Merge develop into main for v0.8.0

.cargo/config.toml

@@ -1,8 +1,17 @@
 [target.aarch64-unknown-linux-gnu]
 linker = "aarch64-linux-gnu-gcc"
 
+# mips{,el}-unknown-linux-gnu: the old glibc in the cross-toolchain lacks the
+# `getrandom()` wrapper symbol that getrandom 0.3's default backend calls, so we
+# select getrandom's `custom` backend (implemented via the raw SYS_getrandom
+# syscall in privaxy's lib.rs). musl MIPS uses getrandom's weak-fallback backend
+# and needs no override.
+[target.mips-unknown-linux-gnu]
+rustflags = ["--cfg", "getrandom_backend=\"custom\""]
+
 [target.mipsel-unknown-linux-gnu]
 linker = "mipsel-linux-gnu-gcc"
+rustflags = ["--cfg", "getrandom_backend=\"custom\""]
 
 [target.mipsel-unknown-linux-musl]
 linker = "mipsel-linux-musl-gcc"

.github/workflows/ci.yml

@@ -355,6 +355,9 @@ jobs:
       - name: Build packages
         if: ${{ !endsWith(matrix.target, '-musl') }}
         run: |
+          # target/ is cached; discard packages from previous versions.
+          rm -f target/${{ matrix.target }}/release/privaxy_*.deb \
+                target/${{ matrix.target }}/release/privaxy-*.rpm
           cargo install cargo-deb && cargo deb -p privaxy --target ${{ matrix.target }} -o target/${{ matrix.target }}/release
           cargo install cargo-generate-rpm && cargo generate-rpm -p privaxy --target ${{ matrix.target }} -o target/${{ matrix.target }}/release
       - uses: actions/upload-artifact@v4
@@ -366,7 +369,7 @@ jobs:
         if: ${{ !endsWith(matrix.target, '-musl') }}
         with:
           name: privaxy-rpm-${{ matrix.target }}
-          path: target/${{ matrix.target }}/release/*.rpm
+          path: target/${{ matrix.target }}/release/privaxy-*.rpm
       - uses: actions/upload-artifact@v4
         with:
           name: privaxy-${{ matrix.target }}
@@ -432,6 +435,9 @@ jobs:
       - name: Build packages
         if: ${{ endsWith(matrix.target, '-linux-gnu') }}
         run: |
+          # target/ is cached; discard packages from previous versions.
+          rm -f target/${{ matrix.target }}/release/privaxy_*.deb \
+                target/${{ matrix.target }}/release/privaxy-*.rpm
           variant=$(echo "${{ matrix.target }}" | cut -d- -f1)
           cargo install cargo-deb && cargo deb --no-build --no-strip --variant "$variant" -p privaxy --target ${{ matrix.target }} -o target/${{ matrix.target }}/release
           cargo install cargo-generate-rpm && cargo generate-rpm -p privaxy --target ${{ matrix.target }} -o target/${{ matrix.target }}/release
@@ -446,7 +452,7 @@ jobs:
         if: ${{ endsWith(matrix.target, '-linux-gnu') }}
         with:
           name: privaxy-rpm-${{ matrix.target }}
-          path: target/${{ matrix.target }}/release/*.rpm
+          path: target/${{ matrix.target }}/release/privaxy-*.rpm
 
       - uses: actions/upload-artifact@v4
         with:
@@ -462,6 +468,9 @@ jobs:
     permissions:
       contents: write
     steps:
+      - name: Checkout release notes
+        uses: actions/checkout@v6
+
       - name: Download all artifacts
         uses: actions/download-artifact@v4
         with:
@@ -485,6 +494,7 @@ jobs:
       - name: Create release
         uses: softprops/action-gh-release@v2
         with:
+          body_path: RELEASE.md
           files: ./release-assets/*
           generate_release_notes: true
-          fail_on_unmatched_files: true
+          fail_on_unmatched_files: true