anvilsign in

collin/anvil

1[workspace]
2resolver = "2"
3members = [
4 "crates/*",
5 "vendor/gitserver-core",
6]
7
8[workspace.package]
9version = "0.0.0"
10edition = "2024"
11license = "MIT OR Apache-2.0"
12repository = "https://github.com/richardscollin/anvil"
13rust-version = "1.95"
14
15[workspace.dependencies]
16# Internal crates
17anvil-core = { path = "crates/anvil-core" }
18anvil-ci = { path = "crates/anvil-ci" }
19anvil-git = { path = "crates/anvil-git" }
20anvil-web = { path = "crates/anvil-web" }
21anvil-ssh = { path = "crates/anvil-ssh" }
22
23anyhow = "1"
24argon2 = { version = "0.5", features = ["std"] }
25axum = "0.8"
26axum-extra = { version = "0.10", features = ["cookie"] }
27base64 = "0.22"
28bollard = "0.18"
29clap = { version = "4", features = ["derive"] }
30futures-util = "0.3"
31hmac = "0.12"
32lru = "0.12"
33gitserver-core = { path = "vendor/gitserver-core" }
34gix = { version = "0.84", default-features = false, features = ["sha1", "max-performance-safe", "blob-diff", "revision"] }
35gix-pack = { version = "0.71", features = ["sha1"] }
36maud = { version = "0.27", features = ["axum"] }
37pulldown-cmark = { version = "0.13", default-features = false, features = ["html"] }
38flate2 = "1"
39rand = "0.10"
40# HTTP client for the CD deploy webhook. No TLS feature on purpose: the deploy
41# receiver is host-local plaintext HTTP, and enabling rustls would drag in
42# aws-lc-rs and break the musl cross-compile (see the russh note below).
43# TLS via rustls with the *ring* provider only (`-no-provider` + an explicit
44# rustls/ring dep): aws-lc-rs needs cmake and breaks the zig musl
45# cross-compile, ring does not. anvil-git installs the provider at use time.
46# Used for the CD deploy webhook (anvil-ci) and HTTPS push mirroring
47# (anvil-git).
48reqwest = { version = "0.12", default-features = false, features = ["json", "rustls-tls-webpki-roots-no-provider"] }
49rustls = { version = "0.23", default-features = false, features = ["ring", "logging", "std", "tls12"] }
50# Used directly only for idempotent schema shims on existing databases; the
51# version tracks what toasty-driver-sqlite already pulls in.
52rusqlite = "0.39"
53serde = { version = "1", features = ["derive"] }
54serde_json = "1"
55serde_yaml = "0.9"
56sha2 = "0.10"
57similar = "2"
58# `default-onig` (C Oniguruma regex engine) over the pure-Rust `default-fancy`:
59# several times faster on large files, and zig's cc cross-compiles the C just
60# fine for the static musl build (verified via deploy/build.sh's toolchain).
61syntect = { version = "5", default-features = false, features = ["default-onig"] }
62tar = "0.4"
63thiserror = "2"
64time = { version = "0.3", features = ["serde", "formatting"] }
65toasty = { version = "0.7", features = ["sqlite"] }
66tokio = { version = "1", features = ["full"] }
67tokio-util = { version = "0.7", features = ["io"] }
68toml = "0.8"
69tower = "0.5"
70tower-http = { version = "0.6", features = ["trace", "fs"] }
71tracing = "0.1"
72tracing-subscriber = { version = "0.3", features = ["env-filter"] }
73
74# ssh — use the `ring` crypto backend instead of the default `aws-lc-rs`:
75# ring is far cheaper to compile (no cmake/perl) and cross-compiles cleanly
76# (zigbuild/musl), which matters for building images for the low-RAM VPS.
77russh = { version = "0.61", default-features = false, features = ["flate2", "ring", "rsa"] }
78# ssh-key parsing/fingerprinting, shared by anvil-core (storage) and anvil-ssh
79# (auth). Pinned to match russh's transitive ssh-key so fingerprints agree.
80ssh-key = "0.7.0-rc.10"