Merge branch 'staging' into feat/program-upgradability

Author: d0cd

.cargo/audit.toml

@@ -0,0 +1,6 @@
+[advisories]
+ignore = [
+  # As the rust community considers the paste crate 'done', we can safely ignore this warning.
+  # see https://users.rust-lang.org/t/paste-alternatives/126787/2
+  "RUSTSEC-2024-0436",
+]

.circleci/config.yml

@@ -393,6 +393,40 @@ jobs:
       - clear_environment:
           cache_key: v3.3.1-rust-1.83.0-fmt-cache
 
+  check-unused-dependencies:
+    docker:
+      - image: cimg/rust:1.83.0 # Attention - Change the MSRV in Cargo.toml and rust-toolchain as well
+    resource_class: << pipeline.parameters.medium >>
+    steps:
+      - checkout
+      - setup_environment:
+          cache_key: v3.3.1-rust-1.83.0-machete-cache
+      - run:
+          name: Check for unused dependencies
+          no_output_timeout: 10m
+          command: |
+            cargo install [email protected]
+            cargo machete
+      - clear_environment:
+          cache_key: v3.3.1-rust-1.83.0-machete-cache
+
+  check-cargo-audit:
+    docker:
+      - image: cimg/rust:1.83.0 # Attention - Change the MSRV in Cargo.toml and rust-toolchain as well
+    resource_class: << pipeline.parameters.medium >>
+    steps:
+      - checkout
+      - setup_environment:
+          cache_key: v3.3.1-rust-1.83.0-cargo-audit-cache
+      - run:
+          name: Check for security vulnerabilities
+          no_output_timeout: 10m
+          command: |
+            cargo install [email protected] --locked
+            cargo audit -D warnings
+      - clear_environment:
+          cache_key: v3.3.1-rust-1.83.0-cargo-audit-cache
+
   check-clippy:
     docker:
       - image: cimg/rust:1.83.0 # Attention - Change the MSRV in Cargo.toml and rust-toolchain as well
@@ -448,6 +482,8 @@ workflows:
       - node-tcp
       - check-fmt
       - check-clippy
+      - check-unused-dependencies
+      - check-cargo-audit
       - devnet-test
 
   windows-workflow:

.resources/release-version

@@ -1 +1 @@
-v3.7.1
+v3.8.0