ci: update weekly fmt job to cargo-rbmt
What the developer wrote
Authored by Nick Johnson
ci: update weekly fmt job to cargo-rbmt
This locks in the compiler version for the format job.
What changed, and why it matters
This is a routine GitHub Actions CI maintenance change. It swaps the weekly automated code-formatting job from using a floating nightly Rust toolchain to a custom project tool called cargo-rbmt, which pins the compiler version. There is no user-facing code change and no security-relevant behavior.
No security action needed. Review as normal CI tooling change.
Security signals we found
No strong security signals were identified.
Evidence from the diff
The commit modifies .github/workflows/cron-weekly-rustfmt.yml. It replaces dtolnay/rust-toolchain@nightly with components: rustfmt with rust-bitcoin/rust-bitcoin-maintainer-tools/.github/actions/setup-rbmt@64715bab0d6fa1f3ebd6f9be336c4c5089bb5eb9, and changes the formatting command from ‘cargo +nightly fmt && sed …’ to ‘cargo rbmt fmt’. The stated goal is to lock the compiler version for the format job. No Rust source code, dependencies, or cryptographic logic is changed.
Changed components
.github/workflows/cron-weekly-rustfmt.ymlInspect captured patch +2 / −5
diff --git a/.github/workflows/cron-weekly-rustfmt.yml b/.github/workflows/cron-weekly-rustfmt.yml
index 81e751ba..088a828a 100644
--- a/.github/workflows/cron-weekly-rustfmt.yml
+++ b/.github/workflows/cron-weekly-rustfmt.yml
@@ -15,12 +15,9 @@ jobs:
- uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5.0.0
with:
persist-credentials: false
- - uses: dtolnay/rust-toolchain@55d80eb3c5a4228eec5390a083c092095115c6f1 # nightly
- with:
- components: rustfmt
+ - uses: rust-bitcoin/rust-bitcoin-maintainer-tools/.github/actions/setup-rbmt@64715bab0d6fa1f3ebd6f9be336c4c5089bb5eb9
- name: Run Nightly rustfmt
- # Run the formatter and manually remove trailing whitespace.
- run: cargo +nightly fmt && git ls-files -- '*.rs' -z | xargs sed -E -i'' -e 's/[[:space:]]+$//'
+ run: cargo rbmt fmt
- name: Get the current date
run: echo "date=$(date +'%Y-%m-%d')" >> $GITHUB_ENV
- name: Create Pull Request
Why this scored 15/100
Community notes
Notes can correct, qualify, or add evidence to the AI analysis. Every note shown here has been validated by a human moderator.
The AI analysis stands alone for now. Submit a note if you can add evidence or important context.