fix(deps): mitigate lz4_flex RUSTSEC-2026-0041 and add cargo-audit CI #243

	name: ci

	on:
	pull_request:
	push:
	branches: [main]

	jobs:
	ci:
	uses: phoxal/.github/.github/workflows/rust-ci.yml@main
	with:
	system-packages: libudev-dev
	secrets: inherit

	# The official-set fixture pins the service set + bus topology; this test fails
	# if the wired topology drifts from the fixture.
	official-set-fixture:
	runs-on: ubuntu-latest
	steps:
	- uses: actions/checkout@v4

	- uses: actions-rust-lang/setup-rust-toolchain@v1

	- name: Install native build dependencies
	run: \|
	set -euo pipefail
	sudo apt-get update
	sudo apt-get install -y --no-install-recommends \
	build-essential clang cmake nasm pkg-config

	- name: Check official-set fixture topology
	run: cargo test -p phoxal --test official_set_topology -- --nocapture

	- name: Smoke xtask release packaging
	run: \|
	set -euo pipefail
	mkdir -p target/xtask-smoke
	cargo xtask release discover --json > target/xtask-smoke/discover.json
	cargo xtask release package phoxal-service-frame --out target/xtask-smoke
	tarball="$(find target/xtask-smoke -maxdepth 1 -name 'phoxal-service-frame-v-.tar.zst' -type f -print -quit)"
	test -n "$tarball"
	test -f "$tarball.sha256"
	metadata="${tarball%.tar.zst}.emit-apis.json"
	test -f "$metadata"
	python3 -m json.tool target/xtask-smoke/discover.json > /dev/null
	python3 -m json.tool "$metadata" > /dev/null
	(cd target/xtask-smoke && sha256sum -c "$(basename "$tarball").sha256")

Navigation Menu