chore: license under Apache-2.0 and fetch mlx-rs over public https #10

Merged

peterswimm merged 1 commit from chore/apache-license-https-deps into main

2026-10-10 20:55:00 +00:00

peterswimm commented

2026-10-10 20:45:39 +00:00

Owner

Scope

This repo, mlx-rs-mirror and mlx-c went public on 2026-10-10 so a public clone of toilville_rituals can build Tier 1 (Toilville/toilville_rituals#428). This PR follows through:

License. Adds LICENSE (Apache-2.0). Cargo.toml license moves from LicenseRef-proprietary to Apache-2.0, matching toilville_rituals (#516 there).
mlx-rs over public HTTPS. The dependency now comes from https://git.toilville.dev/Toilville/mlx-rs-mirror.git at 8d30414. That's the commit whose mlx-c submodule is HTTPS too (mlx-rs-mirror#6, merged), so nothing needs a credential.
CI. Drops the insteadOf rewrite from SSH to HTTPS-with-token, and with it the FORGE_CI_HTTPS_TOKEN secret, because nothing is fetched over SSH any more. The secret can be deleted once this merges.

After merging, please tag v0.1.6. toilville_rituals pins this commit by rev until that tag exists.

Testing

cargo metadata --features mlx with an empty CARGO_HOME, GIT_CONFIG_GLOBAL=/dev/null and GIT_TERMINAL_PROMPT=0 (no keys and no credential helper) resolves the full graph. It also checks out mlx-sys/src/mlx-c from the public submodule.

Impact Statement

Existing features: none.
Public APIs / contracts: none.
Schemas: none.
Data / artifacts: LICENSE is new.
Integrations: CI no longer needs FORGE_CI_HTTPS_TOKEN.
Mappings: none.
Backward compatibility: existing tags are unchanged, so consumers pinned to v0.1.5 over SSH keep working.

Docs

None. The README's "History" section describes the old SSH URL as history, which is still accurate.

## Scope This repo, `mlx-rs-mirror` and `mlx-c` went public on 2026-10-10 so a public clone of toilville_rituals can build Tier 1 (Toilville/toilville_rituals#428). This PR follows through: - **License.** Adds `LICENSE` (Apache-2.0). `Cargo.toml` `license` moves from `LicenseRef-proprietary` to `Apache-2.0`, matching toilville_rituals (#516 there). - **`mlx-rs` over public HTTPS.** The dependency now comes from `https://git.toilville.dev/Toilville/mlx-rs-mirror.git` at `8d30414`. That's the commit whose `mlx-c` submodule is HTTPS too (mlx-rs-mirror#6, merged), so nothing needs a credential. - **CI.** Drops the `insteadOf` rewrite from SSH to HTTPS-with-token, and with it the `FORGE_CI_HTTPS_TOKEN` secret, because nothing is fetched over SSH any more. The secret can be deleted once this merges. After merging, please tag **`v0.1.6`**. toilville_rituals pins this commit by `rev` until that tag exists. ## Testing `cargo metadata --features mlx` with an **empty `CARGO_HOME`**, `GIT_CONFIG_GLOBAL=/dev/null` and `GIT_TERMINAL_PROMPT=0` (no keys and no credential helper) resolves the full graph. It also checks out `mlx-sys/src/mlx-c` from the public submodule. ## Impact Statement - Existing features: none. - Public APIs / contracts: none. - Schemas: none. - Data / artifacts: `LICENSE` is new. - Integrations: CI no longer needs `FORGE_CI_HTTPS_TOKEN`. - Mappings: none. - Backward compatibility: existing tags are unchanged, so consumers pinned to `v0.1.5` over SSH keep working. ## Docs None. The README's "History" section describes the old SSH URL as history, which is still accurate.

peterswimm added 1 commit

2026-10-10 20:45:39 +00:00

chore: license under Apache-2.0 and fetch mlx-rs over public https

CI / MLX feature (macOS + Apple Silicon) (pull_request) Failing after 4s

Details

CI / lint-workflows (pull_request) Successful in 15s

Details

PR policy check / policy-gate (pull_request) Successful in 0s

Details

CI / Core (default features, no MLX) (pull_request) Successful in 40s

Details

9256a8f878

forge-kv-cache, mlx-rs-mirror and mlx-c went public on 2026-10-10 so a
public clone of toilville_rituals can build Tier 1 (toilville_rituals#428).

- LICENSE (Apache-2.0), and Cargo license moves from LicenseRef-proprietary
  to Apache-2.0, matching toilville_rituals.
- mlx-rs now comes from https://git.toilville.dev/Toilville/mlx-rs-mirror.git
  at 8d30414, the commit whose mlx-c submodule is also https
  (mlx-rs-mirror#6). Resolves with no credentials at all.
- CI drops the ssh->https+token insteadOf rewrite and its
  FORGE_CI_HTTPS_TOKEN: nothing is fetched over ssh any more.

peterswimm merged commit 3fa45644da into main

2026-10-10 20:55:00 +00:00

peterswimm deleted branch chore/apache-license-https-deps

2026-10-10 20:55:00 +00:00

peterswimm referenced this pull request from a commit

2026-10-10 20:55:02 +00:00

Merge pull request 'chore: license under Apache-2.0 and fetch mlx-rs over public https' (#10) from chore/apache-license-https-deps into main

peterswimm referenced this pull request

2026-10-10 21:22:23 +00:00

fix(ci): stop the MLX job's PATH step failing on Apple Silicon #11

peterswimm referenced this pull request from a commit

2026-10-10 21:22:24 +00:00