diff --git a/backend/parsers/windmill-parser-bash/Cargo.toml b/backend/parsers/windmill-parser-bash/Cargo.toml
index 4c7db23313..62f0c3fac3 100644
--- a/backend/parsers/windmill-parser-bash/Cargo.toml
+++ b/backend/parsers/windmill-parser-bash/Cargo.toml
@@ -7,6 +7,8 @@ authors.workspace = true
 [lib]
 name = "windmill_parser_bash"
 path = "./src/lib.rs"
+# src/ has no doctests: remove this line before adding one, or cargo test never runs it.
+doctest = false
 
 [target.'cfg(target_arch = "wasm32")'.dependencies]
 regex-lite.workspace = true
diff --git a/backend/parsers/windmill-parser-csharp/Cargo.toml b/backend/parsers/windmill-parser-csharp/Cargo.toml
index 07b0259224..3a283d5895 100644
--- a/backend/parsers/windmill-parser-csharp/Cargo.toml
+++ b/backend/parsers/windmill-parser-csharp/Cargo.toml
@@ -7,6 +7,8 @@ authors.workspace = true
 [lib]
 name = "windmill_parser_csharp"
 path = "./src/lib.rs"
+# src/ has no doctests: remove this line before adding one, or cargo test never runs it.
+doctest = false
 
 [dependencies]
 windmill-parser.workspace = true
diff --git a/backend/parsers/windmill-parser-go/Cargo.toml b/backend/parsers/windmill-parser-go/Cargo.toml
index ecba62cff4..4e8805aad7 100644
--- a/backend/parsers/windmill-parser-go/Cargo.toml
+++ b/backend/parsers/windmill-parser-go/Cargo.toml
@@ -7,6 +7,8 @@ authors.workspace = true
 [lib]
 name = "windmill_parser_go"
 path = "./src/lib.rs"
+# src/ has no doctests: remove this line before adding one, or cargo test never runs it.
+doctest = false
 
 [dependencies]
 windmill-parser.workspace = true
diff --git a/backend/parsers/windmill-parser-graphql/Cargo.toml b/backend/parsers/windmill-parser-graphql/Cargo.toml
index 7f0a93b6f3..557fb56402 100644
--- a/backend/parsers/windmill-parser-graphql/Cargo.toml
+++ b/backend/parsers/windmill-parser-graphql/Cargo.toml
@@ -7,6 +7,8 @@ authors.workspace = true
 [lib]
 name = "windmill_parser_graphql"
 path = "./src/lib.rs"
+# src/ has no doctests: remove this line before adding one, or cargo test never runs it.
+doctest = false
 
 [target.'cfg(target_arch = "wasm32")'.dependencies]
 regex-lite.workspace = true
diff --git a/backend/parsers/windmill-parser-java/Cargo.toml b/backend/parsers/windmill-parser-java/Cargo.toml
index 19809e3120..5a575b891b 100644
--- a/backend/parsers/windmill-parser-java/Cargo.toml
+++ b/backend/parsers/windmill-parser-java/Cargo.toml
@@ -7,6 +7,8 @@ authors.workspace = true
 [lib]
 name = "windmill_parser_java"
 path = "./src/lib.rs"
+# src/ has no doctests: remove this line before adding one, or cargo test never runs it.
+doctest = false
 
 [dependencies]
 windmill-parser.workspace = true
diff --git a/backend/parsers/windmill-parser-nu/Cargo.toml b/backend/parsers/windmill-parser-nu/Cargo.toml
index c8c3e0d616..78034a3a79 100644
--- a/backend/parsers/windmill-parser-nu/Cargo.toml
+++ b/backend/parsers/windmill-parser-nu/Cargo.toml
@@ -7,6 +7,9 @@ edition.workspace = true
 [lib]
 name = "windmill_parser_nu"
 path = "./src/lib.rs"
+# src/ has no unit tests or doctests: remove both lines before adding one, or cargo test never runs it.
+test = false
+doctest = false
 
 [dependencies]
 windmill-parser.workspace = true
diff --git a/backend/parsers/windmill-parser-php/Cargo.toml b/backend/parsers/windmill-parser-php/Cargo.toml
index 8bd3182f91..37fcb70957 100644
--- a/backend/parsers/windmill-parser-php/Cargo.toml
+++ b/backend/parsers/windmill-parser-php/Cargo.toml
@@ -7,6 +7,8 @@ authors.workspace = true
 [lib]
 name = "windmill_parser_php"
 path = "./src/lib.rs"
+# src/ has no doctests: remove this line before adding one, or cargo test never runs it.
+doctest = false
 
 [dependencies]
 windmill-parser.workspace = true
diff --git a/backend/parsers/windmill-parser-py-asset/Cargo.toml b/backend/parsers/windmill-parser-py-asset/Cargo.toml
index 84562dcf0e..46d5c55a42 100644
--- a/backend/parsers/windmill-parser-py-asset/Cargo.toml
+++ b/backend/parsers/windmill-parser-py-asset/Cargo.toml
@@ -7,6 +7,8 @@ authors.workspace = true
 [lib]
 name = "windmill_parser_py_asset"
 path = "./src/lib.rs"
+# src/ has no doctests: remove this line before adding one, or cargo test never runs it.
+doctest = false
 
 [dependencies]
 windmill-parser.workspace = true
diff --git a/backend/parsers/windmill-parser-py-imports/Cargo.toml b/backend/parsers/windmill-parser-py-imports/Cargo.toml
index 2ef83f5ac9..be0c1062b7 100644
--- a/backend/parsers/windmill-parser-py-imports/Cargo.toml
+++ b/backend/parsers/windmill-parser-py-imports/Cargo.toml
@@ -7,6 +7,9 @@ authors.workspace = true
 [lib]
 name = "windmill_parser_py_imports"
 path = "./src/lib.rs"
+# src/ has no unit tests or doctests: remove both lines before adding one, or cargo test never runs it.
+test = false
+doctest = false
 
 [target.'cfg(target_arch = "wasm32")'.dependencies]
 regex-lite.workspace = true
diff --git a/backend/parsers/windmill-parser-py/Cargo.toml b/backend/parsers/windmill-parser-py/Cargo.toml
index 6971fe8fcd..1f34643572 100644
--- a/backend/parsers/windmill-parser-py/Cargo.toml
+++ b/backend/parsers/windmill-parser-py/Cargo.toml
@@ -7,6 +7,8 @@ authors.workspace = true
 [lib]
 name = "windmill_parser_py"
 path = "./src/lib.rs"
+# src/ has no doctests: remove this line before adding one, or cargo test never runs it.
+doctest = false
 
 [dependencies]
 windmill-parser.workspace = true
diff --git a/backend/parsers/windmill-parser-r/Cargo.toml b/backend/parsers/windmill-parser-r/Cargo.toml
index 42701f9c12..d489bc966d 100644
--- a/backend/parsers/windmill-parser-r/Cargo.toml
+++ b/backend/parsers/windmill-parser-r/Cargo.toml
@@ -7,6 +7,8 @@ authors.workspace = true
 [lib]
 name = "windmill_parser_r"
 path = "./src/lib.rs"
+# src/ has no doctests: remove this line before adding one, or cargo test never runs it.
+doctest = false
 
 [dependencies]
 windmill-parser.workspace = true
diff --git a/backend/parsers/windmill-parser-ruby/Cargo.toml b/backend/parsers/windmill-parser-ruby/Cargo.toml
index 779b0116a0..ca996528b1 100644
--- a/backend/parsers/windmill-parser-ruby/Cargo.toml
+++ b/backend/parsers/windmill-parser-ruby/Cargo.toml
@@ -7,6 +7,8 @@ authors.workspace = true
 [lib]
 name = "windmill_parser_ruby"
 path = "./src/lib.rs"
+# src/ has no doctests: remove this line before adding one, or cargo test never runs it.
+doctest = false
 
 [dependencies]
 windmill-parser.workspace = true
diff --git a/backend/parsers/windmill-parser-rust/Cargo.toml b/backend/parsers/windmill-parser-rust/Cargo.toml
index e1dcf84449..e4654590ff 100644
--- a/backend/parsers/windmill-parser-rust/Cargo.toml
+++ b/backend/parsers/windmill-parser-rust/Cargo.toml
@@ -7,6 +7,8 @@ authors.workspace = true
 [lib]
 name = "windmill_parser_rust"
 path = "./src/lib.rs"
+# src/ has no doctests: remove this line before adding one, or cargo test never runs it.
+doctest = false
 
 [dependencies]
 windmill-parser.workspace = true
diff --git a/backend/parsers/windmill-parser-sql-asset/Cargo.toml b/backend/parsers/windmill-parser-sql-asset/Cargo.toml
index 73835b2c06..5b22c38350 100644
--- a/backend/parsers/windmill-parser-sql-asset/Cargo.toml
+++ b/backend/parsers/windmill-parser-sql-asset/Cargo.toml
@@ -7,6 +7,8 @@ authors.workspace = true
 [lib]
 name = "windmill_parser_sql_asset"
 path = "./src/lib.rs"
+# src/ has no doctests: remove this line before adding one, or cargo test never runs it.
+doctest = false
 
 [dependencies]
 windmill-parser.workspace = true
diff --git a/backend/parsers/windmill-parser-sql/Cargo.toml b/backend/parsers/windmill-parser-sql/Cargo.toml
index 143b02a2cc..7963de819c 100644
--- a/backend/parsers/windmill-parser-sql/Cargo.toml
+++ b/backend/parsers/windmill-parser-sql/Cargo.toml
@@ -7,6 +7,8 @@ authors.workspace = true
 [lib]
 name = "windmill_parser_sql"
 path = "./src/lib.rs"
+# src/ has no doctests: remove this line before adding one, or cargo test never runs it.
+doctest = false
 
 [target.'cfg(target_arch = "wasm32")'.dependencies]
 regex-lite.workspace = true
diff --git a/backend/parsers/windmill-parser-ts-asset/Cargo.toml b/backend/parsers/windmill-parser-ts-asset/Cargo.toml
index f1c668d4eb..17a0279bdc 100644
--- a/backend/parsers/windmill-parser-ts-asset/Cargo.toml
+++ b/backend/parsers/windmill-parser-ts-asset/Cargo.toml
@@ -7,6 +7,8 @@ authors.workspace = true
 [lib]
 name = "windmill_parser_ts_asset"
 path = "./src/lib.rs"
+# src/ has no doctests: remove this line before adding one, or cargo test never runs it.
+doctest = false
 
 [target.'cfg(target_arch = "wasm32")'.dependencies]
 wasm-bindgen.workspace = true
diff --git a/backend/parsers/windmill-parser-ts/Cargo.toml b/backend/parsers/windmill-parser-ts/Cargo.toml
index 5f04b14f3b..36dce90090 100644
--- a/backend/parsers/windmill-parser-ts/Cargo.toml
+++ b/backend/parsers/windmill-parser-ts/Cargo.toml
@@ -8,6 +8,9 @@ authors.workspace = true
 [lib]
 name = "windmill_parser_ts"
 path = "./src/lib.rs"
+# src/ has no unit tests or doctests: remove both lines before adding one, or cargo test never runs it.
+test = false
+doctest = false
 
 [target.'cfg(target_arch = "wasm32")'.dependencies]
 wasm-bindgen.workspace = true
diff --git a/backend/parsers/windmill-parser-wac/Cargo.toml b/backend/parsers/windmill-parser-wac/Cargo.toml
index 21ee286db9..5dccb0aa0a 100644
--- a/backend/parsers/windmill-parser-wac/Cargo.toml
+++ b/backend/parsers/windmill-parser-wac/Cargo.toml
@@ -7,6 +7,9 @@ authors.workspace = true
 [lib]
 name = "windmill_parser_wac"
 path = "./src/lib.rs"
+# src/ has no unit tests or doctests: remove both lines before adding one, or cargo test never runs it.
+test = false
+doctest = false
 
 [dependencies]
 ruff_python_parser.workspace = true
diff --git a/backend/parsers/windmill-parser-yaml/Cargo.toml b/backend/parsers/windmill-parser-yaml/Cargo.toml
index eb2f16fccc..5c3b3e2760 100644
--- a/backend/parsers/windmill-parser-yaml/Cargo.toml
+++ b/backend/parsers/windmill-parser-yaml/Cargo.toml
@@ -7,6 +7,8 @@ edition.workspace = true
 [lib]
 name = "windmill_parser_yaml"
 path = "./src/lib.rs"
+# src/ has no doctests: remove this line before adding one, or cargo test never runs it.
+doctest = false
 
 [dependencies]
 yaml-rust.workspace = true
diff --git a/backend/parsers/windmill-parser/Cargo.toml b/backend/parsers/windmill-parser/Cargo.toml
index 97b6c6da58..842a94d917 100644
--- a/backend/parsers/windmill-parser/Cargo.toml
+++ b/backend/parsers/windmill-parser/Cargo.toml
@@ -7,6 +7,8 @@ authors.workspace = true
 [lib]
 name = "windmill_parser"
 path = "./src/lib.rs"
+# src/ has no doctests: remove this line before adding one, or cargo test never runs it.
+doctest = false
 
 [dependencies]
 serde = { version = "1.0", features = ["derive"] }
diff --git a/backend/parsers/windmill-sql-datatype-parser-wasm/Cargo.toml b/backend/parsers/windmill-sql-datatype-parser-wasm/Cargo.toml
index 7d66d56ade..e4d67e84a7 100644
--- a/backend/parsers/windmill-sql-datatype-parser-wasm/Cargo.toml
+++ b/backend/parsers/windmill-sql-datatype-parser-wasm/Cargo.toml
@@ -9,6 +9,8 @@ authors.workspace = true
 crate-type = ["cdylib"]
 name = "windmill_sql_datatype_parser_wasm"
 path = "./src/lib.rs"
+# src/ has no unit tests: remove this line before adding one, or cargo test never runs it.
+test = false
 
 [dev-dependencies]
 wasm-bindgen-test.workspace = true
diff --git a/backend/windmill-ai/Cargo.toml b/backend/windmill-ai/Cargo.toml
index 44c4ac83c7..38f62fa16f 100644
--- a/backend/windmill-ai/Cargo.toml
+++ b/backend/windmill-ai/Cargo.toml
@@ -12,6 +12,8 @@ mcp = ["dep:windmill-mcp"]
 [lib]
 name = "windmill_ai"
 path = "src/lib.rs"
+# src/ has no doctests: remove this line before adding one, or cargo test never runs it.
+doctest = false
 
 [dependencies]
 windmill-common = { workspace = true, default-features = false }
diff --git a/backend/windmill-alerting/Cargo.toml b/backend/windmill-alerting/Cargo.toml
index 6f7352426e..a1c46edbb9 100644
--- a/backend/windmill-alerting/Cargo.toml
+++ b/backend/windmill-alerting/Cargo.toml
@@ -7,6 +7,9 @@ edition.workspace = true
 [lib]
 name = "windmill_alerting"
 path = "src/lib.rs"
+# src/ has no unit tests or doctests: remove both lines before adding one, or cargo test never runs it.
+test = false
+doctest = false
 
 [dependencies]
 windmill-common = { workspace = true, default-features = false }
diff --git a/backend/windmill-api-agent-workers/Cargo.toml b/backend/windmill-api-agent-workers/Cargo.toml
index feabde8b12..e160067dc9 100644
--- a/backend/windmill-api-agent-workers/Cargo.toml
+++ b/backend/windmill-api-agent-workers/Cargo.toml
@@ -7,6 +7,8 @@ edition.workspace = true
 [lib]
 name = "windmill_api_agent_workers"
 path = "src/lib.rs"
+# src/ has no doctests: remove this line before adding one, or cargo test never runs it.
+doctest = false
 
