release: gcode 1.0.0, gwiki 0.3.0, gcore 0.4.0, patch gsqz/gloc/ghook

.coderabbit.yaml

@@ -3,3 +3,6 @@ inheritance: true
 
 reviews:
   profile: assertive
+  path_filters:
+    - "!.gobby/plans/completed/**"
+    - "!docs/plans/completed/**"

.config/nextest.toml

@@ -0,0 +1,19 @@
+nextest-version = { required = "0.9.133" }
+
+[profile.default]
+fail-fast = false
+
+[profile.ci]
+inherits = "default"
+fail-fast = false
+
+[test-groups]
+serial-db = { max-threads = 1 }
+
+[[profile.default.overrides]]
+filter = 'package(gobby-code) & (test(::serial_db::) | test(serial_db::))'
+test-group = 'serial-db'
+
+[[profile.default.overrides]]
+filter = 'package(gobby-wiki) & (test(::serial_db::) | test(serial_db::))'
+test-group = 'serial-db'

.github/workflows/ci.yml

@@ -14,15 +14,23 @@ jobs:
     name: Check & Test
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5
+        with:
+          persist-credentials: false
 
       - name: Install Rust toolchain
-        uses: dtolnay/rust-toolchain@stable
+        uses: dtolnay/rust-toolchain@29eef336d9b2848a0b548edc03f92a220660cdb8
         with:
+          toolchain: stable
           components: clippy, rustfmt
 
+      - name: Install cargo-nextest
+        uses: taiki-e/install-action@f5b277aa8941a90c16bc1cd6ab9363e0502b7d31
+        with:
+          tool: nextest
+
       - name: Cache cargo registry & build
-        uses: actions/cache@v4
+        uses: actions/cache@0057852bfaa89a56745cba8c7296529d2fc39830
         with:
           path: |
             ~/.cargo/registry
@@ -39,23 +47,23 @@ jobs:
         run: cargo clippy -p gobby-core --all-targets -- -D warnings
 
       - name: Test (gobby-core)
-        run: cargo test -p gobby-core
+        run: cargo nextest run --profile ci -p gobby-core
 
       - name: Clippy (gobby-core, ai)
         run: cargo clippy -p gobby-core --features ai --all-targets -- -D warnings
 
       - name: Test (gobby-core, ai)
-        run: cargo test -p gobby-core --features ai
+        run: cargo nextest run --profile ci -p gobby-core --features ai
 
       # ghook: full clippy + tests
       - name: Clippy (ghook)
         run: cargo clippy -p gobby-hooks --all-targets -- -D warnings
 
       - name: Test (ghook)
-        run: cargo test -p gobby-hooks
+        run: cargo nextest run --profile ci -p gobby-hooks
 
       - name: Test (ghook, no default features)
-        run: cargo test -p gobby-hooks --no-default-features
+        run: cargo nextest run --profile ci -p gobby-hooks --no-default-features
 
       - name: Clippy (ghook, no default features)
         run: cargo clippy -p gobby-hooks --all-targets --no-default-features -- -D warnings
@@ -65,37 +73,92 @@ jobs:
         run: cargo clippy -p gobby-squeeze -- -D warnings
 
       - name: Test (gsqz)
-        run: cargo test -p gobby-squeeze
+        run: cargo nextest run --profile ci -p gobby-squeeze
 
       # gloc: full clippy + tests
       - name: Clippy (gloc)
         run: cargo clippy -p gobby-local -- -D warnings
 
       - name: Test (gloc)
-        run: cargo test -p gobby-local
+        run: cargo nextest run --profile ci -p gobby-local
 
       # gwiki: default checks include documents/pdfium; no-default-features covers degraded storage path
       - name: Clippy (gwiki)
         run: cargo clippy -p gobby-wiki --all-targets -- -D warnings
 
       - name: Test (gwiki)
-        run: cargo test -p gobby-wiki
+        run: cargo nextest run --profile ci -p gobby-wiki
 
