From 81ed4d0668acdefbc36416dc2c94b4587615b85b Mon Sep 17 00:00:00 2001
From: Leonardo Lima <oleonardolima@users.noreply.github.com>
Date: Wed, 8 Oct 2025 11:12:12 +1100
Subject: [PATCH] feat(ci): update to
 `actions-rust-lang/setup-rust-toolchain@v1`

---
 .github/workflows/cont_integration.yml | 34 +++++++++-----------------
 .github/zizmor.yml                     |  8 ++++++
 2 files changed, 20 insertions(+), 22 deletions(-)
 create mode 100644 .github/zizmor.yml

diff --git a/.github/workflows/cont_integration.yml b/.github/workflows/cont_integration.yml
index 4786d5e0..b35f6b17 100644
--- a/.github/workflows/cont_integration.yml
+++ b/.github/workflows/cont_integration.yml
@@ -28,7 +28,7 @@ jobs:
         rust:
           - version: ${{ needs.prepare.outputs.rust_version }}
             clippy: true
-          - version: 1.85.0 # Overall MSRV
+          - version: 1.85.0 # MSRV
         features:
           - --no-default-features --features miniscript/no-std,bdk_chain/hashbrown
           - --all-features
@@ -38,13 +38,11 @@ jobs:
         with:
           persist-credentials: false
       - name: Install Rust toolchain
-        uses: actions-rs/toolchain@v1
+        uses: actions-rust-lang/setup-rust-toolchain@v1
         with:
             toolchain: ${{ matrix.rust.version }}
             override: true
-            profile: minimal
-      - name: Rust Cache
-        uses: Swatinem/rust-cache@v2.7.8
+            cache: true
       - name: Pin dependencies for MSRV
         if: matrix.rust.version == '1.85.0'
         run: ./ci/pin-msrv.sh
@@ -65,14 +63,12 @@ jobs:
         with:
           persist-credentials: false
       - name: Install Rust toolchain
-        uses: actions-rs/toolchain@v1
+        uses: actions-rust-lang/setup-rust-toolchain@v1
         with:
           toolchain: ${{ needs.prepare.outputs.rust_version }}
           override: true
-          profile: minimal
+          cache: true
           # target: "thumbv6m-none-eabi"
-      - name: Rust Cache
-        uses: Swatinem/rust-cache@v2.7.8
       - name: Check bdk_chain
         working-directory: ./crates/chain
         # TODO "--target thumbv6m-none-eabi" should work but currently does not
@@ -99,14 +95,12 @@ jobs:
       - run: sudo apt-get update || exit 1
       - run: sudo apt-get install -y libclang-common-14-dev clang-14 libc6-dev-i386 || exit 1
       - name: Install Rust toolchain
-        uses: actions-rs/toolchain@v1
+        uses: actions-rust-lang/setup-rust-toolchain@v1
         with:
             toolchain: ${{ needs.prepare.outputs.rust_version }}
             override: true
-            profile: minimal
+            cache: true
             target: "wasm32-unknown-unknown"
-      - name: Rust Cache
-        uses: Swatinem/rust-cache@v2.7.8
       - name: Check esplora
         working-directory: ./crates/esplora
         run: cargo check --target wasm32-unknown-unknown --no-default-features --features bdk_core/hashbrown,async
@@ -120,11 +114,10 @@ jobs:
         with:
           persist-credentials: false
       - name: Install Rust toolchain
-        uses: actions-rs/toolchain@v1
+        uses: actions-rust-lang/setup-rust-toolchain@v1
         with:
             toolchain: nightly
             override: true
-            profile: minimal
             components: rustfmt
       - name: Check fmt
         run: cargo fmt --all --check
@@ -139,13 +132,12 @@ jobs:
       - uses: actions/checkout@v4
         with:
           persist-credentials: false
-      - uses: actions-rs/toolchain@v1
+      - uses: actions-rust-lang/setup-rust-toolchain@v1
         with:
             toolchain: ${{ needs.prepare.outputs.rust_version }}
             components: clippy
             override: true
-      - name: Rust Cache
-        uses: Swatinem/rust-cache@v2.7.8
+            cache: true
       - uses: actions-rs/clippy-check@v1
         with:
           token: ${{ secrets.GITHUB_TOKEN }}
@@ -169,13 +161,11 @@ jobs:
         with:
           persist-credentials: false
       - name: Install Rust toolchain
-        uses: actions-rs/toolchain@v1
+        uses: actions-rust-lang/setup-rust-toolchain@v1
         with:
           toolchain: ${{ needs.prepare.outputs.rust_version }}
           override: true
-          profile: minimal
-      - name: Rust Cache
-        uses: Swatinem/rust-cache@v2.7.8
+          cache: true
       - name: Build
         working-directory: examples/${{ matrix.example-dir }}
         run: cargo build
diff --git a/.github/zizmor.yml b/.github/zizmor.yml
new file mode 100644
index 00000000..667e912a
--- /dev/null
+++ b/.github/zizmor.yml
@@ -0,0 +1,8 @@
+# Zizmor config
+rules:
+  unpinned-uses:
+    config:
+      policies:
+        # Allow pin by ref/tag
+        actions-rust-lang/setup-rust-toolchain: ref-pin
+        actions/*: ref-pin
-- 
2.49.0