 [features]
 default = []
diff --git a/backend/windmill-api-assets/Cargo.toml b/backend/windmill-api-assets/Cargo.toml
index 62bc3d9c8d..5b43e3f2a5 100644
--- a/backend/windmill-api-assets/Cargo.toml
+++ b/backend/windmill-api-assets/Cargo.toml
@@ -7,6 +7,9 @@ edition.workspace = true
 [lib]
 name = "windmill_api_assets"
 path = "src/lib.rs"
+# src/ has no unit tests or doctests: remove both lines before adding one, or cargo test never runs it.
+test = false
+doctest = false
 
 [features]
 private = ["windmill-common/private"]
diff --git a/backend/windmill-api-auth/Cargo.toml b/backend/windmill-api-auth/Cargo.toml
index 515a51cab7..1461e95237 100644
--- a/backend/windmill-api-auth/Cargo.toml
+++ b/backend/windmill-api-auth/Cargo.toml
@@ -7,6 +7,8 @@ edition.workspace = true
 [lib]
 name = "windmill_api_auth"
 path = "src/lib.rs"
+# src/ has no doctests: remove this line before adding one, or cargo test never runs it.
+doctest = false
 
 [features]
 default = []
diff --git a/backend/windmill-api-client/Cargo.toml b/backend/windmill-api-client/Cargo.toml
index 5d7ea274d9..ac326f9215 100644
--- a/backend/windmill-api-client/Cargo.toml
+++ b/backend/windmill-api-client/Cargo.toml
@@ -7,6 +7,9 @@ edition.workspace = true
 [lib]
 name = "windmill_api_client"
 path = "./src/lib.rs"
+# src/ has no unit tests or doctests: remove both lines before adding one, or cargo test never runs it.
+test = false
+doctest = false
 
 
 [dependencies]
diff --git a/backend/windmill-api-configs/Cargo.toml b/backend/windmill-api-configs/Cargo.toml
index a24e0b9540..f8c1c48dab 100644
--- a/backend/windmill-api-configs/Cargo.toml
+++ b/backend/windmill-api-configs/Cargo.toml
@@ -7,6 +7,8 @@ edition.workspace = true
 [lib]
 name = "windmill_api_configs"
 path = "src/lib.rs"
+# src/ has no doctests: remove this line before adding one, or cargo test never runs it.
+doctest = false
 
 [features]
 default = []
diff --git a/backend/windmill-api-debug/Cargo.toml b/backend/windmill-api-debug/Cargo.toml
index c262ac3d32..8e3ce3daf0 100644
--- a/backend/windmill-api-debug/Cargo.toml
+++ b/backend/windmill-api-debug/Cargo.toml
@@ -7,6 +7,8 @@ edition.workspace = true
 [lib]
 name = "windmill_api_debug"
 path = "src/lib.rs"
+# src/ has no doctests: remove this line before adding one, or cargo test never runs it.
+doctest = false
 
 [features]
 default = []
diff --git a/backend/windmill-api-embeddings/Cargo.toml b/backend/windmill-api-embeddings/Cargo.toml
index ff7c3435aa..411dc0efb0 100644
--- a/backend/windmill-api-embeddings/Cargo.toml
+++ b/backend/windmill-api-embeddings/Cargo.toml
@@ -7,6 +7,8 @@ edition.workspace = true
 [lib]
 name = "windmill_api_embeddings"
 path = "src/lib.rs"
+# src/ has no doctests: remove this line before adding one, or cargo test never runs it.
+doctest = false
 
 [features]
 default = []
diff --git a/backend/windmill-api-flow-conversations/Cargo.toml b/backend/windmill-api-flow-conversations/Cargo.toml
index dfb927e92e..d9e0c743ee 100644
--- a/backend/windmill-api-flow-conversations/Cargo.toml
+++ b/backend/windmill-api-flow-conversations/Cargo.toml
@@ -7,6 +7,9 @@ edition.workspace = true
 [lib]
 name = "windmill_api_flow_conversations"
 path = "src/lib.rs"
+# src/ has no unit tests or doctests: remove both lines before adding one, or cargo test never runs it.
+test = false
+doctest = false
 
 [dependencies]
 windmill-api-auth.workspace = true
diff --git a/backend/windmill-api-flows/Cargo.toml b/backend/windmill-api-flows/Cargo.toml
index 3fc2c7b572..c0bb7ae5e2 100644
--- a/backend/windmill-api-flows/Cargo.toml
+++ b/backend/windmill-api-flows/Cargo.toml
@@ -7,6 +7,8 @@ edition.workspace = true
 [lib]
 name = "windmill_api_flows"
 path = "src/lib.rs"
+# src/ has no doctests: remove this line before adding one, or cargo test never runs it.
+doctest = false
 
 [features]
 default = []
diff --git a/backend/windmill-api-groups/Cargo.toml b/backend/windmill-api-groups/Cargo.toml
index 35443008f0..3887f3b03e 100644
--- a/backend/windmill-api-groups/Cargo.toml
+++ b/backend/windmill-api-groups/Cargo.toml
@@ -7,6 +7,8 @@ edition.workspace = true
 [lib]
 name = "windmill_api_groups"
 path = "src/lib.rs"
+# src/ has no doctests: remove this line before adding one, or cargo test never runs it.
+doctest = false
 
 [features]
 default = []
diff --git a/backend/windmill-api-inputs/Cargo.toml b/backend/windmill-api-inputs/Cargo.toml
index 30d3f0d9f5..f5fbe3b0ea 100644
--- a/backend/windmill-api-inputs/Cargo.toml
+++ b/backend/windmill-api-inputs/Cargo.toml
@@ -7,6 +7,9 @@ edition.workspace = true
 [lib]
 name = "windmill_api_inputs"
 path = "src/lib.rs"
+# src/ has no unit tests or doctests: remove both lines before adding one, or cargo test never runs it.
+test = false
+doctest = false
 
 [dependencies]
 windmill-api-auth.workspace = true
diff --git a/backend/windmill-api-integration-tests/Cargo.toml b/backend/windmill-api-integration-tests/Cargo.toml
index 69dbaeaaa2..8302b5b252 100644
--- a/backend/windmill-api-integration-tests/Cargo.toml
+++ b/backend/windmill-api-integration-tests/Cargo.toml
@@ -7,6 +7,9 @@ edition.workspace = true
 [lib]
 name = "windmill_api_integration_tests"
 path = "src/lib.rs"
+# src/ has no unit tests or doctests: remove both lines before adding one, or cargo test never runs it.
+test = false
+doctest = false
 
 [features]
 default = []
diff --git a/backend/windmill-api-integration-tests/tests/fork_secret_replication_azure.rs b/backend/windmill-api-integration-tests/tests/fork_secret_replication_azure.rs
index 19682de70a..855b45e2ca 100644
--- a/backend/windmill-api-integration-tests/tests/fork_secret_replication_azure.rs
+++ b/backend/windmill-api-integration-tests/tests/fork_secret_replication_azure.rs
@@ -14,14 +14,16 @@
 //! (lowkey-vault), which the `AzureKeyVaultBackend` talks to via its
 //! static-token / self-signed-cert emulator mode.
 //!
-//! Run it:
+//! The test is `#[ignore]`d, so a plain `cargo test` skips it without creating
+//! a database. Run it with `--ignored` (`AZURE_KV_URL` overrides the default
+//! https://localhost:8443):
 //! ```bash
 //! podman run -d --name lowkey -p 8443:8443 \
 //!     -e LOWKEY_ARGS="--LOWKEY_VAULT_NAMES=default" \
 //!     docker.io/nagyesta/lowkey-vault:7.3.0
 //!
-//! RUN_AZURE_KV_TESTS=1 cargo test -p windmill-api-integration-tests \
-//!     --features private,enterprise --test fork_secret_replication_azure -- --nocapture
+//! cargo test -p windmill-api-integration-tests \
+//!     --features private,enterprise --test fork_secret_replication_azure -- --ignored --nocapture
 //! ```
 
 #[cfg(all(feature = "private", feature = "enterprise"))]
@@ -55,11 +57,8 @@ mod azure_fork {
     }
 
