dev-deps 0.9.1

Dependency hygiene for Rust crates. Detect unused, outdated, and many-major-versions-behind dependencies. Wraps cargo-udeps + cargo-outdated. Part of the dev-* verification collection.
Documentation
name: CI

on:
  push:
    branches: [main]
  pull_request:
    branches: [main]

env:
  CARGO_TERM_COLOR: always

jobs:
  test:
    name: Test (${{ matrix.os }})
    runs-on: ${{ matrix.os }}
    strategy:
      fail-fast: false
      matrix:
        os: [ubuntu-latest, macos-latest, windows-latest]
    steps:
      - uses: actions/checkout@v5
      - name: Check out sibling crates (path deps)
        run: git clone --depth 1 https://github.com/jamesgober/dev-report.git ../dev-report
      - uses: dtolnay/rust-toolchain@stable
      - uses: Swatinem/rust-cache@v2

      - name: Build (default features)
        run: cargo build --verbose
      - name: Test (default features)
        run: cargo test --verbose

      - name: Build (no default features)
        run: cargo build --no-default-features --verbose

      - name: Build (all features)
        run: cargo build --all-features --verbose
      - name: Test (all features)
        run: cargo test --all-features --verbose

  clippy:
    name: Clippy
    runs-on: ubuntu-latest
    steps:
      - uses: actions/checkout@v5
      - name: Check out sibling crates (path deps)
        run: git clone --depth 1 https://github.com/jamesgober/dev-report.git ../dev-report
      - uses: dtolnay/rust-toolchain@stable
        with:
          components: clippy
      - uses: Swatinem/rust-cache@v2
      - name: Clippy (all features)
        run: cargo clippy --all-targets --all-features -- -D warnings
      - name: Clippy (no default features)
        run: cargo clippy --all-targets --no-default-features -- -D warnings

  fmt:
    name: Rustfmt
    runs-on: ubuntu-latest
    steps:
      - uses: actions/checkout@v5
      - uses: dtolnay/rust-toolchain@stable
        with:
          components: rustfmt
      - run: cargo fmt --all -- --check

  docs:
    name: Doc build
    runs-on: ubuntu-latest
    env:
      RUSTDOCFLAGS: "-D warnings"
    steps:
      - uses: actions/checkout@v5
      - name: Check out sibling crates (path deps)
        run: git clone --depth 1 https://github.com/jamesgober/dev-report.git ../dev-report
      - uses: dtolnay/rust-toolchain@stable
      - uses: Swatinem/rust-cache@v2
      - run: cargo doc --all-features --no-deps

  msrv:
    name: MSRV (Rust 1.85)
    runs-on: ubuntu-latest
    steps:
      - uses: actions/checkout@v5
      - name: Check out sibling crates (path deps)
        run: git clone --depth 1 https://github.com/jamesgober/dev-report.git ../dev-report
      - uses: dtolnay/rust-toolchain@1.85
      - uses: Swatinem/rust-cache@v2
      - run: cargo build --all-features --verbose

  # Sanity check: both wrapped tools are installable and dev-deps
  # compiles cleanly against them. The full subprocess pipeline is NOT
  # driven here — invoking `cargo udeps` or `cargo outdated` from inside
  # `cargo test` deadlocks on the workspace target-dir lock the same
  # way `cargo llvm-cov` does (see dev-coverage). The parsers are
  # covered by fixture-based unit tests in `src/udeps.rs` and
  # `src/outdated.rs`.
  integration:
    name: Integration (udeps/outdated sanity)
    runs-on: ubuntu-latest
    steps:
      - uses: actions/checkout@v5
      - name: Check out sibling crates (path deps)
        run: git clone --depth 1 https://github.com/jamesgober/dev-report.git ../dev-report
      - uses: dtolnay/rust-toolchain@stable
      - name: Install nightly toolchain (for cargo-udeps)
        uses: dtolnay/rust-toolchain@nightly
      - uses: Swatinem/rust-cache@v2
      - name: Install cargo-udeps
        uses: taiki-e/install-action@v2
        with:
          tool: cargo-udeps
      - name: Install cargo-outdated
        uses: taiki-e/install-action@v2
        with:
          tool: cargo-outdated
      - name: Verify both tools installed
        run: |
          cargo +nightly udeps --version
          cargo outdated --version
      - name: Build dev-deps against installed toolchain
        run: cargo build --release --verbose