fix(ci): unbreak Rust CI, DB Checks and Stress Testing after the dep sweep

.github/dependabot.yml

@@ -13,6 +13,20 @@ updates:
     directory: "/"
     schedule:
       interval: "weekly"
+    # Some crates only work version-aligned, so they must be proposed as one
+    # PR. Ungrouped, Dependabot bumped opentelemetry_sdk 0.27 -> 0.32 alone
+    # (#110) while its three siblings stayed on 0.27; the crate stopped
+    # compiling and DB Checks went red. Group families here rather than
+    # relying on review to catch the split.
+    groups:
+      opentelemetry:
+        patterns:
+          - "opentelemetry*"
+          - "tracing-opentelemetry"
+      tower:
+        patterns:
+          - "tower"
+          - "tower-http"
     ignore:
       - dependency-name: "*"
         update-types: ["version-update:semver-patch"]

.github/workflows/cargo-audit.yml

@@ -23,7 +23,12 @@ jobs:
       - name: Checkout repository
         uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v4
       - name: Install Rust toolchain
+        # `toolchain:` is mandatory when this action is pinned to a SHA — see
+        # the note in stress-test.yml. This SHA currently tolerates its absence;
+        # stating it explicitly keeps the step working across future re-pins.
         uses: dtolnay/rust-toolchain@4be9e76fd7c4901c61fb841f559994984270fce7 # stable
+        with:
+          toolchain: stable
       - name: Install cargo-audit
         run: cargo install cargo-audit --locked
       - name: Run cargo audit

.github/workflows/db-checks.yml

@@ -39,7 +39,12 @@ jobs:
         uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
 
       - name: Install Rust toolchain
+        # `toolchain:` is mandatory when this action is pinned to a SHA — see
+        # the note in stress-test.yml. This SHA currently tolerates its absence;
+        # stating it explicitly keeps the step working across future re-pins.
         uses: dtolnay/rust-toolchain@4be9e76fd7c4901c61fb841f559994984270fce7 # stable
+        with:
+          toolchain: stable
 
       - name: Cache cargo
         uses: Swatinem/rust-cache@c19371144df3bb44fab255c43d04cbc2ab54d1c4 # v2

.github/workflows/release.yml

@@ -46,8 +46,12 @@ jobs:
     steps:
       - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
       - name: Install Rust toolchain
+        # `toolchain:` is mandatory when this action is pinned to a SHA — see
+        # the note in stress-test.yml. Supplying `targets:` alone does not
+        # satisfy it.
         uses: dtolnay/rust-toolchain@f7ccc83f9ed1e5b9c81d8a67d7ad1a747e22a561 # stable
         with:
+          toolchain: stable
           targets: ${{ matrix.target }}
       - name: Install cross-compilation tools
         if: matrix.target == 'aarch64-unknown-linux-gnu'

.github/workflows/stress-test.yml

@@ -12,7 +12,13 @@ jobs:
     steps:
       - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v4
       - name: Install Rust toolchain
+        # `toolchain:` is mandatory when this action is pinned to a SHA: it
+        # normally infers the toolchain from the ref that called it (@stable ->
+        # "stable"), and a SHA carries no such name. Without it the action fails
+        # with `error: invalid toolchain name ''`.
         uses: dtolnay/rust-toolchain@b3b07ba8b418998c39fb20f53e8b695cdcc8de1b # stable 1.91
+        with:
+          toolchain: stable
 
       - name: Install stress testing tools
         run: |

benches/echidnabot_bench.rs

@@ -13,13 +13,16 @@
 //! Run locally: `cargo bench`
 //! Compare: `cargo bench -- --save-baseline main` then `cargo bench -- --baseline main`
 
-use criterion::{black_box, criterion_group, criterion_main, BenchmarkId, Criterion, Throughput};
+use criterion::{criterion_group, criterion_main, BenchmarkId, Criterion, Throughput};
 use echidnabot::api::rate_limit::WebhookRateLimiter;
 use echidnabot::dispatcher::ProverKind;
 use echidnabot::scheduler::ProofJob;
 use echidnabot::store::models::goal_fingerprint;
 use hmac::{Hmac, Mac};
 use sha2::Sha256;
+// criterion 0.8 deprecated its own `black_box` re-export in favour of the std
+// one; CI runs clippy with `-D warnings`, so the re-export is an error here.
+use std::hint::black_box;
 use std::net::{IpAddr, Ipv4Addr};
 use uuid::Uuid;