Focused Rust dependency-maintenance pass from the 2026-05-23 security/freshness review. No CVEs; one advisory cleared and one deprecated crate replaced. - rand 0.9.2 → 0.9.4 (lockfile): clears RUSTSEC-2026-0097 (unsound with a custom logger using rand::rng()). Semver-compatible; rand 0.10 is a separate major. - Compatible-update sweep: ~90 lockfile-only patch/minor bumps (bevy 0.18.0→ 0.18.1, clap 4.5→4.6, rayon 1.11→1.12, pathfinding 4.14→4.15, uuid 1.20→1.23, zerocopy, serde_json, tracing-subscriber, etc.). cargo test green. - serde_yaml 0.9 (deprecated/archived upstream) → serde_norway 0.9, an actively maintained drop-in fork. In the server it is test-only (poi.rs round-trip, trait_modifiers.rs fixture, tests/news_ticker.rs) so it moves to dev-dependencies; line-previewer parses dialogue/monologue pool YAML at runtime, so it keeps it as a normal dependency. API is identical (from_str/ to_string). news_ticker.rs also picks up its share of the #967 clippy sweep (HashSet/HashMap → BTree, doc-list indent) since it is the same file as the serde rename. Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>
55 lines
1.9 KiB
TOML
55 lines
1.9 KiB
TOML
[package]
|
|
name = "settled-reach-server"
|
|
version = "0.2.0"
|
|
edition = "2021"
|
|
publish = false
|
|
|
|
[dependencies]
|
|
bevy_ecs = "0.18"
|
|
bevy_app = "0.18"
|
|
# multi_threaded enables Bevy's parallel system executor (no explicit import needed —
|
|
# bevy_ecs detects the feature on its bevy_tasks dependency at compile time).
|
|
bevy_tasks = { version = "0.18", features = ["multi_threaded"] }
|
|
# par_iter infrastructure for data-parallel systems. Not yet called — candidate
|
|
# systems marked with TODO comments. Active use begins when profiling shows bottlenecks.
|
|
rayon = "1"
|
|
serde = { version = "1", features = ["derive"] }
|
|
ron = "0.8"
|
|
rmp-serde = "1"
|
|
rand = "0.9"
|
|
rand_chacha = "0.9"
|
|
pathfinding = "4.11"
|
|
thiserror = "2"
|
|
tracing = "0.1"
|
|
tracing-subscriber = { version = "0.3", features = ["env-filter", "json"] }
|
|
clap = { version = "4", features = ["derive"] }
|
|
crossbeam-channel = "0.5"
|
|
sysinfo = "0.35"
|
|
serde_json = "1"
|
|
rusqlite = { version = "0.32", features = ["bundled"] }
|
|
bytemuck = "1"
|
|
png = "0.17"
|
|
toml = "0.8"
|
|
aho-corasick = "1"
|
|
# Economics simulation — Leontief + tâtonnement + D-180 event port (#821)
|
|
econ-sim = { path = "../tooling/econ-sim" }
|
|
|
|
[features]
|
|
default = ["gauntlet"]
|
|
gauntlet = []
|
|
|
|
[dev-dependencies]
|
|
# Maintained drop-in fork of the deprecated serde_yaml 0.9 (#966). Test-only:
|
|
# the YAML round-trip in poi.rs and the trait-config fixture in trait_modifiers.rs.
|
|
serde_norway = "0.9"
|
|
|
|
# ---------------------------------------------------------------------------
|
|
# Explicit test target for the Layer 3 integration module (D-030, ticket #200).
|
|
# tests/integration/mod.rs cannot be auto-discovered by cargo (only top-level
|
|
# *.rs files in tests/ are auto-discovered). This declaration makes it a named
|
|
# test binary: `cargo test --test integration_layer3`.
|
|
# ---------------------------------------------------------------------------
|
|
[[test]]
|
|
name = "integration_layer3"
|
|
path = "tests/integration/mod.rs"
|