name: CI
on:
push:
tags:
- 'v*.*.*'
workflow_dispatch:
permissions:
contents: read
env:
CARGO_TERM_COLOR: always
RUST_BACKTRACE: 1
jobs:
fmt:
name: Format
runs-on: ubuntu-latest
steps:
- uses: actions/checkout@v4
- uses: dtolnay/rust-toolchain@stable
with:
components: rustfmt
- run: cargo fmt --all --check
clippy:
name: Clippy
runs-on: ubuntu-latest
steps:
- uses: actions/checkout@v4
- uses: dtolnay/rust-toolchain@stable
with:
components: clippy
- uses: Swatinem/rust-cache@v2
- run: cargo clippy --workspace --all-targets --all-features -- -D warnings
test:
name: Test - ${{ matrix.os }} / ${{ matrix.rust }}
runs-on: ${{ matrix.os }}
needs: [fmt, clippy]
strategy:
fail-fast: false
matrix:
os: [ubuntu-latest, windows-latest, macos-latest]
rust: [stable, beta]
include:
- os: ubuntu-latest
rust: 1.88.0
name-suffix: " (MSRV)"
steps:
- uses: actions/checkout@v4
- uses: dtolnay/rust-toolchain@master
with:
toolchain: ${{ matrix.rust }}
- uses: Swatinem/rust-cache@v2
with:
key: ${{ matrix.os }}-${{ matrix.rust }}
- name: Build
run: cargo build --workspace --all-features
- name: Test
run: cargo test --workspace --all-features
- name: Doc tests
run: cargo test --doc --all-features
features:
name: Feature combinations
runs-on: ubuntu-latest
needs: [fmt, clippy]
steps:
- uses: actions/checkout@v4
- uses: dtolnay/rust-toolchain@stable
- uses: Swatinem/rust-cache@v2
- uses: taiki-e/install-action@cargo-hack
- run: cargo hack check --feature-powerset --depth 2 --all-targets
build-release:
name: Build release
runs-on: ubuntu-latest
needs: [fmt, clippy]
steps:
- uses: actions/checkout@v4
- uses: dtolnay/rust-toolchain@stable
- uses: Swatinem/rust-cache@v2
- run: cargo build --release --workspace
docs:
name: Documentation
runs-on: ubuntu-latest
needs: [fmt, clippy]
env:
RUSTDOCFLAGS: -D warnings
steps:
- uses: actions/checkout@v4
- uses: dtolnay/rust-toolchain@stable
- uses: Swatinem/rust-cache@v2
- run: cargo doc --workspace --all-features --no-deps
security-audit:
name: Security audit
runs-on: ubuntu-latest
steps:
- uses: actions/checkout@v4
- uses: rustsec/audit-check@v2
with:
token: ${{ secrets.GITHUB_TOKEN }}
ignore: RUSTSEC-2025-0057,RUSTSEC-2024-0436
ci-success:
name: CI Success
needs: [fmt, clippy, test, features, build-release, docs, security-audit]
if: always()
runs-on: ubuntu-latest
steps:
- name: Check all jobs
run: |
# Check if all previous jobs were successful
jq --exit-status 'all(.result == "success")' <<< '${{ toJson(needs) }}'