Skip to content

Commit c82ea0c

Browse files
acgetchellacgetchell
authored
Merge pull request #11 from acgetchell/feat/ldlt
feat: add LDLT factorization, citation metadata, and dev workflow updates
2 parents 987a33b + f5de9f2 commit c82ea0c

24 files changed

+1550
-136
lines changed

‎.github/workflows/audit.yml‎

Lines changed: 10 additions & 10 deletions
Original file line numberDiff line numberDiff line change
@@ -4,14 +4,14 @@ on:
44
push:
55
paths:
66
- .github/workflows/audit.yml
7-
- '**/Cargo.toml'
8-
- '**/Cargo.lock'
7+
- "**/Cargo.toml"
8+
- "**/Cargo.lock"
99
pull_request:
1010
paths:
11-
- '**/Cargo.toml'
12-
- '**/Cargo.lock'
11+
- "**/Cargo.toml"
12+
- "**/Cargo.lock"
1313
schedule:
14-
- cron: '0 6 * * 1' # Monday at 6 AM UTC
14+
- cron: "0 6 * * 1" # Monday at 6 AM UTC
1515
workflow_dispatch:
1616

1717
permissions:
@@ -21,15 +21,15 @@ jobs:
2121
audit:
2222
runs-on: ubuntu-latest
2323
steps:
24-
- uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8 # v6.0.1
24+
- uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8 # v6.0.1
2525

2626
- name: Install Rust toolchain
27-
uses: actions-rust-lang/setup-rust-toolchain@1780873c7b576612439a134613cc4cc74ce5538c # v1.15.2
27+
uses: actions-rust-lang/setup-rust-toolchain@1780873c7b576612439a134613cc4cc74ce5538c # v1.15.2
2828
with:
29-
cache: true # toolchain/components are specified in rust-toolchain.toml
29+
cache: true # toolchain/components are specified in rust-toolchain.toml
3030

3131
- name: Cache advisory database
32-
uses: actions/cache@9255dc7a253b0ccc959486e2bca901246202afeb # v5.0.1
32+
uses: actions/cache@9255dc7a253b0ccc959486e2bca901246202afeb # v5.0.1
3333
with:
3434
path: ~/.cargo/advisory-db
3535
key: advisory-db-${{ github.ref_name }}-v1
@@ -44,7 +44,7 @@ jobs:
4444
cargo audit
4545
4646
- name: Upload audit results
47-
uses: actions/upload-artifact@b7c566a772e6b6bfb58ed0dc250532a479d7789f # v6.0.0
47+
uses: actions/upload-artifact@b7c566a772e6b6bfb58ed0dc250532a479d7789f # v6.0.0
4848
if: always()
4949
with:
5050
name: audit-results

‎.github/workflows/ci.yml‎

Lines changed: 146 additions & 13 deletions
Original file line numberDiff line numberDiff line change
@@ -1,4 +1,5 @@
11
name: CI
2+
# cspell:ignore rhysd binstall mktemp sha256sum sha256sums shasum
23
permissions:
34
contents: read
45
concurrency:
@@ -21,12 +22,17 @@ on:
2122
env:
2223
CARGO_TERM_COLOR: always
2324
RUST_BACKTRACE: 1
25+
ACTIONLINT_VERSION: "1.7.10"
26+
MARKDOWNLINT_VERSION: "0.47.0"
27+
CSPELL_VERSION: "9.4.0"
28+
SHFMT_VERSION: "3.12.0"
29+
UV_VERSION: "0.9.21"
2430

2531
jobs:
2632
build:
2733
runs-on: ${{ matrix.os }}
2834
strategy:
29-
fail-fast: false # Continue other jobs if one fails
35+
fail-fast: false # Continue other jobs if one fails
3036
matrix:
3137
os:
3238
- ubuntu-latest
@@ -41,47 +47,174 @@ jobs:
4147
target: x86_64-pc-windows-msvc
4248

