From 17f3dd74e9e96ea0ec84cf7fd7be58221dcfb596 Mon Sep 17 00:00:00 2001
From: ADD-SP <add_sp@outlook.com>
Date: Sat, 14 Feb 2026 01:27:29 +0000
Subject: [PATCH 1/5] chore(CI): run `cargo-udeps` and `cargo audit`

---
 .github/workflows/rust.yml | 27 ++++++++++++++++++++++++++-
 1 file changed, 26 insertions(+), 1 deletion(-)

diff --git a/.github/workflows/rust.yml b/.github/workflows/rust.yml
index 0bac1e9..8c960fa 100644
--- a/.github/workflows/rust.yml
+++ b/.github/workflows/rust.yml
@@ -8,7 +8,12 @@ on:
 
 env:
   CARGO_TERM_COLOR: always
+  # https://github.com/xd009642/tarpaulin
   TARPAULIN_VERSION: 0.35.1
+  # https://github.com/est31/cargo-udeps
+  UDEPS_VERSION: 0.1.60
+  # https://github.com/rustsec/rustsec
+  AUDIT_VERSION: 0.22.1
 
 jobs:
   linter:
@@ -37,5 +42,25 @@ jobs:
     - name: Run tests
       run: cargo test --verbose
 
-    - name: Run coverage
+    - name: Run tarpaulin
       run: cargo tarpaulin --verbose
+
+  audit:
+    runs-on: ubuntu-latest
+    name: Cargo audit
+    needs: linter
+
+    steps:
+    - uses: actions/checkout@v4
+
+    - name: Install cargo-udeps
+      run: cargo install cargo-udeps@${{ env.UDEPS_VERSION }} --locked
+
+    - name: Install cargo-audit
+      run: cargo install cargo-audit@${{ env.AUDIT_VERSION }} --locked
+
+    - name: Run cargo udeps
+      run: cargo udeps --verbose
+
+    - name: Run cargo audit
+      run: cargo audit --verbose

From e3b082fdb2973300812bc38ee42955fe60206ef9 Mon Sep 17 00:00:00 2001
From: ADD-SP <add_sp@outlook.com>
Date: Sat, 14 Feb 2026 01:40:29 +0000
Subject: [PATCH 2/5] fix a typo

---
 .github/workflows/rust.yml | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/.github/workflows/rust.yml b/.github/workflows/rust.yml
index 8c960fa..5abd62c 100644
--- a/.github/workflows/rust.yml
+++ b/.github/workflows/rust.yml
@@ -47,7 +47,7 @@ jobs:
 
   audit:
     runs-on: ubuntu-latest
-    name: Cargo audit
+    name: Cargo udeps and audit
     needs: linter
 
     steps:

From 366647fde1fe6ec5302e81bfd0c73b57c3352c92 Mon Sep 17 00:00:00 2001
From: ADD-SP <add_sp@outlook.com>
Date: Sat, 14 Feb 2026 01:43:01 +0000
Subject: [PATCH 3/5] enable concurrency control

---
 .github/workflows/rust.yml | 4 ++++
 1 file changed, 4 insertions(+)

diff --git a/.github/workflows/rust.yml b/.github/workflows/rust.yml
index 5abd62c..0570d5a 100644
--- a/.github/workflows/rust.yml
+++ b/.github/workflows/rust.yml
@@ -15,6 +15,10 @@ env:
   # https://github.com/rustsec/rustsec
   AUDIT_VERSION: 0.22.1
 
+concurrency:
+  group: ${{ github.workflow }}-${{ github.ref }}
+  cancel-in-progress: true
+
 jobs:
   linter:
     runs-on: ubuntu-latest

From d39749ad7e3ec8d82bdef06e1698d5007227ed26 Mon Sep 17 00:00:00 2001
From: ADD-SP <add_sp@outlook.com>
Date: Sat, 14 Feb 2026 01:43:35 +0000
Subject: [PATCH 4/5] use nightly rust toolchain for udeps

---
 .github/workflows/rust.yml | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/.github/workflows/rust.yml b/.github/workflows/rust.yml
index 0570d5a..8c2bb34 100644
--- a/.github/workflows/rust.yml
+++ b/.github/workflows/rust.yml
@@ -64,7 +64,7 @@ jobs:
       run: cargo install cargo-audit@${{ env.AUDIT_VERSION }} --locked
 
     - name: Run cargo udeps
-      run: cargo udeps --verbose
+      run: cargo +nightly udeps --verbose
 
     - name: Run cargo audit
       run: cargo audit --verbose

From fccd44d34cdd9627475e162ea70690d557ddb2b4 Mon Sep 17 00:00:00 2001
From: ADD-SP <add_sp@outlook.com>
Date: Fri, 13 Feb 2026 17:55:23 -0800
Subject: [PATCH 5/5] Update .github/workflows/rust.yml

---
 .github/workflows/rust.yml | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/.github/workflows/rust.yml b/.github/workflows/rust.yml
index 8c2bb34..1a43ecd 100644
--- a/.github/workflows/rust.yml
+++ b/.github/workflows/rust.yml
@@ -67,4 +67,4 @@ jobs:
       run: cargo +nightly udeps --verbose
 
     - name: Run cargo audit
-      run: cargo audit --verbose
+      run: cargo audit