ci: musl support

.cargo/audit.toml

@@ -0,0 +1,4 @@
+[advisories]
+ignore = ["RUSTSEC-2024-0320", "RUSTSEC-2024-0436", "RUSTSEC-2025-0057", "RUSTSEC-2025-0046"]
+informational_warnings = ["unmaintained"] # warn for categories of informational advisories
+severity_threshold = "low" # CVSS severity ("none", "low", "medium", "high", "critical")

.github/dependabot.yml

@@ -2,40 +2,48 @@ version: 2
 updates:
   - package-ecosystem: "cargo"
     directory: "/"
+    target-branch: "develop"
     schedule:
       interval: "weekly"
 
   - package-ecosystem: "cargo"
     directory: "/crates/app/tests/http_search_filter"
+    target-branch: "develop"
     schedule:
       interval: "weekly"
 
   - package-ecosystem: "cargo"
     directory: "/crates/wasm-blueprints/rust/"
+    target-branch: "develop"
     schedule:
       interval: "weekly"
 
   - package-ecosystem: "github-actions"
     directory: "/"
+    target-branch: "develop"
     schedule:
       interval: "monthly"
 
   - package-ecosystem: "docker"
     directory: "/"
+    target-branch: "develop"
     schedule:
       interval: "weekly"
 
   - package-ecosystem: "gomod"
     directory: "/crates/wasm-blueprints/golang/"
+    target-branch: "develop"
     schedule:
       interval: "weekly"
 
   - package-ecosystem: "rust-toolchain"
     directory: "/"
+    target-branch: "develop"
     schedule:
       interval: "weekly"
 
   - package-ecosystem: "npm"
     directory: "/crates/wasm-blueprints/js/"
+    target-branch: "develop"
     schedule:
       interval: "weekly"

.github/workflows/automerge.yml

@@ -0,0 +1,18 @@
+name: Dependabot auto-merge
+
+on: pull_request
+
+permissions:
+  contents: write
+  pull-requests: write
+
+jobs:
+  dependabot:
+    runs-on: ubuntu-latest
+    if: ${{ github.actor == 'dependabot[bot]' }}
+    steps:
+      - name: Enable auto-merge for Dependabot PRs
+        run: gh pr merge --auto --merge "$PR_URL"
+        env:
+          PR_URL: ${{github.event.pull_request.html_url}}
+          GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}

.github/workflows/build.yml

@@ -79,7 +79,7 @@ jobs:
 
   build-for-targets:
     name: Build for targets
-    needs: check
+    # needs: check
     runs-on: ${{ matrix.platforms.os }}
     continue-on-error: true
     permissions:
@@ -90,21 +90,27 @@ jobs:
           - os: macos-14
             target: aarch64-apple-darwin
             features: ""
-          - os: macos-14-large
+          - os: macos-15-intel
             target: x86_64-apple-darwin
             features: ""
           - os: ubuntu-latest
             target: x86_64-unknown-linux-gnu
             features: ""
+          - os: ubuntu-latest
+            target: x86_64-unknown-linux-musl
+            features: "--no-default-features --features ssl-vendored"
           - os: ubuntu-24.04-arm
             target: aarch64-unknown-linux-gnu
             features: ""
+          - os: ubuntu-24.04-arm
+            target: aarch64-unknown-linux-musl
+            features: "--no-default-features --features ssl-vendored,cmake-build"
           - os: windows-latest
             target: x86_64-pc-windows-gnu
-            features: "--no-default-features"
+            features: "--no-default-features --features cmake-build"
           - os: windows-latest
             target: x86_64-pc-windows-msvc
-            features: "--no-default-features --features ssl-vendored"
+            features: "--no-default-features --features ssl-vendored,cmake-build"
     steps:
       - uses: actions/checkout@v5
         with:

.github/workflows/developer-experience.yml

@@ -94,7 +94,7 @@ jobs:
         with:
           persist-credentials: false
       - name: Setup JS ${{ env.JS_VERSION }}
-        uses: actions/setup-node@v5
+        uses: actions/setup-node@v6
         with:
           node-version: ${{ env.JS_VERSION }}
       - name: Setup Go ${{ env.GOLANG_VERSION }}

.github/workflows/publish.yml

@@ -77,9 +77,15 @@ jobs:
           - os: ubuntu-latest
             target: x86_64-unknown-linux-gnu
             features: ""
+          - os: ubuntu-latest
+            target: x86_64-unknown-linux-musl
+            features: ""
           - os: ubuntu-24.04-arm
             target: aarch64-unknown-linux-gnu
             features: ""
+          - os: ubuntu-24.04-arm
+            target: aarch64-unknown-linux-musl
+            features: ""
           - os: windows-latest
             target: x86_64-pc-windows-gnu
             features: "--no-default-features"

.github/workflows/tag.yml

@@ -33,6 +33,8 @@ jobs:
         run: git fetch --tags origin
       - name: Install Rust
         uses: dtolnay/rust-toolchain@stable
+        with:
+          components: rustc, cargo
       - uses: Swatinem/rust-cache@v2
       - name: Configure git
         run: |