collin/anvil
870d159196f2e6d2d76d8c4e04965256472cd297 / Cargo.toml
| 1 | [workspace] |
| 2 | resolver = "2" |
| 3 | members = [ |
| 4 | "crates/*", |
| 5 | "vendor/gitserver-core", |
| 6 | ] |
| 7 | |
| 8 | [workspace.package] |
| 9 | version = "0.0.0" |
| 10 | edition = "2024" |
| 11 | license = "MIT OR Apache-2.0" |
| 12 | repository = "https://github.com/richardscollin/anvil" |
| 13 | rust-version = "1.95" |
| 14 | |
| 15 | [workspace.dependencies] |
| 16 | # Internal crates |
| 17 | anvil-core = { path = "crates/anvil-core" } |
| 18 | anvil-ci = { path = "crates/anvil-ci" } |
| 19 | anvil-git = { path = "crates/anvil-git" } |
| 20 | anvil-web = { path = "crates/anvil-web" } |
| 21 | anvil-ssh = { path = "crates/anvil-ssh" } |
| 22 | |
| 23 | anyhow = "1" |
| 24 | argon2 = { version = "0.5", features = ["std"] } |
| 25 | axum = "0.8" |
| 26 | axum-extra = { version = "0.10", features = ["cookie"] } |
| 27 | base64 = "0.22" |
| 28 | bollard = "0.18" |
| 29 | clap = { version = "4", features = ["derive"] } |
| 30 | futures-util = "0.3" |
| 31 | hmac = "0.12" |
| 32 | lru = "0.12" |
| 33 | gitserver-core = { path = "vendor/gitserver-core" } |
| 34 | gix = { version = "0.84", default-features = false, features = ["sha1", "max-performance-safe", "blob-diff", "revision"] } |
| 35 | gix-pack = { version = "0.71", features = ["sha1"] } |
| 36 | maud = { version = "0.27", features = ["axum"] } |
| 37 | rand = "0.10" |
| 38 | # HTTP client for the CD deploy webhook. No TLS feature on purpose: the deploy |
| 39 | # receiver is host-local plaintext HTTP, and enabling rustls would drag in |
| 40 | # aws-lc-rs and break the musl cross-compile (see the russh note below). |
| 41 | reqwest = { version = "0.12", default-features = false, features = ["json"] } |
| 42 | serde = { version = "1", features = ["derive"] } |
| 43 | serde_json = "1" |
| 44 | serde_yaml = "0.9" |
| 45 | sha2 = "0.10" |
| 46 | similar = "2" |
| 47 | # `default-onig` (C Oniguruma regex engine) over the pure-Rust `default-fancy`: |
| 48 | # several times faster on large files, and zig's cc cross-compiles the C just |
| 49 | # fine for the static musl build (verified via deploy/build.sh's toolchain). |
| 50 | syntect = { version = "5", default-features = false, features = ["default-onig"] } |
| 51 | tar = "0.4" |
| 52 | thiserror = "2" |
| 53 | time = { version = "0.3", features = ["serde", "formatting"] } |
| 54 | toasty = { version = "0.7", features = ["sqlite"] } |
| 55 | tokio = { version = "1", features = ["full"] } |
| 56 | tokio-util = { version = "0.7", features = ["io"] } |
| 57 | toml = "0.8" |
| 58 | tower = "0.5" |
| 59 | tower-http = { version = "0.6", features = ["trace", "fs"] } |
| 60 | tracing = "0.1" |
| 61 | tracing-subscriber = { version = "0.3", features = ["env-filter"] } |
| 62 | |
| 63 | # ssh — use the `ring` crypto backend instead of the default `aws-lc-rs`: |
| 64 | # ring is far cheaper to compile (no cmake/perl) and cross-compiles cleanly |
| 65 | # (zigbuild/musl), which matters for building images for the low-RAM VPS. |
| 66 | russh = { version = "0.61", default-features = false, features = ["flate2", "ring", "rsa"] } |
| 67 | # ssh-key parsing/fingerprinting, shared by anvil-core (storage) and anvil-ssh |
| 68 | # (auth). Pinned to match russh's transitive ssh-key so fingerprints agree. |
| 69 | ssh-key = "0.7.0-rc.10" |