Update dependencies

Also, switch the prebuilt x86_64 Linux binaries to use musl. We
indirectly use NSS glibc functions, resulting in the statically-linked
still having external dependencies. This can cause obscure crashes when
the glibc version differs from what was used during compilation.

Signed-off-by: Andrew Gunnerson <[email protected]>

Author: chenxiaolong

.github/workflows/ci.yml

@@ -20,7 +20,7 @@ jobs:
       matrix:
         artifact:
           - os: ubuntu-latest
-            name: x86_64-unknown-linux-gnu
+            name: x86_64-unknown-linux-musl
           - os: windows-latest
             name: x86_64-pc-windows-gnu
           - os: macos-latest
@@ -36,7 +36,7 @@ jobs:
             android_api: '31'
     steps:
       - name: Check out repository
-        uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
+        uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5.0.0
         with:
           # For git describe
           fetch-depth: 0
@@ -51,6 +51,12 @@ jobs:
               --git https://github.com/chenxiaolong/cargo-android \
               --tag v0.1.3
 
+      - name: Install musl-gcc
+        if: matrix.artifact.os == 'ubuntu-latest'
+        uses: awalsh128/cache-apt-pkgs-action@v1
+        with:
+          packages: musl-tools
+
       - name: Get version
         id: get_version
         shell: bash
@@ -68,7 +74,7 @@ jobs:
           done
 
       - name: Cache Rust dependencies
-        uses: Swatinem/rust-cache@9d47c6ad4b02e050fd481d890b2ea34778fd09d6 # v2.7.8
+        uses: Swatinem/rust-cache@f13886b937689c021905a6b90929199931d60db1 # v2.8.1
 
       - name: Clippy
         shell: bash

.github/workflows/release.yml

@@ -23,10 +23,10 @@ jobs:
           echo "version=${version}" >> "${GITHUB_OUTPUT}"
 
       - name: Check out repository
-        uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
+        uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5.0.0
 
       - name: Create release
-        uses: softprops/action-gh-release@c95fe1489396fe8a9eb87c0abf8aa5b2ef267fda # v2.2.1
+        uses: softprops/action-gh-release@6da8fa9354ddfdc4aeace5fc48d7f679b5214090 # v2.4.1
         with:
           tag_name: v${{ steps.get_version.outputs.version }}
           name: Version ${{ steps.get_version.outputs.version }}