@@ -25,11 +25,15 @@ name: CI
25
25
pull_request :
26
26
branches :
27
27
- " **"
28
+ permissions :
29
+ contents : read
28
30
defaults :
29
31
run :
30
32
shell : bash
31
33
jobs :
32
34
pr :
35
+ permissions :
36
+ actions : write
33
37
name : PR
34
38
env :
35
39
CI_JOB_NAME : " ${{ matrix.name }}"
@@ -142,6 +146,8 @@ jobs:
142
146
AWS_SECRET_ACCESS_KEY : " ${{ secrets[format('AWS_SECRET_ACCESS_KEY_{0}', env.ARTIFACTS_AWS_ACCESS_KEY_ID)] }}"
143
147
if : " success() && !env.SKIP_JOB && (github.event_name == 'push' || env.DEPLOY == '1' || env.DEPLOY_ALT == '1')"
144
148
auto :
149
+ permissions :
150
+ actions : write
145
151
name : auto
146
152
env :
147
153
CI_JOB_NAME : " ${{ matrix.name }}"
@@ -291,7 +297,7 @@ jobs:
291
297
os : ubuntu-20.04-xl
292
298
- name : dist-x86_64-apple
293
299
env :
294
- SCRIPT : " ./x.py dist --host=x86_64-apple-darwin --target=x86_64-apple-darwin"
300
+ SCRIPT : " ./x.py dist bootstrap --include-default-paths --host=x86_64-apple-darwin --target=x86_64-apple-darwin"
295
301
RUST_CONFIGURE_ARGS : " --enable-full-tools --enable-sanitizers --enable-profiler --set rust.jemalloc --set llvm.ninja=false"
296
302
RUSTC_RETRY_LINKER_ON_SEGFAULT : 1
297
303
MACOSX_DEPLOYMENT_TARGET : 10.7
@@ -302,7 +308,7 @@ jobs:
302
308
os : macos-latest
303
309
- name : dist-apple-various
304
310
env :
305
- SCRIPT : " ./x.py dist --host='' --target=aarch64-apple-ios,x86_64-apple-ios,aarch64-apple-ios-sim"
311
+ SCRIPT : " ./x.py dist bootstrap --include-default-paths --host='' --target=aarch64-apple-ios,x86_64-apple-ios,aarch64-apple-ios-sim"
306
312
RUST_CONFIGURE_ARGS : " --enable-sanitizers --enable-profiler --set rust.jemalloc --set llvm.ninja=false"
307
313
RUSTC_RETRY_LINKER_ON_SEGFAULT : 1
308
314
MACOSX_DEPLOYMENT_TARGET : 10.7
@@ -312,7 +318,7 @@ jobs:
312
318
os : macos-latest
313
319
- name : dist-x86_64-apple-alt
314
320
env :
315
- SCRIPT : " ./x.py dist"
321
+ SCRIPT : " ./x.py dist bootstrap --include-default-paths "
316
322
RUST_CONFIGURE_ARGS : " --enable-extended --enable-profiler --set rust.jemalloc --set llvm.ninja=false"
317
323
RUSTC_RETRY_LINKER_ON_SEGFAULT : 1
318
324
MACOSX_DEPLOYMENT_TARGET : 10.7
@@ -344,7 +350,7 @@ jobs:
344
350
os : macos-latest
345
351
- name : dist-aarch64-apple
346
352
env :
347
- SCRIPT : " ./x.py dist --stage 2"
353
+ SCRIPT : " ./x.py dist bootstrap --include-default-paths --stage 2"
348
354
RUST_CONFIGURE_ARGS : " --build=x86_64-apple-darwin --host=aarch64-apple-darwin --target=aarch64-apple-darwin --enable-full-tools --enable-sanitizers --enable-profiler --disable-docs --set rust.jemalloc --set llvm.ninja=false"
349
355
RUSTC_RETRY_LINKER_ON_SEGFAULT : 1
350
356
USE_XCODE_CLANG : 1
@@ -418,33 +424,33 @@ jobs:
418
424
