chore(ci): pin the Rust toolchain, so a clippy or rustfmt release cannot turn lint red with no code change
维护者通常 1 天内回复
还没有人认领这个 Issue。
评估
- 难度
- 4/5
- 预计耗时
- 3-5 天
- 新手友好度
- 55/100
- Issue 类型
- 重构
- 描述清晰度
- 描述清楚
- 活跃度
- 活跃
- 技术栈
- github-actions, rust, wasm
- 领域
- build-system, ci-cd
调研方向
Start with .github/actions/setup-rust/action.yml, scripts/rs, .github/scripts/classify-changes.sh, and docs/src/architecture/cicd.md to trace how CI, local commands, and documentation select Rust. Check how the Worker wasm32 build uses worker-build and wrangler, then verify the acceptance criteria, including the throwaway pin-change control. Done means one exact version drives repository commands and CI, jobs report the compiler version, and docs/ explains the bump process.
由索引模型根据 Issue 内容生成。
描述
Context
CI installs the Rust toolchain as stable (.github/actions/setup-rust/action.yml:34, through dtolnay/rust-toolchain). There is no rust-toolchain or rust-toolchain.toml file, and no rust-version in any manifest. scripts/rs also hard-codes stable (scripts/rs:20, rustup which --toolchain stable rustc). Locally, Homebrew's cargo 1.98.1 comes first on PATH while rustup's stable is 1.99.0 (its header records this, measured 2026-10-18), so a bare cargo and scripts/rs cargo are different compilers.
The lint job added by #87 runs cargo clippy ... -- -D warnings. Clippy adds lints in most releases, so on a floating toolchain a new stable release will eventually turn lint red with no change to the code. No such release has happened yet: the 47 warnings that #87 had to fix first were there because clippy had never run in CI, not because a release moved. That is why this is a risk to remove now, not an incident to fix.
Problem
- A rustc, clippy or rustfmt release breaks
lint(and can changefmt --check) on whichever pull request lands next, and onmain. - CI and a developer's machine can disagree about which lints exist.
- There is no single place that says which compiler this repository is built and tested with.
Proposal
- A
rust-toolchain.tomlnaming an exact version, with the components (clippy,rustfmt) and thewasm32-unknown-unknowntarget. Decide how CI installs it (read the version from the file, or let rustup honour the file) so the version lives in one place. - Make
scripts/rsfollow the pin instead ofstable. - Write down how the pin is bumped. Dependabot does not bump
rustc, so this is a deliberate, small pull request (or a scheduled one): bump, runcargo clippy --fixfor new lints, and land them together, instead of finding them on an unrelated pull request. - Check it against the other pins that move with the compiler:
worker-build0.8.7 and wrangler 4.151.2 (both in thesetup-rustaction) and the Worker's wasm32 build. - Keep it separate from an MSRV (
rust-version), which is a different question and not set today.
classify-changes.sh already treats a path starting rust-toolchain as Rust, so a change to the pin runs the Rust jobs.
Acceptance criteria
- One file defines the version, and CI,
scripts/rsand a plaincargoin the repository all use it. Each CI job prints therustc --versionit used. - The control: change the pin to a different version on a throwaway branch, and the jobs report that version (and nothing else moves).
- The bump procedure is written down in
docs/. -
docs/src/architecture/cicd.md("the Rust toolchain isstable, not pinned, so a new clippy or rustfmt release can faillint") is updated to say what is pinned and how to bump it.
References
#40, #87; .github/actions/setup-rust/action.yml; scripts/rs; .github/scripts/classify-changes.sh; docs/src/architecture/cicd.md, "Permissions and supply chain".
- 主要语言
- Rust
- 星标
- 0
- 派生
- 0
- 平均合并
- 1 小时 35 分钟
- 30 天内合并 PR
- 67
环境准备
- 没有 Dockerfile 或 Docker Compose 文件
- 没有 Pull Request 模板
- 阅读贡献指南
从这里开始
- 先读完整个 Issue,再读项目的贡献指南。
- 在 Issue 下留言说明你要接手 —— 这能避免两个人做同样的事。
- Fork 仓库,在一个分支上完成修改。
- 提交 Pull Request,并在描述里引用这个 Issue 编号。
aRustyDev/thrust 的其他 Issue
-
area:process prio:p1 type:security
难度 4/5 3-5 天 新手友好度 48/100
维护者通常 1 天内回复
-
area:process bug prio:p1
难度 4/5 3-5 天 新手友好度 38/100
维护者通常 1 天内回复
-
area:process prio:p1
难度 4/5 1-2 天 新手友好度 55/100
维护者通常 1 天内回复
-
area:process prio:p1
难度 4/5 3-5 天 新手友好度 56/100
维护者通常 1 天内回复
-
area:app prio:p0 review:fable-2026-10-19
难度 5/5 一周以上 新手友好度 25/100
维护者通常 1 天内回复
相似的 Issue
-
yara-x fails to build with rsa 0.10.0: unresolved import rsa::Pkcs1v15Sign可能已有人在做 @CfirTsabari 今天认领。 未关闭
难度 1/5 1 小时以内 新手友好度 87/100
VirusTotal/yara-x#865 ·
维护者通常 1 天内回复
-
good first issue help wanted program
难度 2/5 1-3 小时 新手友好度 83/100
hffgzktbcc-blip/ounce-core#297 ·
维护者通常 1 天内回复
-
难度 2/5 1-3 小时 新手友好度 72/100
nautechsystems/nautilus_trader#5631 ·
维护者通常 1 天内回复
-
难度 2/5 1-3 小时 新手友好度 69/100
bytecodealliance/rustix#1736 ·
维护者通常 1 天内回复
-
难度 2/5 1-3 小时 新手友好度 78/100
longbridge/gpui-kit#3871 ·
维护者通常 1 天内回复