[#3] Restructure GitHub CI jobs

.cirrus.yml

@@ -17,7 +17,7 @@
 #
 
 env:
-  CI_ENABLED: false
+  CI_ENABLED: true
   # RUSTFLAGS: "-C debug-assertions"
 
 #
@@ -69,7 +69,7 @@ iox2_container_windows_server_2019_x64_template: &IOX2_CONTAINER_WINDOWS_SERVER_
 iox2_container_freebsd_x64_template: &IOX2_CONTAINER_FREEBSD_X64
   <<: *IOX2_TASK_TIMEOUT
   freebsd_instance:
-    image_family: freebsd-14-0
+    image_family: freebsd-15-0
     <<: *IOX2_COMMON_CPU_AND_MEMORY_CONFIG_FOR_BUILD_AND_TEST
 
 iox2_container_macos_aarch64_template: &IOX2_CONTAINER_MACOS_AARCH64
@@ -150,6 +150,7 @@ iox2_freebsd_setup_template: &IOX2_FREEBSD_SETUP
 #
 
 preflight_check_task:
+  only_if: false
   <<: *IOX2_CONTAINER_UBUNTU_22_04_X64
   set_toolchain_script: rustup default stable
   fingerprint_script:
@@ -236,6 +237,7 @@ ubuntu_22_04_aarch64_min_version_debug_task:
   <<: *IOX2_COMMON_BUILD_AND_TEST_DEBUG
 
 ubuntu_22_04_aarch64_stable_debug_task:
+  only_if: false
   depends_on: preflight_check
   skip: "changesIncludeOnly('.github/**', '**.md')"
   <<: *IOX2_CONTAINER_UBUNTU_22_04_AARCH64
@@ -332,21 +334,19 @@ windows_server_2019_x64_stable_release_task:
 # Pipeline 9
 
 freebsd_x64_min_version_debug_task:
-  # TODO commented out due to limited CI time
-  only_if: false
-  depends_on: preflight_check
+  # only_if: false
+  # depends_on: preflight_check
   <<: *IOX2_CONTAINER_FREEBSD_X64
   env:
     PATH: /root/.cargo/bin:$PATH
     HOME: /root  # must be set manually to '/root' or 'rustup' will throw an error
   <<: *IOX2_FREEBSD_SETUP
-  set_toolchain_script: rustup default 1.81.0
+  set_toolchain_script: rustup default 1.83.0
   <<: *IOX2_COMMON_BUILD_AND_TEST_DEBUG
 
 freebsd_x64_stable_debug_task:
-  # TODO commented out due to limited CI time
-  only_if: false
-  depends_on: preflight_check
+  # only_if: false
+  # depends_on: preflight_check
   <<: *IOX2_CONTAINER_FREEBSD_X64
   env:
     PATH: /root/.cargo/bin:$PATH

.github/actions/build-and-cache-rust-tool/action.yml

@@ -27,7 +27,7 @@ runs:
   using: "composite"
   steps:
     - name: Setup Rust
-      uses: dtolnay/rust-toolchain@v1
+      uses: dtolnay/rust-toolchain@e97e2d8cc328f1b50210efc529dca0028893a2d9 #ratchet v1
       with:
         toolchain: ${{ inputs.rust-toolchain }}
         components: ${{ inputs.rust-components }}
@@ -39,7 +39,7 @@ runs:
       shell: bash
     - name: Setup cache
       if: runner.os != 'Windows'
-      uses: actions/cache@v4
+      uses: actions/cache@0057852bfaa89a56745cba8c7296529d2fc39830 #ratchet v4
       with:
         path: |
           ~/.cargo/bin/
@@ -49,7 +49,7 @@ runs:
         key: ${{ inputs.cache-key }}-${{ hashFiles('version_info') }}
     - name: Setup cache
       if: runner.os == 'Windows'
-      uses: actions/cache@v4
+      uses: actions/cache@0057852bfaa89a56745cba8c7296529d2fc39830 #ratchet v4
       with:
         path: |
           C:/Users/runneradmin/.cargo/bin/
@@ -65,15 +65,15 @@ runs:
       shell: bash
     - name: Upload artifact
       if: runner.os != 'Windows'
-      uses: actions/upload-artifact@v4
+      uses: actions/upload-artifact@ea165f8d65b6e75b540449e92b4886f43607fa02 #ratchet v4
       with:
         name: ${{ inputs.artifact-upload-name }}
         path: ~/.cargo/bin/${{ inputs.artifact-bin-name }}
         retention-days: 1
         if-no-files-found: error
     - name: Upload artifact
       if: runner.os == 'Windows'
-      uses: actions/upload-artifact@v4
+      uses: actions/upload-artifact@ea165f8d65b6e75b540449e92b4886f43607fa02 #ratchet v4
       with:
         name: ${{ inputs.artifact-upload-name }}
         path: C:/Users/runneradmin/.cargo/bin/${{ inputs.artifact-bin-name }}.exe

.github/actions/download-cached-rust-tool/action.yml

@@ -12,13 +12,13 @@ runs:
   steps:
     - name: Download artifact
       if: runner.os != 'Windows'
-      uses: actions/download-artifact@v4
+      uses: actions/download-artifact@634f93cb2916e3fdff6788551b99b062d0335ce0 #ratchet v5
       with:
         name: ${{ inputs.artifact-upload-name }}
         path: ~/.cargo/bin/
     - name: Download artifact
       if: runner.os == 'Windows'
-      uses: actions/download-artifact@v4
+      uses: actions/download-artifact@634f93cb2916e3fdff6788551b99b062d0335ce0 #ratchet v5
       with:
         name: ${{ inputs.artifact-upload-name }}
         path: C:/Users/runneradmin/.cargo/bin/