Skip to content

ci: add a cargo-machete gate for unused dependencies - #1471

Open
duncanista wants to merge 1 commit into
jordan.gonzalez/remove-unused-deps/featurefrom
jordan.gonzalez/cargo-machete/feature
Open

duncanista wants to merge 1 commit into
jordan.gonzalez/remove-unused-deps/featurefrom
jordan.gonzalez/cargo-machete/feature

Conversation

@duncanista

@duncanista duncanista commented Oct 28, 2026 •

Copy link
Copy Markdown
Contributor

TL;DR: Adds a CI job (cargo-machete) that fails when Cargo.toml lists a dependency that the code does not use.

Why: The 6 unused dependencies that #1470 removes built up over time, because nothing caught them.

Overview

Jira: SVLS-9975

Stacked on #1470 (jordan.gonzalez/remove-unused-deps/feature).

Add the Unused Dependencies job: cargo-machete 0.9.2 through taiki-e/install-action
v2.87.28. It is static analysis, with no build, so it is fast and deterministic. A crate used
only through a string path or kept as a version bound goes in
[package.metadata.cargo-machete] ignored (previous PR). It is not a required check.

Size: 17 core lines, 17 lines in total.

Testing

  • applies on the previous PR of the stack: pass
  • actionlint 1.7.12 with shellcheck 0.10.0 on the changed workflows: pass
  • cargo machete: pass

@chatgpt-codex-connector

chatgpt-codex-connector Bot commented Oct 28, 2026 •

Copy link
Copy Markdown

Codex Review Summary

This comment shows the latest Codex review activity on this pull request.

Review Status Commit Review trigger
📝 Code Review ✅ Completed 2026-10-28T18:58:53.964421Z b1575de PR opened
🔒 Security Review ✅ Completed 2026-10-28T19:00:10.570008Z b1575de PR opened
ℹ️ About Codex in GitHub

Your team has set up Codex to review pull requests in this repo. Reviews are triggered when you

  • Open a pull request for review
  • Mark a draft as ready
  • Comment "@codex review" or "@codex security review".

Codex reacts with 👀 while any review is running, comments if it has suggestions, and reacts with 👍 once all reviews finish with no findings.

@datadog-prod-us1-6

datadog-prod-us1-6 Bot commented Oct 28, 2026 •

Copy link
Copy Markdown

Pipelines

❌ Errors

Your PR has failed checks. Please review the issues below and take necessary action before merging.

🚦 2 Pipeline jobs failed

Bottlecap (Rust) | Lockfile Scan — 🔧 Needs a code fix, caused by this PR

View more details · View in GitHub Actions

DataDog/datadog-lambda-extension | publish integration layer (arm64)

View more details · View in GitLab

Useful? React with 👍 / 👎

This comment will be updated automatically if new data arrives.
🔗 Commit SHA: b1575de | Docs | View more details | Give us feedback!

@duncanista duncanista changed the title [SVLS-9975] ci: add a cargo-machete gate for unused dependencies ci: add a cargo-machete gate for unused dependencies Oct 28, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant