Merge pull request #241 from syncable-dev/release-plz-2025-12-27T00-3… #15

	name: CI

	on:
	push:
	branches: [main, develop]
	pull_request:
	branches: [main, develop]

	env:
	CARGO_TERM_COLOR: always
	RUST_BACKTRACE: 1
	# Override target-cpu=native from .cargo/config.toml (breaks CI runners)
	RUSTFLAGS: ""

	jobs:
	build:
	name: Build & Test
	runs-on: ${{ matrix.os }}
	strategy:
	fail-fast: false
	matrix:
	os: [ubuntu-latest, macos-latest, windows-latest]
	rust: [stable]

	steps:
	- uses: actions/checkout@v4

	- name: Install Rust toolchain
	uses: dtolnay/rust-toolchain@master
	with:
	toolchain: ${{ matrix.rust }}
	components: clippy, rustfmt

	- name: Cache cargo registry
	uses: actions/cache@v4
	with:
	path: \|
	~/.cargo/registry
	~/.cargo/git
	target
	key: ${{ runner.os }}-cargo-${{ hashFiles('**/Cargo.lock') }}
	restore-keys: \|
	${{ runner.os }}-cargo-

	- name: Check formatting
	if: matrix.os == 'ubuntu-latest'
	run: cargo fmt --all -- --check

	- name: Build
	run: cargo build --verbose

	- name: Run tests
	run: cargo test --verbose

	- name: Clippy
	if: matrix.os == 'ubuntu-latest'
	run: cargo clippy -- -D warnings

	# Security audit
	security:
	name: Security Audit
	runs-on: ubuntu-latest
	permissions:
	checks: write
	contents: read
	steps:
	- uses: actions/checkout@v4
	- uses: rustsec/audit-check@v2
	with:
	token: ${{ secrets.GITHUB_TOKEN }}
	# Only fail on actual vulnerabilities, not unmaintained warnings
	ignore: RUSTSEC-2020-0163,RUSTSEC-2024-0320,RUSTSEC-2025-0057,RUSTSEC-2025-0074,RUSTSEC-2025-0075,RUSTSEC-2025-0080,RUSTSEC-2025-0081,RUSTSEC-2025-0098,RUSTSEC-2025-0104,RUSTSEC-2025-0134

Provide feedback