re2 1.21.0 → 1.21.1

package/LICENSE

@@ -7,7 +7,7 @@ The text of the BSD license is reproduced below.
 The "New" BSD License:
 **********************
 
-Copyright (c) 2005-2020, Eugene Lazutkin
+Copyright (c) 2005-2024, Eugene Lazutkin
 All rights reserved.
 
 Redistribution and use in source and binary forms, with or without

package/README.md

@@ -353,6 +353,7 @@ console.log('re2_res : ' + re2_res); // prints: re2_res : abc,a,b,c
 
 ## Release history
 
+- 1.21.1 *Fixed a memory regression reported by [matthewvalentine](https://github.com/matthewvalentine), thx! Updated deps.*
 - 1.21.0 *Fixed the performance problem reported by [matthewvalentine](https://github.com/matthewvalentine) (thx!). The change improves performance for multiple use cases.*
 - 1.20.12 *Updated deps. Maintenance chores. Fixes for buffer-related bugs: `exec()` index (reported by [matthewvalentine](https://github.com/matthewvalentine), thx) and `match()` index.*
 - 1.20.11 *Updated deps. Added support for Node 22 (thx, [Elton Leong](https://github.com/eltonkl)).*
@@ -367,16 +368,9 @@ console.log('re2_res : ' + re2_res); // prints: re2_res : abc,a,b,c
 - 1.20.2 *Fix: added a missing C++ file, which caused a bug on Alpine Linux. Thx, [rbitanga-manticore](https://github.com/rbitanga-manticore).*
 - 1.20.1 *Fix: files included in the npm package to build the C++ code.*
 - 1.20.0 *Updated RE2. New version uses `abseil-cpp` and required the adaptation work. Thx, [Stefano Rivera](https://github.com/stefanor).*
-- 1.19.2 *Bugfix: infinite loop in matchAll() with empty matches. Thx, [ziyunfei](https://github.com/ziyunfei).*
-- 1.19.1 *Bugfix: indices for the `d` flag when `lastIndex` is non zero. Bugfix: the match result. Thx, [teebu](https://github.com/teebu).*
-- 1.19.0 *Added `hasIndices` AKA the `d` flag. Thx, [teebu](https://github.com/teebu).*
-- 1.18.3 *Fixed bug with non-matched groups. Thx, [Dan Setterquist](https://github.com/dset).*
-- 1.18.2 *Reference to the binary module by its full name.*
-- 1.18.1 *Support for Node 16, 18, 20 + Darwin arm64 precompiled binaries.*
-- 1.18.0 *Modified TS bindings, added a type test (thx, [Kenichi Kamiya](https://github.com/kachick) and [Jamie Magee](https://github.com/JamieMagee)).*
 
 The rest can be consulted in the project's wiki [Release history](https://github.com/uhop/node-re2/wiki/Release-history).
 