     #[sqlx::test(migrations = "../migrations", fixtures("base"))]
+    #[ignore = "requires a lowkey-vault Azure Key Vault emulator at AZURE_KV_URL"]
     async fn migrated_secret_is_replicated_on_fork(db: Pool<Postgres>) -> anyhow::Result<()> {
-        if std::env::var("RUN_AZURE_KV_TESTS").as_deref() != Ok("1") {
-            eprintln!("skipping: set RUN_AZURE_KV_TESTS=1 and start lowkey-vault to run");
-            return Ok(());
-        }
         initialize_tracing().await;
 
         // The Azure KV emulator persists across runs; derive unique names per run
diff --git a/backend/windmill-api-jobs/Cargo.toml b/backend/windmill-api-jobs/Cargo.toml
index dad6469947..ca4153ac44 100644
--- a/backend/windmill-api-jobs/Cargo.toml
+++ b/backend/windmill-api-jobs/Cargo.toml
@@ -7,6 +7,8 @@ edition.workspace = true
 [lib]
 name = "windmill_api_jobs"
 path = "src/lib.rs"
+# src/ has no doctests: remove this line before adding one, or cargo test never runs it.
+doctest = false
 
 [features]
 default = []
diff --git a/backend/windmill-api-npm-proxy/Cargo.toml b/backend/windmill-api-npm-proxy/Cargo.toml
index d6e123abe3..e5d326e660 100644
--- a/backend/windmill-api-npm-proxy/Cargo.toml
+++ b/backend/windmill-api-npm-proxy/Cargo.toml
@@ -7,6 +7,8 @@ edition.workspace = true
 [lib]
 name = "windmill_api_npm_proxy"
 path = "src/lib.rs"
+# src/ has no doctests: remove this line before adding one, or cargo test never runs it.
+doctest = false
 
 [features]
 default = []
diff --git a/backend/windmill-api-openapi/Cargo.toml b/backend/windmill-api-openapi/Cargo.toml
index 24a6f2aed8..97d11f1f0d 100644
--- a/backend/windmill-api-openapi/Cargo.toml
+++ b/backend/windmill-api-openapi/Cargo.toml
@@ -7,6 +7,9 @@ edition.workspace = true
 [lib]
 name = "windmill_api_openapi"
 path = "src/lib.rs"
+# src/ has no unit tests or doctests: remove both lines before adding one, or cargo test never runs it.
+test = false
+doctest = false
 
 [dependencies]
 windmill-api-auth.workspace = true
diff --git a/backend/windmill-api-schedule/Cargo.toml b/backend/windmill-api-schedule/Cargo.toml
index 5017985820..f7a612c628 100644
--- a/backend/windmill-api-schedule/Cargo.toml
+++ b/backend/windmill-api-schedule/Cargo.toml
@@ -7,6 +7,9 @@ edition.workspace = true
 [lib]
 name = "windmill_api_schedule"
 path = "src/lib.rs"
+# src/ has no unit tests or doctests: remove both lines before adding one, or cargo test never runs it.
+test = false
+doctest = false
 
 [features]
 default = []
diff --git a/backend/windmill-api-scripts/Cargo.toml b/backend/windmill-api-scripts/Cargo.toml
index 72353c6f1b..73bbfd49bb 100644
--- a/backend/windmill-api-scripts/Cargo.toml
+++ b/backend/windmill-api-scripts/Cargo.toml
@@ -7,6 +7,8 @@ edition.workspace = true
 [lib]
 name = "windmill_api_scripts"
 path = "src/lib.rs"
+# src/ has no doctests: remove this line before adding one, or cargo test never runs it.
+doctest = false
 
 [features]
 default = []
diff --git a/backend/windmill-api-settings/Cargo.toml b/backend/windmill-api-settings/Cargo.toml
index 034a24edf1..816a2223ac 100644
--- a/backend/windmill-api-settings/Cargo.toml
+++ b/backend/windmill-api-settings/Cargo.toml
@@ -7,6 +7,8 @@ edition.workspace = true
 [lib]
 name = "windmill_api_settings"
 path = "src/lib.rs"
+# src/ has no doctests: remove this line before adding one, or cargo test never runs it.
+doctest = false
 
 [features]
 default = []
diff --git a/backend/windmill-api-sse/Cargo.toml b/backend/windmill-api-sse/Cargo.toml
index b8127c3d36..d70f760163 100644
--- a/backend/windmill-api-sse/Cargo.toml
+++ b/backend/windmill-api-sse/Cargo.toml
@@ -7,6 +7,9 @@ edition.workspace = true
 [lib]
 name = "windmill_api_sse"
 path = "src/lib.rs"
+# src/ has no unit tests or doctests: remove both lines before adding one, or cargo test never runs it.
+test = false
+doctest = false
 
 [features]
 default = []
diff --git a/backend/windmill-api-users/Cargo.toml b/backend/windmill-api-users/Cargo.toml
index 13ab8143d8..cfd683434c 100644
--- a/backend/windmill-api-users/Cargo.toml
+++ b/backend/windmill-api-users/Cargo.toml
@@ -7,6 +7,8 @@ edition.workspace = true
 [lib]
 name = "windmill_api_users"
 path = "src/lib.rs"
+# src/ has no doctests: remove this line before adding one, or cargo test never runs it.
+doctest = false
 
 [features]
 default = []
diff --git a/backend/windmill-api-workers/Cargo.toml b/backend/windmill-api-workers/Cargo.toml
index 24f2bc5649..fd87b8f4be 100644
--- a/backend/windmill-api-workers/Cargo.toml
+++ b/backend/windmill-api-workers/Cargo.toml
@@ -7,6 +7,9 @@ edition.workspace = true
 [lib]
 name = "windmill_api_workers"
 path = "src/lib.rs"
+# src/ has no unit tests or doctests: remove both lines before adding one, or cargo test never runs it.
+test = false
+doctest = false
 
 [dependencies]
 windmill-api-auth.workspace = true
diff --git a/backend/windmill-api-workspaces/Cargo.toml b/backend/windmill-api-workspaces/Cargo.toml
index 9f05a26f28..646536a9ec 100644
--- a/backend/windmill-api-workspaces/Cargo.toml
+++ b/backend/windmill-api-workspaces/Cargo.toml
@@ -7,6 +7,8 @@ edition.workspace = true
 [lib]
 name = "windmill_api_workspaces"
 path = "src/lib.rs"
+# src/ has no doctests: remove this line before adding one, or cargo test never runs it.
+doctest = false
 
 [features]
 default = []
diff --git a/backend/windmill-api/Cargo.toml b/backend/windmill-api/Cargo.toml
index b3aea64f72..583d139cf5 100644
--- a/backend/windmill-api/Cargo.toml
+++ b/backend/windmill-api/Cargo.toml
@@ -7,6 +7,8 @@ edition.workspace = true
 [lib]
 name = "windmill_api"
 path = "src/lib.rs"
+# src/ has no doctests: remove this line before adding one, or cargo test never runs it.
+doctest = false
 
 [features]
 default = []
diff --git a/backend/windmill-audit/Cargo.toml b/backend/windmill-audit/Cargo.toml
index 8c26615664..a1491b3b5d 100644
--- a/backend/windmill-audit/Cargo.toml
+++ b/backend/windmill-audit/Cargo.toml
@@ -7,6 +7,8 @@ edition.workspace = true
 [lib]
 name = "windmill_audit"
 path = "./src/lib.rs"
+# src/ has no doctests: remove this line before adding one, or cargo test never runs it.
+doctest = false
 
 [features]
 enterprise = ["windmill-common/enterprise"]
diff --git a/backend/windmill-autoscaling/Cargo.toml b/backend/windmill-autoscaling/Cargo.toml
index fd5c5f4703..592529b2fe 100644
--- a/backend/windmill-autoscaling/Cargo.toml
+++ b/backend/windmill-autoscaling/Cargo.toml
@@ -7,6 +7,9 @@ edition.workspace = true
 [lib]
 name = "windmill_autoscaling"
 path = "./src/lib.rs"
+# src/ has no unit tests or doctests: remove both lines before adding one, or cargo test never runs it.
+test = false
+doctest = false
 
