Wrap unsafe function's bodies in unsafe blocks

.github/workflows/bindgen.yml

@@ -89,6 +89,8 @@ jobs:
 
       - name: Test expectations
         run: cd bindgen-tests/tests/expectations && cargo test
+        env:
+          RUSTFLAGS: "-D unsafe_op_in_unsafe_fn -D unused_unsafe"
 
   test:
     runs-on: ${{matrix.os}}

CHANGELOG.md

@@ -160,6 +160,8 @@
  * the `ParseCallbacks`trait does not require to implement `UnwindSafe`.
  * the `Builder::parse_callbacks` method no longer overwrites previously added
    callbacks and composes them in a last-to-first manner.
+ * any generated rust code containing unsafe operations inside unsafe functions
+   is wrapped in unsafe blocks now.
 
 ## Removed