chore(deps): Update rstest requirement from 0.25 to 0.26

.cargo/audit.toml

@@ -0,0 +1,12 @@
+# cargo-audit configuration
+# See: https://github.com/rustsec/rustsec/tree/main/cargo-audit
+
+[advisories]
+# Advisory database configuration
+ignore = []
+# Treat unmaintained crates as warnings, not errors
+informational_warnings = ["unmaintained"]
+
+[output]
+# Output format
+deny = ["yanked"]

.cargo/config.toml

@@ -1,34 +1,11 @@
-# Cargo configuration for Rash project
-# Static Analysis: Testing Spec Section 9
-#
-# Philosophy: Incremental improvement with pragmatic defaults
-# - Start with warnings, promote to errors after codebase cleanup
-# - Focus on safety/security critical lints first
+# bashrs build configuration
+# See: https://doc.rust-lang.org/cargo/reference/config.html
 
-[target.'cfg(all())']
-rustflags = [
-    # PHASE 1: Critical safety lints (currently WARN, will become DENY after cleanup)
-    # These catch the most dangerous patterns
-    "-W", "clippy::unwrap_used",              # TODO: Convert to -D after fixing
-    "-W", "clippy::expect_used",              # TODO: Convert to -D after fixing
-    "-W", "clippy::panic",                    # TODO: Convert to -D after fixing
-    "-W", "clippy::indexing_slicing",         # TODO: Convert to -D after fixing
-
-    # PHASE 2: Development hygiene (WARN level)
-    "-W", "clippy::todo",                     # Track TODO markers
-    "-W", "clippy::unimplemented",            # Track unimplemented code
-    "-W", "clippy::dbg_macro",                # No dbg!() in committed code
-
-    # PHASE 3: Quality lints (WARN level - informational)
-    # Note: pedantic/nursery disabled by default - too noisy (745 warnings!)
-    # "-W", "clippy::pedantic",               # Enable manually: cargo clippy -- -W clippy::pedantic
-    # "-W", "clippy::nursery",                # Enable manually: cargo clippy -- -W clippy::nursery
-    "-W", "clippy::cargo",                    # Cargo-related lints
-]
+[build]
+incremental = true
 
 [alias]
-# Convenience aliases for common commands
-xclippy = "clippy --all-targets --all-features -- -D warnings"
-xtest = "test --all-features"
-xbuild = "build --all-features"
-xcheck = "check --all-features"
+t = "test"
+c = "check"
+b = "build --release"
+cl = "clippy --all-targets -- -D warnings"

.clippy.toml

@@ -1,3 +1,9 @@
 # Allow useless comparisons in test code (usize >= 0)
 # These are defensive assertions that don't harm anything
 # TODO: Clean up these assertions properly in next release
+
+# Disallowed methods - belt-and-suspenders with clippy::unwrap_used lint
+disallowed-methods = [
+    { path = "std::option::Option::unwrap", reason = "Use .expect() or ? operator" },
+    { path = "std::result::Result::unwrap", reason = "Use .expect() or ? operator" },
+]

.config/nextest.toml

@@ -0,0 +1,44 @@
+# Nextest configuration for bashrs
+# Optimized for fast coverage runs
+
+[store]
+# Store test binaries separately for faster incremental builds
+dir = "target/nextest"
+
+[profile.default]
+# Default profile for regular test runs
+retries = 0
+slow-timeout = { period = "60s", terminate-after = 2 }
+fail-fast = false
+test-threads = "num-cpus"
+
+[profile.coverage]
+# Optimized for coverage runs with instrumentation
+retries = 0
+slow-timeout = { period = "60s", terminate-after = 2 }
+fail-fast = false
+# Use all CPUs for maximum parallelism
+test-threads = "num-cpus"
+# Skip slow property tests during coverage
+status-level = "pass"
+
+[[profile.coverage.overrides]]
+# E2E tests are slow under instrumentation
+filter = 'test(/e2e_pipeline/)'
+slow-timeout = { period = "120s", terminate-after = 2 }
+
+[[profile.coverage.overrides]]
+# Bug hunting tests are comprehensive
+filter = 'test(/bug_hunting/)'
+slow-timeout = { period = "90s", terminate-after = 2 }
+
+[[profile.coverage.overrides]]
+# Property tests need more time under instrumentation
+filter = 'test(/property/)'
+slow-timeout = { period = "90s", terminate-after = 2 }
+
+[profile.ci]
+# CI profile - balanced speed and thoroughness
+retries = 1
+slow-timeout = { period = "120s", terminate-after = 2 }
+fail-fast = false

