server/repository/znippy-gem/Cargo.toml
[package]
name = "holger-znippy-gem-repository"
# 0.1.4: local source DRIFTED from the published 0.1.3 under the same version number.
# crates.io bytes are immutable, so the edit can only reach consumers as a new
# version. Bumped 2026-08-23 by the release cascade: Gate B refused nornir 0.5.5
# because the published copies of this repo are stale.
version = "3.1.1"
edition = "2021"
authors = ["Ignalina ApS", "Vetra Automation AB"]
description = "RubyGems repository backend for holger — serves .gem bytes plus a REAL compact-index (`versions`, `info/{name}`) synthesized from a read-only znippy archive, which is what bundler resolves against."
license = "AGPL-3.0-only"
repository = "https://git.gunnar.rs/nordisk/holger"
categories = ["command-line-utilities","development-tools"]
keywords = ["gem", "rubygems", "ruby", "compact-index", "airgap"]
# Development notes, agent instructions and machine-local tooling stay in the
# repository; they are not part of the published crate.
exclude = [
".nornir/",
]
[dependencies]
anyhow = "1.0.104"
traits = { package = "holger-traits", version = "3.0.0", path = "../../../traits" }
znippy-common = { version = "0.10.4", features = ["host-decompressors"] }
# Compact-index `info/{name}` `checksum:` field — a REAL SHA-256 of the served
# gem bytes (bare hex). Modern bundler parses `checksum:` as a SHA-256 and aborts
# on mismatch, so a blake3 value there breaks `bundle install`. REUSE-law: the ONE
# shared content-hash primitive (edda `nornir_hash::sha256_hex`) replaces `Sha256`.
nornir-hash = { version = "0.1.1" }
log = "0.4"
# nornir-testmatrix functional-status emitter — gated, optional, compiled OUT for
# release. `--features testmatrix` turns the self-test emit calls into real rows
# that `nornir test` reads; OFF by default the dep is never pulled.
[dependencies.nornir-testmatrix]
version = "0.2.13"
optional = true
[features]
testmatrix = ["dep:nornir-testmatrix", "nornir-testmatrix/testmatrix"]
[dev-dependencies]
traits = { package = "holger-traits", path = "../../../traits", features = ["test-support"] }
# Plugin READ-API test: compress a real `.gem` fixture WITH the gem plugin (so the
# name/version/platform columns are written from metadata.gz), then serve via the
# view + assert the compact-index is built from those coords (R1).
znippy-compress = { version = "0.10.0" }
flate2 = "1"
tar = "0.4"
tempfile = "3"
# Independent SHA-256 oracle: the read-view test recomputes the expected
# `checksum:` with a *different* implementation than production (which now consumes
# the edda `nornir_hash` leaf), so the assert stays a real cross-check.
sha2 = "0.11"