refactor: install clang tools on demand

In order of precedence, this patch allows installing clang tools from
1. PyPI (downloaded wheels are verified using SHA256 or Bake2b256)
2. system package manager(s) (if available)
3. static binaries (verified with accompanied SHA512 checksum)

Also upgrade cargo/rust dependencies.

Author: 2bndy5

.config/nextest.toml

@@ -3,21 +3,26 @@ nextest-version = "0.9.77"
 
 [profile.default]
 # A profile to run most tests, except tests that run longer than 10 seconds
-default-filter = "not test(#*rate_limit_secondary) - test(#git::test::with_*) - test(#repo_get_sha)"
+default-filter = """\
+    not test(#*rate_limit_secondary) \
+    - test(#git::test::with_*) \
+    - test(#git::test::repo_get_sha) \
+    - test(#*eval_static_dist)
+"""
 
 # This will flag any test that runs longer than 10 seconds. Useful when writing new tests.
 slow-timeout = "10s"
 
+# show which tests were skipped
+status-level = "skip"
+
 [profile.ci]
 # A profile to run only tests that use clang-tidy and/or clang-format
 # NOTE: This profile is intended to keep CI runtime low. Locally, use default or all profiles
 
 # This is all tests in tests/ folder + unit test for --extra-args.
 default-filter = "kind(test) + test(#*use_extra_args)"
 
-# show which tests were skipped
-status-level = "skip"
-
 # show log output from each test
 success-output = "final"
 failure-output = "immediate-final"

.github/workflows/benchmark.yml

@@ -60,7 +60,7 @@ jobs:
           fi
       - run: rustup update --no-self-update
         if: steps.cache.outputs.cache-hit != 'true' || steps.validate.outputs.cache-valid == 'false'
-      - run: cargo build --bin cpp-linter --release
+      - run: cargo build --bin cpp-linter --features bin --release
         if: steps.cache.outputs.cache-hit != 'true' || steps.validate.outputs.cache-valid == 'false'
       - name: Upload build artifact
         uses: actions/upload-artifact@v7

.github/workflows/binary-builds.yml

@@ -131,7 +131,7 @@ jobs:
           --bin cpp-linter
           --release
           --target ${{ matrix.target }}
-          ${{ matrix.vendored && '--features openssl-vendored' || '' }}
+          --features ${{ matrix.vendored && 'bin,openssl-vendored' || 'bin' }}
 
       - name: Prepare artifacts (unix)
         if: runner.os != 'Windows'

.pre-commit-config.yaml

@@ -8,7 +8,7 @@ repos:
         exclude: bindings/node/.*package\.json
       - id: check-docstring-first
       - id: check-added-large-files
-        exclude: '^\.yarn/releases/yarn.*js'
+        exclude: '^\.yarn/releases/yarn.*js|pypi_clang.*\.json$'
       - id: check-yaml
         exclude: docs/mkdocs.yml
       - id: check-toml