Skip to content

CI: Update continous_integration and audit workflows#235

Open
tvpeter wants to merge 5 commits intobitcoindevkit:masterfrom
tvpeter:ci/update-int-workflow
Open

CI: Update continous_integration and audit workflows#235
tvpeter wants to merge 5 commits intobitcoindevkit:masterfrom
tvpeter:ci/update-int-workflow

Conversation

@tvpeter
Copy link
Collaborator

@tvpeter tvpeter commented Jan 6, 2026

Description

This PR updates the continuous integration workflow and fixes some Clippy issues.

Also fixes #239

Notes to the reviewers

  • update actions/checkout to v6
  • add a separate job for Clippy
  • automate manual caching in the build-test job
  • replace actions-r/toolchain with actions-rust- lang/setup-rust-toolchain for toolchain setup
    -fix clippy warnings
  • add prepush command to Justfile
  • Add tool-version parameter in audit workflow that forces the actions-rust-lang/audit to use a version that supports CVSS 4.0
  • update transitive dependency bytes to v1.11.1

Changelog notice

Checklists

All Submissions:

  • I've signed all my commits
  • I followed the contribution guidelines
  • I ran cargo fmt and cargo clippy before committing

@coveralls
Copy link

coveralls commented Jan 6, 2026

Pull Request Test Coverage Report for Build 21792954180

Details

  • 0 of 22 (0.0%) changed or added relevant lines in 3 files are covered.
  • No unchanged relevant lines lost coverage.
  • Overall coverage decreased (-0.04%) to 10.682%

Changes Missing Coverage Covered Lines Changed/Added Lines %
src/utils.rs 0 1 0.0%
src/error.rs 0 9 0.0%
src/payjoin/mod.rs 0 12 0.0%
Totals Coverage Status
Change from base Build 21153868360: -0.04%
Covered Lines: 268
Relevant Lines: 2509

💛 - Coveralls

- update actions/checkout to v6
- add separate job for clippy
- automate manual caching in the build-test job
- replace actions-r/toolchain with actions-rust-
lang/setup-rust-toolchain for toolchain setup
- update wasm job and replace build with check
- Add `tool-version` parameter in audit workflow
that forces the `actions-rust-lang/audit` to
download and use a version that supports CVSS 4.0.
- update a transitive dependency `bytes` to v1.11.
1 that fixes `RUSTSEC-2026-0007` security
vulnerability

Fixes bitcoindevkit#239
@tvpeter tvpeter force-pushed the ci/update-int-workflow branch from 1cc75c9 to c5414dd Compare February 8, 2026 05:03
@tvpeter tvpeter changed the title CI: Update Continuous Integration workflow CI: Update continous_integration and audit workflows Feb 8, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

Status: No status

Development

Successfully merging this pull request may close these issues.

RUSTSEC-2026-0007: Integer overflow in BytesMut::reserve

2 participants