docs: roll out v0.0.48 release notes #754

	name: CI

	on:
	pull_request:
	push:
	branches: [main]

	permissions:
	contents: read

	env:
	FORCE_JAVASCRIPT_ACTIONS_TO_NODE24: true

	jobs:
	rust:
	name: Rust checks
	runs-on: ${{ matrix.os }}
	strategy:
	fail-fast: false
	matrix:
	os: [ubuntu-latest, windows-latest]
	steps:
	- uses: actions/checkout@v7
	- uses: dtolnay/rust-toolchain@stable
	with:
	components: rustfmt, clippy
	- name: Install native link dependencies (Linux only)
	if: runner.os == 'Linux'
	run: sudo apt-get update && sudo apt-get install -y --no-install-recommends libopenblas-dev
	# fmt/clippy only on Linux to keep Windows leg focused on build+test
	- name: Check formatting
	if: runner.os == 'Linux'
	run: cargo fmt --check
	- name: Clippy
	if: runner.os == 'Linux'
	run: cargo clippy --workspace --all-targets -- -D warnings
	- run: cargo test --workspace --locked

	secret-guard:
	name: Secret guard
	runs-on: ubuntu-latest
	steps:
	- uses: actions/checkout@v7
	with:
	fetch-depth: 0
	- uses: actions/setup-python@v6
	with:
	python-version: '3.x'
	- run: python scripts/check-secrets.py

	cargo-deny:
	name: Dependency audit
	runs-on: ubuntu-latest
	steps:
	- uses: actions/checkout@v7
	# Commit-pinned (v2.0.20): a supply-chain gate must not itself depend on a
	# mutable action tag. Config lives in deny.toml at the repo root.
	- uses: EmbarkStudios/cargo-deny-action@bb137d7af7e4fb67e5f82a49c4fce4fad40782fe # v2.0.20
	with:
	command: check advisories licenses bans sources

Navigation Menu