Skip to content

build(deps): bump rand from 0.10.2 to 0.10.3 #4315

build(deps): bump rand from 0.10.2 to 0.10.3

build(deps): bump rand from 0.10.2 to 0.10.3 #4315

Workflow file for this run

name: test
on:
push:
branches: [main]
pull_request:
branches: [main]
env:
CARGO_TERM_COLOR: always
permissions:
contents: read
id-token: write
jobs:
test_rs:
name: Test (rust)
strategy:
fail-fast: false
matrix:
target:
- ak-agent
- ak-agent-desktop
- ak-api-cli
- ak-api-cli-gen
- ak-browser-support
- ak-cli
- ak-flow-executor
- ak-meta
- ak-meta-macros
- ak-platform
- ak-platform-authz
- ak-platform-facts
- ak-platform-keyring
- ak-sysd
# platform specific crates, included below
# - ak-nss
# - ak-pam
# - ee/wcp
platform:
- macos-26
- ubuntu-24.04
- ubuntu-24.04-arm
- windows-2025
include:
- platform: windows-2025
target: ee/wcp
- platform: ubuntu-24.04
target: ak-nss
- platform: ubuntu-24.04-arm
target: ak-nss
- platform: ubuntu-24.04
target: ak-pam
- platform: ubuntu-24.04-arm
target: ak-pam
runs-on: ${{ matrix.platform }}
steps:
- uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v5
with:
ref: ${{ github.event.pull_request.head.sha }}
- uses: actions-rust-lang/setup-rust-toolchain@ecabd13d1c56bd1345c230e542e9144811ad706f # v2.0.0
with:
rustflags: ""
build-warnings: warn
- uses: taiki-e/install-action@94c31af3204a9f15ab40b35ad084410b905bbc73 # v2
with:
tool: cargo-llvm-cov nextest
- uses: ./.github/actions/setup-toolchain
with:
platform: ${{ matrix.platform }}
- run: |
make ${{ matrix.target }}/test
env:
# ee/wcp is deliberately absent: _build-rs.yml ships it without
# crt-static, so its tests have to be built the same way.
RUST_BUILD_FLAGS: ${{ ((matrix.target == 'ak-platform-facts' || matrix.target == 'ak-sysd') && matrix.platform == 'windows-2025') && '-C target-feature=+crt-static' || '' }}
- uses: codecov/codecov-action@303a32d7a59b442fa8d48b6a1cc6825c09c847a5 # v5
if: ${{ always() }}
with:
use_oidc: true
flags: rs-${{ matrix.platform }}-${{ matrix.target }}
files: ${{ github.workspace }}/cache/llvm-cov-target.json
- uses: codecov/codecov-action@303a32d7a59b442fa8d48b6a1cc6825c09c847a5 # v5
if: ${{ always() }}
with:
use_oidc: true
flags: rs-${{ matrix.platform }}-${{ matrix.target }}
files: ${{ github.workspace }}/cache/llvm-cov-target.json
report_type: test_results
test_swift:
name: Test
strategy:
fail-fast: false
matrix:
target:
- ee/psso
runs-on: xcode-27
steps:
- uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v5
with:
ref: ${{ github.event.pull_request.head.sha }}
- uses: actions/cache@55cc8345863c7cc4c66a329aec7e433d2d1c52a9 # v4
with:
path: cache/
key: target-cache-psso-xcode-27-${{ hashFiles('ee/psso/**') }}
restore-keys: |
target-cache-psso-xcode-27-
- run: |
brew install xcresultparser xcbeautify
make ${{ matrix.target }}/test XCB_EXTRA_ARGS='CODE_SIGN_IDENTITY="" CODE_SIGNING_REQUIRED=NO'
- uses: codecov/codecov-action@303a32d7a59b442fa8d48b6a1cc6825c09c847a5 # v5
if: ${{ always() }}
with:
use_oidc: true
flags: swift
files: ${{ github.workspace }}/cache/psso/coverage.xml
- uses: codecov/codecov-action@303a32d7a59b442fa8d48b6a1cc6825c09c847a5 # v5
if: ${{ always() }}
with:
use_oidc: true
flags: swift
files: ${{ github.workspace }}/cache/psso/junit.xml
report_type: test_results
lint_rs:
name: Lint (rust)
runs-on: ubuntu-latest
steps:
- uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v5
with:
ref: ${{ github.event.pull_request.head.sha }}
- uses: actions-rust-lang/setup-rust-toolchain@ecabd13d1c56bd1345c230e542e9144811ad706f # v2.0.0
with:
rustflags: ""
build-warnings: warn
- run: make ci-install-deps
- uses: ./.github/actions/setup-toolchain
with:
platform: ubuntu
- run: make lint-rs
lint_js:
name: Lint
strategy:
fail-fast: false
matrix:
target:
- browser-ext
runs-on: ubuntu-latest
steps:
- uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v5
with:
ref: ${{ github.event.pull_request.head.sha }}
