vincenzopalazzo
/
arti
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

CI: make fail when new deps not in misc/Cargo.lock 

Currently adding new deps can cause builds to not be reproducibles
because that new dependancies don't have their versions frozen in
misc/Cargo.lock.
This make so CI reject commits in that situation, with a message telling
what to do to fix the issue.
This commit is contained in:
Trinity Pointard 2021-09-12 10:20:53 +02:00
parent 1c08bb44c8
commit 193f518b6b
1 changed files with 3 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

3
.gitlab-ci.yml
View File

@ -16,6 +16,9 @@ rust-latest:
- cargo fmt -- --check
- cargo install cargo-audit
- cargo audit -D warnings
- cp misc/Cargo.lock Cargo.lock
- cargo fetch
- diff misc/Cargo.lock Cargo.lock || (echo 'Some new dependancies were added. Please run "./maint/reproducible_update_cargolock.sh" and commit.' && false)
tags:
- amd64