initial implementation

Signed-off-by: Steven Noonan <steven@uplinklabs.net>

Author: tycho

.github/dependabot.yml

@@ -0,0 +1,15 @@
+version: 2
+updates:
+  - package-ecosystem: cargo
+    directory: /
+    schedule:
+      interval: weekly
+      day: monday
+    open-pull-requests-limit: 5
+
+  - package-ecosystem: github-actions
+    directory: /
+    schedule:
+      interval: weekly
+      day: monday
+    open-pull-requests-limit: 5

.github/workflows/ci.yml

@@ -0,0 +1,42 @@
+name: CI
+
+on:
+  push:
+    branches: [main]
+  pull_request:
+
+env:
+  CARGO_TERM_COLOR: always
+  RUST_BACKTRACE: 1
+
+jobs:
+  check:
+    name: Build, lint, audit, test
+    runs-on: ubuntu-latest
+
+    steps:
+      - uses: actions/checkout@v4
+
+      - uses: dtolnay/rust-toolchain@stable
+        with:
+          components: clippy
+
+      - uses: Swatinem/rust-cache@v2
+
+      # Build first — catches template include_str! failures and compile errors
+      # before running the slower test step.
+      - name: Build
+        run: cargo build --release
+
+      - name: Clippy
+        run: cargo clippy --all-targets -- -D warnings
+
+      - name: Audit
+        uses: rustsec/audit-check@v2
+        with:
+          token: ${{ secrets.GITHUB_TOKEN }}
+
+      # Integration tests invoke the binary and compile the generated C.
+      # gcc is pre-installed on ubuntu-latest.
+      - name: Test
+        run: cargo test --release

.github/workflows/release-plz.yml

@@ -0,0 +1,52 @@
+name: Release-plz
+
+on:
+  push:
+    branches:
+      - master
+
+jobs:
+  release-plz-release:
+    name: Release-plz release
+    runs-on: ubuntu-latest
+    if: ${{ github.repository_owner == 'tycho' }}
+    permissions:
+      contents: write
+      id-token: write
+    steps:
+      - &checkout
+        name: Checkout repository
+        uses: actions/checkout@v6
+        with:
+          fetch-depth: 0
+          persist-credentials: true
+          token: ${{ secrets.RELEASE_PLZ_TOKEN }}
+      - &install-rust
+        name: Install Rust toolchain
+        uses: dtolnay/rust-toolchain@stable
+      - name: Run release-plz
+        uses: release-plz/action@v0.5
+        with:
+          command: release
+        env:
+          GITHUB_TOKEN: ${{ secrets.RELEASE_PLZ_TOKEN }}
+
+  release-plz-pr:
+    name: Release-plz PR
+    runs-on: ubuntu-latest
+    if: ${{ github.repository_owner == 'tycho' }}
+    permissions:
+      pull-requests: write
+      contents: write
+    concurrency:
+      group: release-plz-${{ github.ref }}
+      cancel-in-progress: false
+    steps:
+      - *checkout
+      - *install-rust
+      - name: Run release-plz
+        uses: release-plz/action@v0.5
+        with:
+          command: release-pr
+        env:
+          GITHUB_TOKEN: ${{ secrets.RELEASE_PLZ_TOKEN }}

.github/workflows/update-bundled.yml

@@ -0,0 +1,51 @@
+name: Update bundled XML and headers
+
+on:
+  schedule:
+    # Every Monday at 05:00 UTC.
+    - cron: "0 5 * * 1"
+  workflow_dispatch:
+
+permissions:
+  contents: write
+  pull-requests: write
+
+jobs:
+  update:
+    name: Fetch and validate
+    runs-on: ubuntu-latest
+
+    steps:
+      - uses: actions/checkout@v4
+
+      - uses: dtolnay/rust-toolchain@stable
+
+      - uses: Swatinem/rust-cache@v2
+
+      - name: Fetch bundled files
+        run: ./scripts/fetch_bundled.sh
+
+      - name: Build with updated files
+        # This is the primary validity check: include_str! will fail at
+        # compile time if any fetched file is empty or missing.
+        run: cargo build --release
+
+      - name: Run test suite against updated files
+        run: cargo test --release
+
+      - name: Open pull request
+        uses: peter-evans/create-pull-request@v6
+        with:
+          token: ${{ secrets.GITHUB_TOKEN }}
+          add-paths: bundled/
+          commit-message: "chore: update bundled XML specs and headers"
+          title: "chore: update bundled XML specs and headers"
+          body: |
+            Automated weekly refresh of `bundled/xml/` and `bundled/headers/`
+            from upstream Khronos and ANGLE sources.
+
+            The build and test suite passed against the new files before this
+            PR was opened.
+          branch: update-bundled-xml
+          delete-branch: true
+          labels: dependencies

.gitignore

@@ -0,0 +1,2 @@
+/target
+/output

.release-plz.toml

@@ -0,0 +1,9 @@
+[workspace]
+git_release_enable = true
+git_release_name = "{{ version }}"
+git_tag_enable = true
+git_tag_name = "{{ version }}"
+pr_branch_prefix = "release/"
+pr_draft = true
+pr_labels = ["release"]
+release_always = true