chore: release v0.6.5 (bug-hunt fix wave) #33
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| name: CI | |
| on: | |
| push: | |
| branches: [main] | |
| pull_request: | |
| branches: [main] | |
| env: | |
| CARGO_TERM_COLOR: always | |
| jobs: | |
| test: | |
| runs-on: ${{ matrix.os }} | |
| strategy: | |
| matrix: | |
| os: [ubuntu-latest, macos-latest, windows-latest] | |
| rust: [stable] | |
| steps: | |
| - uses: actions/checkout@v4 | |
| - uses: dtolnay/rust-toolchain@stable | |
| - run: cargo build --verbose | |
| - run: cargo test --verbose | |
| clippy: | |
| runs-on: ubuntu-latest | |
| steps: | |
| - uses: actions/checkout@v4 | |
| - uses: dtolnay/rust-toolchain@stable | |
| with: | |
| components: clippy | |
| - run: cargo clippy -- -D warnings | |
| fmt: | |
| runs-on: ubuntu-latest | |
| steps: | |
| - uses: actions/checkout@v4 | |
| - uses: dtolnay/rust-toolchain@stable | |
| with: | |
| components: rustfmt | |
| - run: cargo fmt --check | |
| # The nfpm config is otherwise only exercised at tag time, where a mistake | |
| # breaks a release instead of a PR. Build all four packages from a stub | |
| # binary and install/remove the deb to prove the layout still works. | |
| packaging: | |
| runs-on: ubuntu-latest | |
| steps: | |
| - uses: actions/checkout@v4 | |
| - name: Install nfpm | |
| env: | |
| GH_TOKEN: ${{ github.token }} | |
| run: | | |
| tag=$(gh release view --repo goreleaser/nfpm --json tagName -q .tagName) | |
| curl -fsSL "https://github.com/goreleaser/nfpm/releases/download/${tag}/nfpm_${tag#v}_amd64.deb" -o /tmp/nfpm.deb | |
| sudo dpkg -i /tmp/nfpm.deb | |
| - name: Build deb and rpm for both arches | |
| run: | | |
| set -euo pipefail | |
| printf '#!/bin/sh\necho stub\n' > ink | |
| chmod +x ink | |
| for arch in amd64 arm64; do | |
| for fmt in deb rpm; do | |
| VERSION=0.0.0 ARCH="$arch" nfpm package -f packaging/nfpm.yaml -p "$fmt" | |
| done | |
| done | |
| rm -f ink | |
| count=$(ls ink-md*.deb ink-md*.rpm | wc -l) | |
| [ "$count" -eq 4 ] || { echo "expected 4 packages, got $count"; exit 1; } | |
| - name: Install and remove the deb | |
| run: | | |
| set -euo pipefail | |
| sudo dpkg -i ink-md_0.0.0_amd64.deb | |
| command -v ink | |
| dpkg -L ink-md | |
| sudo dpkg -r ink-md | |
| audit: | |
| runs-on: ubuntu-latest | |
| permissions: | |
| contents: read | |
| checks: write | |
| issues: write | |
| steps: | |
| - uses: actions/checkout@v4 | |
| - uses: rustsec/audit-check@v2 | |
| with: | |
| token: ${{ secrets.GITHUB_TOKEN }} | |
| # Unmaintained-only advisories with no available fix — both are | |
| # transitive dependencies of syntect (syntax/theme parsing) with no | |
| # patched release. Not vulnerabilities. Revisit when syntect updates. | |
| ignore: RUSTSEC-2024-0320,RUSTSEC-2025-0141 |