 ## License
 
-BSD
+BSD-3-Clause

package/binding.gyp

@@ -3,8 +3,10 @@
     {
       "target_name": "re2",
       "sources": [
-        "lib/str-val.cc",
         "lib/addon.cc",
+        "lib/accessors.cc",
+        "lib/str-val.cc",
+        "lib/util.cc",
         "lib/new.cc",
         "lib/exec.cc",
         "lib/test.cc",
@@ -13,9 +15,6 @@
         "lib/search.cc",
         "lib/split.cc",
         "lib/to_string.cc",
-        "lib/accessors.cc",
-        "lib/util.cc",
-        "lib/str-val.cc",
         "vendor/re2/re2/bitmap256.cc",
         "vendor/re2/re2/bitstate.cc",
         "vendor/re2/re2/compile.cc",
@@ -44,6 +43,7 @@
         "vendor/abseil-cpp/absl/base/internal/raw_logging.cc",
         "vendor/abseil-cpp/absl/base/internal/spinlock.cc",
         "vendor/abseil-cpp/absl/base/internal/spinlock_wait.cc",
+        "vendor/abseil-cpp/absl/base/internal/strerror.cc",
         "vendor/abseil-cpp/absl/base/internal/sysinfo.cc",
         "vendor/abseil-cpp/absl/base/internal/thread_identity.cc",
         "vendor/abseil-cpp/absl/base/internal/throw_delegate.cc",
@@ -52,6 +52,7 @@
         "vendor/abseil-cpp/absl/container/internal/raw_hash_set.cc",
         "vendor/abseil-cpp/absl/debugging/internal/address_is_readable.cc",
         "vendor/abseil-cpp/absl/debugging/internal/elf_mem_image.cc",
+        "vendor/abseil-cpp/absl/debugging/internal/examine_stack.cc",
         "vendor/abseil-cpp/absl/debugging/internal/vdso_support.cc",
         "vendor/abseil-cpp/absl/debugging/stacktrace.cc",
         "vendor/abseil-cpp/absl/debugging/symbolize.cc",
@@ -66,6 +67,14 @@
         "vendor/abseil-cpp/absl/hash/internal/city.cc",
         "vendor/abseil-cpp/absl/hash/internal/hash.cc",
         "vendor/abseil-cpp/absl/hash/internal/low_level_hash.cc",
+        "vendor/abseil-cpp/absl/log/internal/globals.cc",
+        "vendor/abseil-cpp/absl/log/internal/log_format.cc",
+        "vendor/abseil-cpp/absl/log/internal/log_message.cc",
+        "vendor/abseil-cpp/absl/log/internal/log_sink_set.cc",
+        "vendor/abseil-cpp/absl/log/internal/nullguard.cc",
+        "vendor/abseil-cpp/absl/log/internal/proto.cc",
+        "vendor/abseil-cpp/absl/log/globals.cc",
+        "vendor/abseil-cpp/absl/log/log_sink.cc",
         "vendor/abseil-cpp/absl/numeric/int128.cc",
         "vendor/abseil-cpp/absl/strings/ascii.cc",
         "vendor/abseil-cpp/absl/strings/charconv.cc",

package/lib/accessors.cc

@@ -28,6 +28,30 @@ NAN_GETTER(WrappedRE2::GetInternalSource)
 	info.GetReturnValue().Set(Nan::New(re2->regexp.pattern()).ToLocalChecked());
 }
 
+NAN_GETTER(WrappedRE2::GetEnabledCache)
+{
+	if (!WrappedRE2::HasInstance(info.This()))
+	{
+		info.GetReturnValue().SetUndefined();
+		return;
+	}
+
+	auto re2 = Nan::ObjectWrap::Unwrap<WrappedRE2>(info.This());
+	info.GetReturnValue().Set(re2->enabledCache);
+}
+
+NAN_GETTER(WrappedRE2::GetIsCached)
+{
+	if (!WrappedRE2::HasInstance(info.This()))
+	{
+		info.GetReturnValue().SetUndefined();
+		return;
+	}
+
+	auto re2 = Nan::ObjectWrap::Unwrap<WrappedRE2>(info.This());
+	info.GetReturnValue().Set(!!re2->lastStringValue);
+}
+
 NAN_GETTER(WrappedRE2::GetFlags)
 {
 	if (!WrappedRE2::HasInstance(info.This()))
@@ -39,9 +63,13 @@ NAN_GETTER(WrappedRE2::GetFlags)
 	auto re2 = Nan::ObjectWrap::Unwrap<WrappedRE2>(info.This());
 
 	std::string flags;
+	if (re2->enabledCache)
+	{
+		flags += "\b";
+	}
 	if (re2->hasIndices)
 	{
-		flags = "d";
+		flags += "d";
 	}
 	if (re2->global)
 	{

package/lib/addon.cc

@@ -74,6 +74,8 @@ v8::Local<v8::Function> WrappedRE2::Init()
 	Nan::SetAccessor(instanceTemplate, Nan::New("hasIndices").ToLocalChecked(), GetHasIndices);
 	Nan::SetAccessor(instanceTemplate, Nan::New("lastIndex").ToLocalChecked(), GetLastIndex, SetLastIndex);
 	Nan::SetAccessor(instanceTemplate, Nan::New("internalSource").ToLocalChecked(), GetInternalSource);
+	Nan::SetAccessor(instanceTemplate, Nan::New("enabledCache").ToLocalChecked(), GetEnabledCache);
+	Nan::SetAccessor(instanceTemplate, Nan::New("isCached").ToLocalChecked(), GetIsCached);
 
 	auto ctr = Nan::GetFunction(tpl).ToLocalChecked();
 
