release: promote develop to main

.github/dependabot.yml

@@ -0,0 +1,18 @@
+version: 2
+
+updates:
+  - package-ecosystem: "github-actions"
+    directory: "/"
+    schedule:
+      interval: "daily"
+    labels: ["dependencies", "type:ci"]
+    open-pull-requests-limit: 10
+    target-branch: "develop"
+
+  - package-ecosystem: "cargo"
+    directory: "/"
+    schedule:
+      interval: "daily"
+    labels: ["dependencies"]
+    open-pull-requests-limit: 10
+    target-branch: "develop"

.github/workflows/ci.yml

@@ -0,0 +1,14 @@
+name: CI
+
+on:
+  push:
+    branches: [main, develop]
+  pull_request:
+    branches: [main, develop]
+
+permissions:
+  contents: read
+
+jobs:
+  rust:
+    uses: Glyndor/.github/.github/workflows/rust-ci.yml@c2cf3d74719451a7a11fa8e5fae3f4a3c4e37fe6 # main

.gitignore

@@ -1,4 +1,4 @@
-# Claude / AI agent files
+# Local working notes
 GAP_ANALYSIS.md
 
 # Coverage & profiling
@@ -13,3 +13,6 @@ fuzz/artifacts/
 
 # Merge conflicts
 *.orig
+
+# Build artifacts
+/target

README.md

@@ -0,0 +1,32 @@
+# podman-compose
+
+`lynx-compose` — docker-compose translator and runner for rootless Podman,
+built in Rust.
+
+It parses `docker-compose.yml` files and drives rootless Podman to create the
+equivalent containers, networks and volumes. Used by the
+[Lynx panel](https://github.com/Glyndor/panel) through the
+[panel-agent](https://github.com/Glyndor/panel-agent), and usable standalone
+as a CLI and as a library (`lynx_compose`).
+
+## Build
+
+```bash
+cargo build --release
+cargo test
+```
+
+## Usage
+
+```bash
+lynx-compose up -f docker-compose.yml
+```
+
+## Contributing & security
+
+See the org-wide [contributing guide](https://github.com/Glyndor/.github/blob/main/CONTRIBUTING.md).
+Report vulnerabilities privately via the Security tab — never in a public issue.
+
+## License
+
+[AGPL-3.0](LICENSE)

tests/parse/anchors.rs

@@ -93,7 +93,6 @@ fn include_absolute_path_rejected() {
     let main = dir.path().join("docker-compose.yml");
     writeln!(
         std::fs::File::create(&main).unwrap(),
-        "{}",
         "include:\n  - /etc/passwd\nservices:\n  app:\n    image: alpine"
     )
     .unwrap();
@@ -106,7 +105,6 @@ fn include_parent_traversal_rejected() {
     let main = dir.path().join("docker-compose.yml");
     writeln!(
         std::fs::File::create(&main).unwrap(),
-        "{}",
         "include:\n  - ../../secret.yml\nservices:\n  app:\n    image: alpine"
     )
     .unwrap();
@@ -119,7 +117,6 @@ fn extends_file_absolute_path_rejected() {
     let main = dir.path().join("docker-compose.yml");
     writeln!(
         std::fs::File::create(&main).unwrap(),
-        "{}",
         "services:\n  app:\n    extends:\n      service: base\n      file: /etc/shadow"
     )
     .unwrap();
@@ -132,7 +129,6 @@ fn extends_file_parent_traversal_rejected() {
     let main = dir.path().join("docker-compose.yml");
     writeln!(
         std::fs::File::create(&main).unwrap(),
-        "{}",
         "services:\n  app:\n    extends:\n      service: base\n      file: ../../other.yml"
     )
     .unwrap();

tests/parse/extends.rs

@@ -131,7 +131,6 @@ fn extends_with_external_file() {
     let mut f = std::fs::File::create(&common_path).unwrap();
     writeln!(
         f,
-        "{}",
         r#"
 services:
   base:
@@ -146,7 +145,6 @@ services:
     let mut m = std::fs::File::create(&main_path).unwrap();
     writeln!(
         m,
-        "{}",
         r#"
 services:
   app:

tests/parse/include.rs

@@ -8,7 +8,6 @@ fn include_string_form_merges_services() {
     let included = dir.path().join("services.yml");
     writeln!(
         std::fs::File::create(&included).unwrap(),
-        "{}",
         r#"
 services:
   helper:
@@ -20,7 +19,6 @@ services:
     let main = dir.path().join("docker-compose.yml");
     writeln!(
         std::fs::File::create(&main).unwrap(),
-        "{}",
         r#"
 include:
   - ./services.yml
@@ -44,7 +42,6 @@ fn include_long_form_parses() {
     let inc = dir.path().join("inc.yml");
     writeln!(
         std::fs::File::create(&inc).unwrap(),
-        "{}",
         r#"
 services:
   inc_svc:
@@ -56,7 +53,6 @@ services:
     let main = dir.path().join("docker-compose.yml");
     writeln!(
         std::fs::File::create(&main).unwrap(),
-        "{}",
         r#"
 include:
   - path: ./inc.yml
@@ -80,7 +76,6 @@ fn parent_overrides_included_service() {
     let inc = dir.path().join("inc.yml");
     writeln!(
         std::fs::File::create(&inc).unwrap(),
-        "{}",
         r#"
 services:
   shared:
@@ -92,7 +87,6 @@ services:
     let main = dir.path().join("docker-compose.yml");
     writeln!(
         std::fs::File::create(&main).unwrap(),
-        "{}",
         r#"
 include:
   - ./inc.yml