merge upstream/main

Signed-off-by: William Hankins <william@sundae.fi>

Author: whankinsiv

.cargo/audit.toml

@@ -0,0 +1,3 @@
+[advisories]
+ignore = []
+informational_warnings = []

.github/PULL_REQUEST_TEMPLATE.md

@@ -1,21 +1,25 @@
 # Pull Request Title
+
 <!--
 Use a short, descriptive title:
 Example: `node: fix crash when config is absent`
 -->
 
 ## Description
+
 <!--
 Describe what this PR does and why. Keep it concise but include enough context
 for reviewers who are not familiar with the area.
 -->
 
 ## Related Issue(s)
+
 <!--
 Link any related issues, e.g. `Fixes #123` or `Relates to #456`.
 -->
 
 ## How was this tested?
+
 <!--
 Describe the tests that you ran to verify your changes. Include instructions
 so reviewers can reproduce. Examples:
@@ -25,18 +29,21 @@ so reviewers can reproduce. Examples:
 -->
 
 ## Checklist
+
 - [ ] My code builds and passes local tests
 - [ ] I added/updated tests for my changes, where applicable
 - [ ] I updated documentation (if applicable)
 - [ ] CI is green for this PR
 
 ## Impact / Side effects
+
 <!--
 Describe any potential side effects, e.g. performance, compatibility, or security concerns.
 If the PR introduces a breaking change, explain migration steps for users.
 -->
 
 ## Reviewer notes / Areas to focus
+
 <!--
 If you want specific feedback, list files/functions to review or aspects you are unsure about.
 -->

.github/workflows/run-tests-on-push-to-main.yml

@@ -20,12 +20,23 @@ jobs:
       - name: Checkout code
         uses: actions/checkout@v4
 
+      - name: Install Shear
+        run: cargo install cargo-shear
+
       - name: Run Format
         run: cargo fmt --all -- --check
 
       - name: Run Clippy
         run: cargo clippy --all-targets --all-features -- -D warnings
 
+      - name: Run Shear
+        run: cargo shear
+
+      - name: Run Audit
+        uses: rustsec/audit-check@v2.0.0
+        with:
+          token: ${{ secrets.GITHUB_TOKEN }}
+
       - name: Run Build
         run: cargo build --verbose