From 31155779ed5d70dce95da5e82a6dd0230179d8d8 Mon Sep 17 00:00:00 2001
From: Matt <47545907+SoundMatt@users.noreply.github.com>
Date: Thu, 30 Jul 2026 15:54:41 -0700
Subject: [PATCH] fix: bump CI rsfusa pin from v0.3.10 to v0.3.17

Bump the ASIL-B safety job's rsfusa install pin across the 7-release gap
(v0.3.10 -> v0.3.17). Verified locally by installing v0.3.17 the same way
CI does (cargo install --git ... --tag v0.3.17 rsfusa --locked) and running
every command the safety job runs against this tree's own working copy.

No new ERROR-level findings vs v0.3.10: the two gates that are not masked
by `|| true` in this job (`qualify`, `release`) pass cleanly under both
v0.3.10 and v0.3.17 with identical results (qualify: 16/16 cases passed,
badge unqualified; release: SBOM/provenance/manifest written). The
`|| true`-masked commands (lint/analyze/check/trace/fmea/tara/cyber) all
hit the same pre-existing "missing field `standard`" config parse error
under v0.3.17 that they already hit under v0.3.10 -- this repo's .fusa.json
predates that schema and is unrelated to this bump.

cargo build --release, cargo test, cargo clippy --all-targets -- -D
warnings, and cargo fmt --check are all clean.

Signed-off-by: Matt <47545907+SoundMatt@users.noreply.github.com>
---
 .github/workflows/ci.yml | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
index 906df3f..aab1240 100644
--- a/.github/workflows/ci.yml
+++ b/.github/workflows/ci.yml
@@ -133,7 +133,7 @@ jobs:
           key: ubuntu-cargo-safety-${{ hashFiles('**/Cargo.lock') }}
 
       - name: Install rsfusa
-        run: cargo install --git https://github.com/SoundMatt/rust-FuSa --tag v0.3.10 rsfusa --locked
+        run: cargo install --git https://github.com/SoundMatt/rust-FuSa --tag v0.3.17 rsfusa --locked
 
       - name: Build release binary (needed for qualify)
         run: cargo build --release --locked