Cargo.toml

[package]
name = "cv-builder"
version = "0.1.0"
edition = "2024"

[dependencies]
axum = "0.8"
tokio = { version = "1", features = ["full"] }
tokio-stream = "0.1"
bytes = "1"
tower-http = { version = "0.6", features = ["fs", "trace", "cors"] }
serde = { version = "1", features = ["derive"] }
serde_json = "1"
serde_yaml = "0.9"
sqlx = { version = "0.8", features = ["runtime-tokio", "postgres", "uuid", "chrono", "macros"] }
uuid = { version = "1", features = ["v4", "serde"] }
chrono = { version = "0.4", features = ["serde"] }
typst = "0.14"
typst-pdf = "0.14"
typst-kit = { version = "0.14", features = ["fonts", "embed-fonts"] }
anyhow = "1"
tracing = "0.1"
tracing-subscriber = { version = "0.3", features = ["env-filter"] }
reqwest = { version = "0.12", default-features = false, features = ["json", "rustls-tls", "stream"] }
# jsonwebtoken 10 dropped the built-in crypto backend: exactly one of
# `rust_crypto` / `aws_lc_rs` must be enabled or sign/verify panics at runtime.
# We pick `rust_crypto` (pure Rust, no C toolchain) — it covers Keycloak's RS256.
jsonwebtoken = { version = "10", features = ["rust_crypto"] }
pulldown-cmark = { version = "0.13", default-features = false }
regex = "1"

[dev-dependencies]
tower = { version = "0.5", features = ["util"] }
http-body-util = "0.1"
mime = "0.3"

[profile.release]
opt-level = 3
lto = "thin"