mpp 0.15.0

Rust SDK for the Machine Payments Protocol (MPP)
Documentation 
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61

name: Fuzz

# The 30 second smoke run on pull requests is the `fuzz` job of ci.yml. This
# workflow gives every target more time once a day.
on:
  schedule:
    - cron: "17 3 * * *"
  workflow_dispatch:
    inputs:
      seconds:
        description: Seconds per target
        type: number
        default: 600

env:
  CARGO_TERM_COLOR: always

permissions: {}

concurrency:
  group: ${{ github.workflow }}
  cancel-in-progress: true

jobs:
  nightly:
    name: Fuzz nightly
    runs-on: ubuntu-latest
    timeout-minutes: 120
    permissions:
      contents: read
      id-token: write
    steps:
      - name: Secure runner
        uses: tempoxyz/gh-actions/actions/secure-runner@55fe3b63d9612623cc51e6c62d9d62fbcb175fb0 # 2026-09-29T01-25-15Z-55fe3b63
      - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
        with:
          persist-credentials: false
      - uses: tempoxyz/gh-actions/vendor/dtolnay/rust-toolchain@55fe3b63d9612623cc51e6c62d9d62fbcb175fb0 # 2026-09-29T01-25-15Z-55fe3b63
        with:
          toolchain: nightly
      - uses: tempoxyz/gh-actions/vendor/Swatinem/rust-cache@55fe3b63d9612623cc51e6c62d9d62fbcb175fb0 # 2026-09-29T01-25-15Z-55fe3b63
        with:
          workspaces: fuzz
      - name: Resolve Cargo dependencies
        # The fuzz crate is its own workspace. Start it from the root lockfile
        # so it resolves the same versions as the other jobs.
        run: |
          .github/scripts/resolve-cargo-dependencies.sh
          cp Cargo.lock fuzz/Cargo.lock
      - uses: tempoxyz/gh-actions/vendor/taiki-e/install-action@55fe3b63d9612623cc51e6c62d9d62fbcb175fb0 # 2026-09-29T01-25-15Z-55fe3b63
        with:
          tool: cargo-fuzz
      # A crash fails the job; the log prints the reproducer as base64.
      - name: Run every target
        run: fuzz/run-all.sh "$SECONDS_PER_TARGET"
        env:
          SECONDS_PER_TARGET: ${{ inputs.seconds || 600 }}
          FUZZ_JOBS: 4
          # The prebuilt cargo-fuzz is a musl binary and defaults to its own
          # target, which sanitizers do not support.
          CARGO_FUZZ_ARGS: --target x86_64-unknown-linux-gnu