[build] pin whisper-rs dependency to a specific commit for reproducible builds; update documentation accordingly

docs/ci.md

@@ -14,6 +14,10 @@ Example GitHub Actions job (outline)
   steps:
   - uses: actions/checkout@v4
   - uses: dtolnay/rust-toolchain@stable
+  - name: Print resolved whisper-rs rev
+    run: |
+      echo "Resolved whisper-rs revision:" && \
+      awk '/name = "whisper-rs"/{f=1} f&&/source = "git\+.*whisper-rs#/{match($0,/#([0-9a-f]{7,40})"/,m); if(m[1]){print m[1]; exit}}' Cargo.lock
   - name: Build
     run: cargo build --all-targets --locked
   - name: Test

docs/development.md

@@ -13,6 +13,12 @@ Rust toolchain
   - rustup install stable
   - rustup default stable
 
+Dependency pinning
+- We pin whisper-rs (git dependency) to a known-good commit in Cargo.toml for reproducibility.
+- To bump it, resolve/test the desired commit locally, then run:
+  - cargo update -p whisper-rs --precise 135b60b85a15714862806b6ea9f76abec38156f1
+  Replace the SHA with the desired commit and update the rev in Cargo.toml accordingly.
+
 Build
 - CPU-only (default):
   - cargo build