Jason Hall 71fa55f189 Add CI workflow, bump GHA actions, refresh + commit Cargo.lock ... CI workflow (.github/workflows/ci.yml): - Triggers on PRs (and main pushes for redundant fast feedback). - Two parallel jobs: build the firmware (with placeholder wifi.env), build the host-side publisher tool. No publishing or signing -- that remains publish.yml's job. - Per-PR concurrency: a new push to a branch cancels in-flight CI for the previous commit on that branch. GHA action bumps (publish.yml + ci.yml both use the new versions): - actions/checkout v4 -> v6 - astral-sh/setup-uv v3 -> v8 - esp-rs/xtensa-toolchain v1.5 -> v1.7 - sigstore/cosign-installer v3 -> v4 (defaults to cosign 3, which still produces the Sigstore Bundle v0.3 format we verify on-device) - actions/cache v4 -> v5 - Swatinem/rust-cache stays v2 (already current) Gets us off the deprecated Node.js 20 actions runtime. Cargo.lock: now tracked. Both crates (firmware and publisher) are binaries, and binary Cargo.lock should be committed for reproducible builds. `cargo update` was a no-op except for a couple transitive patch bumps in the firmware (generic-array 0.14.7 -> 0.14.9). Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>		2026-05-02 14:16:55 -04:00
..
ci.yml	Add CI workflow, bump GHA actions, refresh + commit Cargo.lock	2026-05-02 14:16:55 -04:00
publish.yml	Add CI workflow, bump GHA actions, refresh + commit Cargo.lock	2026-05-02 14:16:55 -04:00