@@ -92,8 +94,29 @@ NODE_MODULE_INIT()
 	Nan::Set(module->ToObject(context).ToLocalChecked(), Nan::New("exports").ToLocalChecked(), WrappedRE2::Init());
 }
 
+WrappedRE2::~WrappedRE2()
+{
+	for (auto ptr : callbackRegistry)
+	{
+		*ptr = nullptr;
+	}
+	dropLastString();
+}
+
 // private methods
 
+WrappedRE2::PtrWrappedRE2 *WrappedRE2::registerCallback()
+{
+	PtrWrappedRE2 *ptr = new PtrWrappedRE2(this);
+	callbackRegistry.insert(ptr);
+	return ptr;
+}
+
+void WrappedRE2::unregisterCallback(PtrWrappedRE2 *ptr)
+{
+	callbackRegistry.erase(ptr);
+}
+
 void WrappedRE2::dropLastString()
 {
 	lastString.Reset();
@@ -104,17 +127,15 @@ void WrappedRE2::dropLastString()
 	}
 }
 
-inline size_t countBytes(const char *data, size_t from, size_t n)
+void WrappedRE2::weakLastStringCallback(const Nan::WeakCallbackInfo<PtrWrappedRE2> &data)
 {
-	for (; n > 0; --n)
+	PtrWrappedRE2 *re2 = data.GetParameter();
+	if (*re2)
 	{
-		size_t s = getUtf8CharSize(data[from]);
-		from += s;
-		if (s == 4 && n >= 2)
-			--n; // this utf8 character will take two utf16 characters
-					 // the decrement above is protected to avoid an overflow of an unsigned integer
+		(*re2)->unregisterCallback(re2);
+		(*re2)->dropLastString();
 	}
-	return from;
+	delete re2;
 }
 
 void WrappedRE2::prepareLastString(const v8::Local<v8::Value> &arg, bool ignoreLastIndex)
@@ -140,7 +161,12 @@ void WrappedRE2::prepareLastString(const v8::Local<v8::Value> &arg, bool ignoreL
 	}
 
 	dropLastString();
+
 	lastString.Reset(arg);
-	static_cast<v8::PersistentBase<v8::Value>&>(lastString).SetWeak();
+	static_cast<v8::PersistentBase<v8::Value> &>(lastString).SetWeak();
+
+	Nan::Persistent<v8::Value> dummy(arg);
+	dummy.SetWeak(registerCallback(), weakLastStringCallback, Nan::WeakCallbackType::kParameter);
+
 	lastStringValue = new StrValString(arg, startFrom);
 };

package/lib/exec.cc

@@ -15,7 +15,7 @@ NAN_METHOD(WrappedRE2::Exec)
 		return;
 	}
 
-	re2->prepareLastString(info[0]);
+	PrepareLastString prepare(re2, info[0]);
 	StrValBase &str = *re2->lastStringValue;
 	if (str.isBad) return; // throws an exception
 

package/lib/match.cc

@@ -15,7 +15,7 @@ NAN_METHOD(WrappedRE2::Match)
 		return;
 	}
 
-	re2->prepareLastString(info[0], re2->global);
+	PrepareLastString prepare(re2, info[0], re2->global);
 	StrValBase &str = *re2->lastStringValue;
 	if (str.isBad) return; // throws an exception
 

package/lib/new.cc

@@ -233,6 +233,7 @@ NAN_METHOD(WrappedRE2::New)
 	bool unicode = false;
 	bool sticky = false;
 	bool hasIndices = false;
+	bool enabledCache = false;
 
