[]
# Read rust version from rust-toolchain.toml (single source of truth
# for both rustup and mise).
= ["rust"]
[]
= { = "latest", = "rustfmt,clippy" }
= "1.43.1"
# Versions are pinned (not `latest`) so a tool release can't break CI with no
# code change. Bump deliberately. (rust is intentionally left to
# rust-toolchain.toml via idiomatic_version_file_enable_tools above.)
= "4.2.0"
# Test-coverage + sccache fallback. Listed here (not as separate
# CI install actions) so the same `mise install` populates every
# tool the repo needs.
= "0.8.7"
= "0.15.0"
# Dependency vulnerability auditing — `just audit`. The `cargo:`
# backend compiles from source (no prebuilt GitHub release matches
# cargo-audit cleanly because rustsec/rustsec is a monorepo).
= "0.22.1"
# NOTE: `cargo-edit` (for `just bump`) is deliberately NOT listed here. It is a
# local, maintainer-only tool used to cut a release; CI never bumps, so pinning
# it would make every `mise install` compile it from source (it pulls in gix
# etc.) for no CI benefit — and the compile is a real reliability cost (it
# flaked a rustup component download). `just bump` guards for it with an
# install hint instead.