Skip to content

chore: commit package-lock.json and add rust-version MSRV to workspace Cargo.toml (#159, #167) - #186

Open
ghzhost wants to merge 1 commit into
MergeFi:mainfrom
ghzhost:chore/reproducibility-lockfile-and-msrv-159-167
Open

chore: commit package-lock.json and add rust-version MSRV to workspace Cargo.toml (#159, #167)#186
ghzhost wants to merge 1 commit into
MergeFi:mainfrom
ghzhost:chore/reproducibility-lockfile-and-msrv-159-167

Conversation

@ghzhost

@ghzhost ghzhost commented Aug 21, 2026

Copy link
Copy Markdown

Summary of Changes

  1. Commit package-lock.json for deploy script dependencies (package-lock.json is gitignored, so @stellar/stellar-sdk's resolved dependency tree isn't reproducible #167):

    • Removed package-lock.json from .gitignore.
    • Generated and committed package-lock.json to ensure reproducible @stellar/stellar-sdk and transitive dependency resolution across machines.
  2. Add rust-version (MSRV) metadata to workspace Cargo.toml (Workspace Cargo.toml has no rust-version (MSRV) field #159):

    • Added rust-version = "1.95.0" under [workspace.package] matching the documented and tested toolchain version.

Validation

  • npm i --package-lock-only executed cleanly without audit issues.
  • package-lock.json tracks exact dependency tree.

…e Cargo.toml (MergeFi#159, MergeFi#167)

- Remove package-lock.json from .gitignore and commit resolved package-lock.json for deploy scripts (MergeFi#167)
- Add rust-version = "1.95.0" to [workspace.package] in Cargo.toml matching tested toolchain (MergeFi#159)
@vercel

vercel Bot commented Aug 21, 2026

Copy link
Copy Markdown

Someone is attempting to deploy a commit to the chonilius' projects Team on Vercel.

A member of the Team first needs to authorize it.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant