Commit 193f518b authored by trinity-1686a's avatar trinity-1686a
Browse files

CI: make fail when new deps not in misc/Cargo.lock 

Currently adding new deps can cause builds to not be reproducibles
because that new dependancies don't have their versions frozen in
misc/Cargo.lock.
This make so CI reject commits in that situation, with a message telling
what to do to fix the issue.
parent 1c08bb44

.gitlab-ci.yml

+3 −0
Original line number Diff line number Diff line
@@ -16,6 +16,9 @@ rust-latest: 
    - cargo fmt -- --check

    - cargo install cargo-audit

    - cargo audit -D warnings

    - cp misc/Cargo.lock Cargo.lock

    - cargo fetch

    - diff misc/Cargo.lock Cargo.lock || (echo 'Some new dependancies were added. Please run "./maint/reproducible_update_cargolock.sh" and commit.' && false)

  tags:

    - amd64