neocache 1.0.0

A concurrent HashMap with S3-FIFO cache eviction, forked from DashMap
Documentation
name: Security audit

on:
  push:
    branches: [main]
    paths:
      - "Cargo.toml"
      - "Cargo.lock"
      - ".github/workflows/audit.yml"
  pull_request:
    branches: [main]
    paths:
      - "Cargo.toml"
      - "Cargo.lock"
      - ".github/workflows/audit.yml"
  # Re-scan weekly so newly published advisories against existing dependencies
  # are caught even when no commits land.
  schedule:
    - cron: "0 9 * * 1" # Mondays at 09:00 UTC
  workflow_dispatch:

permissions:
  contents: read

env:
  CARGO_TERM_COLOR: always

concurrency:
  group: ${{ github.workflow }}-${{ github.ref }}
  cancel-in-progress: true

jobs:
  audit:
    name: cargo-audit
    runs-on: ubuntu-latest
    steps:
      - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
      - uses: dtolnay/rust-toolchain@3c5f7ea28cd621ae0bf5283f0e981fb97b8a7af9 # master @ 2026-03-27
        with:
          toolchain: stable
      - uses: taiki-e/install-action@711e1c3275189d76dcc4d34ddea63bf96ac49090 # v2
        with:
          tool: cargo-audit
      # `--deny warnings` surfaces unmaintained / yanked crates as failures;
      # adjust if those become too noisy and you want to keep the job green
      # while still flagging vulnerabilities.
      - run: cargo audit --deny warnings