WIP: fix(ci): restore Rust and supply-chain checks on Gitea #117

Manually merged

Lochnair merged 3 commits from fix/gitea-ci-prerequisites into master 2026-10-28 14:49:06 +00:00

Conversation 0 Commits 3 Files Changed 7

+35 -4

Lochnair commented 2026-10-28 13:49:56 +00:00

Owner

Copy link

Copy source

Rust CI and Supply chain fail on the Gitea runner image before reaching their checks. At master 7330737, vendored libuci cannot run CMake, musl installation aborts at apt's confirmation prompt, and cargo-deny/actionlint cannot start because cargo/go are missing. Runs 42422 and 42423 show these failures; PR runs 42430/42431 repeat them. The missing setup dates to the workflow split in c199d63, before the recent dependency updates.

Install native UCI build prerequisites, make musl installation noninteractive, and explicitly set up Rust and Go. The restored checks exposed three Clippy errors, missing uci-derive license metadata, and RUSTSEC-2026-0385 in ctutils 0.4.3. Resolve these with two constructor-scoped lint allowances, an equivalent sort_by_key call, MPL-2.0 metadata matching the existing source header, and a lockfile-only ctutils update to 0.4.4. No interface refactoring or scanner-policy changes.

Validation at cab50ed:

• Rust CI 42446: all seven jobs pass, including both feature configurations for Clippy and GNU/musl check/test. Each target passes 18 all-feature tests and 17 TOML-only tests. Documentation passes; two existing doctests are ignored.
• Supply chain 42447: all three jobs pass, including advisories, bans/licenses/sources, and actionlint.
• Local actionlint 1.7.7, cargo fmt, and diff whitespace checks pass.
• Cross-build 42445 remains running; its first four targets passed. Duplicate push and superseded intermediate runs were cancelled to free runner capacity.

Rust CI and Supply chain fail on the Gitea runner image before reaching their checks. At master 7330737, vendored libuci cannot run CMake, musl installation aborts at apt's confirmation prompt, and cargo-deny/actionlint cannot start because cargo/go are missing. Runs [42422](https://git.lochnair.net/Lochnair-Labs/sqm-autorate-rust/actions/runs/42422) and [42423](https://git.lochnair.net/Lochnair-Labs/sqm-autorate-rust/actions/runs/42423) show these failures; PR runs 42430/42431 repeat them. The missing setup dates to the workflow split in c199d63, before the recent dependency updates. Install native UCI build prerequisites, make musl installation noninteractive, and explicitly set up Rust and Go. The restored checks exposed three Clippy errors, missing uci-derive license metadata, and RUSTSEC-2026-0385 in ctutils 0.4.3. Resolve these with two constructor-scoped lint allowances, an equivalent sort_by_key call, MPL-2.0 metadata matching the existing source header, and a lockfile-only ctutils update to 0.4.4. No interface refactoring or scanner-policy changes. Validation at cab50ed: - [Rust CI 42446](https://git.lochnair.net/Lochnair-Labs/sqm-autorate-rust/actions/runs/42446): all seven jobs pass, including both feature configurations for Clippy and GNU/musl check/test. Each target passes 18 all-feature tests and 17 TOML-only tests. Documentation passes; two existing doctests are ignored. - [Supply chain 42447](https://git.lochnair.net/Lochnair-Labs/sqm-autorate-rust/actions/runs/42447): all three jobs pass, including advisories, bans/licenses/sources, and actionlint. - Local actionlint 1.7.7, cargo fmt, and diff whitespace checks pass. - [Cross-build 42445](https://git.lochnair.net/Lochnair-Labs/sqm-autorate-rust/actions/runs/42445) remains running; its first four targets passed. Duplicate push and superseded intermediate runs were cancelled to free runner capacity.

Lochnair added 1 commit 2026-10-28 13:49:57 +00:00

fix(ci): install prerequisites on Gitea runners d5a3a296d9

Lochnair added 1 commit 2026-10-28 13:54:50 +00:00

fix(ci): resolve Clippy errors exposed by restored builds e42d424e9f

Lochnair added 1 commit 2026-10-28 13:56:55 +00:00

fix(ci): resolve dependency advisory and workspace license metadata cab50ed38d

Lochnair changed title from WIP: fix(ci): install prerequisites on Gitea runners to fix(ci): restore Rust and supply-chain checks on Gitea 2026-10-28 14:02:29 +00:00

Lochnair marked the pull request as work in progress 2026-10-28 14:02:53 +00:00

Lochnair manually merged commit cab50ed38d into master 2026-10-28 14:49:06 +00:00

Sign in to join this conversation.

Reviewers

No Reviewers

Labels

Clear labels

bug

Something isn't working

codex

dependencies

Pull requests that update a dependency file

documentation

Improvements or additions to documentation

duplicate

This issue or pull request already exists

enhancement

New feature or request

good first issue

Good for newcomers

help wanted

Extra attention is needed

invalid

This doesn't seem right

question

Further information is requested

rust

Pull requests that update rust code

wontfix

This will not be worked on

No labels

Milestone

No items

No Milestone

Projects

Clear projects

No projects

Assignees

Clear assignees

Lochnair renovate (Renovate Bot) Bot

No Assignees

1 Participants

Notifications

Subscribe

Due Date

No due date set.

Dependencies

No dependencies set.

Reference: Lochnair-Labs/sqm-autorate-rust#117