From 356eab43a86bb35d6e6078301e249100cd1a9601 Mon Sep 17 00:00:00 2001
From: Kornel <kornel@cloudflare.com>
Date: Fri, 17 Apr 2026 13:52:39 +0100
Subject: [PATCH 1/3] Cache cargo index quicker

---
 .github/workflows/ci.yml | 24 ++++++++++++++++--------
 1 file changed, 16 insertions(+), 8 deletions(-)

diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
index 59ab7b3b9..039382e39 100644
--- a/.github/workflows/ci.yml
+++ b/.github/workflows/ci.yml
@@ -57,6 +57,14 @@ jobs:
         with:
           path: target
           key: clippy-${{ steps.rust-version.outputs.version }}-${{ hashFiles('Cargo.lock') }}
+      - name: Cache cargo index (save)
+        uses: actions/cache/save@v4
+        with:
+          path: |
+            .cache/cargo/registry/index
+            .cache/cargo/registry/cache
+          key: index-${{ steps.rust-version.outputs.version }}-${{ hashFiles('Cargo.toml') }}
+          enableCrossOsArchive: true
       - name: Run clippy
         run: cargo clippy --all --all-targets --features rpk,prf,mlkem
       - name: Check docs
@@ -250,14 +258,6 @@ jobs:
       shell: bash
       run: |
         echo "version=$(rustc --version)" >> $GITHUB_OUTPUT
-    - name: Prepopulate cargo index
-      uses: actions/cache/restore@v4
-      with:
-        path: |
-          .cache/cargo/registry/index
-          .cache/cargo/registry/cache
-        key: index-${{ steps.rust-version.outputs.version }}-${{ hashFiles('Cargo.toml') }}
-        enableCrossOsArchive: true
     - name: Install golang
       uses: actions/setup-go@v5
       with:
@@ -308,6 +308,14 @@ jobs:
     - name: Set Android Linker path
       if: endsWith(matrix.thing, '-android')
       run: echo "CARGO_TARGET_$(echo ${{ matrix.target }} | tr \\-a-z _A-Z)_LINKER=$ANDROID_NDK/toolchains/llvm/prebuilt/linux-x86_64/bin/$(echo ${{ matrix.target }} | sed s/armv7/armv7a/)21-clang++" >> "$GITHUB_ENV"
+    - name: Prepopulate cargo index
+      uses: actions/cache/restore@v4
+      with:
+        path: |
+          .cache/cargo/registry/index
+          .cache/cargo/registry/cache
+        key: index-${{ steps.rust-version.outputs.version }}-${{ hashFiles('Cargo.toml') }}
+        enableCrossOsArchive: true
     - name: Fetch deps
       run: cargo fetch --target ${{ matrix.target }}
       shell: bash

From 49e50e133eacb5a01cfb448b7141ed811a7bfb59 Mon Sep 17 00:00:00 2001
From: Kornel <kornel@cloudflare.com>
Date: Fri, 17 Apr 2026 13:53:05 +0100
Subject: [PATCH 2/3] Skip publish dry-run on slowest runners

---
 .github/workflows/ci.yml | 1 +
 1 file changed, 1 insertion(+)

diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
index 039382e39..bba609905 100644
--- a/.github/workflows/ci.yml
+++ b/.github/workflows/ci.yml
@@ -346,6 +346,7 @@ jobs:
       shell: bash
       env: ${{ matrix.custom_env }}
     - name: Test boring-sys cargo publish
+      if: "matrix.thing != 'i686-mingw' && matrix.thing != 'i686-msvc' && matrix.thing != 'x86_64-mingw'" # slowest builds
       # Running `cargo publish --dry-run` tests two things:
       #
       # 1. That `boring-sys` can build BoringSSL with just the files included

From 511b7e1aaa709fe72a2cc02d21f4bb10e6d00198 Mon Sep 17 00:00:00 2001
From: Kornel <kornel@cloudflare.com>
Date: Fri, 17 Apr 2026 14:46:11 +0100
Subject: [PATCH 3/3] Bonk it

---
 .github/workflows/ci.yml | 12 ++++++++++++
 1 file changed, 12 insertions(+)

diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
index bba609905..49861bad4 100644
--- a/.github/workflows/ci.yml
+++ b/.github/workflows/ci.yml
@@ -16,6 +16,18 @@ env:
   CARGO_PROFILE_DEV_DEBUG: 0
 
 jobs:
+  bonk:
+    runs-on: ubuntu-latest
+    steps:
+      - name: Run Bonk
+        uses: ask-bonk/ask-bonk/github@main
+        env:
+          CLOUDFLARE_ACCOUNT_ID: ${{ secrets.CLOUDFLARE_ACCOUNT_ID }}
+          CLOUDFLARE_GATEWAY_ID: ${{ secrets.CLOUDFLARE_GATEWAY_ID }}
+          CLOUDFLARE_API_TOKEN: ${{ secrets.CLOUDFLARE_API_TOKEN }}
+        with:
+          model: cloudflare-ai-gateway/anthropic/claude-opus-4-5
+
   rustfmt:
     name: rustfmt
     runs-on: ubuntu-latest