 [features]
 enterprise = ["windmill-queue/enterprise", "windmill-common/enterprise"]
diff --git a/backend/windmill-common/tests/aws_sm_integration.rs b/backend/windmill-common/tests/aws_sm_integration.rs
index 3b9aa2ece8..1030dc4d50 100644
--- a/backend/windmill-common/tests/aws_sm_integration.rs
+++ b/backend/windmill-common/tests/aws_sm_integration.rs
@@ -12,43 +12,24 @@
 //!      localstack/localstack:3.8
 //!    ```
 //!
-//! 2. Run the tests:
+//! 2. Run the tests (they are `#[ignore]`d, so a plain `cargo test` skips them):
 //!
 //!    ```bash
-//!    RUN_AWS_SM_TESTS=1 cargo test -p windmill-common --features private,enterprise \
-//!      aws_sm_integration -- --nocapture
+//!    cargo test -p windmill-common --features private,enterprise \
+//!      --test aws_sm_integration -- --ignored --nocapture
 //!    ```
 //!
 //! ## Environment variables
 //!
-//! - `RUN_AWS_SM_TESTS=1`     - Required to run the tests
 //! - `AWS_SM_ENDPOINT`        - LocalStack endpoint (default: http://localhost:4566)
 //! - `AWS_SM_REGION`          - AWS region (default: us-east-1)
 
 #[cfg(all(feature = "private", feature = "enterprise"))]
 mod tests {
     use windmill_common::secret_backend::{
-        test_aws_sm_connection, AwsSecretsManagerBackend, AwsSecretsManagerSettings,
-        SecretBackend,
+        test_aws_sm_connection, AwsSecretsManagerBackend, AwsSecretsManagerSettings, SecretBackend,
     };
 
-    fn should_run_aws_sm_tests() -> bool {
-        std::env::var("RUN_AWS_SM_TESTS")
-            .map(|v| v == "1" || v.to_lowercase() == "true")
-            .unwrap_or(false)
-    }
-
-    macro_rules! skip_if_no_aws_sm {
-        () => {
-            if !should_run_aws_sm_tests() {
-                println!("Skipping test: RUN_AWS_SM_TESTS=1 not set");
-                println!("To run: RUN_AWS_SM_TESTS=1 cargo test -p windmill-common --features private,enterprise aws_sm_integration -- --nocapture");
-                println!("Requires: docker run -d -p 4566:4566 -e SERVICES=secretsmanager localstack/localstack:3.8");
-                return;
-            }
-        };
-    }
-
     fn test_settings() -> AwsSecretsManagerSettings {
         AwsSecretsManagerSettings {
             region: std::env::var("AWS_SM_REGION").unwrap_or_else(|_| "us-east-1".to_string()),
@@ -63,16 +44,16 @@ mod tests {
     }
 
     #[tokio::test]
+    #[ignore = "requires LocalStack secretsmanager at AWS_SM_ENDPOINT"]
     async fn test_connection() {
-        skip_if_no_aws_sm!();
         let result = test_aws_sm_connection(&test_settings()).await;
         assert!(result.is_ok(), "Connection test failed: {:?}", result.err());
         println!("  ✓ Connection test passed");
     }
 
     #[tokio::test]
+    #[ignore = "requires LocalStack secretsmanager at AWS_SM_ENDPOINT"]
     async fn test_create_and_get_secret() {
-        skip_if_no_aws_sm!();
         let backend = AwsSecretsManagerBackend::new_with_client(test_settings())
             .await
             .unwrap();
@@ -81,16 +62,22 @@ mod tests {
             .set_secret("test-ws", "u/admin/my_secret", "super-secret-value")
             .await
             .unwrap();
-        let value = backend.get_secret("test-ws", "u/admin/my_secret").await.unwrap();
+        let value = backend
+            .get_secret("test-ws", "u/admin/my_secret")
+            .await
+            .unwrap();
         assert_eq!(value, "super-secret-value");
 
-        backend.delete_secret("test-ws", "u/admin/my_secret").await.unwrap();
+        backend
+            .delete_secret("test-ws", "u/admin/my_secret")
+            .await
+            .unwrap();
         println!("  ✓ Create + Get + Delete roundtrip passed");
     }
 
     #[tokio::test]
+    #[ignore = "requires LocalStack secretsmanager at AWS_SM_ENDPOINT"]
     async fn test_update_secret() {
-        skip_if_no_aws_sm!();
         let backend = AwsSecretsManagerBackend::new_with_client(test_settings())
             .await
             .unwrap();
@@ -117,8 +104,8 @@ mod tests {
     }
 
     #[tokio::test]
+    #[ignore = "requires LocalStack secretsmanager at AWS_SM_ENDPOINT"]
     async fn test_delete_and_verify_gone() {
-        skip_if_no_aws_sm!();
         let backend = AwsSecretsManagerBackend::new_with_client(test_settings())
             .await
             .unwrap();
@@ -142,8 +129,8 @@ mod tests {
     }
 
     #[tokio::test]
+    #[ignore = "requires LocalStack secretsmanager at AWS_SM_ENDPOINT"]
     async fn test_delete_nonexistent_is_ok() {
-        skip_if_no_aws_sm!();
         let backend = AwsSecretsManagerBackend::new_with_client(test_settings())
             .await
             .unwrap();
@@ -160,8 +147,8 @@ mod tests {
     }
 
     #[tokio::test]
+    #[ignore = "requires LocalStack secretsmanager at AWS_SM_ENDPOINT"]
     async fn test_get_nonexistent_returns_not_found() {
-        skip_if_no_aws_sm!();
         let backend = AwsSecretsManagerBackend::new_with_client(test_settings())
             .await
             .unwrap();
@@ -178,8 +165,8 @@ mod tests {
     }
 
     #[tokio::test]
+    #[ignore = "requires LocalStack secretsmanager at AWS_SM_ENDPOINT"]
     async fn test_unicode_and_special_chars() {
-        skip_if_no_aws_sm!();
         let backend = AwsSecretsManagerBackend::new_with_client(test_settings())
             .await
             .unwrap();
@@ -203,8 +190,8 @@ mod tests {
     }
 
     #[tokio::test]
+    #[ignore = "requires LocalStack secretsmanager at AWS_SM_ENDPOINT"]
     async fn test_workspace_isolation() {
-        skip_if_no_aws_sm!();
         let backend = AwsSecretsManagerBackend::new_with_client(test_settings())
             .await
             .unwrap();
@@ -244,8 +231,8 @@ mod tests {
     }
 
     #[tokio::test]
+    #[ignore = "requires LocalStack secretsmanager at AWS_SM_ENDPOINT"]
     async fn test_backend_name() {
-        skip_if_no_aws_sm!();
         let backend = AwsSecretsManagerBackend::new_with_client(test_settings())
             .await
             .unwrap();
diff --git a/backend/windmill-common/tests/azure_kv_integration.rs b/backend/windmill-common/tests/azure_kv_integration.rs
index 7606508abc..110678bd84 100644
--- a/backend/windmill-common/tests/azure_kv_integration.rs
+++ b/backend/windmill-common/tests/azure_kv_integration.rs
@@ -23,11 +23,12 @@
 //!    - Trust the emulator's certificate, or
 //!    - Set `AZURE_KV_ALLOW_INSECURE=true` to skip TLS verification (test only)
 //!
-//! 3. Run the tests:
+//! 3. Run the tests (they are `#[ignore]`d, so a plain `cargo test` skips them;
+//!    `AZURE_KV_URL` overrides the default https://localhost:4997):
 //!
 //!    ```bash
-//!    RUN_AZURE_KV_TESTS=1 cargo test -p windmill-common --features private,enterprise \
-//!      azure_kv_integration -- --nocapture
+//!    cargo test -p windmill-common --features private,enterprise \
+//!      --test azure_kv_integration -- --ignored --nocapture
 //!    ```
 //!
 //! ## Emulator authentication
@@ -41,22 +42,6 @@ mod tests {
         test_azure_kv_connection, AzureKeyVaultBackend, AzureKeyVaultSettings, SecretBackend,
     };
 
