fix: clear the sweep warnings and move YAML parsing to serde-saphyr

.github/workflows/cross-build.yml

@@ -170,16 +170,22 @@ jobs:
           key: cross-${{ matrix.target }}-${{ hashFiles('Cargo.lock') }}
 
       # Windows via cargo-zigbuild - pure Linux cross-compile, no MSVC needed.
+      # Zig comes from the hash-pinned ziglang wheel (x86_64 manylinux, the only
+      # zigbuild runner), which cargo-zigbuild runs as `python -m ziglang`.
       - name: Install zig
         if: matrix.zigbuild
-        uses: mlugg/setup-zig@d1434d08867e3ee9daa34448df10607b98908d29 # v2.2.1
-        with:
-          version: 0.15.1
+        shell: bash
+        run: |
+          set -euo pipefail
+          python3 -m venv "${RUNNER_TEMP}/zig"
+          printf '%s\n' 'ziglang==0.15.1 --hash=sha256:4e45994a0e608d9b16ecad255698f5557a2e24de0bd7ba9efb156ab3f3683d9a' > "${RUNNER_TEMP}/zig-requirements.txt"
+          "${RUNNER_TEMP}/zig/bin/python" -m pip install --no-deps --require-hashes -r "${RUNNER_TEMP}/zig-requirements.txt"
+          echo "CARGO_ZIGBUILD_PYTHON_PATH=${RUNNER_TEMP}/zig/bin/python" >> "${GITHUB_ENV}"
 
       - name: Install cargo-zigbuild
         if: matrix.zigbuild
         shell: bash
-        run: cargo install --locked cargo-zigbuild
+        run: cargo install --locked cargo-zigbuild --version 0.23.4
 
       - name: Build (native)
         if: ${{ !matrix.zigbuild }}

.github/workflows/package.yml

@@ -308,10 +308,12 @@ jobs:
           owner: hyperi-io
           repositories: homebrew-tap
 
-      # Best-effort: fails (and is skipped) until scoop-bucket exists and the
-      # app is installed on it. Does not gate the job.
+      # Off until scoop-bucket exists and the app is installed on it: set the
+      # repo variable SCOOP_BUCKET_ENABLED=true then. Best-effort once on, so a
+      # bucket problem never takes the homebrew push down with it.
       - name: Mint scoop-bucket token
         id: bucket-token
+        if: vars.SCOOP_BUCKET_ENABLED == 'true'
         continue-on-error: true
         uses: actions/create-github-app-token@bcd2ba49218906704ab6c1aa796996da409d3eb1 # v3.2.0
         with:
@@ -357,9 +359,9 @@ jobs:
           fi
 
       - name: Push to scoop-bucket
-        # Skipped, not failed, while the bucket token could not be minted --
-        # scoop is EXPERIMENTAL and the bucket repo is not created yet. The
-        # rendered manifest still lands on R2 for manual bucket setup.
+        # Skipped, not failed, unless the bucket token was minted -- scoop is
+        # EXPERIMENTAL and off until the bucket exists. The rendered manifest
+        # still lands on R2 for manual bucket setup.
         if: steps.bucket-token.outcome == 'success'
         shell: bash
         env:

.hyperi-ci.yaml

@@ -29,7 +29,6 @@ build:
   rust:
     features: all
     targets: []
-publish:
+release:
   enabled: true
-  target: oss
   channel: release