.github/actions/cache/restore/action.yml

@@ -25,7 +25,7 @@ runs:
     - name: Restore cache to github
       id: github-cache
       if: ${{ runner.environment == 'github-hosted' }}
-      uses: actions/cache/restore@d4323d4df104b026a6aa633fdb11d772146be0bf # v4
+      uses: actions/cache/restore@5a3ec84eff668545956fd18022155c47e93e2684 # v4
       with:
         key: ${{ inputs.key }}
         path: ${{ inputs.path }}

.github/actions/cache/save/action.yml

@@ -15,7 +15,7 @@ runs:
   steps:
     - name: Save cache to github
       if: ${{ runner.environment == 'github-hosted' }}
-      uses: actions/cache/save@d4323d4df104b026a6aa633fdb11d772146be0bf # v4
+      uses: actions/cache/save@5a3ec84eff668545956fd18022155c47e93e2684 # v4
       with:
         key: ${{ inputs.key }}
         path: ${{ inputs.path }}

.github/actions/pnpm/install-dependencies/action.yml

@@ -4,7 +4,7 @@ description: Run pnpm install
 
 inputs:
   frozen-lockfile:
-    default: false
+    default: true
     required: false
     type: boolean
   save-if:

.github/actions/pnpm/setup/action.yml

@@ -12,7 +12,7 @@ runs:
   using: composite
   steps:
     - name: Install Node.js
-      uses: actions/setup-node@1d0ff469b7ec7b3cb9d8673fde0c81c44821de2a # v4
+      uses: actions/setup-node@cdca7365b2dadb8aad0a33bc7601856ffabcc48e # v4
       with:
         node-version: ${{ inputs.node-version }}
 
@@ -33,7 +33,7 @@ runs:
     # Uses `packageManagement` field from package.json
     - name: Install pnpm
       if: ${{ inputs.node-version == '16' }}
-      uses: pnpm/action-setup@v4
+      uses: pnpm/action-setup@a7487c7e89a18df4991f7f222e4898a00d66ddda # v4
       with:
         dest: ${{ runner.tool_cache }}/pnpm
         # Use `@pnpm/exe` for Node 16

.github/actions/rustup/cache/action.yml

@@ -15,7 +15,7 @@ runs:
   steps:
     - name: Cache to github
       if: ${{ runner.environment == 'github-hosted' }}
-      uses: Swatinem/rust-cache@f0deed1e0edfc6a9be95417288c0e1099b1eeec3 # v2
+      uses: Swatinem/rust-cache@9d47c6ad4b02e050fd481d890b2ea34778fd09d6 # v2
       with:
         shared-key: ${{ inputs.key }}
         save-if: ${{ github.ref_name == 'main' }}

.github/workflows/ci.yml

@@ -82,12 +82,12 @@ jobs:
       full-install: false
 
   test-mac:
-    name: Test Mac
+    name: Test Mac ARM64
     needs: [get-runner-labels, check-changed]
     if: github.ref_name == 'main' || contains(github.event.pull_request.title, '!macos')
     uses: ./.github/workflows/reusable-build.yml
     with:
-      target: x86_64-apple-darwin
+      target: aarch64-apple-darwin
       profile: "ci"
       runner: ${{ needs.get-runner-labels.outputs.MACOS_RUNNER_LABELS }}
       skipable: ${{ needs.check-changed.outputs.changed  != 'true' }}
@@ -118,7 +118,7 @@ jobs:
               - 'Cargo.lock'
       - name: Install cargo-deny
         if: steps.filter.outputs.src == 'true'
-        uses: taiki-e/install-action@f87f9990b09867202953bff9aa0c80e23ee16bb7 # v2
+        uses: taiki-e/install-action@5651179950649c44da31d346537e20c0534f0f25 # v2
         with:
           tool: cargo-deny@0.16
       - name: Check licenses
@@ -130,7 +130,7 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4
-      - uses: crate-ci/typos@72f3776b6edc3a10a567b8e43fd0524b2a3f1419 # v1.30.1
+      - uses: crate-ci/typos@d08e4083f112e684fb88f6babd9ae60a1f1cd84f # v1.30.3
         with:
           files: .
 
@@ -283,7 +283,7 @@ jobs:
       - uses: ./.github/actions/rustup
         with:
           shared-key: check
-      - uses: cargo-bins/cargo-binstall@acd08f184561622f67f0e4406a62a10f656777a9 # v1.12.0
+      - uses: cargo-bins/cargo-binstall@b9bf4400702f721d469eec4d280125f650c85638 # v1.12.2
       - run: cargo binstall --no-confirm cargo-shear --force
       - run: cargo shear
 
@@ -307,13 +307,8 @@ jobs:
         run: |
           echo '[profile.test]' >> Cargo.toml
           echo 'debug = false' >> Cargo.toml
-
-      - name: Run test
-        # reason for excluding https://github.com/napi-rs/napi-rs/issues/2200
-        run: cargo test --workspace --exclude rspack_node --exclude rspack -- --nocapture
-
       - name: Run rspack test
-        run: cargo test --package rspack --all-features -- --nocapture
+        run: cargo test -- --nocapture
 
   rust_test_miri:
     name: Rust test miri
@@ -352,7 +347,7 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4
-      - uses: actions/setup-node@1d0ff469b7ec7b3cb9d8673fde0c81c44821de2a # v4
+      - uses: actions/setup-node@cdca7365b2dadb8aad0a33bc7601856ffabcc48e # v4
         with:
           node-version: 20
       - shell: bash

.github/workflows/ecosystem-ci.yml

@@ -20,6 +20,7 @@ on:
           - rslib
           - examples
           - devserver
+          - plugin
       suiteRef:
         description: "suite ref to use"
         required: true
@@ -113,6 +114,7 @@ jobs:
               "examples",
               "devserver",
               "nuxt",
+              "plugin",
             ]
             if (suiteName !== "-") {
               suites = suites.filter(suite => suite === suiteName)

.github/workflows/issue-pr-trigger.yml

@@ -11,9 +11,9 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4
-      - uses: actions/setup-node@1d0ff469b7ec7b3cb9d8673fde0c81c44821de2a # v4
+      - uses: actions/setup-node@cdca7365b2dadb8aad0a33bc7601856ffabcc48e # v4
         with:
-          node-version: "20"
+          node-version: "20.19.0"
       - name: Check if triggered by project member
         id: check_member
         if: github.event.sender.type == 'User' && github.actor != 'renovate'

.github/workflows/reusable-build.yml

@@ -406,7 +406,7 @@ jobs:
           shared-key: build-bench-${{ inputs.target }}-${{ inputs.profile }}
 
       - name: Install cargo-codspeed binary
-        uses: taiki-e/install-action@f87f9990b09867202953bff9aa0c80e23ee16bb7 # v2
+        uses: taiki-e/install-action@5651179950649c44da31d346537e20c0534f0f25 # v2
         with:
           tool: cargo-codspeed@2.7.2
 
@@ -443,7 +443,7 @@ jobs:
         run: pnpm run build:js
 
       - name: Run benchmark
-        uses: CodSpeedHQ/action@63ae6025a0ffee97d7736a37c9192dbd6ed4e75f # v3
+        uses: CodSpeedHQ/action@0010eb0ca6e89b80c88e8edaaa07cfe5f3e6664d # v3
         timeout-minutes: 30
         with:
           run: pnpm run bench:ci