       - name: Clippy (gwiki, no default features)
         run: cargo clippy -p gobby-wiki --all-targets --no-default-features -- -D warnings
 
       - name: Test (gwiki, no default features)
-        run: cargo test -p gobby-wiki --no-default-features
+        run: cargo nextest run --profile ci -p gobby-wiki --no-default-features
 
       # gcode: clippy + tests without embeddings (Linux CI has no cmake/Metal)
       - name: Clippy (gcode, no embeddings)
         run: cargo clippy -p gobby-code --all-targets --no-default-features -- -D warnings
 
       - name: Test (gcode, no embeddings)
-        run: cargo test -p gobby-code --no-default-features
+        run: cargo nextest run --profile ci -p gobby-code --no-default-features
 
       - name: Test codewiki (gcode, no embeddings)
-        run: cargo test -p gobby-code --no-default-features codewiki
+        run: cargo nextest run --profile ci -p gobby-code --no-default-features -E 'test(codewiki)'
+
+      - name: Test workspace (no default features)
+        run: cargo nextest run --profile ci --workspace --no-default-features
+
+      - name: Test doctests (workspace, no default features)
+        run: cargo test --doc --workspace --no-default-features
 
       - name: Build workspace (without embeddings)
         run: cargo build --workspace --no-default-features
+
+  coverage:
+    name: Coverage (report only)
+    runs-on: ubuntu-latest
+    continue-on-error: true
+    steps:
+      - uses: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5
+        with:
+          persist-credentials: false
+
+      - name: Install Rust toolchain
+        uses: dtolnay/rust-toolchain@29eef336d9b2848a0b548edc03f92a220660cdb8
+        with:
+          toolchain: stable
+          components: llvm-tools-preview
+
+      - name: Install cargo-llvm-cov
+        uses: taiki-e/install-action@f5b277aa8941a90c16bc1cd6ab9363e0502b7d31
+        with:
+          tool: cargo-llvm-cov
+
+      - name: Install cargo-nextest
+        uses: taiki-e/install-action@f5b277aa8941a90c16bc1cd6ab9363e0502b7d31
+        with:
+          tool: nextest
+
+      - name: Cache cargo registry & build
+        uses: actions/cache@0057852bfaa89a56745cba8c7296529d2fc39830
+        with:
+          path: |
+            ~/.cargo/registry
+            ~/.cargo/git
+            target
+          key: ${{ runner.os }}-coverage-cargo-${{ hashFiles('Cargo.lock') }}
+          restore-keys: ${{ runner.os }}-coverage-cargo-
+
+      - name: Generate LCOV report
+        run: |
+          cargo llvm-cov clean --workspace
+          cargo llvm-cov --no-report nextest --workspace --no-default-features --profile ci
+          cargo llvm-cov report --lcov --output-path lcov.info
+
+      - name: Upload LCOV artifact
+        uses: actions/upload-artifact@ea165f8d65b6e75b540449e92b4886f43607fa02
+        if: always()
+        with:
+          name: lcov
+          path: lcov.info
+          if-no-files-found: ignore

.github/workflows/release-gcode.yml

@@ -13,13 +13,21 @@ jobs:
     name: Test before release
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5
+        with:
+          persist-credentials: false
 
       - name: Install Rust toolchain
-        uses: dtolnay/rust-toolchain@stable
+        uses: dtolnay/rust-toolchain@29eef336d9b2848a0b548edc03f92a220660cdb8
         with:
+          toolchain: stable
           components: clippy
 
+      - name: Install cargo-nextest
+        uses: taiki-e/install-action@f5b277aa8941a90c16bc1cd6ab9363e0502b7d31
+        with:
+          tool: nextest
+
       - name: Verify tag matches Cargo.toml version
         # Guards against tag/crate/release drift: installers resolve a version
         # from crates.io and then look for a matching gcode-v{version} GitHub
@@ -46,10 +54,16 @@ jobs:
         run: cargo clippy -p gobby-code --no-default-features -- -D warnings
 
