name: CI
on:
push:
branches: [ main ]
pull_request:
branches: [ main ]
jobs:
build-test:
runs-on: ${{ matrix.os }}
strategy:
fail-fast: false
matrix:
os: [ubuntu-latest, macos-latest, windows-latest]
features:
- ""
- "ttl"
- "nested"
- "encrypt"
- "ttl nested"
- "ttl nested encrypt"
steps:
- uses: actions/checkout@v5
- name: Install Rust
uses: dtolnay/rust-toolchain@stable
- name: Build
run: cargo build --no-default-features --features "${{ matrix.features }}" --verbose
- name: Test (unit + integration + doc)
run: cargo test --no-default-features --features "${{ matrix.features }}" --verbose
msrv:
name: MSRV (1.75)
runs-on: ubuntu-latest
steps:
- uses: actions/checkout@v5
- name: Install MSRV toolchain
uses: dtolnay/rust-toolchain@1.75.0
- name: Pin transitive deps to MSRV-compatible versions
run: |
cargo update -p base64ct --precise 1.6.0
- name: Build with MSRV (default features)
run: cargo build --verbose
- name: Build with MSRV (all features)
run: cargo build --features ttl,nested,encrypt --verbose
lint:
runs-on: ubuntu-latest
steps:
- uses: actions/checkout@v5
- name: Install Rust
uses: dtolnay/rust-toolchain@stable
with:
components: rustfmt, clippy
- name: Check formatting
run: cargo fmt --all -- --check
- name: Clippy
run: cargo clippy --all-targets --features ttl,nested,encrypt -- -D warnings
docs:
runs-on: ubuntu-latest
steps:
- uses: actions/checkout@v5
- name: Install Rust
uses: dtolnay/rust-toolchain@stable
- name: Check documentation
env:
RUSTDOCFLAGS: -D warnings
run: cargo doc --no-deps --features ttl,nested,encrypt
audit:
name: Security audit (cargo-audit)
runs-on: ubuntu-latest
steps:
- uses: actions/checkout@v5
- name: Install cargo-audit
run: cargo install cargo-audit --locked --version "^0.22"
- name: Run audit
run: cargo audit --deny warnings --ignore RUSTSEC-2025-0057 --ignore RUSTSEC-2024-0384
deny:
name: Dependency policy (cargo-deny)
runs-on: ubuntu-latest
steps:
- uses: actions/checkout@v5
- uses: EmbarkStudios/cargo-deny-action@v2
with:
command: check