 	auto context = Nan::GetCurrentContext();
 	bool needFlags = true;
@@ -256,6 +257,9 @@ NAN_METHOD(WrappedRE2::New)
 		{
 			switch (data[i])
 			{
+			case '\b':
+				enabledCache = true;
+				break;
 			case 'g':
 				global = true;
 				break;
@@ -339,6 +343,7 @@ NAN_METHOD(WrappedRE2::New)
 
 			if (needFlags)
 			{
+				enabledCache = re2->enabledCache;
 				global = re2->global;
 				ignoreCase = re2->ignoreCase;
 				multiline = re2->multiline;
@@ -401,7 +406,7 @@ NAN_METHOD(WrappedRE2::New)
 	options.set_dot_nl(dotAll);
 	options.set_log_errors(false); // inappropriate when embedding
 
-	std::unique_ptr<WrappedRE2> re2(new WrappedRE2(re2::StringPiece(data, size), options, source, global, ignoreCase, multiline, dotAll, sticky, hasIndices));
+	std::unique_ptr<WrappedRE2> re2(new WrappedRE2(re2::StringPiece(data, size), options, source, enabledCache, global, ignoreCase, multiline, dotAll, sticky, hasIndices));
 	if (!re2->regexp.ok())
 	{
 		return Nan::ThrowSyntaxError(re2->regexp.error().c_str());

package/lib/replace.cc

@@ -492,7 +492,7 @@ NAN_METHOD(WrappedRE2::Replace)
 		return;
 	}
 
-	re2->prepareLastString(info[0]);
+	PrepareLastString prepare(re2, info[0]);
 	StrValBase &replacee = *re2->lastStringValue;
 	if (replacee.isBad) return; // throws an exception
 

package/lib/search.cc

@@ -13,7 +13,7 @@ NAN_METHOD(WrappedRE2::Search)
 		return;
 	}
 
-	re2->prepareLastString(info[0], true);
+	PrepareLastString prepare(re2, info[0], true);
 	StrValBase &str = *re2->lastStringValue;
 	if (str.isBad) return; // throws an exception
 

package/lib/split.cc

@@ -20,7 +20,7 @@ NAN_METHOD(WrappedRE2::Split)
 		return;
 	}
 
-	re2->prepareLastString(info[0], true);
+	PrepareLastString prepare(re2, info[0], true);
 	StrValBase &str = *re2->lastStringValue;
 	if (str.isBad) return; // throws an exception
 

package/lib/str-val.h

@@ -11,6 +11,7 @@ struct StrValBase
 	bool isBuffer, isIndexValid, isBad;
 
 	StrValBase() : data(NULL), size(0), length(0), index(0), byteIndex(0), isBuffer(false), isIndexValid(false), isBad(false) {}
+	virtual ~StrValBase() {}
 
 	operator re2::StringPiece() const { return re2::StringPiece(data, size); }
 

package/lib/test.cc

@@ -15,7 +15,7 @@ NAN_METHOD(WrappedRE2::Test)
 		return;
 	}
 
-	re2->prepareLastString(info[0]);
+	PrepareLastString prepare(re2, info[0]);
 	StrValBase &str = *re2->lastStringValue;
 	if (str.isBad) return; // throws an exception
 

package/lib/to_string.cc

@@ -20,6 +20,10 @@ NAN_METHOD(WrappedRE2::ToString)
 	buffer += re2->source;
 	buffer += "/";
 
+	if (re2->enabledCache)
+	{
+		buffer += "\b";
+	}
 	if (re2->global)
 	{
 		buffer += "g";

package/lib/wrapped_re2.h

@@ -6,6 +6,7 @@
 #include <re2/re2.h>
 
 #include <string>
+#include <unordered_set>
 
 struct StrValBase;
 
@@ -16,6 +17,7 @@ private:
 		const re2::StringPiece &pattern,
 		const re2::RE2::Options &options,
 		const std::string &src,
+		const bool &c,
 		const bool &g,
 		const bool &i,
 		const bool &m,
@@ -23,6 +25,7 @@ private:
 		const bool &y,
 		const bool &d) : regexp(pattern, options),
 						 source(src),
+						 enabledCache(c),
 						 global(g),
 						 ignoreCase(i),
 						 multiline(m),
@@ -47,6 +50,8 @@ private:
 	static NAN_GETTER(GetLastIndex);
 	static NAN_SETTER(SetLastIndex);
 	static NAN_GETTER(GetInternalSource);
+	static NAN_GETTER(GetEnabledCache);
+	static NAN_GETTER(GetIsCached);
 
