CI: add workflow to verify MSRV on any rust file changes
What changed, and why it matters
This commit adds a new automated CI (Continuous Integration) workflow that checks whether Rust code changes still compile with the project's declared Minimum Supported Rust Version (MSRV). It does not change any application code, network behavior, cryptography, or user-facing functionality. There is no security vulnerability here.
No security action required. This is a routine CI quality-assurance addition. Reviewers may optionally confirm the workflow uses pinned, trusted action versions and that the 30-minute timeout and `fail-fast: true` settings are appropriate.
Security signals we found
No strong security signals were identified.
Evidence from the diff
The commit introduces .github/workflows/rust-msrv.yml, a GitHub Actions workflow triggered on pull requests that touch .rs, Cargo.toml, or Cargo.lock files. It installs protoc, cargo-hack, and runs cargo hack check --rust-version --workspace --all-targets --all-features to verify MSRV compliance. The diff contains only CI configuration; no source code, dependencies, or permissions are modified.
Changed components
.github/workflows/rust-msrv.ymlInspect captured patch +26 / −0
diff --git a/.github/workflows/rust-msrv.yml b/.github/workflows/rust-msrv.yml
new file mode 100644
index 00000000..a1565927
--- /dev/null
+++ b/.github/workflows/rust-msrv.yml
@@ -0,0 +1,26 @@
+name: Rust MSRV verification test
+on:
+ pull_request:
+ paths:
+ - '**/*.rs'
+ - '**/Cargo.toml'
+ - '**/Cargo.lock'
+jobs:
+ msrv-test:
+ name: Rust MSRV verification test
+ runs-on: ubuntu-latest
+ timeout-minutes: 30
+ strategy:
+ fail-fast: true
+ steps:
+ - name: Checkout
+ uses: actions/checkout@v6
+
+ - name: protoc
+ uses: arduino/setup-protoc@v3
+
+ - name: Install cargo-hack
+ uses: taiki-e/install-action@cargo-hack
+
+ - name: Check MSRV
+ run: cargo hack check --rust-version --workspace --all-targets --all-features
Why this scored 15/100
Community notes
Notes can correct, qualify, or add evidence to the AI analysis. Every note shown here has been validated by a human moderator.
The AI analysis stands alone for now. Submit a note if you can add evidence or important context.