[WomB0ComB0]

Bumps the pinned resq-software/.github/.github/workflows/rust-ci.yml reusable from 40fa987f5bc7 to 5261ae18b661 (the merge commit of .github#63), so this repo's rust job picks up the self-hosted USE_SELF_HOSTED toggle. Completes the reusables-first sweep for this repo. Merge on green, no --admin.

Summary by CodeRabbit

• Chores
  • Updated the project’s internal continuous integration workflow. This maintenance change does not affect the application’s features or behavior, and no user-facing changes are included.

[coderabbitai]

Navigate logical layers of code changes, visualize relationships, and explore their blast radius.

Note

Currently processing new changes in this PR. This may take a few minutes, please wait...

⚙️ Run configuration

Configuration used: defaults

Review profile: CHILL

Plan: Advanced

Run ID: a22d3a51-b28f-4356-b29b-ccb70b8d6300

📥 Commits

Reviewing files that changed from the base of the PR and between 55c8850 and 9fa7edb.

📒 Files selected for processing (1)

• .github/workflows/ci.yml

 ______________________________________
< Warning: May contain traces of bugs. >
 --------------------------------------
  \
   \   (\__/)
       (•ㅅ•)
       / 　 づ

✨ Finishing Touches

🧪 Generate unit tests (beta)

• Commit to this branch
• Create a new PR

---

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

• X
• Mastodon
• Reddit
• LinkedIn

_{Comment @coderabbitai help to get the list of available commands.}

[github-actions]

Audit Results: PASS ✅

The audit found no security vulnerabilities, logic bugs, or performance issues.

Summary:

• The update to the rust-ci.yml pin to 5261ae18b661fcfc4afb4e84b88565d4e7791a7f is a safe and surgical change.
• Using a specific SHA pin follows security best practices to prevent supply chain attacks and ensure build reproducibility.
• The change aligns with the recent migration to self-hosted runners (PR ci: adopt self-hosted runner toggle for safe CI + bot jobs #83), as the new pin likely includes the necessary support for the ["self-hosted", "linux", "x64", "zima"] runner configuration.

Minor Suggestion:
For consistency with .github/workflows/security.yml, consider adding a descriptive comment to the pin in ci.yml to help future maintainers identify the version (e.g., # main (2026-09-29, #63)).

Warning

Firewall blocked 1 domain

The following domain was blocked by the firewall during workflow execution:

• localhost

To allow these domains, add them to the network.allowed list in your workflow frontmatter:

network:
  allowed:
    - defaults
    - "localhost"

See Network Configuration for more information.

Generated by ai-auditor for issue #84 · ◷