Fetch the gate tools from URLs that exist
CI / rust-headless (push) Successful in 3m30s
CI / rust-ui (push) Successful in 13m45s

Both downloads in the previous commit were wrong, and the headless job is the
one that gates a push, so they would have turned a working gate red. nextest
names its Linux builds "linux" and "linux-arm"; a target triple is a 404, and
`curl -fsSL | tar` fails obscurely on the HTML that comes back. cargo-deny has
no 0.18.6.

cargo-deny is pinned to 0.20.2, the version a developer on this project
actually has installed, so a licence or source verdict cannot come out one way
on a laptop and another way in CI.

Co-Authored-By: Claude Opus 5 (1M context) <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01SPYebLiN2w4TqnHUYGdECq
This commit is contained in:
Metal Agent
2026-09-01 13:13:40 -07:00
co-authored by Claude Opus 5
parent 164ede11c4
commit 06f0c23859
+16 -8
View File
@@ -48,13 +48,17 @@ jobs:
set -euo pipefail
mkdir -p "$HOME/.local/bin"
arch="$(uname -m)"
# nextest names its Linux builds "linux" and "linux-arm"; a target
# triple here is a 404, and `curl -fsSL | tar` would fail obscurely.
case "$arch" in
x86_64) nextest_arch=x86_64-unknown-linux-gnu; deny_arch=x86_64-unknown-linux-musl ;;
aarch64) nextest_arch=aarch64-unknown-linux-gnu; deny_arch=aarch64-unknown-linux-musl ;;
x86_64) nextest_slug=linux; deny_arch=x86_64-unknown-linux-musl ;;
aarch64) nextest_slug=linux-arm; deny_arch=aarch64-unknown-linux-musl ;;
*) echo "unsupported runner architecture: $arch" >&2; exit 1 ;;
esac
curl -fsSL "https://get.nexte.st/latest/$nextest_arch" | tar zxf - -C "$HOME/.local/bin"
deny_version=0.18.6
curl -fsSL "https://get.nexte.st/latest/$nextest_slug" | tar zxf - -C "$HOME/.local/bin"
# Pinned, and pinned to what a developer on this project actually runs,
# so a licence or source verdict cannot differ between CI and a laptop.
deny_version=0.20.2
curl -fsSL "https://github.com/EmbarkStudios/cargo-deny/releases/download/${deny_version}/cargo-deny-${deny_version}-${deny_arch}.tar.gz" \
| tar zxf - -C "$HOME/.local/bin" --strip-components=1 --wildcards '*/cargo-deny'
echo "$HOME/.local/bin" >> "$GITHUB_PATH"
@@ -128,13 +132,17 @@ jobs:
set -euo pipefail
mkdir -p "$HOME/.local/bin"
arch="$(uname -m)"
# nextest names its Linux builds "linux" and "linux-arm"; a target
# triple here is a 404, and `curl -fsSL | tar` would fail obscurely.
case "$arch" in
x86_64) nextest_arch=x86_64-unknown-linux-gnu; deny_arch=x86_64-unknown-linux-musl ;;
aarch64) nextest_arch=aarch64-unknown-linux-gnu; deny_arch=aarch64-unknown-linux-musl ;;
x86_64) nextest_slug=linux; deny_arch=x86_64-unknown-linux-musl ;;
aarch64) nextest_slug=linux-arm; deny_arch=aarch64-unknown-linux-musl ;;
*) echo "unsupported runner architecture: $arch" >&2; exit 1 ;;
esac
curl -fsSL "https://get.nexte.st/latest/$nextest_arch" | tar zxf - -C "$HOME/.local/bin"
deny_version=0.18.6
curl -fsSL "https://get.nexte.st/latest/$nextest_slug" | tar zxf - -C "$HOME/.local/bin"
# Pinned, and pinned to what a developer on this project actually runs,
# so a licence or source verdict cannot differ between CI and a laptop.
deny_version=0.20.2
curl -fsSL "https://github.com/EmbarkStudios/cargo-deny/releases/download/${deny_version}/cargo-deny-${deny_version}-${deny_arch}.tar.gz" \
| tar zxf - -C "$HOME/.local/bin" --strip-components=1 --wildcards '*/cargo-deny'
echo "$HOME/.local/bin" >> "$GITHUB_PATH"