 	// RegExp methods
 	static NAN_METHOD(Exec);
@@ -63,10 +68,7 @@ private:
 	static NAN_SETTER(SetUnicodeWarningLevel);
 
 public:
-	~WrappedRE2()
-	{
-		dropLastString();
-	}
+	~WrappedRE2();
 
 	static v8::Local<v8::Function> Init();
 
@@ -89,6 +91,7 @@ public:
 
 	re2::RE2 regexp;
 	std::string source;
+	bool enabledCache;
 	bool global;
 	bool ignoreCase;
 	bool multiline;
@@ -97,14 +100,40 @@ public:
 	bool hasIndices;
 	size_t lastIndex;
 
+	friend class PrepareLastString;
+
 private:
 	Nan::Persistent<v8::Value> lastString; // weak pointer
 	StrValBase *lastStringValue;
 
+	typedef WrappedRE2 *PtrWrappedRE2;
+
+	std::unordered_set<PtrWrappedRE2 *> callbackRegistry;
+	PtrWrappedRE2 *registerCallback();
+	void unregisterCallback(PtrWrappedRE2 *re2);
+
+	static void weakLastStringCallback(const Nan::WeakCallbackInfo<PtrWrappedRE2> &data);
+
 	void dropLastString();
 	void prepareLastString(const v8::Local<v8::Value> &arg, bool ignoreLastIndex = false);
 };
 
+struct PrepareLastString
+{
+	PrepareLastString(WrappedRE2 *re2, const v8::Local<v8::Value> &arg, bool ignoreLastIndex = false) : re2(re2)
+	{
+		re2->prepareLastString(arg, ignoreLastIndex);
+	}
+
+	~PrepareLastString()
+	{
+		if (!re2->enabledCache || !(re2->global || re2->sticky))
+			re2->dropLastString();
+	}
+
+	WrappedRE2 *re2;
+};
+
 // utilities
 
 inline size_t getUtf8Length(const uint16_t *from, const uint16_t *to)

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "re2",
-  "version": "1.21.0",
+  "version": "1.21.1",
   "description": "Bindings for RE2: fast, safe alternative to backtracking regular expression engines.",
   "homepage": "https://github.com/uhop/node-re2",
   "bugs": "https://github.com/uhop/node-re2/issues",
@@ -20,7 +20,7 @@
     "node-gyp": "^10.1.0"
   },
   "devDependencies": {
-    "@types/node": "^20.12.12",
+    "@types/node": "^20.14.2",
     "heya-unit": "^0.3.0",
     "typescript": "^5.4.5"
   },

package/re2.js

@@ -24,7 +24,7 @@ if (typeof Symbol != 'undefined') {
       if (!this.global) {
         throw TypeError('String.prototype.matchAll called with a non-global RE2 argument');
       }
-      const re = new RE2(this);
+      const re = new RE2(this, this.flags + '\b');
       re.lastIndex = this.lastIndex;
       for (;;) {
         const result = re.exec(str);

package/vendor/re2/.github/workflows/ci-bazel.yml

@@ -14,8 +14,8 @@ jobs:
     env:
       BAZELISK_GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
     steps:
-      - uses: actions/checkout@v4.1.4
-      - uses: bazel-contrib/setup-bazel@0.8.2
+      - uses: actions/checkout@v4.1.6
+      - uses: bazel-contrib/setup-bazel@0.8.4
         with:
           bazelisk-version: '1.x'
       - run: .github/bazel.sh

