server/repository/znippy-package/Cargo.toml
[package]
name = "holger-znippy-package-repository"
# 0.1.4: local source DRIFTED from the published 0.1.3 under the same version number.
# crates.io bytes are immutable, so the edit can only reach consumers as a new
# version. Bumped 2026-08-23 by the release cascade: Gate B refused nornir 0.5.5
# because the published copies of this repo are stale.
version.workspace = true
edition = "2021"
authors = ["Ignalina ApS", "Vetra Automation AB"]
description = "The znippy-native repository backend for holger — serves .znippy archives AS the artifact over a small holger-native HTTP surface, imitating no upstream registry (contrast the znippy-{maven,npm,rpm,…} crates, which mimic a foreign ecosystem over the same store)."
license = "AGPL-3.0-only"
repository = "https://git.gunnar.rs/nordisk/holger"
categories = ["command-line-utilities","development-tools"]
keywords = ["znippy", "blake3", "archive", "artifacts", "airgap"]
# Development notes, agent instructions and machine-local tooling stay in the
# repository; they are not part of the published crate.
exclude = [
".nornir/",
]
[dependencies]
anyhow = "1.0.104"
traits = { package = "holger-traits", version = "3.0.0", path = "../../../traits" }
znippy-common = { version = "0.10.4", features = ["host-decompressors"] }
log = "0.4"
# Test-only: seal a real signed `.znippy` archive to exercise provenance verify.
# `cargo check` does not build dev-deps, so default builds stay light.
[dev-dependencies]
traits = { package = "holger-traits", path = "../../../traits", features = ["test-support"] }
znippy-compress = { version = "0.10.0" }
tempfile = "3"
# nornir-testmatrix functional-status emitter — gated, optional, compiled OUT for
# release. `--features testmatrix` turns the self-test emit calls into real rows
# that `nornir test` reads; OFF by default the dep is never pulled.
[dependencies.nornir-testmatrix]
version = "0.2.13"
optional = true
[features]
testmatrix = ["dep:nornir-testmatrix", "nornir-testmatrix/testmatrix"]
# Provenance verification (off by default). Enables znippy-common/sign and
# compiles the `with_archive_verified` constructor + its test module. Kept
# opt-in so the default dep graph does NOT require znippy-common/sign — that
# matters for transitive consumers (e.g. znippy's xtask -> nornir -> holger)
# that resolve znippy-common from crates.io, where 0.9.x has no `sign` feature
# until 0.9.7 is published. The holger workspace itself enables this where it
# wires verification (its [patch.crates-io] resolves znippy-common to local).
sign = ["znippy-common/sign"]