ogar-from-{ruff,rails}: rev-pin ruff to 61ce2b49 (codex P1 on #149)

ogar-from-ruff reads ruff_spo_triplet::Model::inherits (added in ruff #40).
With no committed Cargo.lock, the floating `branch = "main"` pin could
resolve to a ruff rev WITHOUT that field on a clean build and fail to
compile — and the prior commit's '61ce2b49' claim didn't travel. Pin all
three ruff refs (ruff_spo_triplet + ruff_spo_address in ogar-from-ruff,
ruff_ruby_spo in ogar-from-rails) to the exact rev 61ce2b49 (ruff main at
the #40 merge). Same rev across both crates: they share ruff_spo_triplet
internally, so a mismatch would double-check-out ruff.

Verified: ruff re-locks to 61ce2b49; ogar-from-ruff 48 tests + ogar-from-rails
green; workspace check + clippy -D warnings clean.

Author: claude

crates/ogar-from-rails/Cargo.toml

@@ -19,5 +19,7 @@ serde = [
 [dependencies]
 ogar-vocab = { path = "../ogar-vocab" }
 ogar-from-ruff = { path = "../ogar-from-ruff" }
-ruff_ruby_spo = { git = "https://github.com/AdaWorldAPI/ruff", branch = "main" }
+# Same exact ruff rev as ogar-from-ruff (they share ruff_spo_triplet
+# internally; a rev mismatch double-checks-out ruff). Bump in lockstep.
+ruff_ruby_spo = { git = "https://github.com/AdaWorldAPI/ruff", rev = "61ce2b490fc3c432d36c44eceed08125f838b405" }
 serde = { workspace = true, optional = true }

crates/ogar-from-ruff/Cargo.toml

@@ -14,6 +14,13 @@ serde = ["dep:serde", "ogar-vocab/serde"]
 
 [dependencies]
 ogar-vocab = { path = "../ogar-vocab" }
-ruff_spo_triplet = { git = "https://github.com/AdaWorldAPI/ruff", branch = "main" }
-ruff_spo_address = { git = "https://github.com/AdaWorldAPI/ruff", branch = "main" }
+# ruff pinned to an exact rev (not floating `branch = "main"`): this crate
+# reads `ruff_spo_triplet::Model::inherits`, added in ruff PR #40. With no
+# committed Cargo.lock, a floating branch could resolve `main` to a rev
+# WITHOUT that field and fail to compile. `61ce2b49` is ruff main at the #40
+# merge. Both ruff crates MUST share one rev (they depend on ruff_spo_triplet
+# internally; a mismatch double-checks-out ruff). Bump in lockstep with
+# ogar-from-rails.
+ruff_spo_triplet = { git = "https://github.com/AdaWorldAPI/ruff", rev = "61ce2b490fc3c432d36c44eceed08125f838b405" }
+ruff_spo_address = { git = "https://github.com/AdaWorldAPI/ruff", rev = "61ce2b490fc3c432d36c44eceed08125f838b405" }
 serde = { workspace = true, optional = true }