pub struct DependencyLock {
pub name: String,
pub source: String,
pub original_source: String,
pub git_url: String,
pub resolved_reference: String,
pub commit_sha: String,
pub cache_location: String,
pub integrity: String,
pub version: String,
}Expand description
One locked dependency entry ( / / ).
Mirrors a resolved [dependencies.*] entry from .sdkt.toml. Local path
deps record nothing but their source kind and absolute-ish path; Git deps
record the URL, the requested reference, the resolved commit SHA (when
known), the on-disk cache location, and an integrity hash of the cached
checkout when available. This is the seam where a future registry source
would add its own fields.
Fields§
§name: StringDependency name (key under [dependencies]).
source: StringSource kind: local or git.
original_source: StringOriginal source specifier as declared in .sdkt.toml:
the local path (path deps) or the git URL (git deps).
git_url: StringGit remote URL (empty for local path deps).
resolved_reference: StringRequested reference: tag/branch/rev value (empty for path deps).
commit_sha: StringResolved commit SHA (empty if not available / not a Git dep).
cache_location: StringOn-disk cache location for the resolved source (relative to the workspace root when sensible). Empty when not materialized.
integrity: StringIntegrity hash (“sha256:
version: StringOptional semver version constraint declared for this git dependency
(). Empty when none. Recorded for reproducibility / audit; an explicit
tag/branch/rev reference takes precedence over the constraint.