Fix Cargo.lock mismatch in generated sdist (#235)

Author: Alex-Izquierdo

.github/workflows/ci.yml

@@ -244,6 +244,15 @@ jobs:
           args: --out dist
           rust-toolchain: stable
           working-directory: crates/jiter-python
+      - name: verify sdist lockfile for locked vendoring
+        run: |
+          set -euxo pipefail
+          sdist_path=$(echo crates/jiter-python/dist/*.tar.gz)
+          sdist_name=$(basename "$sdist_path" .tar.gz)
+          mkdir sdist-check
+          tar -xzf "$sdist_path" -C sdist-check
+          cd "sdist-check/$sdist_name"
+          cargo vendor --locked > /dev/null
       - uses: actions/upload-artifact@v4
         with:
           name: pypi_files_sdist

Cargo.toml

@@ -1,5 +1,6 @@
 [workspace]
-members = ["crates/jiter", "crates/jiter-python", "crates/fuzz"]
+members = ["crates/jiter", "crates/jiter-python"]
+exclude = ["crates/fuzz"]
 resolver = "2"
 
 [workspace.package]

crates/fuzz/Cargo.toml

@@ -1,9 +1,10 @@
 [package]
 name = "fuzz"
 publish = false
-version = {workspace = true}
-edition = {workspace = true}
-authors = {workspace = true}
+# Internal-only crate (`publish = false`): keep version decoupled from release crates.
+version = "0.0.0"
+edition = "2021"
+authors = ["Samuel Colvin <samuel@pydantic.dev>"]
 
 [package.metadata]
 cargo-fuzz = true