From 5f87ed7bdf84e0b73126f93b2bf8e00d424b583f Mon Sep 17 00:00:00 2001
From: hashcatHitman <155700084+hashcatHitman@users.noreply.github.com>
Date: Tue, 13 Oct 2026 20:02:02 +0000
Subject: [PATCH 1/3] ops: Re-pin `Swatinem/rust-cache` to 2.9.1

See: https://github.com/Swatinem/rust-cache/releases/tag/v2.9.1

See: https://github.com/Swatinem/rust-cache/compare/e18b497796c12c097a38f9edb9d0641fb99eee32..c19371144df3bb44fab255c43d04cbc2ab54d1c4

The only difference is the official release seems to have forgotten to
update the changelog.

Signed-off-by: hashcatHitman <155700084+hashcatHitman@users.noreply.github.com>
---
 .github/workflows/CI.yml | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/.github/workflows/CI.yml b/.github/workflows/CI.yml
index 2d80675..d7f72b4 100644
--- a/.github/workflows/CI.yml
+++ b/.github/workflows/CI.yml
@@ -26,5 +26,5 @@ jobs:
     - uses: taiki-e/install-action@a37010ded18ff788be4440302bd6830b1ae50d8b # v2.68.25
       with:
         tool: cargo-hack@0.6.43
-    - uses: Swatinem/rust-cache@e18b497796c12c097a38f9edb9d0641fb99eee32 # v2
+    - uses: Swatinem/rust-cache@c19371144df3bb44fab255c43d04cbc2ab54d1c4 # v2.9.1
     - run: cargo hack test --feature-powerset --locked

From a99d8c011c18e8a1beaf61301da49651b069057e Mon Sep 17 00:00:00 2001
From: hashcatHitman <155700084+hashcatHitman@users.noreply.github.com>
Date: Tue, 13 Oct 2026 20:06:07 +0000
Subject: [PATCH 2/3] ops: Replace `dtolnay/rust-toolchain` with `rustup`

Signed-off-by: hashcatHitman <155700084+hashcatHitman@users.noreply.github.com>
---
 .github/workflows/CI.yml | 6 +++---
 1 file changed, 3 insertions(+), 3 deletions(-)

diff --git a/.github/workflows/CI.yml b/.github/workflows/CI.yml
index d7f72b4..2069a14 100644
--- a/.github/workflows/CI.yml
+++ b/.github/workflows/CI.yml
@@ -20,9 +20,9 @@ jobs:
     - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0
       with:
         persist-credentials: false
-    - uses: dtolnay/rust-toolchain@3c5f7ea28cd621ae0bf5283f0e981fb97b8a7af9 # master
-      with:
-        toolchain: 1.85.0
+    - run: rustup toolchain add ${TOOLCHAIN} && rustup default ${TOOLCHAIN} 
+      env:
+        TOOLCHAIN: 1.85.0
     - uses: taiki-e/install-action@a37010ded18ff788be4440302bd6830b1ae50d8b # v2.68.25
       with:
         tool: cargo-hack@0.6.43

From bb89944b6dc5353289610bb7d965af89d56b51c9 Mon Sep 17 00:00:00 2001
From: hashcatHitman <155700084+hashcatHitman@users.noreply.github.com>
Date: Tue, 10 Nov 2026 12:16:56 +0000
Subject: [PATCH 3/3] ops: Disable all permissions by default

Signed-off-by: hashcatHitman <155700084+hashcatHitman@users.noreply.github.com>
---
 .github/workflows/release.yml | 3 +++
 1 file changed, 3 insertions(+)

diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml
index 1f5de8f..867cd0d 100644
--- a/.github/workflows/release.yml
+++ b/.github/workflows/release.yml
@@ -2,6 +2,9 @@ name: Publish to crates.io
 on:
   push:
     tags: ['v*']  # Triggers when pushing tags starting with 'v'
+
+permissions: {}
+
 jobs:
   publish:
     runs-on: ubuntu-latest