-    fn should_run_azure_kv_tests() -> bool {
-        std::env::var("RUN_AZURE_KV_TESTS")
-            .map(|v| v == "1" || v.to_lowercase() == "true")
-            .unwrap_or(false)
-    }
-
-    macro_rules! skip_if_no_azure_kv {
-        () => {
-            if !should_run_azure_kv_tests() {
-                println!("Skipping test: RUN_AZURE_KV_TESTS=1 not set");
-                println!("To run Azure KV tests: RUN_AZURE_KV_TESTS=1 cargo test ...");
-                return;
-            }
-        };
-    }
-
     /// A minimal valid JWT token (the emulator doesn't verify signatures).
     /// Format: base64(header).base64(payload).base64(signature)
     fn dummy_jwt_token() -> String {
@@ -82,9 +67,8 @@ mod tests {
     }
 
     #[tokio::test]
+    #[ignore = "requires an Azure Key Vault emulator at AZURE_KV_URL"]
     async fn test_azure_kv_connection_with_token() {
-        skip_if_no_azure_kv!();
-
         let settings = azure_kv_settings();
         println!("Testing Azure KV connection...");
         println!("  URL: {}", settings.vault_url);
@@ -99,9 +83,8 @@ mod tests {
     }
 
     #[tokio::test]
+    #[ignore = "requires an Azure Key Vault emulator at AZURE_KV_URL"]
     async fn test_azure_kv_crud() {
-        skip_if_no_azure_kv!();
-
         let backend = create_backend();
         let workspace_id = "test-crud";
         let path = "test-secret";
@@ -160,9 +143,8 @@ mod tests {
     }
 
     #[tokio::test]
+    #[ignore = "requires an Azure Key Vault emulator at AZURE_KV_URL"]
     async fn test_azure_kv_not_found() {
-        skip_if_no_azure_kv!();
-
         let backend = create_backend();
 
         let result = backend
@@ -173,9 +155,8 @@ mod tests {
     }
 
     #[tokio::test]
+    #[ignore = "requires an Azure Key Vault emulator at AZURE_KV_URL"]
     async fn test_azure_kv_secret_name_encoding() {
-        skip_if_no_azure_kv!();
-
         let backend = create_backend();
         let workspace_id = "demo";
         let path = "u/admin/my_secret_key";
diff --git a/backend/windmill-common/tests/secret_backend_integration.rs b/backend/windmill-common/tests/secret_backend_integration.rs
index ff41f3acf7..a94a67e336 100644
--- a/backend/windmill-common/tests/secret_backend_integration.rs
+++ b/backend/windmill-common/tests/secret_backend_integration.rs
@@ -3,24 +3,26 @@
 //! These tests require:
 //! 1. A PostgreSQL database (handled by sqlx test framework)
 //! 2. A running HashiCorp Vault instance
-//! 3. The RUN_VAULT_TESTS=1 environment variable to be set
+//!
+//! They are `#[ignore]`d, so a plain `cargo test` skips them without creating a
+//! database; pass `--ignored` to run them.
 //!
 //! Environment variables:
-//! - RUN_VAULT_TESTS=1  - Required to run the tests
 //! - VAULT_ADDR         - Vault server address (default: http://127.0.0.1:8200)
 //! - VAULT_TOKEN        - Static token for static token tests (default: test-root-token)
 //! - BASE_URL           - Windmill instance URL for JWT tests (default: http://localhost:8000)
 //!
 //! Run tests (static token mode):
 //! ```bash
-//! RUN_VAULT_TESTS=1 VAULT_TOKEN=your-token cargo test -p windmill \
-//!     secret_backend_integration --features private,enterprise -- --nocapture
+//! VAULT_TOKEN=your-token cargo test -p windmill-common \
+//!     --test secret_backend_integration --features private,enterprise -- --ignored --nocapture
 //! ```
 //!
 //! Run tests (JWT mode - requires Windmill instance running for JWKS endpoint):
 //! ```bash
-//! RUN_VAULT_TESTS=1 BASE_URL=http://localhost:8000 cargo test -p windmill \
-//!     secret_backend_integration --features private,enterprise,openidconnect -- --nocapture
+//! BASE_URL=http://localhost:8000 cargo test -p windmill-common \
+//!     --test secret_backend_integration --features private,enterprise,openidconnect \
+//!     -- --ignored --nocapture
 //! ```
 
 #[cfg(all(feature = "private", feature = "enterprise"))]
@@ -62,12 +64,6 @@ mod tests {
         }
     }
 
-    fn should_run_vault_tests() -> bool {
-        std::env::var("RUN_VAULT_TESTS")
-            .map(|v| v == "1" || v.to_lowercase() == "true")
-            .unwrap_or(false)
-    }
-
     #[cfg(feature = "openidconnect")]
     async fn setup_base_url() {
         let base_url =
@@ -75,16 +71,6 @@ mod tests {
         windmill_common::BASE_URL.store(std::sync::Arc::new(base_url));
     }
 
-    macro_rules! skip_if_no_vault {
-        () => {
-            if !should_run_vault_tests() {
-                println!("Skipping test: RUN_VAULT_TESTS=1 not set");
-                println!("To run vault tests: RUN_VAULT_TESTS=1 cargo test ...");
-                return;
-            }
-        };
-    }
-
     fn vault_settings_static_token() -> VaultSettings {
         VaultSettings {
             address: std::env::var("VAULT_ADDR")
@@ -120,9 +106,8 @@ mod tests {
 
     /// Test Vault connection with static token
     #[sqlx::test(migrations = "../migrations", fixtures("base", "secret_backend"))]
+    #[ignore = "requires a Vault server at VAULT_ADDR"]
     async fn test_vault_connection_static_token(db: Pool<Postgres>) {
-        skip_if_no_vault!();
-
         let settings = vault_settings_static_token();
         println!("Testing Vault connection with static token...");
         println!("  Address: {}", settings.address);
@@ -138,9 +123,8 @@ mod tests {
 
     /// Test basic CRUD operations with static token
     #[sqlx::test(migrations = "../migrations", fixtures("base", "secret_backend"))]
+    #[ignore = "requires a Vault server at VAULT_ADDR"]
     async fn test_vault_crud_static_token(_db: Pool<Postgres>) {
-        skip_if_no_vault!();
-
         let settings = vault_settings_static_token();
         let backend = VaultBackend::new(settings);
 
@@ -199,8 +183,8 @@ mod tests {
     /// Test Vault connection with JWT authentication
     #[cfg(feature = "openidconnect")]
     #[sqlx::test(migrations = "../migrations", fixtures("base", "secret_backend"))]
+    #[ignore = "requires a Vault server at VAULT_ADDR and a Windmill instance at BASE_URL"]
     async fn test_vault_connection_jwt(db: Pool<Postgres>) {
-        skip_if_no_vault!();
         setup_base_url().await;
 
         let settings = vault_settings_jwt();
@@ -224,8 +208,8 @@ mod tests {
     /// Test basic CRUD operations with JWT authentication
     #[cfg(feature = "openidconnect")]
     #[sqlx::test(migrations = "../migrations", fixtures("base", "secret_backend"))]
+    #[ignore = "requires a Vault server at VAULT_ADDR and a Windmill instance at BASE_URL"]
     async fn test_vault_crud_jwt(db: Pool<Postgres>) {
-        skip_if_no_vault!();
         setup_base_url().await;
 
         let settings = vault_settings_jwt();
@@ -269,9 +253,8 @@ mod tests {
 
     /// Test migration from database to Vault
     #[sqlx::test(migrations = "../migrations", fixtures("base", "secret_backend"))]
+    #[ignore = "requires a Vault server at VAULT_ADDR"]
     async fn test_migrate_db_to_vault(db: Pool<Postgres>) {
-        skip_if_no_vault!();
-
         let settings = vault_settings_static_token();
 
         test_vault_connection(&settings, Some(&db))
@@ -331,9 +314,8 @@ mod tests {
 
     /// Test migration from Vault back to database
     #[sqlx::test(migrations = "../migrations", fixtures("base", "secret_backend"))]
+    #[ignore = "requires a Vault server at VAULT_ADDR"]
     async fn test_migrate_vault_to_db(db: Pool<Postgres>) {
-        skip_if_no_vault!();
-
         let settings = vault_settings_static_token();
 
