Merge pull request #8 from AdaWorldAPI/claude/atlas-spatial-hydration-fp4dyc

Stop committing Cargo.lock

Author: AdaWorldAPI

.github/workflows/binaries.yml

@@ -110,7 +110,7 @@ jobs:
           # dependency graph into the binary so consumers can recover
           # the SBOM directly from the binary via `cargo audit bin`.
           cargo install --locked cargo-auditable --version 0.7.0
-          cargo auditable build --target ${target} --release -p tract-cli --locked
+          cargo auditable build --target ${target} --release -p tract-cli
           mkdir tract-$name
           cp target/${target}/release/tract tract-${name}
           tar czf tract-${name}.tgz tract-${name}

.gitignore

@@ -20,3 +20,9 @@ proptest-regressions
 wheelhouse
 target-bisector*
 /nvidia
+
+# Cargo.lock is not committed in this fork: the workspace consumes the
+# AdaWorldAPI/ndarray fork by git branch, and a committed lock pins a stale
+# revision of it (measured: the lock held ndarray e55af0e3 while the branch
+# was at f43338fb, so builds silently used a two-merge-old dependency).
+Cargo.lock