ci: pin actions and use pinned workflows based on pinned actions

.github/workflows/ci.yaml

@@ -8,8 +8,8 @@ on:
 
 jobs:
   build-and-test:
-    # rust-build-v2.1.0
-    uses: iExecBlockchainComputing/github-actions-workflows/.github/workflows/rust-build.yml@5036190d3796e0de636fd5dddd58bebcac0e261a
+    # rust-build-v3.0.0
+    uses: iExecBlockchainComputing/github-actions-workflows/.github/workflows/rust-build.yml@6c7896d7145583aad706eb822715be122a3f8a14
     with:
       rust-version: '1.98.0'
       working-directory: "."
@@ -53,8 +53,8 @@ jobs:
     strategy:
       matrix:
         package: [post-compute, pre-compute]
-    # docker-build-v3.4.0
-    uses: iExecBlockchainComputing/github-actions-workflows/.github/workflows/docker-build.yml@2124e2240bb2cf0254e8308c3d13c75bb524de06
+    # docker-build-v3.5.2
+    uses: iExecBlockchainComputing/github-actions-workflows/.github/workflows/docker-build.yml@0b4bde3c948a886b7df750a3ccbda169102d94b4
     with:
       image-name: docker-regis.iex.ec/tee-worker-${{ matrix.package }}-rust
       image-tag: ${{ needs.prepare.outputs.image_tag }}

.github/workflows/conventional-commits.yaml

@@ -13,5 +13,5 @@ jobs:
     if: github.repository_owner == 'iExecBlockchainComputing'
     permissions:
       pull-requests: read
-    # conventional-commits-1.2.0
-    uses: iExecBlockchainComputing/github-actions-workflows/.github/workflows/conventional-commits.yml@975de113847596617899976f67f5b5faceef0a84
+    # conventional-commits-1.2.1
+    uses: iExecBlockchainComputing/github-actions-workflows/.github/workflows/conventional-commits.yml@7825b11bd6f0b141075368add5223c873d76a2d3

.github/workflows/docker-build-on-tag.yaml

@@ -18,7 +18,8 @@ jobs:
       image_tag: ${{ steps.determine-tag.outputs.image_tag }}
     steps:
       - name: Checkout code
-        uses: actions/checkout@v4
+        # v7.0.1
+        uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1
         with:
           fetch-depth: 0
 
@@ -57,8 +58,8 @@ jobs:
   build-oci-image:
     name: Build OCI image
     needs: prepare
-    # docker-build-v3.4.0
-    uses: iExecBlockchainComputing/github-actions-workflows/.github/workflows/docker-build.yml@2124e2240bb2cf0254e8308c3d13c75bb524de06
+    # docker-build-v3.5.2
+    uses: iExecBlockchainComputing/github-actions-workflows/.github/workflows/docker-build.yml@0b4bde3c948a886b7df750a3ccbda169102d94b4
     with:
       image-name: docker-regis.iex.ec/${{ needs.prepare.outputs.image_name }}
       image-tag: ${{ needs.prepare.outputs.image_tag }}

.github/workflows/release-please.yaml

@@ -14,8 +14,8 @@ jobs:
   release-please:
     # Prevent execution on forks
     if: github.repository_owner == 'iExecBlockchainComputing'
-    # release-please-v2.2.0
-    uses: iExecBlockchainComputing/github-actions-workflows/.github/workflows/release-please.yml@4e2e817b7c2dcab27a671b630e23d07f5fc94daf
+    # release-please-v2.2.1
+    uses: iExecBlockchainComputing/github-actions-workflows/.github/workflows/release-please.yml@1c4f92368b01037ca4f209c2f9179cf8a07f00ff
     secrets:
       RELEASE_PLEASE_APPLICATION_ID: ${{ secrets.RELEASE_PLEASE_APPLICATION_ID }}
       RELEASE_PLEASE_PRIVATE_KEY: ${{ secrets.RELEASE_PLEASE_PRIVATE_KEY }}

post-compute/src/api/worker_api.rs

@@ -8,8 +8,8 @@ use reqwest::{blocking::Client, header::AUTHORIZATION};
 
 /// Thin wrapper around a [`Client`] that knows how to reach the iExec worker API.
 ///
-/// This client can be created directly with a base URL using [`WorkerApiClient::new`], or
-/// configured from environment variables using [`WorkerApiClient::from_env`].
+/// This client can be created directly with a base URL using [`Self::new`], or
+/// configured from environment variables using [`Self::from_env`].
 ///
 /// # Example
 ///
@@ -35,7 +35,8 @@ impl WorkerApiClient {
 
     /// Creates a new WorkerApiClient instance with configuration from environment variables.
     ///
-    /// This method retrieves the worker host from the [`TeeSessionEnvironmentVariable::WorkerHostEnvVar`] environment variable.
+    /// This method retrieves the worker host from the
+    /// [`TeeSessionEnvironmentVariable::WorkerHostEnvVar`] environment variable.
     /// If the variable is not set or empty, it defaults to `"worker:13100"`.
     ///
     /// # Returns
@@ -78,8 +79,8 @@ impl WorkerApiClient {
     ///
     /// # Errors
     ///
-    /// This function will return an [`tee_worker_post_compute::compute::errors::ReplicateStatusCause`]
-    /// if the request could not be sent or the server responded with a non‑success status.
+    /// This function will return an [`ReplicateStatusCause`] error if the request
+    /// could not be sent or the server responded with a non‑success status.
     ///
     /// # Example
     ///

pre-compute/src/api/worker_api.rs

@@ -7,8 +7,8 @@ use reqwest::{blocking::Client, header::AUTHORIZATION};
 
 /// Thin wrapper around a [`Client`] that knows how to reach the iExec worker API.
 ///
-/// This client can be created directly with a base URL using [`new()`], or
-/// configured from environment variables using [`from_env()`].
+/// This client can be created directly with a base URL using [`Self::new`], or
+/// configured from environment variables using [`Self::from_env`].
 ///
 /// # Example
 ///
@@ -34,7 +34,8 @@ impl WorkerApiClient {
 
     /// Creates a new WorkerApiClient instance with configuration from environment variables.
     ///
-    /// This method retrieves the worker host from the [`WORKER_HOST_ENV_VAR`] environment variable.
+    /// This method retrieves the worker host from the
+    /// [`TeeSessionEnvironmentVariable::WorkerHostEnvVar`] environment variable.
     /// If the variable is not set or empty, it defaults to `"worker:13100"`.
     ///
     /// # Returns
@@ -77,8 +78,8 @@ impl WorkerApiClient {
     ///
     /// # Errors
     ///
-    /// This function will return an [`Error`] if the request could not be sent or
-    /// the server responded with a non‑success status.
+    /// This function will return an [`ReplicateStatusCause`] error if the request
+    /// could not be sent or the server responded with a non‑success status.
     ///
     /// # Example
     ///

pre-compute/src/compute/utils/file_utils.rs

@@ -12,7 +12,7 @@ use std::path::{Path, PathBuf};
 ///
 /// * `content` - The content to write to the file
 /// * `file_path` - The path where the file should be written
-/// * `context` - A context string for logging (e.g., "url:https://iex.ec/file.txt" or "chainTaskId:0x123")
+/// * `context` - A context string for logging (e.g., "url:<https://iex.ec/file.txt>" or "chainTaskId:0x123")
 ///
 /// # Returns
 ///