         test_vault_connection(&settings, Some(&db))
@@ -396,8 +378,8 @@ mod tests {
 
     /// Test renaming a variable path in Vault
     #[sqlx::test(migrations = "../migrations", fixtures("base", "secret_backend"))]
+    #[ignore = "requires a Vault server at VAULT_ADDR"]
     async fn test_variable_rename(db: Pool<Postgres>) {
-        skip_if_no_vault!();
         let _ = &db; // suppress unused warning
 
         let settings = vault_settings_static_token();
@@ -468,9 +450,8 @@ mod tests {
 
     /// Test full round-trip: DB -> Vault -> DB with verification
     #[sqlx::test(migrations = "../migrations", fixtures("base", "secret_backend"))]
+    #[ignore = "requires a Vault server at VAULT_ADDR"]
     async fn test_full_round_trip(db: Pool<Postgres>) {
-        skip_if_no_vault!();
-
         let settings = vault_settings_static_token();
 
         test_vault_connection(&settings, Some(&db))
@@ -532,9 +513,8 @@ mod tests {
 
     /// Test that workspace isolation is maintained
     #[sqlx::test(migrations = "../migrations", fixtures("base", "secret_backend"))]
+    #[ignore = "requires a Vault server at VAULT_ADDR"]
     async fn test_workspace_isolation(db: Pool<Postgres>) {
-        skip_if_no_vault!();
-
         let settings = vault_settings_static_token();
         let backend = VaultBackend::new(settings.clone());
 
diff --git a/backend/windmill-dep-map/Cargo.toml b/backend/windmill-dep-map/Cargo.toml
index a93376d167..699ef89f53 100644
--- a/backend/windmill-dep-map/Cargo.toml
+++ b/backend/windmill-dep-map/Cargo.toml
@@ -7,6 +7,8 @@ edition.workspace = true
 [lib]
 name = "windmill_dep_map"
 path = "src/lib.rs"
+# src/ has no doctests: remove this line before adding one, or cargo test never runs it.
+doctest = false
 
 [features]
 default = []
diff --git a/backend/windmill-git-sync/Cargo.toml b/backend/windmill-git-sync/Cargo.toml
index 2b691ee48e..40752660f1 100644
--- a/backend/windmill-git-sync/Cargo.toml
+++ b/backend/windmill-git-sync/Cargo.toml
@@ -7,6 +7,8 @@ edition.workspace = true
 [lib]
 name = "windmill_git_sync"
 path = "./src/lib.rs"
+# src/ has no doctests: remove this line before adding one, or cargo test never runs it.
+doctest = false
 
 [features]
 private = ["windmill-common/private", "windmill-dep-map/private", "windmill-audit/private"]
diff --git a/backend/windmill-indexer/Cargo.toml b/backend/windmill-indexer/Cargo.toml
index 09b2bbe5b1..a90d51c21d 100644
--- a/backend/windmill-indexer/Cargo.toml
+++ b/backend/windmill-indexer/Cargo.toml
@@ -7,6 +7,8 @@ edition.workspace = true
 [lib]
 name = "windmill_indexer"
 path = "src/lib.rs"
+# src/ has no doctests: remove this line before adding one, or cargo test never runs it.
+doctest = false
 
 [features]
 default = []
diff --git a/backend/windmill-jseval/Cargo.toml b/backend/windmill-jseval/Cargo.toml
index b2f7217404..ea5b22d3b4 100644
--- a/backend/windmill-jseval/Cargo.toml
+++ b/backend/windmill-jseval/Cargo.toml
@@ -7,6 +7,8 @@ edition.workspace = true
 [lib]
 name = "windmill_jseval"
 path = "src/lib.rs"
+# src/ has no doctests: remove this line before adding one, or cargo test never runs it.
+doctest = false
 
 [features]
 default = []
diff --git a/backend/windmill-macros/Cargo.toml b/backend/windmill-macros/Cargo.toml
index 5d7d12cc6a..bb4e5c0928 100644
--- a/backend/windmill-macros/Cargo.toml
+++ b/backend/windmill-macros/Cargo.toml
@@ -6,6 +6,9 @@ edition.workspace = true
 
 [lib]
 proc-macro = true
+# src/ has no unit tests or doctests: remove both lines before adding one, or cargo test never runs it.
+test = false
+doctest = false
 
 [dependencies]
 proc-macro2.workspace = true
diff --git a/backend/windmill-mcp/Cargo.toml b/backend/windmill-mcp/Cargo.toml
index 2c07b92d44..aac854024f 100644
--- a/backend/windmill-mcp/Cargo.toml
+++ b/backend/windmill-mcp/Cargo.toml
@@ -7,6 +7,8 @@ edition.workspace = true
 [lib]
 name = "windmill_mcp"
 path = "src/lib.rs"
+# src/ has no doctests: remove this line before adding one, or cargo test never runs it.
+doctest = false
 
 [features]
 default = []
diff --git a/backend/windmill-native-triggers/Cargo.toml b/backend/windmill-native-triggers/Cargo.toml
index 126c22c7c0..1f14154b7e 100644
--- a/backend/windmill-native-triggers/Cargo.toml
+++ b/backend/windmill-native-triggers/Cargo.toml
@@ -7,6 +7,9 @@ edition.workspace = true
 [lib]
 name = "windmill_native_triggers"
 path = "src/lib.rs"
+# src/ has no unit tests or doctests: remove both lines before adding one, or cargo test never runs it.
+test = false
+doctest = false
 
 [features]
 default = []
diff --git a/backend/windmill-oauth/Cargo.toml b/backend/windmill-oauth/Cargo.toml
index 85499442b9..d1014da07d 100644
--- a/backend/windmill-oauth/Cargo.toml
+++ b/backend/windmill-oauth/Cargo.toml
@@ -7,6 +7,8 @@ edition.workspace = true
 [lib]
 name = "windmill_oauth"
 path = "src/lib.rs"
+# src/ has no doctests: remove this line before adding one, or cargo test never runs it.
+doctest = false
 
 [features]
 default = []
diff --git a/backend/windmill-object-store/Cargo.toml b/backend/windmill-object-store/Cargo.toml
index f80eb88881..9737440196 100644
--- a/backend/windmill-object-store/Cargo.toml
+++ b/backend/windmill-object-store/Cargo.toml
@@ -24,6 +24,8 @@ openidconnect = ["windmill-common/openidconnect"]
 [lib]
 name = "windmill_object_store"
 path = "src/lib.rs"
+# src/ has no doctests: remove this line before adding one, or cargo test never runs it.
+doctest = false
 
 [dependencies]
 windmill-common = { workspace = true, default-features = false }
diff --git a/backend/windmill-operator/Cargo.toml b/backend/windmill-operator/Cargo.toml
index f847e4ab25..97c6960a8a 100644
--- a/backend/windmill-operator/Cargo.toml
+++ b/backend/windmill-operator/Cargo.toml
@@ -7,6 +7,8 @@ edition.workspace = true
 [lib]
 name = "windmill_operator"
 path = "./src/lib.rs"
+# src/ has no doctests: remove this line before adding one, or cargo test never runs it.
+doctest = false
 
 [features]
 enterprise = ["windmill-common/enterprise"]
diff --git a/backend/windmill-queue/Cargo.toml b/backend/windmill-queue/Cargo.toml
index 6dc5d8ba42..de788f9f25 100644
--- a/backend/windmill-queue/Cargo.toml
+++ b/backend/windmill-queue/Cargo.toml
@@ -7,6 +7,8 @@ edition.workspace = true
 [lib]
 name = "windmill_queue"
 path = "src/lib.rs"
+# src/ has no doctests: remove this line before adding one, or cargo test never runs it.
+doctest = false
 
