Restrict CI build matrix to Linux+MSRV for PRs
What the developer wrote
Authored by Joost Jager
Restrict CI build matrix to Linux+MSRV for PRs
Only run the full build matrix (Linux/Windows/macOS × stable/beta/MSRV)
on pushes to main. PR and non-main push builds now only run Linux with
the MSRV toolchain (1.75.0), which is the most important gate for
catching issues.
Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
What changed, and why it matters
This commit changes the project's automated testing configuration so that pull requests and non-main branches only run tests on Linux with the oldest supported Rust version. The full test matrix across Windows, macOS, stable, and beta Rust versions still runs, but only when code is pushed directly to the main branch. There is no code change to the actual software and no security vulnerability is introduced by this configuration change.
No security action required. This is a CI cost/velocity optimization. If desired, project maintainers may document the rationale for the reduced PR matrix to reassure contributors that main-branch gating still covers cross-platform and toolchain compatibility.
Security signals we found
No strong security signals were identified.
Evidence from the diff
The GitHub Actions workflow .github/workflows/build.yml is modified to conditionally restrict the CI matrix for non-main events. The platform and toolchain matrices now use GitHub Actions expression logic to select the full matrix only on push events to refs/heads/main; otherwise they select only self-hosted (Linux) and 1.75.0 (MSRV). This reduces CI resource usage for PRs but does not alter any source code, cryptographic logic, network handling, or build artifacts.
Changed components
.github/workflows/build.ymlInspect captured patch +8 / −2
diff --git a/.github/workflows/build.yml b/.github/workflows/build.yml
index 6ae6d83..c0593d4 100644
--- a/.github/workflows/build.yml
+++ b/.github/workflows/build.yml
@@ -30,8 +30,14 @@ jobs:
strategy:
fail-fast: false
matrix:
- platform: [ self-hosted, windows-latest, macos-latest ]
- toolchain: [ stable, beta, 1.75.0 ] # 1.75.0 is the MSRV for all crates
+ platform: >-
+ ${{ github.event_name == 'push' && github.ref == 'refs/heads/main'
+ && fromJSON('["self-hosted","windows-latest","macos-latest"]')
+ || fromJSON('["self-hosted"]') }}
+ toolchain: >-
+ ${{ github.event_name == 'push' && github.ref == 'refs/heads/main'
+ && fromJSON('["stable","beta","1.75.0"]')
+ || fromJSON('["1.75.0"]') }}
exclude:
- platform: windows-latest
toolchain: 1.75.0
Why this scored 15/100
Community notes
Notes can correct, qualify, or add evidence to the AI analysis. Every note shown here has been validated by a human moderator.
The AI analysis stands alone for now. Submit a note if you can add evidence or important context.