Maintanence updates

.cargo/audit.toml

@@ -0,0 +1,2 @@
+[advisories]
+ignore = ["RUSTSEC-2023-0071"]

.github/workflows/cicd.yml

@@ -35,19 +35,64 @@ jobs:
     secrets:
       CODECOV_TOKEN: ${{ secrets.CODECOV_TOKEN }}
 
+  generate-matrix:
+    runs-on: ubuntu-latest
+    strategy:
+      fail-fast: false
+      matrix:
+        toolchain: [msrv, stable, nightly]
+    outputs:
+      matrix: ${{ steps.generate.outputs.matrix }}
+    steps:
+      - uses: actions/checkout@v5
+      - uses: cachix/install-nix-action@v31
+      - uses: cachix/cachix-action@v17
+        with:
+          name: wolcomm-public
+          authToken: ${{ secrets.CACHIX_AUTH_TOKEN }}
+      - id: generate
+        run: |
+          nix build .#checks.x86_64-linux.${TOOLCHAIN}.matrix
+          echo "matrix=$(<result)" >> ${GITHUB_OUTPUT}
+        env:
+          TOOLCHAIN: ${{ matrix.toolchain }}
+
+  checks:
+    name: checks
+    runs-on: ubuntu-latest
+    needs: generate-matrix
+    strategy:
+      fail-fast: false
+      matrix:
+        toolchain: [msrv, stable, nightly]
+        check: ${{ fromJSON(needs.generate-matrix.outputs.matrix) }}
+    steps:
+      - uses: actions/checkout@v5
+      - uses: cachix/install-nix-action@v31
+      - uses: cachix/cachix-action@v17
+        with:
+          name: wolcomm-public
+          authToken: ${{ secrets.CACHIX_AUTH_TOKEN }}
+      - run: nix build .#checks.x86_64-linux.${TOOLCHAIN}.flatChecks.${CHECK}
+        env:
+          TOOLCHAIN: ${{ matrix.toolchain }}
+          CHECK: ${{ matrix.check.name }}
+      - id: post-run
+        run: ${{ matrix.check.postStep }}
+
   build-junos-agent:
     name: build-junos-agent
-    needs:
-      - lint
-      - test
+    needs: checks
     runs-on: ubuntu-latest
     steps:
       - name: checkout
-        uses: actions/checkout@v4
+        uses: actions/checkout@v5
       - name: install nix
-        uses: cachix/install-nix-action@v26
-      - name: enable nix cache
-        uses: DeterminateSystems/magic-nix-cache-action@v6
+        uses: cachix/install-nix-action@v31
+      - uses: cachix/cachix-action@v17
+        with:
+          name: wolcomm-public
+          authToken: ${{ secrets.CACHIX_AUTH_TOKEN }}
       - name: set-up signing certs
         run: |
           mkdir -p /tmp/certs
@@ -77,7 +122,7 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: checkout
-        uses: actions/checkout@v4
+        uses: actions/checkout@v5
       - name: download build artifacts
         uses: actions/download-artifact@v4
         with: