dependencies #137
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| name: dependencies | |
| on: | |
| schedule: | |
| - cron: '0 21 * * TUE' # Run every Tuesday at 21:00 (UTC) | |
| push: | |
| tags: | |
| - 'v*.*.*' # Run when a new version is being published | |
| env: | |
| # | |
| # Dependency versioning | |
| # | |
| # Udeps version | |
| UDEPS_VERSION: "0.1.143" | |
| concurrency: | |
| group: ${{ github.workflow }}-${{ github.ref }} | |
| cancel-in-progress: true | |
| jobs: | |
| dependencies: | |
| runs-on: ubuntu-latest | |
| steps: | |
| - name: checkout | |
| uses: actions/checkout@v4 | |
| - name: Audit Rust dependencies | |
| # If a vulnerability is found, a new issue will automatically be opened | |
| # since this action runs on main branch | |
| uses: actions-rust-lang/audit@v1 | |
| - name: Detect multiple versions of the same crate | |
| uses: EmbarkStudios/cargo-deny-action@v2 | |
| with: | |
| command: check bans licenses sources | |
| - name: Install Rust nightly | |
| uses: dtolnay/rust-toolchain@nightly | |
| with: | |
| toolchain: nightly | |
| components: rustfmt | |
| - name: Install cargo-udeps | |
| env: | |
| UDEPS_LINK: https://github.com/est31/cargo-udeps/releases/download | |
| run: | | |
| curl -L "$UDEPS_LINK/v$UDEPS_VERSION/cargo-udeps-v$UDEPS_VERSION-x86_64-unknown-linux-gnu.tar.gz" | | |
| tar xz -C $HOME/.cargo/bin --strip-components 2 | |
| - name: Run cargo-udeps | |
| run: | | |
| cargo +nightly udeps --all-targets |