dbc567ef57
Bump dtolnay/rust-toolchain in the minor-updates group
...
Bumps the minor-updates group with 1 update: [dtolnay/rust-toolchain](https://github.com/dtolnay/rust-toolchain ).
Updates `dtolnay/rust-toolchain` from 1.88 to 1.100
- [Release notes](https://github.com/dtolnay/rust-toolchain/releases )
- [Commits](https://github.com/dtolnay/rust-toolchain/compare/1.88...1.100 )
---
updated-dependencies:
- dependency-name: dtolnay/rust-toolchain
dependency-version: '1.100'
dependency-type: direct:production
update-type: version-update:semver-minor
dependency-group: minor-updates
...
Signed-off-by: dependabot[bot] <support@github.com >
2026-05-13 18:52:41 +00:00
0d51c5034f
fix: upgrade cocogitto-action to v4 and fix commit range syntax
...
The v3 action inputs (check:, from:) no longer match the v4 API.
Switch to v4 with command: check and pass the git range as a positional
args value (SHA..HEAD) which is what cog check accepts.
2026-05-13 14:51:42 -04:00
d37ca2de44
fix: resolve remaining CI check failures
...
- cargo deny: add MPL-2.0 and BSD-3-Clause to allow list (colored via
simple_logger/mockito; encoding_rs via reqwest)
- conventional commits: use explicit SHA of last pre-conventional commit
instead of from_latest_tag (no tags exist yet in the repo)
- MSRV: raise rust-version 1.80 -> 1.88 to match the actual minimum
required by the dependency tree (simple_logger -> time 0.3 -> 1.88)
- MSRV CI: update toolchain pin to 1.88 to match
- macOS test: remove Swatinem/rust-cache from test matrix job to avoid
stale cache corrupting the cargo binary path on arm64 runners
2026-05-13 14:51:42 -04:00
f55c72aa34
fix: resolve CI check failures
...
- Replace serde_yml with serde_norway (RUSTSEC-2025-0068: serde_yml is
unsound and archived; serde_norway is the recommended maintained fork)
- Remove unused toml dependency (was resolving to v1.1.2 which requires
edition2024/Rust 1.85, breaking the MSRV 1.80 check)
- Run cargo fmt to fix formatting diffs caught by lint job
- Fix cog commit check to use from_latest_tag so pre-conventional-commits
history does not cause the check to fail
- Remove semver job: dredge is a binary-only crate with no lib target,
cargo-semver-checks cannot check it
2026-05-13 14:51:42 -04:00
52910538df
ci: overhaul CI/CD pipeline and add tooling configs
...
- Add ci.yml: test matrix (ubuntu/macos/windows), lint, conventional
commits check (cocogitto), cargo-deny, MSRV, and semver jobs
- Add release.yml: tag-triggered publish to crates.io + GitHub release
- Remove stale rust.yml and rust-clippy.yml workflows
- Add deny.toml for cargo-deny license/advisory/ban/source checks
- Add cog.toml for cocogitto conventional commits and changelog generation
- Add Justfile with test, check, fmt, commits, release, push-tag targets
- Add CHANGELOG.md seed file
- Add PULL_REQUEST_TEMPLATE.md with conventional commits checklist
- Update dependabot.yml: weekly schedule with grouped patch/minor updates
2026-05-13 14:51:42 -04:00
353fd94b55
chore: update all dependencies to latest versions
...
- Replace deprecated serde_yaml with serde_yml
- Remove unused dependencies: serde_toml, xdg
- Bump thiserror 1→2, toml 0.8→1.0, reqwest 0.12.3→0.12 (latest),
clap 4.4→4.6, tokio 1.32→1.52, and all other deps to latest
- Raise rust-version minimum from 1.72 to 1.80
- Fix description typo: 'interracting' → 'interacting'
- Bump version to 1.2.0
- Update release workflow action versions
2026-05-13 14:51:42 -04:00
67c02581f3
Bump github/codeql-action from 2 to 3
...
Bumps [github/codeql-action](https://github.com/github/codeql-action ) from 2 to 3.
- [Release notes](https://github.com/github/codeql-action/releases )
- [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md )
- [Commits](https://github.com/github/codeql-action/compare/v2...v3 )
---
updated-dependencies:
- dependency-name: github/codeql-action
dependency-type: direct:production
update-type: version-update:semver-major
...
Signed-off-by: dependabot[bot] <support@github.com >
2023-12-13 18:20:08 +00:00
60acc6921c
Replace deprecated actions
2023-09-29 12:13:53 -04:00
7ba2359db5
Fix syntax error
2023-09-29 12:05:39 -04:00
c6294dc83e
Fix name of rust-docs component
2023-09-29 12:01:09 -04:00
a47b4369f8
Add task to build documentation
2023-09-29 11:58:24 -04:00
b8d64542f2
Use lowercase filename and fix windows tar command
2023-09-29 11:41:12 -04:00
ce6bd4b46a
Fix path of release binary
2023-09-29 11:35:42 -04:00
ab419fede0
Use extension in filename
2023-09-29 11:33:24 -04:00
cab6e40050
Use ref-name instead of ref for version
2023-09-29 11:28:54 -04:00
b12e5e4c7b
Use gzip files to differentiate versions
2023-09-29 11:04:07 -04:00
452a136b17
Split out release-assets job for windows from mac/linux
2023-09-29 10:39:21 -04:00
b676e7e220
Add permission to write contents to release_asset workflow
2023-09-28 17:55:41 -04:00
5f1a98ded8
Add permission to write contents to release workflow
2023-09-28 17:45:11 -04:00
8c737a9833
Create release workflow
2023-09-28 17:35:31 -04:00
2c9391bc5a
Bump actions/checkout from 3 to 4
...
Bumps [actions/checkout](https://github.com/actions/checkout ) from 3 to 4.
- [Release notes](https://github.com/actions/checkout/releases )
- [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md )
- [Commits](https://github.com/actions/checkout/compare/v3...v4 )
---
updated-dependencies:
- dependency-name: actions/checkout
dependency-type: direct:production
update-type: version-update:semver-major
...
Signed-off-by: dependabot[bot] <support@github.com >
2023-09-26 17:32:24 +00:00
de72ec53aa
Test on Linux/Mac/Windows
2023-09-26 13:27:37 -04:00
3156a9f99e
Fix clippy security errors
2023-09-21 14:28:15 -04:00
2e084a4b2e
Enable Clippy::Pedantic checks by default
2023-09-21 13:47:25 -04:00
dcd656e9c8
Update GitHub workflows
...
Updates the github workflows to separate the clippy analysis from the rest. This way the clippy analysis can be done on a schedule. Also update the clippy analysis to upload the results to GitHub as security issues.
2023-09-21 11:39:58 -04:00
74b2f87e51
Add GitHub Rust workflow and dependabot integration
2023-09-13 21:44:06 -04:00
dependabot[bot]
Anthony Oteri
Anthony Oteri