package/vendor/re2/.github/workflows/ci-cmake.yml

@@ -7,26 +7,20 @@ permissions:
 jobs:
   build-linux:
     runs-on: ubuntu-latest
-    # The Benchmark package on Ubuntu 22.04 LTS is problematic whereas this
-    # Docker container is based on Debian bookworm and has a newer version.
-    container: gcc:13
     strategy:
       fail-fast: false
       matrix:
         build_shared_libs: [OFF, ON]
     steps:
-      - uses: actions/checkout@v4.1.4
-      - name: Install CMake
-        run: |
-          apt update -y
-          apt install -y cmake
-        shell: bash
+      - uses: actions/checkout@v4.1.6
       - name: Install Abseil, GoogleTest and Benchmark
         run: |
-          apt update -y
-          apt install -y libabsl-dev libgtest-dev libbenchmark-dev
+          vcpkg update
+          vcpkg install abseil gtest benchmark
         shell: bash
-      - run: .github/cmake.sh -D BUILD_SHARED_LIBS=${{ matrix.build_shared_libs }}
+      - run: |
+          .github/cmake.sh -D BUILD_SHARED_LIBS=${{ matrix.build_shared_libs }} \
+            -D CMAKE_TOOLCHAIN_FILE=/usr/local/share/vcpkg/scripts/buildsystems/vcpkg.cmake
         shell: bash
   build-macos:
     runs-on: macos-latest
@@ -35,7 +29,7 @@ jobs:
       matrix:
         build_shared_libs: [OFF, ON]
     steps:
-      - uses: actions/checkout@v4.1.4
+      - uses: actions/checkout@v4.1.6
       - name: Install Abseil, GoogleTest and Benchmark
         run: |
           brew update
@@ -50,7 +44,7 @@ jobs:
       matrix:
         build_shared_libs: [OFF, ON]
     steps:
-      - uses: actions/checkout@v4.1.4
+      - uses: actions/checkout@v4.1.6
       - name: Install Abseil, GoogleTest and Benchmark
         run: |
           vcpkg update

package/vendor/re2/.github/workflows/ci.yml

@@ -21,7 +21,7 @@ jobs:
       # (The other two flags are the default provided for CXXFLAGS in Makefile.)
       CXXFLAGS: -O3 -g -std=c++${{ matrix.ver }}
     steps:
-      - uses: actions/checkout@v4.1.4
+      - uses: actions/checkout@v4.1.6
       - name: Install Abseil, GoogleTest and Benchmark
         run: |
           brew update
@@ -38,8 +38,9 @@ jobs:
     env:
       CC: clang-${{ matrix.ver }}
       CXX: clang++-${{ matrix.ver }}
+      PKG_CONFIG_PATH: /usr/local/share/vcpkg/installed/x64-linux/lib/pkgconfig
     steps:
-      - uses: actions/checkout@v4.1.4
+      - uses: actions/checkout@v4.1.6
       - name: Install Clang ${{ matrix.ver }}
         run: |
           # Avoid `Conflicts: python3-lldb-x.y` between packages.
@@ -50,26 +51,28 @@ jobs:
         shell: bash
       - name: Install Abseil, GoogleTest and Benchmark
         run: |
-          sudo apt update -y
-          sudo apt install -y libabsl-dev libgtest-dev libbenchmark-dev
+          vcpkg update
+          vcpkg install abseil gtest benchmark
         shell: bash
       - run: make && make test
         shell: bash
   build-gcc:
-    runs-on: ubuntu-latest
+    # TODO(junyer): Switch back to `ubuntu-latest` when this becomes that.
+    runs-on: ubuntu-24.04
     strategy:
       fail-fast: false
       matrix:
-        ver: [11, 12, 13]
+        ver: [12, 13, 14]
     env:
       CC: gcc-${{ matrix.ver }}
       CXX: g++-${{ matrix.ver }}
+      PKG_CONFIG_PATH: /usr/local/share/vcpkg/installed/x64-linux/lib/pkgconfig
     steps:
-      - uses: actions/checkout@v4.1.4
+      - uses: actions/checkout@v4.1.6
       - name: Install Abseil, GoogleTest and Benchmark
         run: |
-          sudo apt update -y
-          sudo apt install -y libabsl-dev libgtest-dev libbenchmark-dev
+          vcpkg update
+          vcpkg install abseil gtest benchmark
         shell: bash
       - run: make && make test
         shell: bash

