sqlite-diff-rs 0.16.0

Build SQLite changeset and patchset binary formats programmatically, without SQLite
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64

---
name: Sonar

"on":
  pull_request:
  push:
    branches:
      - main

permissions:
  contents: read

concurrency:
  group: ${{ github.workflow }}-${{ github.ref }}
  cancel-in-progress: ${{ github.ref != 'refs/heads/main' }}

env:
  CARGO_TERM_COLOR: always

jobs:
  sonar:
    name: SonarQube scan
    runs-on: ubuntu-latest
    timeout-minutes: 45
    # Neither a fork's pull request nor a Dependabot run can read SONAR_TOKEN,
    # so the scan runs for same-repo human branches and pushes to main only.
    if: >-
      github.event_name == 'push' ||
      (github.event.pull_request.head.repo.full_name == github.repository &&
      github.event.pull_request.user.login != 'dependabot[bot]')
    steps:
      - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7
        with:
          # Full history improves blame-based new-code attribution.
          fetch-depth: 0
          # Later steps never talk to git, so keep the token out of git config.
          persist-credentials: false

      - name: Cache cargo downloads
        uses: actions/cache@55cc8345863c7cc4c66a329aec7e433d2d1c52a9 # v6
        with:
          path: |
            ~/.cargo/registry/index
            ~/.cargo/registry/cache
            ~/.cargo/git/db
          key: dl-${{ runner.os }}-${{ hashFiles('**/Cargo.lock') }}
          restore-keys: |
            dl-${{ runner.os }}-

      - name: Install stable clippy
        run: |
          rustup toolchain install stable \
            --profile minimal \
            --component clippy

      - name: Clippy report
        # Token-free clippy run. The scan step only imports this report, so
        # SONAR_TOKEN never reaches dependency build scripts or proc macros.
        run: cargo clippy --message-format=json > clippy-report.json

      - name: SonarQube scan
        uses: SonarSource/sonarqube-scan-action@d209202bc7d53ff1cc128f7f907dac145c9d6ae9 # v8.3.0
        env:
          SONAR_TOKEN: ${{ secrets.SONAR_TOKEN }}