Skip to content
42 linesCodeBlameRaw
1[package]
2name = "g1t-runner"
3version = "0.3.4"
4edition.workspace = true
5license.workspace = true
6description = "The program inside a g1t sandbox: runs a GitHub Actions job, a merge queue state, a merge check, a build, a dependency update or a backup, and reports back. Also the self-hosted runner, g1t-runner register/run, on your own machines."
7
8[dependencies]
9g1t-actions = { path = "../actions" }
10# Reading lockfiles again after a security update (bump.rs).
11g1t-scan = { workspace = true }
12sha2 = "0.10"
13serde_yaml = "0.9"
14toml = "0.8"
15hex = "0.4"
16# Packing and unpacking artifacts as ZIP files (actions/zip.rs).
17flate2 = "1"
18crc32fast = "1"
19# Checking that a release of the self-hosted runner is g1t's.
20ed25519-dalek = "3"
21# Problem matchers' patterns (actions/matchers.rs).
22regex = { version = "1.13", default-features = false, features = ["std", "perf", "unicode-perl", "unicode-case"] }
23anyhow = "1"
24base64 = "0.22"
25serde = { workspace = true }
26serde_json = { workspace = true }
27# native-certs: a guarded sandbox re-signs HTTPS with a certificate the
28# runner adds to the system store (guard.rs), which webpki-roots never sees.
29ureq = { version = "2", features = ["json", "native-certs"] }
30# Brokered secrets on a self-hosted runner (actions/broker.rs): the job's
31# HTTPS to a brokered host is opened with a certificate made for the job,
32# and its requests are passed to g1t, which fills in the value. With ring,
33# which ureq's rustls already builds.
34rustls = { version = "0.23", default-features = false, features = ["ring", "std", "tls12"] }
35rcgen = { version = "0.13", default-features = false, features = ["ring", "pem"] }
36webpki-roots = "0.26"
37# The certificates' validity, as rcgen takes it.
38time = { version = "0.3", default-features = false, features = ["std"] }
39
40[target.'cfg(unix)'.dependencies]
41# A step's signals back to their defaults before it runs (actions/process.rs).
42libc = "0.2"