package/vendor/re2/.github/workflows/pages.yml

@@ -17,8 +17,8 @@ jobs:
       # Bazel fails if the username is unknown.
       USER: runner
     steps:
-      - uses: actions/checkout@v4.1.4
-      - uses: bazel-contrib/setup-bazel@0.8.2
+      - uses: actions/checkout@v4.1.6
+      - uses: bazel-contrib/setup-bazel@0.8.4
         with:
           bazelisk-version: '1.x'
       - run: app/build.sh
@@ -37,5 +37,5 @@ jobs:
     environment: github-pages
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v4.1.4
+      - uses: actions/checkout@v4.1.6
       - uses: actions/deploy-pages@v4.0.5

package/vendor/re2/.github/workflows/pr.yml

@@ -15,7 +15,7 @@ jobs:
       pull-requests: write
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v4.1.4
+      - uses: actions/checkout@v4.1.6
       - uses: actions/github-script@v7.0.1
         with:
           script: |

package/vendor/re2/.github/workflows/python.yml

@@ -31,11 +31,11 @@ jobs:
       # Bazel fails if the username is unknown.
       USER: runner
     steps:
-      - uses: actions/checkout@v4.1.4
+      - uses: actions/checkout@v4.1.6
       # Stash the timestamp for the commit SHA that triggered the workflow.
       - run: echo "timestamp=$(git log -1 --pretty=%ct)" >> "${GITHUB_ENV}"
         shell: bash
-      - uses: bazel-contrib/setup-bazel@0.8.2
+      - uses: bazel-contrib/setup-bazel@0.8.4
         with:
           bazelisk-version: '1.x'
       - name: Prepare Python ${{ matrix.ver }} environment
@@ -87,11 +87,11 @@ jobs:
       # Otherwise, Python refuses to install the built wheel!
       SYSTEM_VERSION_COMPAT: 0
     steps:
-      - uses: actions/checkout@v4.1.4
+      - uses: actions/checkout@v4.1.6
       # Stash the timestamp for the commit SHA that triggered the workflow.
       - run: echo "timestamp=$(git log -1 --pretty=%ct)" >> "${GITHUB_ENV}"
         shell: bash
-      - uses: bazel-contrib/setup-bazel@0.8.2
+      - uses: bazel-contrib/setup-bazel@0.8.4
         with:
           bazelisk-version: '1.x'
       - uses: actions/setup-python@v5.1.0
@@ -138,11 +138,11 @@ jobs:
       BAZEL_CPU: ${{ matrix.arch.bazel-name }}_windows
       PLAT_NAME: ${{ matrix.arch.python-name }}
     steps:
-      - uses: actions/checkout@v4.1.4
+      - uses: actions/checkout@v4.1.6
       # Stash the timestamp for the commit SHA that triggered the workflow.
       - run: echo "timestamp=$(git log -1 --pretty=%ct)" >> "${GITHUB_ENV}"
         shell: bash
-      - uses: bazel-contrib/setup-bazel@0.8.2
+      - uses: bazel-contrib/setup-bazel@0.8.4
         with:
           bazelisk-version: '1.x'
       # Lowercase the architecture name for `actions/setup-python`.
@@ -190,7 +190,7 @@ jobs:
       id-token: write
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v4.1.4
+      - uses: actions/checkout@v4.1.6
       # Stash the timestamp for the commit SHA that triggered the workflow.
       - run: echo "timestamp=$(git log -1 --pretty=%ct)" >> "${GITHUB_ENV}"
         shell: bash

package/vendor/re2/.github/workflows/release.yml

@@ -16,7 +16,7 @@ jobs:
     env:
       GH_TOKEN: ${{ secrets.GITHUB_TOKEN }}
     steps:
-      - uses: actions/checkout@v4.1.4
+      - uses: actions/checkout@v4.1.6
       - run: |
           gh release create "${GITHUB_REF_NAME}" \
             --generate-notes --latest --verify-tag \