[settings]
# Read rust version from rust-toolchain.toml (single source of truth
# for both rustup and mise).
idiomatic_version_file_enable_tools = ["rust"]

[tools]
rust = { version = "latest", components = "rustfmt,clippy" }
"github:casey/just" = "1.43.1"
# Versions are pinned (not `latest`) so a tool release can't break CI with no
# code change. Bump deliberately. (rust is intentionally left to
# rust-toolchain.toml via idiomatic_version_file_enable_tools above.)
helm = "4.2.0"
# Drives the out-of-tree CMake e2e scenario (e2e-cmake-out-of-tree, #394) so it
# runs on the Linux/macOS gate instead of skipping. The scenario itself is
# gnu/clang-only (`os = ["linux", "macos"]`), so cmake here is just the build
# driver on those runners.
cmake = "4.3.4"
# Test-coverage + sccache fallback. Listed here (not as separate
# CI install actions) so the same `mise install` populates every
# tool the repo needs.
"github:taiki-e/cargo-llvm-cov" = "0.8.7"
"github:mozilla/sccache" = "0.15.0"
# Dependency vulnerability auditing — `just audit`. The `cargo:`
# backend compiles from source (no prebuilt GitHub release matches
# cargo-audit cleanly because rustsec/rustsec is a monorepo).
"cargo:cargo-audit" = "0.22.1"
# NOTE: `cargo-edit` (for `just bump`) is deliberately NOT listed here. It is a
# local, maintainer-only tool used to cut a release; CI never bumps, so pinning
# it would make every `mise install` compile it from source (it pulls in gix
# etc.) for no CI benefit — and the compile is a real reliability cost (it
# flaked a rustup component download). `just bump` guards for it with an
# install hint instead.