4349
steps:
44-
- uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8 # v6.0.1
50+
- uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8 # v6.0.1
4551

4652
- name: Install Rust toolchain
47-
uses: actions-rust-lang/setup-rust-toolchain@1780873c7b576612439a134613cc4cc74ce5538c # v1.15.2
53+
uses: actions-rust-lang/setup-rust-toolchain@1780873c7b576612439a134613cc4cc74ce5538c # v1.15.2
4854
with:
4955
target: ${{ matrix.target }}
50-
cache: true # Built-in caching; toolchain/components are specified in rust-toolchain.toml
56+
cache: true # Built-in caching
57+
# toolchain, components, etc. are specified in rust-toolchain.toml
5158

5259
- name: Install just
5360
if: matrix.os != 'windows-latest'
54-
uses: taiki-e/install-action@bfc291e1e39400b67eda124e4a7b4380e93b3390 # v2.65.0
61+
uses: taiki-e/install-action@4c6723ec9c638cccae824b8957c5085b695c8085 # v2.65.7
5562
with:
5663
tool: just
5764

5865
- name: Install uv (for Python scripts and pytest)
5966
if: matrix.os != 'windows-latest'
60-
uses: astral-sh/setup-uv@681c641aba71e4a1c380be3ab5e12ad51f415867 # v7.1.6
67+
uses: astral-sh/setup-uv@681c641aba71e4a1c380be3ab5e12ad51f415867 # v7.1.6
6168
with:
62-
version: "0.9.17" # Pinned for reproducible CI
69+
version: ${{ env.UV_VERSION }}
6370

6471
- name: Install Node.js (for markdownlint and cspell)
6572
if: matrix.os != 'windows-latest'
6673
uses: actions/setup-node@395ad3262231945c25e8478fd5baf05154b1d79f # v6.1.0
6774
with:
68-
node-version: '20'
75+
node-version: "20"
6976

