ci.yml

# CI gates for ES-Runtime (SPEC.md §5). All jobs are required.
#
# The `v8` crate downloads a prebuilt static library at build time, so the
# clippy/test/msrv jobs need network and benefit from the Rust cache. The
# toolchain is pinned by rust-toolchain.toml (1.95.0); the MSRV job exists to
# assert the declared `rust-version` actually builds.
name: CI

on:
  push:
    branches: [main]
  pull_request:

# One in-flight run per ref; cancel superseded runs.
concurrency:
  group: ${{ github.workflow }}-${{ github.ref }}
  cancel-in-progress: true

env:
  CARGO_TERM_COLOR: always
  RUST_BACKTRACE: 1

jobs:
  fmt:
    name: rustfmt
    runs-on: ubuntu-latest
    steps:
      - uses: actions/checkout@v4
      - run: cargo fmt --all --check

  clippy:
    name: clippy -D warnings
    runs-on: ubuntu-latest
    steps:
      - uses: actions/checkout@v4
      - uses: Swatinem/rust-cache@v2
      # Build first so the `v8` crate fetches its prebuilt static lib. Clippy
      # runs in check mode, which doesn't trigger that download on a cold cache;
      # deps build with normal rustc (only workspace crates use clippy-driver),
      # so clippy then reuses the v8 artifact.
      - run: cargo build --workspace --all-features
      - run: cargo clippy --workspace --all-targets --all-features -- -D warnings

  test:
    name: test
    runs-on: ubuntu-latest
    steps:
      - uses: actions/checkout@v4
      - uses: Swatinem/rust-cache@v2
      - run: cargo test --workspace --all-features

  msrv:
    name: msrv build (1.95)
    runs-on: ubuntu-latest
    steps:
      - uses: actions/checkout@v4
      - uses: Swatinem/rust-cache@v2
      # Build with the declared MSRV explicitly, overriding rust-toolchain.toml.
      - run: rustup toolchain install 1.95.0 --profile minimal
      - run: cargo +1.95.0 build --workspace --all-features

  deny:
    name: cargo-deny
    runs-on: ubuntu-latest
    steps:
      - uses: actions/checkout@v4
      - uses: taiki-e/install-action@v2
        with:
          tool: cargo-deny
      - run: cargo deny check

  audit:
    name: cargo-audit
    runs-on: ubuntu-latest
    steps:
      - uses: actions/checkout@v4
      - uses: taiki-e/install-action@v2
        with:
          tool: cargo-audit
      - run: cargo audit