- uses: pnpm/action-setup@v6.1.0
with:
run_install: false
- uses: actions/setup-node@820762786026740c76f36085b0efc47a31fe5020 # v6
with:
node-version-file: "${{ matrix.target }}/package.json"
cache: "pnpm"
cache-dependency-path: "pnpm-lock.yaml"
- run: make ${{ matrix.target }}/lint
build_rs_e2e:
uses: ./.github/workflows/_build-rs.yml
with:
rust_build_flags: "-C instrument-coverage -C codegen-units=1"
artifact_suffix: "-e2e"
platforms: '["ubuntu-24.04"]'
secrets: inherit
package_linux_e2e:
needs: build_rs_e2e
uses: ./.github/workflows/_package-linux.yml
with:
artifact_suffix: "-e2e"
platforms: '["ubuntu-24.04"]'
secrets: inherit
test_rs_e2e:
name: Test (e2e ${{ matrix.ubuntu_version }})
needs: [package_linux_e2e]
strategy:
fail-fast: false
matrix:
ubuntu_version:
- "24.04"
- "25.10"
- "26.04"
runs-on: ubuntu-24.04
env:
UBUNTU_VERSION: ${{ matrix.ubuntu_version }}
steps:
- uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v5
with:
ref: ${{ github.event.pull_request.head.sha }}
- uses: actions-rust-lang/setup-rust-toolchain@ecabd13d1c56bd1345c230e542e9144811ad706f # v2.0.0
with:
rustflags: ""
build-warnings: warn
- uses: taiki-e/install-action@94c31af3204a9f15ab40b35ad084410b905bbc73 # v2
with:
tool: cargo-llvm-cov nextest
- uses: actions/download-artifact@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c # v6
with:
name: authentik_package-linux-ubuntu-24.04-e2e
path: bin/
- uses: actions/download-artifact@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c # v6
with:
name: authentik_ubuntu-24.04_ak-agent-e2e
path: bin/
- uses: actions/download-artifact@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c # v6
with:
name: authentik_ubuntu-24.04_ak-cli-e2e
path: bin/
- uses: actions/download-artifact@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c # v6
with:
name: authentik_ubuntu-24.04_ak-nss-e2e
path: bin/
- uses: actions/download-artifact@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c # v6
with:
name: authentik_ubuntu-24.04_ak-pam-e2e
path: bin/
- run: chmod +x bin/agent/ak-agent bin/cli/ak bin/sysd/ak-sysd
- uses: goauthentik/action-setup-authentik@3a1d4f81e5a29709c173f8b74250b1781e298bf9 # v3.1
id: setup
with:
version: beta
sentry_env: goauthentik-platform-ci
blueprints_path: ./hack/authentik/blueprints
wait: true
enterprise_license: true
enterprise_license_users_internal: 100
enterprise_license_users_external: 100
- env:
AK_TOKEN: ${{ steps.setup.outputs.admin_token }}
AK_URL: ${{ steps.setup.outputs.http_url }}
run: |
./hack/authentik/wait.sh
- run: make containers/e2e/ci-build
# AppArmor policy is host-global: and the container cannot load policy of
# its own (no securityfs during docker build)
- name: Load authentik AppArmor drop-in
run: |
sudo install -m 0644 -D \
vpkg/linux/nss/_deb/apparmor/abstractions/nameservice.d/authentik \
/etc/apparmor.d/abstractions/nameservice.d/authentik
sudo systemctl reload apparmor.service
sudo aa-status | grep -q unix-chkpwd
- env:
AK_PASSWORD: ${{ steps.setup.outputs.admin_password }}
AK_TOKEN: ${{ steps.setup.outputs.admin_token }}
AK_URL: ${{ steps.setup.outputs.http_url }}
run: |
make test-e2e-ci
- run: |
sudo chmod -R 777 ./ak-platform-e2e/coverage
make test-e2e-convert
- uses: codecov/codecov-action@303a32d7a59b442fa8d48b6a1cc6825c09c847a5 # v5
if: ${{ always() }}
with:
use_oidc: true
flags: rs-e2e-${{ matrix.ubuntu_version }}
files: ${{ github.workspace }}/cache/llvm-cov-target.json
- uses: codecov/codecov-action@303a32d7a59b442fa8d48b6a1cc6825c09c847a5 # v5
if: ${{ always() }}
with:
use_oidc: true
flags: rs-e2e-${{ matrix.ubuntu_version }}
files: ${{ github.workspace }}/cache/llvm-cov-target.json
report_type: test_results
- uses: codecov/codecov-action@303a32d7a59b442fa8d48b6a1cc6825c09c847a5 # v5
if: ${{ always() }}
with:
use_oidc: true
flags: rs-e2e-${{ matrix.ubuntu_version }}
files: ${{ github.workspace }}/cache/rs-e2e-coverage.lcov