[JacobStephens2]

Summary

Closes #275

This pull request changes no files. main fixed the failure in #274 while this branch was underway, and CI on main is green again at 59fd86c. Merging this only closes #275; closing it unmerged and closing #275 by hand does the same.

Both jobs in #275 failed in one test, the_binary_never_links_openssl, and no commit caused it: Rust 1.99.0 was released, the CI cache key changed, and the registry started with the host's crates only.

362b9ca   cargo tree --target all --offline   needs android_system_properties, can't download: fails
#274      read Cargo.lock                     no registry needed                    <- on main, kept
branch    cargo tree --target all --locked    downloads the missing crates          <- dropped in the merge

The branch's two commits swapped --offline for --locked. They conflicted with #274 on the same test. The merge takes main's version whole: it is already reviewed and merged, it is stricter (dev-dependencies count too), and it never touches the network.

Seam tested. None added; the branch's tree equals main's.

Evidence

• Before: main at 362b9ca, CI run 36863646811, both jobs:

  test the_binary_never_links_openssl ... FAILED
  error: failed to download `android_system_properties v0.1.6`
    attempting to make an HTTP request, but --offline was specified
  

  After: main at 59fd86c, CI run 36882844210: success.
• git diff origin/main on this branch after the merge: empty.
• This pull request's own CI run 36884518840: test and test-macos pass.
• Locally on the merged branch, Rust 1.98.1: cargo fmt --check, cargo clippy --all-targets -- -D warnings and the full cargo test pass.
• The dropped --locked change did work on a registry holding only the host's crates (3 passed, where --offline failed as above), and still caught native-tls when it was added to reqwest's features. It is in the branch history, commits cc7ecf2 and the one after.

Unaddressed findings

The review ran on the --locked change, before the merge with main replaced it.

Standards

• package_list() still passes --offline: left as is. The reviewer judged it correct, and cargo package --list --offline passed on the cold registry in both failing jobs.
• (Addressed before the merge, now moot: the comment moved beside the flag, and "Windows and Android" became "other platforms".)

Spec

• None skipped. The one finding, that only a green CI run on Rust 1.99.0 confirms the whole suite, is answered by run 36882844210 on main.

Merge Danger

Door: two-way

No file changes.

Blast Radius: none

🤖 Generated with Claude Code