v0.18.4: cargo --locked everywhere — hard-fail dependency races

2026-05-09 20:30:34 -07:00
parent 5190c2b063
commit 455b359e9c
4 changed files with 23 additions and 5 deletions
@@ -14,14 +14,14 @@ jobs:
        with:
          components: clippy, rustfmt
      - run: cargo fmt --check
-      - run: cargo clippy -- -D warnings
+      - run: cargo clippy --locked -- -D warnings

  test:
    runs-on: ubuntu-latest
    steps:
      - uses: actions/checkout@v5
      - uses: dtolnay/rust-toolchain@1.86.0
-      - run: cargo test --tests
+      - run: cargo test --locked --tests

  check-macos:
    runs-on: macos-latest
@@ -28,7 +28,7 @@ jobs:
    steps:
      - uses: actions/checkout@v5
      - uses: dtolnay/rust-toolchain@1.86.0
-      - run: cargo test
+      - run: cargo test --locked

  publish:
    needs: test
@@ -37,7 +37,7 @@ jobs:
      - uses: actions/checkout@v5
      - uses: dtolnay/rust-toolchain@1.86.0
      - name: Publish to crates.io
-        run: cargo publish
+        run: cargo publish --locked
        env:
          CARGO_REGISTRY_TOKEN: ${{ secrets.CARGO_REGISTRY_TOKEN }}