Files
noq/Makefile.toml
Asmir Avdicevic c334d2da21 ci(secruity): ensure locked cargo files and dependabot cooldown (#788)
## Description

- Uses `--locked` to ensure we only use deps from the lock file
- Adds cooldown period to dependabot
- pins actions versions
- introduces zizimor and pinact

## Breaking Changes

<!-- Optional, if there are any breaking changes document them,
including how to migrate older code. -->

## Notes & open questions

<!-- Any notes, remarks or open questions you have to make about the -->
<!-- PR. -->

## Change checklist
<!-- Remove any that are not relevant. -->
- [ ] Self-review.
- [ ] Documentation updates following the [style
guide](https://rust-lang.github.io/rfcs/1574-more-api-documentation-conventions.html#appendix-a-full-conventions-text),
if relevant.
- [ ] Tests if relevant.
- [ ] All breaking changes documented.
- [ ] This PR was created by a human that thought critically about the
      proposed change and wrote an as clear and concise description as
      they could.
- [ ] This PR isn't slop, and is carefully crafted to do have the
      intented effect.
- [ ] `cargo make` passes locally.

---------

Co-authored-by: Friedel Ziegelmayer <me@dignifiedquire.com>
2026-08-20 14:00:43 +00:00

119 lines
3.6 KiB
TOML

# Use cargo-make to run tasks here: https://crates.io/crates/cargo-make
[config]
skip_core_tasks = true
default_to_workspace = false
[env]
CARGO_BUILD_WARNINGS = "deny"
CARGO_MAKE_EXTEND_WORKSPACE_MAKEFILE = true
# Workspace members to exclude when setting `workspace = true` for a task.
# Must live at global env (not task-level) so it's read before workspace iteration
# is generated. Only the `check-external-types` task uses this.
CARGO_MAKE_WORKSPACE_SKIP_MEMBERS = ["bench", "fuzz", "perf", "docs/book"]
[tasks.default]
alias = "dev-flow"
[tasks.dev-flow]
description = "Fast local sub-set of all CI checks"
dependencies = [
"format-check",
"check",
"clippy",
"doc",
"test",
"proptests-extralight",
]
[tasks.format]
description = "Format the rust files following style rules"
command = "cargo"
args = [
"fmt",
"--all",
"--",
"--config",
"unstable_features=true",
"--config",
"imports_granularity=Crate,group_imports=Preserve,reorder_imports=false,format_code_in_doc_comments=true,comment_width=100,wrap_comments=true",
]
[tasks.format-check]
description = "Check the rust files for formatting style"
command = "cargo"
args = [
"fmt",
"--all",
"--check",
"--",
"--config",
"unstable_features=true",
"--config",
"imports_granularity=Crate,group_imports=Preserve,reorder_imports=false,format_code_in_doc_comments=true,comment_width=100,wrap_comments=true",
]
[tasks.check]
description = "Run cargo-check for entire project"
# Allows us to use CARGO_BUILD_WARNINGS instead of
# RUSTFLAGS=-Dwarnings which breaks the build cache.
toolchain = { channel = "stable", min_version = "1.97.0" }
command = "cargo"
args = ["check", "--workspace", "--all-features", "--all-targets"]
[tasks.clippy]
description = "Run cargo-clippy for entire project"
# Allows us to use CARGO_BUILD_WARNINGS instead of
# RUSTFLAGS=-Dwarnings which breaks the build cache.
toolchain = { channel = "stable", min_version = "1.97.0" }
command = "cargo"
args = ["clippy", "--workspace", "--all-features", "--all-targets"]
[tasks.doc]
description = "Check the documentation build"
# Allows us to use CARGO_BUILD_WARNINGS instead of
# RUSTDOCFLAGS=-Dwarnings which breaks the build cache.
toolchain = { channel = "stable", min_version = "1.97.0" }
command = "cargo"
args = ["doc", "--workspace", "--all-features", "--no-deps", "--document-private-items"]
[tasks.test]
description = "Run unit tests"
command = "cargo"
args = [
"nextest",
"run",
"--workspace",
"--all-features",
"--exclude=fuzz",
"--lib",
"--bins",
"--tests",
"--no-fail-fast",
]
[tasks.proptests-long]
description = "Run proptests with high case count (runs for ~10 minutes)"
command = "cargo"
args = ["nextest", "run", "--locked", "--package=noq-proto", "-P", "proptests", "--cargo-profile=proptests", "--no-fail-fast", "${@}"]
env = { "PROPTEST_CASES" = "100000" }
[tasks.proptests-light]
description = "Run proptests for CI (~1 minute)"
command = "cargo"
args = ["nextest", "run", "--locked", "--package=noq-proto", "-P", "proptests", "--cargo-profile=proptests", "--no-fail-fast", "${@}"]
env = { "PROPTEST_CASES" = "10000" }
[tasks.proptests-extralight]
description = "Run proptests in regression-only mode (runs for <5 seconds)"
command = "cargo"
args = ["nextest", "run", "--package=noq-proto", "-P", "proptests", "--no-fail-fast", "${@}"]
[tasks.check-external-types]
description = "Run cargo check-external-types on workspace crates"
workspace = true
toolchain = "${TOOLCHAIN:nightly-2026-03-20}"
command = "cargo"
args = ["check-external-types", "--locked", "--features", "__all_without_fips"]