chore(deps): bump the npm-minor-patch group across 2 directories with 5 updates #476
Workflow file for this run
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| name: Soroban Contract CI | |
| on: | |
| pull_request: | |
| branches: [main] | |
| jobs: | |
| soroban: | |
| name: 'Soroban contract: clippy & test' | |
| runs-on: ubuntu-latest | |
| steps: | |
| - uses: actions/checkout@v4 | |
| - name: Cache rustup toolchains | |
| uses: actions/cache@v4 | |
| with: | |
| path: | | |
| ~/.rustup/toolchains | |
| key: ${{ runner.os }}-rustup-toolchains | |
| restore-keys: | | |
| ${{ runner.os }}-rustup-toolchains | |
| - name: Cache Cargo registry | |
| uses: actions/cache@v4 | |
| with: | |
| path: | | |
| ~/.cargo/registry | |
| ~/.cargo/git | |
| key: ${{ runner.os }}-cargo-registry-${{ hashFiles('**/Cargo.lock') }} | |
| restore-keys: | | |
| ${{ runner.os }}-cargo-registry- | |
| - name: Cache contracts target | |
| uses: actions/cache@v4 | |
| with: | |
| path: contracts/target | |
| key: ${{ runner.os }}-cargo-target-${{ hashFiles('contracts/**/Cargo.toml') }} | |
| restore-keys: | | |
| ${{ runner.os }}-cargo-target- | |
| - name: Install Rust toolchain & wasm target | |
| uses: actions-rs/toolchain@v1 | |
| with: | |
| toolchain: stable | |
| target: wasm32-unknown-unknown | |
| components: clippy | |
| profile: minimal | |
| override: true | |
| - name: Show Rust version | |
| run: rustc --version | |
| - name: Run cargo clippy | |
| working-directory: contracts | |
| run: cargo clippy --all-targets -- -D warnings | |
| - name: Run cargo test | |
| working-directory: contracts | |
| run: cargo test --all --verbose | |
| - name: Install cargo-audit | |
| run: cargo install cargo-audit --locked | |
| - name: Run cargo audit | |
| working-directory: contracts | |
| run: | | |
| # Run cargo audit and fail on vulnerabilities | |
| # Allowlist mechanism: Add advisory IDs below to ignore specific advisories | |
| # Format: --ignore RUSTSEC-YYYY-NNNN | |
| # | |
| # Current allowlist (with rationale): | |
| # (none - all vulnerabilities will fail the build) | |
| # | |
| # Example of how to add an exception: | |
| # cargo audit --deny warnings \ | |
| # --ignore RUSTSEC-2024-0001 # Description: Why this is acceptable | |
| cargo audit --deny warnings | |
| - name: Build release wasm | |
| working-directory: contracts | |
| run: cargo build --release --target wasm32-unknown-unknown | |
| - name: Report WASM size in summary | |
| run: | | |
| WASM_FILE=$(ls contracts/target/wasm32-unknown-unknown/release/*.wasm 2>/dev/null || true) | |
| if [ -n "$WASM_FILE" ]; then | |
| echo "### WASM binary size" >> $GITHUB_STEP_SUMMARY | |
| SIZE=$(stat -c%s "$WASM_FILE") | |
| echo "- File: $WASM_FILE" >> $GITHUB_STEP_SUMMARY | |
| echo "- Size (bytes): $SIZE" >> $GITHUB_STEP_SUMMARY | |
| GZ_SIZE=$(gzip -c "$WASM_FILE" | wc -c) | |
| echo "- Gzipped (bytes): $GZ_SIZE" >> $GITHUB_STEP_SUMMARY | |
| echo "WASM: $WASM_FILE ($SIZE bytes, $GZ_SIZE gzipped)" | |
| else | |
| echo "No wasm artifact found" >> $GITHUB_STEP_SUMMARY | |
| echo "No wasm artifact found" | |
| exit 1 | |
| fi |