chore: release #2892

	name: Security audit

	permissions:
	contents: read

	on:
	schedule:
	- cron: '0 0 * * *'
	push:
	paths:
	- '.github/workflows/audit.yml'
	- '**/Cargo.toml'
	- '**/Cargo.lock'
	pull_request:
	paths:
	- '.github/workflows/audit.yml'
	- '**/Cargo.toml'
	- '**/Cargo.lock'

	env:
	RUST_BACKTRACE: 1
	CARGO_TERM_COLOR: always
	CLICOLOR: 1

	jobs:
	cargo-deny:
	runs-on: ubuntu-latest
	strategy:
	matrix:
	checks:
	- advisories
	- bans licenses sources

	# Prevent sudden announcement of a new advisory from failing ci:
	continue-on-error: ${{ matrix.checks == 'advisories' }}

	steps:
	- name: Harden Runner
	uses: step-security/harden-runner@0080882f6c36860b6ba35c610c98ce87d4e2f26f # v2.10.2
	with:
	egress-policy: audit

	- uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2

	- uses: EmbarkStudios/cargo-deny-action@e2f4ede4a4e60ea15ff31bc0647485d80c66cfba # v2.0.4
	with:
	command: check ${{ matrix.checks }}
	rust-version: stable

Provide feedback