mirror of https://github.com/tracel-ai/burn.git
57 lines
1.4 KiB
YAML
57 lines
1.4 KiB
YAML
name: dependencies
|
|
|
|
on:
|
|
schedule:
|
|
- cron: '0 21 * * TUE' # Run every Tuesday at 21:00 (UTC)
|
|
push:
|
|
tags:
|
|
- 'v*.*.*' # Run when a new version is being published
|
|
|
|
env:
|
|
#
|
|
# Dependency versioning
|
|
#
|
|
|
|
# Udeps version
|
|
UDEPS_VERSION: "0.1.143"
|
|
|
|
concurrency:
|
|
group: ${{ github.workflow }}-${{ github.ref }}
|
|
cancel-in-progress: true
|
|
|
|
jobs:
|
|
dependencies:
|
|
runs-on: ubuntu-latest
|
|
|
|
steps:
|
|
|
|
- name: checkout
|
|
uses: actions/checkout@v4
|
|
|
|
- name: Audit Rust dependencies
|
|
# If a vulnerability is found, a new issue will automatically be opened
|
|
# since this action runs on main branch
|
|
uses: actions-rust-lang/audit@v1
|
|
|
|
- name: Detect multiple versions of the same crate
|
|
uses: EmbarkStudios/cargo-deny-action@v1
|
|
with:
|
|
command: check bans licenses sources
|
|
|
|
- name: Install Rust nightly
|
|
uses: dtolnay/rust-toolchain@nightly
|
|
with:
|
|
toolchain: nightly
|
|
components: rustfmt
|
|
|
|
- name: Install cargo-udeps
|
|
env:
|
|
UDEPS_LINK: https://github.com/est31/cargo-udeps/releases/download
|
|
run: |
|
|
curl -L "$UDEPS_LINK/v$UDEPS_VERSION/cargo-udeps-v$UDEPS_VERSION-x86_64-unknown-linux-gnu.tar.gz" |
|
|
tar xz -C $HOME/.cargo/bin --strip-components 2
|
|
|
|
- name: Run cargo-udeps
|
|
run: |
|
|
cargo +nightly udeps --all-targets
|