feat: add self-referential hashing and tighten GH workflows

Author: ndbroadbent

.cigen/config.yml

@@ -6,6 +6,9 @@ dynamic: true # Generate separate workflow files
 source_file_groups:
   rust:
     - "src/**/*.rs"
+    - "plugins/**/*.rs"
+    - "build.rs"
+    - "proto/**/*.proto"
     - "Cargo.toml"
     - "Cargo.lock"
 

.cigen/workflows/ci/jobs/build_cigen.yml

@@ -0,0 +1,25 @@
+image: docspring/cigen-ci-runner:latest
+
+steps:
+  - name: Restore target cache
+    uses: actions/cache@v4
+    with:
+      path: |
+        target/release
+      key: target-release-${{ runner.os }}-${{ hashFiles('Cargo.lock') }}
+
+  - run:
+      name: Build cigen binary
+      command: cargo build --release --bin cigen
+
+  - run:
+      name: Prepare artifact bundle
+      command: |
+        set -e
+        mkdir -p .cigen/bin
+        cp target/release/cigen .cigen/bin/cigen
+
+  - uses: actions/upload-artifact@v4
+    with:
+      name: cigen-bin
+      path: .cigen/bin/cigen

.cigen/workflows/ci/jobs/clippy.yml

@@ -1,4 +1,4 @@
-image: rust:latest
+image: docspring/cigen-ci-runner:latest
 source_files: "@rust"
 
 steps:

.cigen/workflows/ci/jobs/fmt.yml

@@ -1,4 +1,4 @@
-image: rust:latest
+image: docspring/cigen-ci-runner:latest
 source_files: "@rust"
 
 steps:

.cigen/workflows/ci/jobs/test.yml

@@ -1,4 +1,4 @@
-image: rust:latest
+image: docspring/cigen-ci-runner:latest
 source_files:
   - "@rust"
   - "@tests"

.cigen/workflows/docs/jobs/build.yml

@@ -4,8 +4,6 @@ requires:
   - ci_gate
 
 steps:
-  - uses: actions/checkout@v4
-
   - name: Setup Node.js
     uses: actions/setup-node@v4
     with:

.cigen/workflows/docs/jobs/ci_gate.yml

@@ -1,7 +1,6 @@
 image: ubuntu-latest
 
 steps:
-  - uses: actions/checkout@v4
   - name: Wait for CI checks to complete
     uses: actions/github-script@v7
     with:

.cigen/workflows/docs/jobs/deploy.yml

@@ -5,7 +5,7 @@ requires:
 
 environment:
   name: github-pages
-  url: ${{ steps.deployment.outputs.page_url }}
+  url: https://docspring.github.io/cigen/
 
 steps:
   - name: Deploy to GitHub Pages

.cigen/workflows/release/jobs/docker_image.yml

@@ -10,17 +10,14 @@ env:
   DOCKERHUB_USERNAME: ${{ secrets.DOCKERHUB_USERNAME }}
   DOCKERHUB_TOKEN: ${{ secrets.DOCKERHUB_TOKEN }}
 
-steps:
-  - name: Checkout repository
-    uses: actions/checkout@v4
-    with:
-      fetch-depth: 0
+checkout:
+  fetch-depth: 0
 
-  - id: v
-    name: Extract version
+steps:
+  - name: Extract version
     run: |
       VERSION=$(grep -E '^version = ' Cargo.toml | head -1 | sed 's/version = "\(.*\)"/\1/')
-      echo "version=$VERSION" >> "$GITHUB_OUTPUT"
+      echo "DOCKER_IMAGE_VERSION=$VERSION" >> "$GITHUB_ENV"
 
   - name: Set up QEMU
     uses: docker/setup-qemu-action@v3
@@ -38,7 +35,7 @@ steps:
       name: Build and push multi-arch image
       command: |
         set -euo pipefail
-        VERSION="${{ steps.v.outputs.version }}"
+        VERSION="${{ env.DOCKER_IMAGE_VERSION }}"
         echo "Building docspringcom/cigen:${VERSION} and :latest"
         docker buildx build \
           --platform linux/amd64,linux/arm64 \

.cigen/workflows/release/jobs/release_build.yml

@@ -1,6 +1,10 @@
 # Dynamic runs-on from matrix
 image: ${{ matrix.os }}
 
+checkout:
+  fetch-depth: 0
+  fetch-tags: true
+
 strategy:
   fail-fast: false
   matrix:
@@ -22,12 +26,6 @@ strategy:
         use-cross: true
 
 steps:
-  - name: Checkout repository
-    uses: actions/checkout@v4
-    with:
-      fetch-depth: 0
-      fetch-tags: true
-
   - name: Wait for required checks
     uses: actions/github-script@v7
     with: