Merge branch 'main' into grtlr/lenses

Author: grtlr

.cargo/config.toml

@@ -20,3 +20,8 @@ IS_IN_RERUN_WORKSPACE = "yes"
 # https://docs.rs/getrandom/latest/getrandom/#webassembly-support
 [target.wasm32-unknown-unknown]
 rustflags = ['--cfg=web_sys_unstable_apis', '--cfg=getrandom_backend="wasm_js"']
+
+# Use rust-lld on Windows due problems with large debug symbols.
+# See https://github.com/rust-lang/rust/issues/141626
+[target.x86_64-pc-windows-msvc]
+linker = "rust-lld"

.github/actions/setup-rust/action.yml

@@ -44,14 +44,14 @@ runs:
       if: ${{ runner.os == 'macOS' }}
       run: |
         echo "$(brew --prefix llvm@18)/bin" >> $GITHUB_PATH
-      shell: bash
+      shell: bash --noprofile --norc -euo pipefail {0}
 
     - name: Check clang version
       if: ${{ runner.os == 'macOS' }}
       run: |
         clang --version
         which clang
-      shell: bash
+      shell: bash --noprofile --norc -euo pipefail {0}
 
     - name: Set up GCP credentials
       uses: google-github-actions/auth@v2
@@ -60,7 +60,7 @@ runs:
         service_account: ${{ inputs.service_account }}
 
     - name: Ensure correct version of Rust is installed
-      shell: bash
+      shell: bash --noprofile --norc -euo pipefail {0}
       run: |
         # This is the only way to force rustup to install the version of Rust
         # and the components/targets specified in our `rust-toolchain` file.
@@ -69,12 +69,12 @@ runs:
 
     - name: Install additional targets
       if: ${{ inputs.targets != '' }}
-      shell: bash
+      shell: bash --noprofile --norc -euo pipefail {0}
       run: rustup target add ${{ inputs.targets }}
 
     - name: Install additional toolchains
       if: ${{ inputs.toolchains }}
-      shell: bash
+      shell: bash --noprofile --norc -euo pipefail {0}
       run: |
         for toolchain in ${{ inputs.toolchains }}; do
           rustup install $toolchain
@@ -89,7 +89,7 @@ runs:
         gcs_read_only: false
 
     - name: Verify sccache
-      shell: bash
+      shell: bash --noprofile --norc -euo pipefail {0}
       run: |
         sccache --show-stats
 

.github/workflows/adhoc_wheels.yml

@@ -14,7 +14,7 @@ on:
 
 defaults:
   run:
-    shell: bash
+    shell: bash --noprofile --norc -euo pipefail {0}
 
 permissions:
   contents: "write"

.github/workflows/auto_approve.yml

@@ -7,7 +7,7 @@ on:
 
 defaults:
   run:
-    shell: bash
+    shell: bash --noprofile --norc -euo pipefail {0}
 
 permissions:
   contents: "read"

.github/workflows/auto_docs.yml

@@ -10,7 +10,7 @@ permissions:
 
 defaults:
   run:
-    shell: bash
+    shell: bash --noprofile --norc -euo pipefail {0}
 
 # The lack of `concurrency` is intentional.
 # We want this job to run on every commit, even if multiple are merged in a row.

.github/workflows/auto_docs_check.yml

@@ -16,7 +16,7 @@ permissions:
 
 defaults:
   run:
-    shell: bash
+    shell: bash --noprofile --norc -euo pipefail {0}
 
 concurrency:
   group: pr-${{ github.event.pull_request.number }}-auto-docs-check

.github/workflows/checkboxes.yml

@@ -16,7 +16,7 @@ concurrency:
 
 defaults:
   run:
-    shell: bash
+    shell: bash --noprofile --norc -euo pipefail {0}
 
 permissions:
   contents: "read"

.github/workflows/contrib_checks.yml

@@ -36,7 +36,7 @@ env:
 
 defaults:
   run:
-    shell: bash
+    shell: bash --noprofile --norc -euo pipefail {0}
 
 permissions:
   contents: "read"
@@ -70,7 +70,6 @@ jobs:
           environments: py-docs
 
       - name: Build via mkdocs
-        shell: bash
         run: |
           pixi run -e py-docs mkdocs build --strict -f rerun_py/mkdocs.yml
 
@@ -201,7 +200,7 @@ jobs:
         uses: actions/checkout@v4
 
       - name: Check spelling of entire workspace
-        uses: crate-ci/typos@v1.18.0
+        uses: crate-ci/typos@v1.37.3
 
   cpp-formatting:
     name: C++ formatting check

.github/workflows/contrib_rerun_py.yml

@@ -30,7 +30,7 @@ env:
 
 defaults:
   run:
-    shell: bash
+    shell: bash --noprofile --norc -euo pipefail {0}
 
 permissions:
   contents: "read"

.github/workflows/labels.yml

@@ -39,7 +39,7 @@ jobs:
         with:
           mode: minimum
           count: 1
-          labels: "📊 analytics, 🟦 blueprint, 🪳 bug, CLI, codegen/idl, 🧑‍💻 dev experience, dependencies, 📖 documentation, 💬 discussion, examples, exclude from changelog, 🪵 Log & send APIs, 📉 performance, sdk-python, sdk-cpp, sdk-rust, ⛃ re_datastore, 🔍 re_query, 📺 re_viewer, 🔺 re_renderer, 🚜 refactor, ⛴ release, 🔨 testing, ui, 🕸️ web, 🧢 MCAP"
+          labels: "📊 analytics, 🟦 blueprint, 🪳 bug, CLI, codegen/idl, 🧑‍💻 dev experience, dependencies, 📖 documentation, 💬 discussion, examples, exclude from changelog, 🪵 Log & send APIs, 📉 performance, sdk-python, sdk-cpp, sdk-rust, ⛃ re_datastore, 🔍 re_query, 📺 re_viewer, 🔺 re_renderer, 🚜 refactor, ⛴ release, 🔨 testing, ui, 🕸️ web, 🧢 MCAP, OSS-server"
 
   wasm-bindgen-check:
     name: Check wasm-bindgen version