neiam /markprompter

ci: install the packaging tools with --locked

68b87d1 · Gabriel Morell · 2026-09-14 05:20

3 files +10 -2

Message

{commit_body(@commit)}

modified .github/workflows/rust-ci.yml

+10 −2

@@ -78,11 +78,19 @@ jobs:

78	78	- name: Strip binary
79	79	run: strip target/release/markprompter
80	80
	81	+ # `--locked` uses each tool's own published Cargo.lock instead of
	82	+ # resolving its dependencies fresh. Without it, `cargo install`
	83	+ # picks whatever a transitive dependency published this week, and
	84	+ # a crate that raised its MSRV breaks the install against this
	85	+ # project's pinned toolchain — a failure with nothing to do with
	86	+ # either this repository or the tool's own release.
	87	+ #
	88	+ # It also means two runs a month apart install the same bytes.
81	89	- name: Install cargo-deb
82		− run: cargo install cargo-deb
	90	+ run: cargo install cargo-deb --locked
83	91
84	92	- name: Install cargo-generate-rpm
85		− run: cargo install cargo-generate-rpm
	93	+ run: cargo install cargo-generate-rpm --locked
86	94
87	95	# Every CI build has to carry a distinct version, or the second
88	96	# one publishes the same filename with different bytes and the

Parents: 1f7b54f