- name : dist-x86_64-msvc
419
425
env :
420
426
RUST_CONFIGURE_ARGS : " --build=x86_64-pc-windows-msvc --host=x86_64-pc-windows-msvc --target=x86_64-pc-windows-msvc --enable-full-tools --enable-profiler"
421
- SCRIPT : PGO_HOST=x86_64-pc-windows-msvc src/ci/pgo.sh python x.py dist
427
+ SCRIPT : PGO_HOST=x86_64-pc-windows-msvc src/ci/pgo.sh python x.py dist bootstrap --include-default-paths
422
428
DIST_REQUIRE_ALL_TOOLS : 1
423
429
os : windows-latest-xl
424
430
- name : dist-i686-msvc
425
431
env :
426
432
RUST_CONFIGURE_ARGS : " --build=i686-pc-windows-msvc --host=i686-pc-windows-msvc --target=i686-pc-windows-msvc,i586-pc-windows-msvc --enable-full-tools --enable-profiler"
427
- SCRIPT : python x.py dist
433
+ SCRIPT : python x.py dist bootstrap --include-default-paths
428
434
DIST_REQUIRE_ALL_TOOLS : 1
429
435
os : windows-latest-xl
430
436
- name : dist-aarch64-msvc
431
437
env :
432
438
RUST_CONFIGURE_ARGS : " --build=x86_64-pc-windows-msvc --host=aarch64-pc-windows-msvc --enable-full-tools --enable-profiler"
433
- SCRIPT : python x.py dist
439
+ SCRIPT : python x.py dist bootstrap --include-default-paths
434
440
DIST_REQUIRE_ALL_TOOLS : 1
435
441
WINDOWS_SDK_20348_HACK : 1
436
442
os : windows-latest-xl
437
443
- name : dist-i686-mingw
438
444
env :
439
445
RUST_CONFIGURE_ARGS : " --build=i686-pc-windows-gnu --enable-full-tools --enable-profiler --set llvm.allow-old-toolchain"
440
446
NO_DOWNLOAD_CI_LLVM : 1
441
- SCRIPT : python x.py dist
447
+ SCRIPT : python x.py dist bootstrap --include-default-paths
442
448
CUSTOM_MINGW : 1
443
449
DIST_REQUIRE_ALL_TOOLS : 1
444
450
os : windows-latest-xl
445
451
- name : dist-x86_64-mingw
446
452
env :
447
- SCRIPT : python x.py dist
453
+ SCRIPT : python x.py dist bootstrap --include-default-paths
448
454
RUST_CONFIGURE_ARGS : " --build=x86_64-pc-windows-gnu --enable-full-tools --enable-profiler --set llvm.allow-old-toolchain"
449
455
NO_DOWNLOAD_CI_LLVM : 1
450
456
CUSTOM_MINGW : 1
@@ -453,7 +459,7 @@ jobs:
453
459
- name : dist-x86_64-msvc-alt
454
460
env :
455
461
RUST_CONFIGURE_ARGS : " --build=x86_64-pc-windows-msvc --enable-extended --enable-profiler"
456
- SCRIPT : python x.py dist
462
+ SCRIPT : python x.py dist bootstrap --include-default-paths
457
463
os : windows-latest-xl
458
464
timeout-minutes : 600
459
465
runs-on : " ${{ matrix.os }}"
@@ -547,6 +553,8 @@ jobs:
547
553
AWS_SECRET_ACCESS_KEY : " ${{ secrets[format('AWS_SECRET_ACCESS_KEY_{0}', env.ARTIFACTS_AWS_ACCESS_KEY_ID)] }}"
548
554
if : " success() && !env.SKIP_JOB && (github.event_name == 'push' || env.DEPLOY == '1' || env.DEPLOY_ALT == '1')"
549
555
try :
556
+ permissions :
557
+ actions : write
550
558
name : try
551
559
env :
552
560
CI_JOB_NAME : " ${{ matrix.name }}"
0 commit comments