gherrit-pr-id: Gff0fac1332c8d87cd462e82e44fa573fb6678db3

Enables customers to tune inlining aggressiveness of many of zerocopy's
public functions. At higher `codegen-units`, the Rust compiler may fail
to inline invocations of conversion functions. Applying the
`#[inline(always)]` attribute (as in #3137) forces inlining, but that
might not be desirable for all monomorphizations or invocations.
Dynamically padded types, for instance, require much more complex
codegen than statically sized for unpadded dynamically sized types.

While reducing `codegen-units` for a build can improve codegen, it
carries a large penalty in build times. The `--cfg zerocopy_inline_always`
flag provides a narrowly-scoped lever for achieving some of the
benefits of `codegen-units=1` without the broad build time penalties.

gherrit-pr-id: G750518420a745aec19276f7a24bcd0f66584bb2c

The `validate_auto_approvers.py` script expects a single JSON array.
When GitHub API results are paginated, returning multiple JSON arrays,
this breaks that script unless we first concatenate them before passing
them to the script.

gherrit-pr-id: Glejkxn6s2idc57zgeyxhqk7tmqk3sphy

Vendors `regex` to normalize labels.

Makes progress towards #3079.

gherrit-pr-id: Gea71a24b6b02a2d552b4af3e0980e71a50ab8f52

Bumps the all-actions group with 6 updates:

| Package | From | To |
| --- | --- | --- |
| [actions/checkout](https://github.com/actions/checkout) | `4.2.2` | `6.0.2` |
| [codecov/codecov-action](https://github.com/codecov/codecov-action) | `5.5.2` | `5.5.3` |
| [zizmorcore/zizmor-action](https://github.com/zizmorcore/zizmor-action) | `0.3.0` | `0.5.2` |
| [actions/dependency-review-action](https://github.com/actions/dependency-review-action) | `4.8.2` | `4.9.0` |
| [actions/upload-artifact](https://github.com/actions/upload-artifact) | `6.0.0` | `7.0.0` |
| [github/codeql-action](https://github.com/github/codeql-action) | `4.31.9` | `4.34.1` |


Updates `actions/checkout` from 4.2.2 to 6.0.2
- [Release notes](https://github.com/actions/checkout/releases)
- [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md)
- [Commits](actions/checkout@v4.2.2...de0fac2)

Updates `codecov/codecov-action` from 5.5.2 to 5.5.3
- [Release notes](https://github.com/codecov/codecov-action/releases)
- [Changelog](https://github.com/codecov/codecov-action/blob/main/CHANGELOG.md)
- [Commits](codecov/codecov-action@671740a...1af5884)

Updates `zizmorcore/zizmor-action` from 0.3.0 to 0.5.2
- [Release notes](https://github.com/zizmorcore/zizmor-action/releases)
- [Commits](zizmorcore/zizmor-action@e639db9...71321a2)

Updates `actions/dependency-review-action` from 4.8.2 to 4.9.0
- [Release notes](https://github.com/actions/dependency-review-action/releases)
- [Commits](actions/dependency-review-action@3c4e3dc...2031cfc)

Updates `actions/upload-artifact` from 6.0.0 to 7.0.0
- [Release notes](https://github.com/actions/upload-artifact/releases)
- [Commits](actions/upload-artifact@b7c566a...bbbca2d)

Updates `github/codeql-action` from 4.31.9 to 4.34.1
- [Release notes](https://github.com/github/codeql-action/releases)
- [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md)
- [Commits](github/codeql-action@5d4e8d1...3869755)

---
updated-dependencies:
- dependency-name: actions/checkout
  dependency-version: 6.0.2
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: all-actions
- dependency-name: codecov/codecov-action
  dependency-version: 5.5.3
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: all-actions
- dependency-name: zizmorcore/zizmor-action
  dependency-version: 0.5.2
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: all-actions
- dependency-name: actions/dependency-review-action
  dependency-version: 4.9.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: all-actions
- dependency-name: actions/upload-artifact
  dependency-version: 7.0.0
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: all-actions
- dependency-name: github/codeql-action
  dependency-version: 4.34.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: all-actions
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

In order to support multiple `xxx.yml` GitHub Actions workflow files
*which block CI*, update `ci/check_job_dependencies.sh` to operate
per-file rather than over all `.yml` files. In particular, within each
`.yml` file, if that file contains an `all-jobs-succeed` job, the script
fails if that job does not depend on all *other* jobs in the file. This
allows us to add a separate `hermes.yml` file with its own
`all-jobs-succeed` job.

In order to support `.github/auto-approvers.json` naming a specific
file, update `ci/validate_auto_approvers.py` to support files in
addition to directories.

gherrit-pr-id: Ggo347ehkenkgzi5ijiiqgoufqukiq2jx

[ci] Disambiguate "All checks succeeded" jobs by name

gherrit-pr-id: Glqnd6zsyrxdhqraebnvtvqokubawfkdr

Add a job to signal when all previous jobs have succeeded in the auto-approve workflow.

These need to be updated when modifying dependencies of Hermes itself.

gherrit-pr-id: Gcbnkgi7gxha3r6bk7l5fbkagklqv6hmo

This commit effectively merges the state of the `tools/hermes` directory
into `main`, but without a merge commit, as we require linear history.
This is based on the bb0e9f9 commit.

At that commit, Hermes is still in a prototype state. Future changes
will continue to clean it up and get it ready for primetime.

Also update `.github/workflows/hermes.yml` to run Hermes tests in CI.

gherrit-pr-id: Gbyp37ljqp6htpfgdgjdillrhw3ssr5xy

gherrit-pr-id: Gs6d7u5qettsjy52hgx5xz5pxxt6caedz

When initially released the LLVM semantics did not agree with the
intrinsics in the order of lanes and hence they got removed from stable
on big endian targets. The fix of these semantics was shipped with Rust
1.87 in March 2025 (<rust-lang/rust#136831>).

To keep the library working in these previous compiler versions the
intrinsics are enabled by their prior condition, a little endian target
is detected, or the feature detection cfg of the more recent rust
release is present.

Co-authored-by: Jack Wrenn <jswrenn@google.com>