8000 ci: add MSRV check, public-API semver check, and dependency policy check · Issue #395 · project-minigraf/minigraf · GitHub
[go: up one dir, main page]
Skip to content

ci: add MSRV check, public-API semver check, and dependency policy check #395

New issue
New issue
Closed
#418
Closed
ci: add MSRV check, public-API semver check, and dependency policy check#395
#418
Labels
dependenciesPull requests that update a dependency filestabilityStability/panic issue
Milestone
v2.0.2

Description

@adityamukho
adityamukho
opened on Sep 26, 2026

Problem

  • rust-version = "1.89" is declared in Cargo.toml, but no CI job builds with 1.89. CI uses stable only, so a newer-toolchain feature can break the MSRV without anyone noticing.
  • No check stops an accidental breaking change to the public API. v2.0.0 happened partly because of breaks found by hand (OpenOptions struct literals).
  • cargo-audit and OSV-Scanner run, but nothing enforces license or source rules for dependencies.

Ask

  • Add an MSRV job: cargo +1.89 check --all-features and cargo +1.89 test --lib.
  • Add cargo-semver-checks against the latest release tag on PRs to main. Allow the check to be overridden only on major-version branches such as v3.
  • Add cargo-deny with a license allow-list (MIT/Apache-2.0 compatible), a ban on duplicate major versions where practical, and a check that every crate comes from crates.io.

Activity

  1. adityamukho
    added a parent issue on Sep 26, 2026
  2. adityamukho
    added
    dependenciesPull requests that update a dependency file
    stabilityStability/panic issue
    on Sep 26, 2026
  3. adityamukho
    added this to the v2.0.2 milestone on Sep 26, 2026
  4. adityamukho
    added 2 commits that reference this issue on Sep 26, 2026

    docs(roadmap): make v2.0.2 the final v2.x release, split v3.0.0/v3.1.0 (

    a075736

    ci: add MSRV, public-API semver and dependency policy checks (#395) (#…

    0296caf
  5. adityamukho
    closed this as completedin #418on Sep 26, 2026
  6. adityamukho
    added a commit that references this issue on Sep 27, 2026

    release: v2.0.2 — final planned v2.x release

    1ef50c8
  7. adityamukho
    removed a parent issue on Oct 29, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Metadata

Metadata

Assignees

No one assigned

    Labels

    dependenciesPull requests that update a dependency filestabilityStability/panic issue

    Type

    No type

    Projects

    No projects

      Milestone

      Relationships

      None yet

      Development

      No branches or pull requests

      Issue actions
      0