7077
- name: Install Node.js packages
7178
if: matrix.os != 'windows-latest'
7279
run: |
73-
npm install -g markdownlint-cli cspell
80+
npm install -g markdownlint-cli@${{ env.MARKDOWNLINT_VERSION }} cspell@${{ env.CSPELL_VERSION }}
7481
75-
- name: Install jq (Linux)
82+
- name: Install taplo (for TOML formatting and linting)
83+
if: matrix.os != 'windows-latest'
84+
uses: taiki-e/install-action@4c6723ec9c638cccae824b8957c5085b695c8085 # v2.65.7
85+
with:
86+
tool: taplo-cli
87+
88+
- name: Install actionlint (Linux/macOS)
89+
if: matrix.os != 'windows-latest'
90+
run: |
91+
set -euo pipefail
92+
93+
# actionlint is published as prebuilt binaries (Go), not a Rust crate.
94+
# Install directly from rhysd/actionlint releases to avoid cargo-binstall fallback failures.
95+
# Verify SHA256 checksums from the upstream release for supply-chain hardening.
96+
OS="$(uname -s)"
97+
ARCH="$(uname -m)"
98+
99+
case "$OS" in
100+
Linux) ACTIONLINT_OS="linux" ;;
101+
Darwin) ACTIONLINT_OS="darwin" ;;
102+
*)
103+
echo "Unsupported OS for actionlint: $OS" >&2
104+
exit 1
105+
;;
106+
esac
107+
108+
case "$ARCH" in
109+
x86_64|amd64) ACTIONLINT_ARCH="amd64" ;;
110+
arm64|aarch64) ACTIONLINT_ARCH="arm64" ;;
111+
*)
112+
echo "Unsupported architecture for actionlint: $ARCH" >&2
113+
exit 1
114+
;;
115+
esac
116+
117+
verify_sha256() {
118+
local checksum_file="$1"
119+
if command -v sha256sum >/dev/null 2>&1; then
120+
sha256sum -c "$checksum_file"
121+
else
122+
shasum -a 256 -c "$checksum_file"
123+
fi
124+
}
125+
126+
VERSION="${ACTIONLINT_VERSION}"
127+
TARBALL="actionlint_${VERSION}_${ACTIONLINT_OS}_${ACTIONLINT_ARCH}.tar.gz"
128+
CHECKSUMS_FILE="actionlint_${VERSION}_checksums.txt"
129+
BASE_URL="https://github.com/rhysd/actionlint/releases/download/v${VERSION}"
130+
131+
tmpdir="$(mktemp -d)"
132+
trap 'rm -rf "$tmpdir"' EXIT
133+
134+
curl -fsSL "${BASE_URL}/${TARBALL}" -o "$tmpdir/$TARBALL"
135+
curl -fsSL "${BASE_URL}/${CHECKSUMS_FILE}" -o "$tmpdir/$CHECKSUMS_FILE"
136+
137+
orig_dir="$PWD"
138+
cd "$tmpdir"
139+
awk -v f="$TARBALL" '$NF==f {print; found=1} END {exit found?0:1}' "$CHECKSUMS_FILE" > checksum.txt
140+
verify_sha256 checksum.txt
141+
cd "$orig_dir"
142+
143+
tar -xzf "$tmpdir/$TARBALL" -C "$tmpdir"
144+
145+
actionlint_path="$(find "$tmpdir" -type f -name actionlint | head -n 1)"
146+
if [[ -z "$actionlint_path" ]]; then
147+
echo "actionlint binary not found in $TARBALL" >&2
148+
exit 1
149+
fi
150+
151+
sudo install -m 0755 "$actionlint_path" /usr/local/bin/actionlint
152+
153+
- name: actionlint -version
154+
if: matrix.os != 'windows-latest'
155+
run: actionlint -version
156+
157+
- name: Install additional tools (Linux)
76158
if: matrix.os == 'ubuntu-latest'
77159
run: |
160+
# Install shellcheck, jq, and yamllint
78161
sudo apt-get update
79-
sudo apt-get install -y jq
162+
sudo apt-get install -y shellcheck jq yamllint
163+
164+
# Install shfmt (pinned for CI consistency)
165+
SHFMT_ASSET="shfmt_v${SHFMT_VERSION}_linux_amd64"
166+
SHFMT_BASE_URL="https://github.com/mvdan/sh/releases/download/v${SHFMT_VERSION}"
167+
168+
tmpdir="$(mktemp -d)"
169+
trap 'rm -rf "$tmpdir"' EXIT
170+
171+
curl -fsSL \
172+
"${SHFMT_BASE_URL}/${SHFMT_ASSET}" \
173+
-o "$tmpdir/${SHFMT_ASSET}"
174+
curl -fsSL \
175+
"${SHFMT_BASE_URL}/sha256sums.txt" \
176+
-o "$tmpdir/sha256sums.txt"
177+
178+
(
179+
cd "$tmpdir"
180+
awk -v f="${SHFMT_ASSET}" '$NF==f {print; found=1} END {exit found?0:1}' sha256sums.txt > checksum.txt
181+
sha256sum -c checksum.txt
182+
)
80183
81-
- name: Install jq (macOS)
184+
sudo install -m 0755 "$tmpdir/${SHFMT_ASSET}" /usr/local/bin/shfmt
185+
186+
- name: Install additional tools (macOS)
82187
if: matrix.os == 'macos-latest'
83188
run: |
84-
brew install jq
189+
# Install shellcheck, jq, and yamllint via Homebrew
190+
brew install shellcheck jq yamllint
191+
192+
# Install shfmt (pinned for CI consistency with Linux)
193+
SHFMT_ARCH="amd64"
194+
if [[ "$(uname -m)" == "arm64" ]]; then
195+
SHFMT_ARCH="arm64"
196+
fi
197+
198+
SHFMT_ASSET="shfmt_v${SHFMT_VERSION}_darwin_${SHFMT_ARCH}"
199+
SHFMT_BASE_URL="https://github.com/mvdan/sh/releases/download/v${SHFMT_VERSION}"
200+
201+
tmpdir="$(mktemp -d)"
202+
trap 'rm -rf "$tmpdir"' EXIT
203+
204+
curl -fsSL \
205+
"${SHFMT_BASE_URL}/${SHFMT_ASSET}" \
206+
-o "$tmpdir/${SHFMT_ASSET}"
207+
curl -fsSL \
208+
"${SHFMT_BASE_URL}/sha256sums.txt" \
209+
-o "$tmpdir/sha256sums.txt"
210+
211+
(
212+
cd "$tmpdir"
213+
awk -v f="${SHFMT_ASSET}" '$NF==f {print; found=1} END {exit found?0:1}' sha256sums.txt > checksum.txt
214+
shasum -a 256 -c checksum.txt
215+
)
216+
217+
sudo install -m 0755 "$tmpdir/${SHFMT_ASSET}" /usr/local/bin/shfmt
85218
86219
- name: Run CI checks (Linux/macOS)
87220
if: matrix.os != 'windows-latest'