       - name: Run tests
-        run: cargo test -p gobby-code
+        run: cargo nextest run --profile ci -p gobby-code
+
+      - name: Run doctests
+        run: cargo test --doc -p gobby-code
 
       - name: Run tests without default features
-        run: cargo test -p gobby-code --no-default-features
+        run: cargo nextest run --profile ci -p gobby-code --no-default-features
+
+      - name: Run doctests without default features
+        run: cargo test --doc -p gobby-code --no-default-features
 
   build:
     needs: test
@@ -80,11 +94,14 @@ jobs:
     name: ${{ matrix.target }}
 
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5
+        with:
+          persist-credentials: false
 
       - name: Install Rust toolchain
-        uses: dtolnay/rust-toolchain@stable
+        uses: dtolnay/rust-toolchain@29eef336d9b2848a0b548edc03f92a220660cdb8
         with:
+          toolchain: stable
           targets: ${{ matrix.target }}
 
       - name: Install cross-compilation tools (Linux ARM)
@@ -136,10 +153,14 @@ jobs:
     runs-on: ubuntu-latest
 
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5
+        with:
+          persist-credentials: false
 
       - name: Install Rust toolchain
-        uses: dtolnay/rust-toolchain@stable
+        uses: dtolnay/rust-toolchain@29eef336d9b2848a0b548edc03f92a220660cdb8
+        with:
+          toolchain: stable
 
       - name: Publish gobby-code to crates.io
         run: cargo publish -p gobby-code
@@ -152,14 +173,26 @@ jobs:
 
     steps:
       - name: Download all artifacts
-        uses: actions/download-artifact@v4
+        uses: actions/download-artifact@d3f86a106a0bac45b974a628896c90dbdf5c8093
         with:
           merge-multiple: true
 
+      - name: Generate SHA-256 checksums
+        # Installers fetch <asset>.sha256 and verify the archive before
+        # chmod/PATH placement (fail-closed on missing/mismatched checksum).
+        shell: bash
+        run: |
+          set -euo pipefail
+          shopt -s nullglob
+          for asset in gcode-*.tar.gz gcode-*.zip; do
+            sha256sum "$asset" > "$asset.sha256"
+          done
+
       - name: Create GitHub Release
-        uses: softprops/action-gh-release@v2
+        uses: softprops/action-gh-release@3bb12739c298aeb8a4eeaf626c5b8d85266b0e65
         with:
           files: |
             gcode-*.tar.gz
             gcode-*.zip
+            gcode-*.sha256
           generate_release_notes: true

.github/workflows/release-gcore.yml

@@ -13,28 +13,50 @@ jobs:
     name: Test before release
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5
+        with:
+          persist-credentials: false
 
       - name: Install Rust toolchain
-        uses: dtolnay/rust-toolchain@stable
+        uses: dtolnay/rust-toolchain@29eef336d9b2848a0b548edc03f92a220660cdb8
         with:
+          toolchain: stable
           components: clippy
 
+      - name: Install cargo-nextest
+        uses: taiki-e/install-action@f5b277aa8941a90c16bc1cd6ab9363e0502b7d31
+        with:
+          tool: nextest
+
       - name: Clippy
         run: cargo clippy -p gobby-core --all-targets -- -D warnings
 
       - name: Run tests
-        run: cargo test -p gobby-core
+        run: cargo nextest run --profile ci --workspace
+
+      - name: Run tests without default features
+        run: cargo nextest run --profile ci --workspace --no-default-features
+
+      - name: Run doctests
+        run: cargo test --doc --workspace
+
+      - name: Run doctests without default features
+        run: cargo test --doc --workspace --no-default-features
 
   publish:
+    name: Publish
     needs: test
     runs-on: ubuntu-latest
 
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5
+        with:
+          persist-credentials: false
 
       - name: Install Rust toolchain
-        uses: dtolnay/rust-toolchain@stable
+        uses: dtolnay/rust-toolchain@29eef336d9b2848a0b548edc03f92a220660cdb8
+        with:
+          toolchain: stable
 
       - name: Publish gobby-core to crates.io
         run: cargo publish -p gobby-core