fallow/mise.toml at main · fallow-rs/fallow · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
# Optional pinned set of local development tools. Run `mise install` to get it.
# Contributors without mise can install each tool by hand at the version below.
#
# Rust is not pinned here. `rust-toolchain.toml` owns the Rust version through
# rustup.
#
# Keep each version in lockstep with CI. Where CI pins a version, this file
# uses the same version. `scripts/workflow-policy.test.mjs` fails when the CI
# node version or a `tool: name@version` pin changes and this file does not
# follow. The typos, cargo-deny and cargo-fallow actions fix their tool version
# in the action commit. The test does not check those three, so that a
# Dependabot action bump does not fail. Update them here by hand when you see
# the action bump.

[tools]
# Same major version as each `actions/setup-node` step in `ci.yml`.
node = "26"

# The lower bound of `engines.pnpm` in the root `package.json`, the same as the
# `packageManager` of `editors/vscode`, and the `pnpm/action-setup` steps in
# `ci.yml`, `commitlint.yml` and `contributors.yml`.
pnpm = "11.25.0"

# Same version as the typos action that the CI `typos` job pins:
# crate-ci/typos@512fc24f32f44ab01972217aaaf3dc86ec234d53
"aqua:crate-ci/typos" = "1.50.2"

# Same version as the cargo-deny action that the CI `deny` job pins:
# EmbarkStudios/cargo-deny-action@3c6349835b2b7b196a839186cb8b78e02f7b5f25
"aqua:EmbarkStudios/cargo-deny" = "0.20.2"

# Same version as the cargo-fallow action that the CI "Rust Structure" job pins:
# fallow-rs/cargo-fallow@b8ef4a6f2694b9b2ed9f3ea2b60630a9c28b8c81
"github:fallow-rs/cargo-fallow" = "0.2.0"

# CI installs these tools without a version, so this file pins a release.
# The aqua registry gives the x86_64 binary on Apple Silicon, and macOS
# without Rosetta cannot run it ("Bad CPU type"). The github backend selects
# the aarch64 release asset.
"github:rustsec/rustsec" = { version = "0.22.2", version_prefix = "cargo-audit/v" }
"aqua:nextest-rs/nextest/cargo-nextest" = "0.9.146"
"aqua:taiki-e/cargo-llvm-cov" = "0.9.1"

# Same version as the `insta` crate in `Cargo.lock`.
"aqua:mitsuhiko/insta" = "1.48.0"

# Git hook runner. `hk.pkl` defines the hooks. `pnpm bootstrap` installs the hooks.
hk = "2.4.0"
# hk evaluates `hk.pkl` with the pkl CLI.
pkl = "0.32.1"