‎.github/workflows/codacy.yml‎

Lines changed: 3 additions & 3 deletions
Original file line numberDiff line numberDiff line change
@@ -25,7 +25,7 @@ on:
2525
# The branches below must be a subset of the branches above
2626
branches: ["main"]
2727
schedule:
28-
- cron: '42 0 * * 1'
28+
- cron: "42 0 * * 1"
2929
workflow_dispatch:
3030

3131
permissions:
@@ -47,7 +47,7 @@ jobs:
4747
steps:
4848
# Checkout the repository to the GitHub Actions runner
4949
- name: Checkout code
50-
uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8 # v6.0.1
50+
uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8 # v6.0.1
5151

5252
- name: Set Codacy paths
5353
run: |
@@ -144,7 +144,7 @@ jobs:
144144
# Upload the identified SARIF file
145145
- name: Upload identified SARIF file
146146
if: always() && env.SARIF_FILE != ''
147-
uses: github/codeql-action/upload-sarif@b36bf259c813715f76eafece573914b94412cd13 # v3
147+
uses: github/codeql-action/upload-sarif@b36bf259c813715f76eafece573914b94412cd13 # v3
148148
with:
149149
sarif_file: ${{ env.SARIF_FILE }}
150150
continue-on-error: true

‎.github/workflows/codecov.yml‎

Lines changed: 8 additions & 8 deletions
Original file line numberDiff line numberDiff line change
@@ -24,17 +24,17 @@ jobs:
2424
TARPAULIN_VERSION: "0.32.8"
2525
steps:
2626
- name: Checkout repository
27-
uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8 # v6.0.1
27+
uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8 # v6.0.1
2828
with:
29-
fetch-depth: 0 # Needed for Codecov diff analysis
29+
fetch-depth: 0 # Needed for Codecov diff analysis
3030

3131
- name: Install Rust toolchain
32-
uses: actions-rust-lang/setup-rust-toolchain@1780873c7b576612439a134613cc4cc74ce5538c # v1.15.2
32+
uses: actions-rust-lang/setup-rust-toolchain@1780873c7b576612439a134613cc4cc74ce5538c # v1.15.2
3333
with:
34-
cache: true # toolchain/components are specified in rust-toolchain.toml
34+
cache: true # toolchain/components are specified in rust-toolchain.toml
3535

