Merge pull request #247 from launchapp-dev/release/v0.5.20 #2505
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| name: Rust-Only Dependency Policy | |
| on: | |
| pull_request: | |
| push: | |
| permissions: | |
| contents: read | |
| env: | |
| # GitHub Actions runner Node 20 -> Node 24 deprecation (effective 2026-06-02). | |
| # Forces JS-based actions onto Node 24 ahead of the cutover. | |
| FORCE_JAVASCRIPT_ACTIONS_TO_NODE24: true | |
| jobs: | |
| rust_only_dependency_guardrail: | |
| name: Rust-only dependency guardrail | |
| runs-on: ubuntu-latest | |
| steps: | |
| - name: Checkout | |
| uses: actions/checkout@v4 | |
| - name: Install Rust toolchain | |
| uses: dtolnay/rust-toolchain@stable | |
| - name: Install Linux build deps (libdbus for keyring crate) | |
| run: sudo apt-get update && sudo apt-get install -y libdbus-1-dev pkg-config | |
| - name: Cache Cargo artifacts | |
| uses: Swatinem/rust-cache@v2 | |
| - name: Validate dependency policy | |
| run: cargo test -p orchestrator-cli --test rust_only_dependency_policy |