.github/dependabot.yml

@@ -0,0 +1,38 @@
+version: 2
+updates:
+  # Rust dependencies
+  - package-ecosystem: "cargo"
+    directory: "/"
+    schedule:
+      interval: "weekly"
+      day: "monday"
+      time: "03:00"
+    open-pull-requests-limit: 10
+    labels:
+      - "dependencies"
+      - "rust"
+    commit-message:
+      prefix: "chore"
+      include: "scope"
+    # Group minor and patch updates
+    groups:
+      development-dependencies:
+        dependency-type: "development"
+        update-types:
+          - "minor"
+          - "patch"
+      production-dependencies:
+        dependency-type: "production"
+        update-types:
+          - "patch"
+
+  # GitHub Actions
+  - package-ecosystem: "github-actions"
+    directory: "/"
+    schedule:
+      interval: "monthly"
+    labels:
+      - "dependencies"
+      - "github-actions"
+    commit-message:
+      prefix: "ci"

.github/workflows/benchmark.yml

@@ -0,0 +1,74 @@
+name: Benchmarks
+
+on:
+  workflow_dispatch:
+    inputs:
+      reason:
+        description: 'Reason for running benchmarks'
+        required: false
+        default: 'Manual benchmark run'
+
+  pull_request:
+    paths:
+      - 'rash/src/**/*.rs'
+      - 'rash/benches/**/*.rs'
+      - 'Cargo.toml'
+      - 'Cargo.lock'
+
+  schedule:
+    - cron: '0 2 * * 0'  # Every Sunday at 2 AM UTC
+
+env:
+  CARGO_TERM_COLOR: always
+
+jobs:
+  benchmark:
+    name: Run Benchmarks
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@v4
+      - uses: dtolnay/rust-toolchain@stable
+      - uses: Swatinem/rust-cache@v2
+
+      - name: Run all benchmarks
+        run: |
+          echo "Running criterion benchmarks..."
+          cargo bench --workspace --no-fail-fast 2>&1 | tee benchmark-output.txt
+        continue-on-error: true
+        timeout-minutes: 15
+
+      - name: Upload criterion results
+        if: always()
+        uses: actions/upload-artifact@v4
+        with:
+          name: criterion-results-${{ github.sha }}
+          path: target/criterion/
+          retention-days: 90
+
+      - name: Upload benchmark output
+        if: always()
+        uses: actions/upload-artifact@v4
+        with:
+          name: benchmark-output-${{ github.sha }}
+          path: benchmark-output.txt
+          retention-days: 30
+
+      - name: Comment on PR (if applicable)
+        if: github.event_name == 'pull_request' && always()
+        uses: actions/github-script@v7
+        with:
+          script: |
+            const fs = require('fs');
+            let output = '';
+            try {
+              output = fs.readFileSync('benchmark-output.txt', 'utf8');
+            } catch (e) {
+              output = 'No benchmark output generated';
+            }
+            const truncated = output.length > 5000 ? output.substring(0, 5000) + '\n...(truncated)' : output;
+            await github.rest.issues.createComment({
+              issue_number: context.issue.number,
+              owner: context.repo.owner,
+              repo: context.repo.name,
+              body: `## Benchmark Results\n\n\`\`\`\n${truncated}\n\`\`\`\n\n---\n*Benchmarks on commit ${context.sha.substring(0, 7)}*`
+            });