From c81a6af2cffb5b8fc5bb4eb6f93ce7cab49f9424 Mon Sep 17 00:00:00 2001
From: Michael Aaron Murphy <michael@mmurphy.dev>
Date: Sat, 10 Jan 2026 04:48:17 +0100
Subject: [PATCH] build: use cargo vendor --locked

---
 cargo.just | 13 +++++++------
 1 file changed, 7 insertions(+), 6 deletions(-)

diff --git a/cargo.just b/cargo.just
index 7926626..4250705 100644
--- a/cargo.just
+++ b/cargo.just
@@ -2,7 +2,7 @@ cargo-target-dir := env('CARGO_TARGET_DIR', 'target')
 
 # Compile with debug profile
 build-debug *args:
-    cargo build {{args}}
+    cargo build {{ args }}
 
 # Compile with release profile
 build-release *args: (build-debug '--release' args)
@@ -12,7 +12,7 @@ build-vendored *args: vendor-extract (build-release '--frozen --offline' args)
 
 # Check for errors and linter warnings
 check *args:
-    cargo clippy --all-features {{args}} -- -W clippy::pedantic
+    cargo clippy --all-features {{ args }} -- -W clippy::pedantic
 
 # Runs a check with JSON message format for IDE integration
 check-json: (check '--message-format=json')
@@ -29,23 +29,24 @@ clean-dist: clean
 
 # Run the application for testing purposes
 run *args:
-    env RUST_LOG=debug RUST_BACKTRACE=full cargo run {{args}} --release
+    env RUST_LOG=debug RUST_BACKTRACE=full cargo run {{ args }} --release
 
 # Run `cargo test`
 test *args:
-    cargo test {{args}}
+    cargo test {{ args }}
 
 # Vendor Cargo dependencies locally
 [no-cd]
 vendor:
     mkdir -p .cargo
-    cargo vendor | head -n -1 > .cargo/config.toml
+    cargo vendor --locked | head -n -1 > .cargo/config.toml
     echo 'directory = "vendor"' >> .cargo/config.toml
     tar pcf vendor.tar vendor
     rm -rf vendor
 
 # Extracts vendored dependencies
-[no-cd, private]
+[no-cd]
+[private]
 vendor-extract:
     rm -rf vendor
     tar pxf vendor.tar