rust.yml

name: rust

# Build, lint, and test the Rust crate on every PR and on pushes to main/hotfix branches.
# Mirrors the build-control jobs in malbeclabs/doublezero (.github/workflows/rust.yml),
# adapted for this single-crate project: no Solana/agave tooling or validator job, and the
# `make` targets are inlined as direct cargo commands.
on:
  push:
    branches: [main, 'hotfix/**']
  pull_request:

# Least-privilege default: this workflow only reads the repo.
permissions:
  contents: read

jobs:
  rust-build:
    runs-on: ubuntu-latest
    steps:
      - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0
      # dtolnay/rust-toolchain selects the toolchain from the @ref (a branch); pinned to a
      # SHA we must name the toolchain explicitly via `toolchain:`.
      - uses: dtolnay/rust-toolchain@fa04a1451ff1842e2626ccb99004d0195b455a88 # master
        with:
          toolchain: stable
      - uses: Swatinem/rust-cache@e18b497796c12c097a38f9edb9d0641fb99eee32 # v2
      # `--workspace` is required: this is a root-package workspace (root `Cargo.toml` has both
      # `[package]` and `[workspace]`), so a bare `cargo build` selects only the root crate and would
      # never compile the `shred-proxy` member. Same for clippy/test below.
      - run: cargo build --workspace --release --verbose

  rust-lint:
    runs-on: ubuntu-latest
    steps:
      - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0
      - uses: dtolnay/rust-toolchain@fa04a1451ff1842e2626ccb99004d0195b455a88 # master
        with:
          toolchain: stable
          components: clippy
      # Nightly is only needed for rustfmt's imports_granularity option (matches the
      # reference repo's `cargo +nightly fmt` formatting contract).
      - uses: dtolnay/rust-toolchain@fa04a1451ff1842e2626ccb99004d0195b455a88 # master
        with:
          toolchain: nightly
          components: rustfmt
      - uses: Swatinem/rust-cache@e18b497796c12c097a38f9edb9d0641fb99eee32 # v2
      - name: rustfmt
        run: cargo +nightly fmt --all -- --check --config imports_granularity=Crate
      # The nightly toolchain above is now the default, but clippy is only installed on
      # stable — pin clippy to stable so it doesn't resolve to the (clippy-less) nightly.
      - name: clippy
        run: cargo +stable clippy --workspace --all-targets -- -Dclippy::all -Dwarnings

  rust-test:
    runs-on: ubuntu-latest
    steps:
      - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0
      - uses: dtolnay/rust-toolchain@fa04a1451ff1842e2626ccb99004d0195b455a88 # master
        with:
          toolchain: stable
      - uses: Swatinem/rust-cache@e18b497796c12c097a38f9edb9d0641fb99eee32 # v2
      - run: cargo test --workspace --all-features --verbose