Pin cargo-udeps install in CI

[gcomte]

Summary

• Pin cargo-udeps to 0.1.61 in the static analysis workflow
• Install it with --locked so CI uses the crate's tested dependency graph

Summary by CodeRabbit

• Chores
  • Updated CI/CD workflow configuration to use a pinned version of a build dependency management tool with locked dependencies, improving build reproducibility and consistency.

[coderabbitai]

No actionable comments were generated in the recent review. 🎉

ℹ️ Recent review info

⚙️ Run configuration

Configuration used: defaults

Review profile: CHILL

Plan: Pro

Run ID: 7695300b-852e-4dfe-8b3f-c4b17b666232

📥 Commits

Reviewing files that changed from the base of the PR and between cbaf5da and 02ae18f.

📒 Files selected for processing (1)

• .github/workflows/code-analysis.yml

---

📝 Walkthrough

Walkthrough

The CI workflow's unused_dependencies job updates the cargo-udeps installation command to use a pinned version 0.1.61 with --locked, replacing the unpinned default. All other CI steps remain unchanged.

Changes

CI Configuration

Layer / File(s)	Summary
Pinned cargo-udeps version .github/workflows/code-analysis.yml	The cargo-udeps installation command specifies version 0.1.61 with --locked instead of using the default unpinned version.

Estimated code review effort

🎯 1 (Trivial) | ⏱️ ~2 minutes

Possibly related PRs

• gcomte/bitcoinvert#427: Both PRs modify the unused_dependencies job in the CI workflow, specifically the cargo-udeps installation command.

Poem

A pinned version keeps things steady,
No more surprises, the tool is ready,
With --locked flags held tight,
The CI pipeline runs just right. 🐇✨

🚥 Pre-merge checks | ✅ 5

✅ Passed checks (5 passed)

Check name	Status	Explanation
Description Check	✅ Passed	Check skipped - CodeRabbit’s high-level summary is enabled.
Title check	✅ Passed	The title 'Pin cargo-udeps install in CI' directly and clearly summarizes the main change: pinning cargo-udeps to a specific version in the CI workflow.
Docstring Coverage	✅ Passed	No functions found in the changed files to evaluate docstring coverage. Skipping docstring coverage check.
Linked Issues check	✅ Passed	Check skipped because no linked issues were found for this pull request.
Out of Scope Changes check	✅ Passed	Check skipped because no linked issues were found for this pull request.

_{✏️ Tip: You can configure your own custom pre-merge checks in the settings.}

✨ Finishing Touches

🧪 Generate unit tests (beta)

• Create PR with unit tests
• Commit unit tests in branch fix/pin-cargo-udeps-install

---

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

• X
• Mastodon
• Reddit
• LinkedIn

_{Comment @coderabbitai help to get the list of available commands and usage tips.}