v0.18.4: cargo --locked everywhere — hard-fail dependency races

2026-05-09 20:30:34 -07:00
parent 385c9f094c
commit d94451954c
4 changed files with 23 additions and 5 deletions
@@ -28,7 +28,7 @@ jobs:
    steps:
      - uses: actions/checkout@v5
      - uses: dtolnay/rust-toolchain@1.86.0
-      - run: cargo test
+      - run: cargo test --locked

  publish:
    needs: test
@@ -37,7 +37,7 @@ jobs:
      - uses: actions/checkout@v5
      - uses: dtolnay/rust-toolchain@1.86.0
      - name: Publish to crates.io
-        run: cargo publish
+        run: cargo publish --locked
        env:
          CARGO_REGISTRY_TOKEN: ${{ secrets.CARGO_REGISTRY_TOKEN }}