Migrate Ironwood to the official librustzcash RC (+ merge upstream)

.github/dependabot.yml

@@ -0,0 +1,13 @@
+version: 2
+updates:
+  - package-ecosystem: "cargo"
+    directory: "/"
+    schedule:
+      interval: "weekly"
+    open-pull-requests-limit: 10
+
+  - package-ecosystem: "github-actions"
+    directory: "/"
+    schedule:
+      interval: "weekly"
+    open-pull-requests-limit: 10

.github/workflows/ci.yml

@@ -2,6 +2,10 @@ name: CI checks
 
 on: [push, pull_request]
 
+# Restrict the default GITHUB_TOKEN to read-only; jobs that need more opt in below.
+permissions:
+  contents: read
+
 jobs:
   build:
     name: Build on ${{ matrix.os }}
@@ -33,13 +37,29 @@ jobs:
       - name: Verify working directory is clean (excluding lockfile)
         run: git diff --exit-code ':!Cargo.lock'
 
+  regtest-support:
+    name: Build, test, and lint with regtest_support
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@v4
+      - name: Build with regtest_support
+        run: cargo build --features regtest_support
+      - name: Test with regtest_support
+        run: cargo test --features regtest_support
+      - name: Clippy with regtest_support
+        run: cargo clippy --all-targets --features regtest_support -- -D warnings
+
   clippy:
     name: Clippy
     runs-on: ubuntu-latest
+    # auguwu/clippy-action writes clippy results as check runs.
+    permissions:
+      contents: read
+      checks: write
     steps:
       - uses: actions/checkout@v4
       - name: Run Clippy
-        uses: auguwu/clippy-action@1.3.0
+        uses: auguwu/clippy-action@1.5.0
         with:
           token: ${{ secrets.GITHUB_TOKEN }}
           working-directory: ${{ inputs.target }}

.github/workflows/speed.yml

@@ -22,7 +22,7 @@ jobs:
           persist-credentials: false
       - name: Build binary
         run: cargo build --release
-      - uses: actions/upload-artifact@v4
+      - uses: actions/upload-artifact@v7
         with:
           name: zcash-devtool
           path: |
@@ -43,7 +43,7 @@ jobs:
     steps:
       - uses: bencherdev/bencher@main
 
-      - uses: actions/download-artifact@v4
+      - uses: actions/download-artifact@v8
         with:
           name: zcash-devtool
       - run: chmod +x zcash-devtool