3636
- name: Cache tarpaulin
37-
uses: actions/cache@9255dc7a253b0ccc959486e2bca901246202afeb # v5.0.1
37+
uses: actions/cache@9255dc7a253b0ccc959486e2bca901246202afeb # v5.0.1
3838
with:
3939
path: ~/.cargo/bin/cargo-tarpaulin
4040
key: tarpaulin-${{ runner.os }}-${{ env.TARPAULIN_VERSION }}
@@ -48,7 +48,7 @@ jobs:
4848
fi
4949
5050
- name: Install just
51-
uses: taiki-e/install-action@bfc291e1e39400b67eda124e4a7b4380e93b3390 # v2.65.0
51+
uses: taiki-e/install-action@bfc291e1e39400b67eda124e4a7b4380e93b3390 # v2.65.0
5252
with:
5353
tool: just
5454

@@ -76,7 +76,7 @@ jobs:
7676

7777
- name: Upload coverage to Codecov
7878
if: ${{ success() && hashFiles('coverage/cobertura.xml') != '' }}
79-
uses: codecov/codecov-action@671740ac38dd9b0130fbe1cec585b89eea48d3de # v5.5.2
79+
uses: codecov/codecov-action@671740ac38dd9b0130fbe1cec585b89eea48d3de # v5.5.2
8080
with:
8181
files: coverage/cobertura.xml
8282
flags: unittests
@@ -86,7 +86,7 @@ jobs:
8686
CODECOV_TOKEN: ${{ secrets.CODECOV_TOKEN }}
8787

8888
- name: Archive coverage results
89-
uses: actions/upload-artifact@b7c566a772e6b6bfb58ed0dc250532a479d7789f # v6.0.0
89+
uses: actions/upload-artifact@b7c566a772e6b6bfb58ed0dc250532a479d7789f # v6.0.0
9090
if: always()
9191
with:
9292
name: coverage-report

‎.github/workflows/rust-clippy.yml‎

Lines changed: 6 additions & 6 deletions
Original file line numberDiff line numberDiff line change
@@ -6,7 +6,7 @@ name: "Clippy Security Analysis"
66
on:
77
# Only run on schedule and manual trigger to avoid duplication with CI
88
schedule:
9-
- cron: '17 22 * * 0' # Weekly on Sunday
9+
- cron: "17 22 * * 0" # Weekly on Sunday
1010
workflow_dispatch:
1111
# Run on main branch pushes for security scanning
1212
push:
@@ -24,15 +24,15 @@ jobs:
2424
runs-on: ubuntu-latest
2525
steps:
2626
- name: Checkout code
27-
uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8 # v6.0.1
27+
uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8 # v6.0.1
2828

2929
- name: Install Rust toolchain
30-
uses: actions-rust-lang/setup-rust-toolchain@1780873c7b576612439a134613cc4cc74ce5538c # v1.15.2
30+
uses: actions-rust-lang/setup-rust-toolchain@1780873c7b576612439a134613cc4cc74ce5538c # v1.15.2
3131
with:
32-
cache: true # toolchain/components are specified in rust-toolchain.toml
32+
cache: true # toolchain/components are specified in rust-toolchain.toml
3333

3434
- name: Cache clippy tools
35-
uses: actions/cache@9255dc7a253b0ccc959486e2bca901246202afeb # v5.0.1
35+
uses: actions/cache@9255dc7a253b0ccc959486e2bca901246202afeb # v5.0.1
3636
with:
3737
path: |
3838
~/.cargo/bin/clippy-sarif
@@ -58,7 +58,7 @@ jobs:
5858
continue-on-error: true
5959

6060
- name: Upload SARIF results
61-
uses: github/codeql-action/upload-sarif@b36bf259c813715f76eafece573914b94412cd13 # v3
61+
uses: github/codeql-action/upload-sarif@b36bf259c813715f76eafece573914b94412cd13 # v3
6262
with:
6363
sarif_file: rust-clippy-results.sarif
6464
category: "clippy"

‎.gitignore‎

Lines changed: 2 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -14,3 +14,5 @@ venv/
1414
.pytest_cache/
1515
.mypy_cache/
1616
uv.lock
17+
/node_modules/
18+
/package-lock.json

0 commit comments

Comments
 (0)