40 lines
1.4 KiB
TOML
40 lines
1.4 KiB
TOML
[package]
|
|
name = "hive-forge"
|
|
edition.workspace = true
|
|
version.workspace = true
|
|
|
|
[[bin]]
|
|
name = "hive-forge"
|
|
path = "src/main.rs"
|
|
|
|
[dependencies]
|
|
anyhow = { workspace = true }
|
|
clap = { workspace = true }
|
|
# `sync` = blocking client (hive-forge is a blocking CLI). TLS backend
|
|
# comes from workspace feature unification on reqwest: the
|
|
# `rustls-tls-native-roots` feature below applies to forgejo-api's
|
|
# internal client too (same compiled reqwest), so the hive-CA trust
|
|
# note keeps holding.
|
|
forgejo-api = { workspace = true, features = ["sync"] }
|
|
url.workspace = true
|
|
reqwest = { workspace = true, features = [
|
|
"json",
|
|
# Trust the OS/system CA store (rustls-native-certs), not only the
|
|
# bundled webpki roots, so hive-forge validates the hive gateway's
|
|
# self-signed leaf once the hive CA is in the agent's trust store
|
|
# (embedded into agent flakes via security.pki.certificateFiles). The
|
|
# bundled webpki roots stay enabled (workspace `rustls-tls`), so this is
|
|
# additive — public CAs still validate; the native store adds the hive
|
|
# CA. Cargo unifies features across the build, so native-root loading is
|
|
# enabled for every reqwest client; harmless (a superset of roots, and
|
|
# on NixOS the system store already includes the Mozilla bundle).
|
|
"rustls-tls-native-roots",
|
|
"rustls-tls",
|
|
"blocking",
|
|
"multipart",
|
|
] }
|
|
serde = { workspace = true }
|
|
serde_json = { workspace = true }
|
|
|
|
[lints]
|
|
workspace = true
|