1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
name: Rust
on:
push:
branches:
pull_request:
branches:
env:
CARGO_TERM_COLOR: always
jobs:
build-test-all-features:
runs-on: ubicloud-standard-8
permissions:
contents: write
pull-requests: write
actions: read
checks: write
repository-projects: write
steps:
- name: Checkout code
uses: actions/checkout@v4
- uses: Swatinem/rust-cache@v2
with:
cache-on-failure: "true"
- name: Install Rust
uses: actions-rs/toolchain@v1
with:
toolchain: stable
profile: minimal
override: true
- name: Install cargo-all-features
run: cargo install cargo-all-features
- name: Run tests for all feature combinations
# This command builds/tests all combinations sequentially
run: cargo all-features test -- --verbose
clippy_check:
runs-on: ubicloud-standard-8
permissions:
contents: write
pull-requests: write
actions: read
checks: write
repository-projects: write
steps:
- name: Checkout code
uses: actions/checkout@v4
- uses: Swatinem/rust-cache@v2
with:
cache-on-failure: "true"
- name: Install Rust
uses: actions-rs/toolchain@v1
with:
toolchain: stable
profile: minimal
components: clippy
override: true
- name: Install cargo-all-features
run: cargo install cargo-all-features
- name: Clippy check all feature combinations
run: cargo all-features clippy --all-targets -- -D warnings
format_check:
runs-on: ubicloud-standard-8
steps:
- name: Checkout code
uses: actions/checkout@v4
- uses: Swatinem/rust-cache@v2
with:
cache-on-failure: "true"
- name: Install Rust
uses: actions-rs/toolchain@v1
with:
toolchain: stable
profile: minimal
components: rustfmt
override: true
- name: Check formatting
run: cargo fmt --all -- --check
security_audit:
runs-on: ubicloud-standard-2
permissions:
contents: read
# audit-check reports its findings as a check run; without this the
# report API call fails with "Resource not accessible by integration"
# and the job errors even when no vulnerabilities are found.
checks: write
steps:
- uses: actions/checkout@v4
- uses: rustsec/audit-check@v2
with:
token: ${{ secrets.GITHUB_TOKEN }}
# quick-xml DoS advisories: the fix requires quick-xml >=0.41, but the
# dev-dependency-only chain cert-provider -> rust-s3/aws-creds pins
# ^0.38. Re-evaluate when upstream releases with a newer quick-xml.
ignore: RUSTSEC-2026-0194,RUSTSEC-2026-0195