dependencies #4749

	name: dependencies

	on:
	push:
	branches:
	- main
	paths:
	- "**/Cargo.toml"
	- "**/Cargo.lock"
	- ".github/config/cargo-deny.toml"
	- ".github/workflows/dependencies.yml"

	pull_request:
	branches:
	- main
	paths:
	- "**/Cargo.toml"
	- "**/Cargo.lock"
	- ".github/config/cargo-deny.toml"
	- ".github/workflows/dependencies.yml"

	schedule:
	# run every morning at 10am Pacific Time
	- cron: "0 17 * * *"

	permissions:
	contents: read # This is required for actions/checkout

	jobs:
	audit:
	runs-on: ubuntu-latest
	permissions:
	id-token: write # Required for GITHUB_TOKEN usage
	steps:
	- uses: actions/checkout@v6
	with:
	submodules: true

	- name: Install rust toolchain
	id: toolchain
	run: \|
	rustup toolchain install stable --profile minimal
	rustup override set stable

	- uses: camshaft/rust-cache@v1

	- name: Run cargo build
	run: cargo build

	- uses: rustsec/audit-check@v2.0.0
	with:
	token: ${{ secrets.GITHUB_TOKEN }}

	deny:
	runs-on: ubuntu-latest
	steps:
	- uses: actions/checkout@v6
	with:
	submodules: true

	- name: "Remove rust-toolchain"
	run: rm rust-toolchain

	- uses: EmbarkStudios/cargo-deny-action@v2
	with:
	command: check --config .github/config/cargo-deny.toml

Provide feedback