dependencies.yml

name: dependencies

on:
  push:
    branches:
      - main
    paths:
      - '**/Cargo.lock'
      - '**/Cargo.toml'
  pull_request:
    types: [opened, synchronize]
    paths:
      - '**/Cargo.lock'
      - '**/Cargo.toml'

concurrency:
  group: ${{ github.workflow }}-${{ github.ref }}
  cancel-in-progress: true

jobs:
  dependencies:
    runs-on: ubuntu-latest

    steps:

      - name: checkout
        uses: actions/checkout@v4

      - name: Audit Rust dependencies
        uses: actions-rust-lang/audit@v1

      - name: Detect multiple versions of the same crate
        uses: EmbarkStudios/cargo-deny-action@v1
        with:
          command: check bans licenses sources

      - name: Install Rust nightly
        uses: dtolnay/rust-toolchain@nightly
        with:
          toolchain: nightly
          components: rustfmt

      # - name: Install cargo-udeps
      #   env:
      #     UDEPS_LINK: https://github.com/est31/cargo-udeps/releases/download
      #     UDEPS_VERSION: v0.1.43
      #   run: |
      #     curl -L "$UDEPS_LINK/$UDEPS_VERSION/cargo-udeps-$UDEPS_VERSION-x86_64-unknown-linux-gnu.tar.gz" |
      #     tar xz -C $HOME/.cargo/bin --strip-components 2

      # - name: Run cargo-udeps
      #   run: |
      #     cargo +nightly udeps --all-targets