flowsdk 0.5.3

Safety-first, realistic, behavior-predictable messaging SDK for MQTT and more.
Documentation 
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148

name: Dependencies

on:
  schedule:
    # Run every Monday at 8 AM UTC
    - cron: '0 8 * * 1'
  workflow_dispatch:

jobs:
  update-dependencies:
    name: Update Dependencies
    runs-on: ubuntu-latest
    
    steps:
    - name: Checkout code
      uses: actions/checkout@v4
      with:
        token: ${{ secrets.GITHUB_TOKEN }}

    - name: Install Rust
      uses: dtolnay/rust-toolchain@stable

    - name: Install protoc
      uses: arduino/setup-protoc@v3
      with:
        version: '25.x'
        repo-token: ${{ secrets.GITHUB_TOKEN }}

    - name: Install cargo-edit
      run: cargo install cargo-edit

    - name: Update dependencies - Main workspace
      run: |
        cargo update
        cargo upgrade --dry-run > upgrade-main.txt || true

    - name: Update dependencies - Proxy workspace
      run: |
        cd mqtt_grpc_duality
        cargo update
        cargo upgrade --dry-run > upgrade-proxy.txt || true

    - name: Update dependencies - Fuzz workspace
      run: |
        cd fuzz
        cargo update
        cargo upgrade --dry-run > upgrade-fuzz.txt || true

    - name: Test with updated dependencies
      run: |
        cargo test --workspace
        cd fuzz && cargo build

    - name: Create Pull Request
      uses: peter-evans/create-pull-request@v5
      with:
        token: ${{ secrets.GITHUB_TOKEN }}
        commit-message: 'chore: update dependencies'
        title: 'chore: update dependencies'
        body: |
          Automated dependency updates.
          
          ## Main Workspace Changes
          ```
          $(cat upgrade-main.txt || echo "No changes")
          ```
          
          ## Proxy Workspace Changes  
          ```
          $(cat mqtt_grpc_duality/upgrade-proxy.txt || echo "No changes")
          ```
          
          ## Fuzz Workspace Changes
          ```
          $(cat fuzz/upgrade-fuzz.txt || echo "No changes")
          ```
          
          Please review and test before merging.
        branch: automated/dependency-updates
        delete-branch: true

  security-audit:
    name: Security Audit
    runs-on: ubuntu-latest
    
    steps:
    - name: Checkout code
      uses: actions/checkout@v4

    - name: Install Rust
      uses: dtolnay/rust-toolchain@stable

    - name: Install protoc
      uses: arduino/setup-protoc@v3
      with:
        version: '25.x'
        repo-token: ${{ secrets.GITHUB_TOKEN }}

    - name: Install cargo-audit
      run: cargo install cargo-audit

    - name: Run security audit - Main workspace
      id: audit-main
      run: |
        cargo audit --json > audit-main.json || true
        echo "main_vulnerabilities=$(cat audit-main.json | jq '.vulnerabilities.count // 0')" >> $GITHUB_OUTPUT

    - name: Run security audit - Proxy workspace
      id: audit-proxy
      run: |
        cd mqtt_grpc_duality
        cargo audit --json > audit-proxy.json || true
        echo "proxy_vulnerabilities=$(cat audit-proxy.json | jq '.vulnerabilities.count // 0')" >> $GITHUB_OUTPUT

    - name: Run security audit - Fuzz workspace
      id: audit-fuzz
      run: |
        cd fuzz
        cargo audit --json > audit-fuzz.json || true
        echo "fuzz_vulnerabilities=$(cat audit-fuzz.json | jq '.vulnerabilities.count // 0')" >> $GITHUB_OUTPUT

    - name: Create security issue
      if: steps.audit-main.outputs.main_vulnerabilities > 0 || steps.audit-proxy.outputs.proxy_vulnerabilities > 0 || steps.audit-fuzz.outputs.fuzz_vulnerabilities > 0
      uses: actions/github-script@v7
      with:
        script: |
          const mainVulns = ${{ steps.audit-main.outputs.main_vulnerabilities }};
          const proxyVulns = ${{ steps.audit-proxy.outputs.proxy_vulnerabilities }};
          const fuzzVulns = ${{ steps.audit-fuzz.outputs.fuzz_vulnerabilities }};
          
          const title = `Security vulnerabilities detected (${mainVulns + proxyVulns + fuzzVulns} total)`;
          const body = `Security audit found vulnerabilities in dependencies:
          
          - Main workspace: ${mainVulns} vulnerabilities
          - Proxy workspace: ${proxyVulns} vulnerabilities  
          - Fuzz workspace: ${fuzzVulns} vulnerabilities
          
          Please review the audit reports and update dependencies as needed.
          
          Run \`cargo audit\` in each workspace for detailed information.`;
          
          github.rest.issues.create({
            owner: context.repo.owner,
            repo: context.repo.repo,
            title: title,
            body: body,
            labels: ['security', 'dependencies']
          });