ci: add Dependabot, improve workflows

.github/dependabot.yml

@@ -0,0 +1,19 @@
+# https://docs.github.com/en/code-security/dependabot/working-with-dependabot/dependabot-options-reference#package-ecosystem-
+
+version: 2
+updates:
+  # Check for Cargo package updates
+  - package-ecosystem: cargo
+    directory: /
+    schedule:
+      interval: weekly
+  # Check for Rust toolchain updates
+  - package-ecosystem: rust-toolchain
+    directory: /
+    schedule:
+      interval: weekly
+  # Check for GitHub Actions updates
+  - package-ecosystem: github-actions
+    directory: /
+    schedule:
+      interval: weekly

.github/workflows/audit.yml

@@ -1,10 +1,21 @@
 name: Audit
 
+
 on:
   push:
+    branches:
+      - main
     paths:
       - "**/Cargo.toml"
       - "**/Cargo.lock"
+  pull_request:
+    paths:
+      - "**/Cargo.toml"
+      - "**/Cargo.lock"
+
+concurrency:
+  group: ${{ github.workflow }}-${{ github.ref }}
+  cancel-in-progress: true
 
 jobs:
   security_audit:

.github/workflows/book.yml

@@ -1,8 +1,16 @@
 name: Book Deployment
+
 on:
   push:
     branches:
       - main
+    paths:
+      - "book/**"
+
+concurrency:
+  group: ${{ github.workflow }}-${{ github.ref }}
+  cancel-in-progress: true
+
 jobs:
   publish:
     runs-on: ubuntu-latest

.github/workflows/ci.yml

@@ -1,81 +1,103 @@
 name: ci
 
-on: [push]
+on:
+  push:
+    branches:
+      - main
+  pull_request:
+
+concurrency:
+  group: ${{ github.workflow }}-${{ github.ref }}
+  cancel-in-progress: true
 
 jobs:
   cargo-tests:
-    runs-on: ubuntu-latest
+    strategy:
+      matrix:
+        os: [ubuntu-latest, macos-latest]
+    runs-on: ${{ matrix.os }}
     timeout-minutes: 20
     steps:
       - name: Checkout sources
         uses: actions/checkout@v4
+
       - name: Install Rust toolchain
         uses: dtolnay/rust-toolchain@stable
-        with:
-          toolchain: nightly
+
       - uses: Swatinem/rust-cache@v2
         with:
           cache-on-failure: true
-      - name: cargo test
-        run: cargo test --all
-      - name: cargo test all features
-        run: cargo test --all --all-features
+
+      # Install nextest
+      - name: Install cargo-nextest
+        uses: taiki-e/install-action@nextest
+
+      - name: Run tests (all features)
+        run: cargo nextest run --all --all-features --no-fail-fast
+
+      - name: Run doc tests
+        run: cargo test --doc --all --all-features
 
   cargo-lint:
     runs-on: ubuntu-latest
     timeout-minutes: 20
     steps:
       - name: Checkout sources
         uses: actions/checkout@v4
-      - name: Install Rust toolchain
-        uses: dtolnay/rust-toolchain@stable
+
+      - name: Install Rust nightly toolchain
+        uses: dtolnay/rust-toolchain@nightly
         with:
-          toolchain: nightly
           components: rustfmt, clippy
+
       - uses: Swatinem/rust-cache@v2
         with:
           cache-on-failure: true
-      - name: cargo fmt
+
+      - name: Check formatting
         run: cargo +nightly fmt --all -- --check
-      - name: cargo clippy
-        run: cargo +nightly clippy --all --all-features -- -D warnings
+
+      - name: Run clippy
+        run: cargo +nightly clippy --all --all-features --all-targets -- -D warnings
 
   cargo-build:
-    runs-on: ubuntu-latest
+    strategy:
+      matrix:
+        os: [ubuntu-latest, macos-latest]
+    runs-on: ${{ matrix.os }}
     timeout-minutes: 20
-    continue-on-error: true
     steps:
       - name: Checkout sources
         uses: actions/checkout@v4
+
       - name: Install Rust toolchain
         uses: dtolnay/rust-toolchain@stable
-        with:
-          toolchain: nightly
+
       - uses: Swatinem/rust-cache@v2
         with:
           cache-on-failure: true
-      - name: build
-        id: build
-        continue-on-error: true
-        run: cargo build --all
+
+      - name: Build all crates
+        run: cargo build --all --all-features
+
+      - name: Build release
+        run: cargo build --all --all-features --release
 
   cargo-doc:
     runs-on: ubuntu-latest
     timeout-minutes: 20
-    continue-on-error: true
     steps:
       - name: Checkout sources
         uses: actions/checkout@v4
-      - name: Install Rust toolchain
-        uses: dtolnay/rust-toolchain@stable
-        with:
-          toolchain: nightly
+
+      - name: Install Rust nightly toolchain
+        uses: dtolnay/rust-toolchain@nightly
+
       - uses: Swatinem/rust-cache@v2
         with:
           cache-on-failure: true
-      - name: doclint
-        id: build
-        continue-on-error: true
-        run: RUSTDOCFLAGS="-D warnings" cargo doc --all --no-deps --all-features --document-private-items
-      - name: doctest
-        run: cargo test --doc --all --all-features
+
+      - name: Check documentation
+        run: RUSTDOCFLAGS="-D warnings" cargo +nightly doc --all --no-deps --all-features --document-private-items
+        env:
+          RUSTDOCFLAGS: "-D warnings"

.github/workflows/cross-release.yml

@@ -3,6 +3,10 @@ name: Cross Release
 on:
   workflow_dispatch:
 
+concurrency:
+  group: ${{ github.workflow }}-${{ github.ref }}
+  cancel-in-progress: true
+
 jobs:
   extract-version:
     runs-on: ubuntu-latest

.github/workflows/github-release.yml

@@ -4,7 +4,11 @@ on:
   workflow_dispatch:
   push:
     tags:
-      - "*"
+      - "v*"
+
+concurrency:
+  group: ${{ github.workflow }}-${{ github.ref }}
+  cancel-in-progress: true
 
 jobs:
   extract-crate-version:

.github/workflows/validate-version.yml

@@ -6,6 +6,10 @@ on:
       - main
   workflow_dispatch:
 
+concurrency:
+  group: ${{ github.workflow }}-${{ github.ref }}
+  cancel-in-progress: true
+
 jobs:
   extract-github-tag:
     runs-on: ubuntu-latest