Merge branch 'main' into idiomatic/typesystem-borrowchecker

Author: tall-vase

.github/workflows/apt-get-install/action.yml

@@ -41,4 +41,4 @@ runs:
     - name: Installing ${{ inputs.packages }}
       shell: bash
       run: |
-        sudo apt-get install --quiet --yes ${{ inputs.packages }}
+        sudo apt-get install --quiet --yes --no-install-recommends ${{ inputs.packages }}

.github/workflows/build.sh

@@ -43,9 +43,6 @@ export MDBOOK_OUTPUT__PANDOC__DISABLED=false
 
 mdbook build -d "$dest_dir"
 
-# Disable the redbox button in built versions of the course
-echo '// Disabled in published builds, see build.sh' > "${dest_dir}/html/theme/redbox.js"
-
 mv "$dest_dir/pandoc/pdf/comprehensive-rust.pdf" "$dest_dir/html/"
 (cd "$dest_dir/exerciser" && zip --recurse-paths ../html/comprehensive-rust-exercises.zip comprehensive-rust-exercises/)
 

.github/workflows/build.yml

@@ -1,4 +1,6 @@
 name: Test
+permissions:
+  contents: read
 
 on:
   pull_request:
@@ -149,7 +151,7 @@ jobs:
 
       - name: Setup Node
         if: matrix.language == 'en'
-        uses: actions/setup-node@v4
+        uses: actions/setup-node@v5
         with:
           node-version: 22
           cache: "npm"

.github/workflows/check-msgid-changes.yml

@@ -1,4 +1,6 @@
 name: Prevent unintended msgid changes
+permissions:
+  contents: read
 
 on:
   pull_request:

.github/workflows/install-mdbook/action.yml

@@ -15,7 +15,19 @@ runs:
     - name: Install mdbook-pandoc dependencies
       uses: ./.github/workflows/apt-get-install
       with:
-        packages: texlive texlive-luatex texlive-lang-cjk texlive-lang-arabic librsvg2-bin fonts-noto
+        packages: >
+          fonts-noto
+          fonts-noto-cjk
+          fonts-noto-color-emoji
+          fonts-noto-extra
+          fonts-symbola
+          librsvg2-bin
+          texlive
+          texlive-fonts-recommended
+          texlive-lang-arabic
+          texlive-lang-cjk
+          texlive-lang-japanese
+          texlive-luatex
 
     - name: Install mdbook-pandoc
       run: |

.github/workflows/labeler.yml

@@ -9,6 +9,6 @@ jobs:
       pull-requests: write
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/labeler@v5
+      - uses: actions/labeler@v6
         with:
           sync-labels: true

.github/workflows/lint.yml

@@ -1,4 +1,6 @@
 name: Lint
+permissions:
+  contents: read
 
 on:
   pull_request:
@@ -50,6 +52,6 @@ jobs:
         uses: actions/checkout@v5
 
       - name: Check for typos
-        uses: crate-ci/typos@v1.35.7
+        uses: crate-ci/typos@v1.37.0
         with:
           config: ./.github/typos.toml

CONTRIBUTING.md

@@ -35,7 +35,7 @@ these can ensure the solution is correct.
 
 We test the course material in several ways:
 
-- `mdbook test`: This will test the code samples. Some code sampes are marked
+- `mdbook test`: This will test the code samples. Some code samples are marked
   with `ignore` in the Markdown file because the Playground is missing some of
   the crates we use. For this we have
 - `cargo test`: This will build and test the Rust code found in our tooling, as