Merge remote-tracking branch 'origin/main' into dz/key-update

.clippy.toml

@@ -0,0 +1 @@
+allow-unwrap-in-tests = true

.github/CODEOWNERS

@@ -1,3 +1,3 @@
 # Global rule:
 *     @xmtp/Engineering
-*.md  @fabriguespe
+*.md  @xmtp/documentation

.github/workflows/github-pages.yml → .github/workflows/deploy-docs.yml

@@ -1,8 +1,10 @@
-name: GitHub Pages
+name: Deploy Docs to GitHub Pages
 
 on:
   push:
-    branches: ["main"]
+    branches:
+      - main
+
   # Allows you to run this workflow manually from the Actions tab
   workflow_dispatch:
 
@@ -22,26 +24,28 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Checkout
-        uses: actions/checkout@v3
+        uses: actions/checkout@v4
         with:
           submodules: recursive
 
       - name: Setup Pages
         uses: actions/configure-pages@v2
 
-      - name: Install rust
-        uses: actions-rs/toolchain@v1
+      - name: Update rust toolchains
+        run: rustup update
+
+      - name: Cache
+        uses: Swatinem/rust-cache@v2
         with:
-          toolchain: stable
-          profile: minimal
-          override: true
+          workspaces: |
+            .
 
       - name: Invoke cargo doc
         run: ./dev/docs
         id: docgen
 
-      - name: Upload artifact
-        uses: actions/upload-pages-artifact@v2
+      - name: Upload pages artifact
+        uses: actions/upload-pages-artifact@v3
 
   # Deployment job
   deploy:
@@ -53,4 +57,4 @@ jobs:
     steps:
       - name: Deploy to GitHub Pages
         id: deployment
-        uses: actions/deploy-pages@v3
+        uses: actions/deploy-pages@v4

.github/workflows/validation-server-publish.yml → .github/workflows/deploy-validation-server.yml

@@ -1,36 +1,38 @@
-name: Publish Validation Service Image
+name: Deploy Validation Service Image
 
 on:
   push:
     branches:
       - main
 
+  workflow_dispatch:
+
 jobs:
   push_to_registry:
-    name: Push Docker image to GitHub Packages
+    name: Push Docker Image to GitHub Packages
     runs-on: warp-ubuntu-latest-x64-16x
     permissions:
       contents: read
       packages: write
     steps:
-      - name: Check out the repo
-        uses: actions/checkout@v2
+      - name: Checkout
+        uses: actions/checkout@v4
 
-      - name: Log in to the Container registry
-        uses: docker/login-action@v1
+      - name: Log in to the container registry
+        uses: docker/login-action@v3
         with:
           registry: ghcr.io
           username: ${{ github.actor }}
           password: ${{ secrets.GITHUB_TOKEN }}
 
       - name: Extract metadata (tags, labels) for Docker
         id: meta
-        uses: docker/metadata-action@v3
+        uses: docker/metadata-action@v5
         with:
           images: ghcr.io/xmtp/mls-validation-service
 
       - name: Build and push Docker image
-        uses: docker/build-push-action@v5
+        uses: docker/build-push-action@v6
         id: push
         with:
           context: .
@@ -48,3 +50,13 @@ jobs:
           variable-name: validation_service_image
           variable-value: "ghcr.io/xmtp/mls-validation-service@${{ steps.push.outputs.digest }}"
           variable-value-required-prefix: "ghcr.io/xmtp/mls-validation-service@sha256:"
+
+      - name: Deploy (production)
+        uses: xmtp-labs/terraform-deployer@v1
+        with:
+          terraform-token: ${{ secrets.TERRAFORM_TOKEN }}
+          terraform-org: xmtp
+          terraform-workspace: production
+          variable-name: validation_service_image
+          variable-value: "ghcr.io/xmtp/mls-validation-service@${{ steps.push.outputs.digest }}"
+          variable-value-required-prefix: "ghcr.io/xmtp/mls-validation-service@sha256:"

.github/workflows/lint-ffi-bindings.yaml

@@ -0,0 +1,31 @@
+name: Lint FFI Bindings
+on:
+  push:
+    branches:
+      - main
+  pull_request:
+    paths:
+      - "bindings_ffi/**"
+      - ".github/workflows/lint-ffi-bindings.yaml"
+      - "rustfmt.toml"
+env:
+  CARGO_TERM_COLOR: always
+jobs:
+  lint:
+    name: Lint
+    runs-on: warp-ubuntu-latest-x64-16x
+    steps:
+      - name: Checkout
+        uses: actions/checkout@v4
+      - name: Update rust toolchains
+        run: rustup update
+      - name: Cache
+        uses: Swatinem/rust-cache@v2
+        with:
+          workspaces: |
+            .
+            bindings_ffi
+      - name: Run clippy and fail on warnings
+        run: cargo clippy --manifest-path bindings_ffi/Cargo.toml --all-features --all-targets --no-deps -- -Dwarnings
+      - name: Run format check
+        run: cargo fmt --manifest-path bindings_ffi/Cargo.toml --check