tree cd8bc3894496da0f2f9c009bb145f91ca58073db
parent 75e587f483938ecb4ccf6c16d9958eb89c6b4519
author Daniel Wagner-Hall <dwagnerhall@apple.com> 1725990041 +0200
committer GitHub <noreply@github.com> 1725990041 +0000
gpgsig -----BEGIN PGP SIGNATURE-----
 
 wsFcBAABCAAQBQJm4ISoCRC1aQ7uu5UhlAAArPEQAEPKsGDaehF+cTmbST6VbiYn
 5CqGuCTFeQJ/ci/9nLsEIHCp+8OO6M3eEPcQcR0A/DvTEoG4SgwP0JKtnBXWODWn
 uPxrOplHhU4nVp7hJaoe9F08TrQEPA+SncyovPevRNCxjKBgDacMjglxJ0Sfz4Ew
 VShhpW8P5u893wZCozM98BTIdaXEhQiVEqZkz67TSurafEwoQWY3MRPO6wqhRuAA
 MJLU/QVqrKURZMSfe741CIz2sSRvX0+4hBlScWXjyp5mfPhqWK50tXFMYoABvwwd
 prhQ1SIVw3k/GUdhVMIBLDu1V35R7KafGMBf/1q5mTFSbW6qsMJlLSQd+7zkoOeE
 kHyLye8pgyIR9F5OSHGVLflYy+2koYy0bE+Ci0n1QsFORguQFnyVAVu6Z/Z4aqEl
 3xrY9HCZaRkkoOyxA0soMl/53nwRoM+kO0od6xCS5X35FERW/1RNou/ZE95+7/+s
 b+aoz5djbaJM3wkbfptnnJn3xbt9iSGqRwOFOfOFoTXdiZGd/7blNh67l9b9do1C
 sVItYKTmaOHUOt7IodRpXjBjTmuM1VACGvpov/9b8KyE0dnGAfXNTVPrJzTIoVIg
 i6ITiafm2lfSr9id/JFtCSeYHrtqAQzhDyCUXKAo802vrDu058X8GZBqes6llrIw
 +ctNKUSzKuBPWBatkdAL
 =GKij
 -----END PGP SIGNATURE-----
 

Error on absolute src paths (#2853)

These lead to non-deterministic lockfile contents because they depend on
the depth of the directory the repo is checked out into.

This may possibly introduce false positives because of hard-coded
/dev/null or similar in actual published crates - hopefully it doesn't
(ideally people aren't publishing this kind of thing to crates.io), but
if it does, we can loosen those to a warning or add a per-crate opt-out
or something.