uses: leafo/gh-actions-lua@v13
         with:
           luaVersion: ${{ matrix.lua-version }}
 
@@ -119,17 +119,17 @@ jobs:
 
     name: lua-openssl ${{ matrix.rock }} (${{ matrix.label }})
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v7
 
       - name: Setup Lua
-        uses: leafo/gh-actions-lua@v11
+        uses: leafo/gh-actions-lua@v13
         with:
           luaVersion: '5.4'
 
       - name: Setup LuaRocks
-        uses: leafo/gh-actions-luarocks@v5
+        uses: leafo/gh-actions-luarocks@v6
         with:
-          luarocksVersion: "3.12.2"
+          luarocksVersion: "3.13.0"
 
       # GCC 14+ makes incompatible-pointer-types an error, which 0.8.5's ocsp.c trips.
       - name: Install lua-openssl ${{ matrix.rock }}
@@ -181,17 +181,17 @@ jobs:
     runs-on: ubuntu-26.04
     name: Build Combined Module
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v7
 
       - name: Setup Lua
-        uses: leafo/gh-actions-lua@v11
+        uses: leafo/gh-actions-lua@v13
         with:
           luaVersion: '5.4'
 
       - name: Setup LuaRocks
-        uses: leafo/gh-actions-luarocks@v5
+        uses: leafo/gh-actions-luarocks@v6
         with:
-          luarocksVersion: "3.12.2"
+          luarocksVersion: "3.13.0"
 
       - name: Install amalg
         run: luarocks install amalg
@@ -224,7 +224,7 @@ jobs:
           fi
 
       - name: Upload artifacts
-        uses: actions/upload-artifact@v4
+        uses: actions/upload-artifact@v7
         with:
           name: crypto.lua
           path: build/crypto.lua

.github/workflows/release.yml

@@ -13,19 +13,19 @@ jobs:
     runs-on: ubuntu-26.04
     steps:
       - name: Checkout code
-        uses: actions/checkout@v4
+        uses: actions/checkout@v7
         with:
           fetch-depth: 0
 
       - name: Setup Lua
-        uses: leafo/gh-actions-lua@v11
+        uses: leafo/gh-actions-lua@v13
         with:
           luaVersion: '5.4'
 
       - name: Setup LuaRocks
-        uses: leafo/gh-actions-luarocks@v5
+        uses: leafo/gh-actions-luarocks@v6
         with:
-          luarocksVersion: "3.12.2"
+          luarocksVersion: "3.13.0"
 
       - name: Install amalg
         run: luarocks install amalg
@@ -36,7 +36,7 @@ jobs:
           make build
 
       - name: Create Release
-        uses: softprops/action-gh-release@v1
+        uses: softprops/action-gh-release@v3
         with:
           draft: false
           prerelease: ${{ contains(github.ref_name, '-rc') || contains(github.ref_name, '-beta') || contains(github.ref_name, '-alpha') }}

CLAUDE.md

@@ -114,7 +114,7 @@ code from being diagnosed here, `library` keeps its definitions resolvable.
 `runtime.version` is pinned to LuaJIT because that is what Control4 runs.
 
 The server version is not pinned locally. `install-deps` takes whatever Homebrew
-has while CI pins 3.19.0, so compare the version the target prints if a local
+has while CI pins 3.19.2, so compare the version the target prints if a local
 result disagrees with CI.
 
 Part of `check`, so CI enforces it.
@@ -347,8 +347,8 @@ injected from git tags during release.
 
 - **build.yml**: on push/PR to `main` or `master`.
   - `check` — `make check` (format-check, luacheck, typecheck against
-    lua-language-server 3.19.0).
-  - `test` — `make test-all` across Lua 5.1–5.4 and LuaJIT 2.0/2.1.
+    lua-language-server 3.19.2).
+  - `test` — `make test-all` across Lua 5.1–5.5 and LuaJIT 2.0/2.1.
   - `openssl-matrix` — installs the real `lua-openssl` rocks `0.8.5-1`, `0.9.2-2`
     and `0.11.1-1` and runs the suite against each with acceleration both on and
     off. This is the only place the DriverWorks feature table above is checked

README.md

@@ -2,7 +2,7 @@
 
 A pure Lua implementation of common cryptographic primitives with **zero external
 dependencies** and **optional OpenSSL acceleration**. Runs on Lua 5.1, 5.2, 5.3,
-5.4, and LuaJIT.
+5.4, 5.5, and LuaJIT.
 
 Hashing (SHA-256/512, BLAKE2), AEAD ciphers (ChaCha20-Poly1305, AES-GCM), the
 Poly1305 MAC, the ChaCha20 stream cipher, and Curve25519/448 Diffie-Hellman —