 [features]
 default = []
diff --git a/backend/windmill-runtime-nativets/Cargo.toml b/backend/windmill-runtime-nativets/Cargo.toml
index 22da97ab1d..054505e886 100644
--- a/backend/windmill-runtime-nativets/Cargo.toml
+++ b/backend/windmill-runtime-nativets/Cargo.toml
@@ -7,6 +7,8 @@ edition.workspace = true
 [lib]
 name = "windmill_runtime_nativets"
 path = "src/lib.rs"
+# src/ has no doctests: remove this line before adding one, or cargo test never runs it.
+doctest = false
 
 [features]
 default = []
diff --git a/backend/windmill-store/Cargo.toml b/backend/windmill-store/Cargo.toml
index 31cd0fbe0f..fefb6467e5 100644
--- a/backend/windmill-store/Cargo.toml
+++ b/backend/windmill-store/Cargo.toml
@@ -7,6 +7,8 @@ edition.workspace = true
 [lib]
 name = "windmill_store"
 path = "src/lib.rs"
+# src/ has no doctests: remove this line before adding one, or cargo test never runs it.
+doctest = false
 
 [features]
 default = []
diff --git a/backend/windmill-test-utils/Cargo.toml b/backend/windmill-test-utils/Cargo.toml
index 3e409717bd..d8d938a1e8 100644
--- a/backend/windmill-test-utils/Cargo.toml
+++ b/backend/windmill-test-utils/Cargo.toml
@@ -7,6 +7,9 @@ edition.workspace = true
 [lib]
 name = "windmill_test_utils"
 path = "src/lib.rs"
+# src/ has no unit tests or doctests: remove both lines before adding one, or cargo test never runs it.
+test = false
+doctest = false
 
 [features]
 default = []
diff --git a/backend/windmill-trigger-amqp/Cargo.toml b/backend/windmill-trigger-amqp/Cargo.toml
index 4c5ce41941..ac22b7bdf5 100644
--- a/backend/windmill-trigger-amqp/Cargo.toml
+++ b/backend/windmill-trigger-amqp/Cargo.toml
@@ -7,6 +7,8 @@ edition.workspace = true
 [lib]
 name = "windmill_trigger_amqp"
 path = "src/lib.rs"
+# src/ has no doctests: remove this line before adding one, or cargo test never runs it.
+doctest = false
 
 [features]
 default = []
diff --git a/backend/windmill-trigger-azure/Cargo.toml b/backend/windmill-trigger-azure/Cargo.toml
index 31fb9a9fc7..bac8c58841 100644
--- a/backend/windmill-trigger-azure/Cargo.toml
+++ b/backend/windmill-trigger-azure/Cargo.toml
@@ -7,6 +7,9 @@ edition.workspace = true
 [lib]
 name = "windmill_trigger_azure"
 path = "src/lib.rs"
+# src/ has no unit tests or doctests: remove both lines before adding one, or cargo test never runs it.
+test = false
+doctest = false
 
 [features]
 default = []
diff --git a/backend/windmill-trigger-email/Cargo.toml b/backend/windmill-trigger-email/Cargo.toml
index 0ed00fa2dd..d4d477f509 100644
--- a/backend/windmill-trigger-email/Cargo.toml
+++ b/backend/windmill-trigger-email/Cargo.toml
@@ -7,6 +7,9 @@ edition.workspace = true
 [lib]
 name = "windmill_trigger_email"
 path = "src/lib.rs"
+# src/ has no unit tests or doctests: remove both lines before adding one, or cargo test never runs it.
+test = false
+doctest = false
 
 [features]
 default = []
diff --git a/backend/windmill-trigger-gcp/Cargo.toml b/backend/windmill-trigger-gcp/Cargo.toml
index 1b106171c6..e649f970e1 100644
--- a/backend/windmill-trigger-gcp/Cargo.toml
+++ b/backend/windmill-trigger-gcp/Cargo.toml
@@ -7,6 +7,8 @@ edition.workspace = true
 [lib]
 name = "windmill_trigger_gcp"
 path = "src/lib.rs"
+# src/ has no doctests: remove this line before adding one, or cargo test never runs it.
+doctest = false
 
 [features]
 default = []
diff --git a/backend/windmill-trigger-http/Cargo.toml b/backend/windmill-trigger-http/Cargo.toml
index d776a34a00..378b07a61e 100644
--- a/backend/windmill-trigger-http/Cargo.toml
+++ b/backend/windmill-trigger-http/Cargo.toml
@@ -7,6 +7,8 @@ edition.workspace = true
 [lib]
 name = "windmill_trigger_http"
 path = "src/lib.rs"
+# src/ has no doctests: remove this line before adding one, or cargo test never runs it.
+doctest = false
 
 [features]
 default = []
diff --git a/backend/windmill-trigger-kafka/Cargo.toml b/backend/windmill-trigger-kafka/Cargo.toml
index 9887dfc04a..f449837031 100644
--- a/backend/windmill-trigger-kafka/Cargo.toml
+++ b/backend/windmill-trigger-kafka/Cargo.toml
@@ -7,6 +7,9 @@ edition.workspace = true
 [lib]
 name = "windmill_trigger_kafka"
 path = "src/lib.rs"
+# src/ has no unit tests or doctests: remove both lines before adding one, or cargo test never runs it.
+test = false
+doctest = false
 
 [features]
 default = []
diff --git a/backend/windmill-trigger-mqtt/Cargo.toml b/backend/windmill-trigger-mqtt/Cargo.toml
index 305880b176..383e32a693 100644
--- a/backend/windmill-trigger-mqtt/Cargo.toml
+++ b/backend/windmill-trigger-mqtt/Cargo.toml
@@ -7,6 +7,9 @@ edition.workspace = true
 [lib]
 name = "windmill_trigger_mqtt"
 path = "src/lib.rs"
+# src/ has no unit tests or doctests: remove both lines before adding one, or cargo test never runs it.
+test = false
+doctest = false
 
 [features]
 default = []
diff --git a/backend/windmill-trigger-nats/Cargo.toml b/backend/windmill-trigger-nats/Cargo.toml
index a0830097bb..1e75052eb7 100644
--- a/backend/windmill-trigger-nats/Cargo.toml
+++ b/backend/windmill-trigger-nats/Cargo.toml
@@ -7,6 +7,9 @@ edition.workspace = true
 [lib]
 name = "windmill_trigger_nats"
 path = "src/lib.rs"
+# src/ has no unit tests or doctests: remove both lines before adding one, or cargo test never runs it.
+test = false
+doctest = false
 
 [features]
 default = []
diff --git a/backend/windmill-trigger-postgres/Cargo.toml b/backend/windmill-trigger-postgres/Cargo.toml
index d932274f8e..9abef142dd 100644
--- a/backend/windmill-trigger-postgres/Cargo.toml
+++ b/backend/windmill-trigger-postgres/Cargo.toml
@@ -7,6 +7,8 @@ edition.workspace = true
 [lib]
 name = "windmill_trigger_postgres"
 path = "src/lib.rs"
+# src/ has no doctests: remove this line before adding one, or cargo test never runs it.
+doctest = false
 
 [features]
 default = []
diff --git a/backend/windmill-trigger-sqs/Cargo.toml b/backend/windmill-trigger-sqs/Cargo.toml
index ac46dc5935..7896f5acd0 100644
--- a/backend/windmill-trigger-sqs/Cargo.toml
+++ b/backend/windmill-trigger-sqs/Cargo.toml
@@ -7,6 +7,9 @@ edition.workspace = true
 [lib]
 name = "windmill_trigger_sqs"
 path = "src/lib.rs"
+# src/ has no unit tests or doctests: remove both lines before adding one, or cargo test never runs it.
+test = false
+doctest = false
 
 [features]
 default = []
diff --git a/backend/windmill-trigger-websocket/Cargo.toml b/backend/windmill-trigger-websocket/Cargo.toml
index ccf8d2b120..4005985cd3 100644
--- a/backend/windmill-trigger-websocket/Cargo.toml
+++ b/backend/windmill-trigger-websocket/Cargo.toml
@@ -7,6 +7,8 @@ edition.workspace = true
 [lib]
 name = "windmill_trigger_websocket"
 path = "src/lib.rs"
+# src/ has no doctests: remove this line before adding one, or cargo test never runs it.
+doctest = false
 
 [features]
 default = []
diff --git a/backend/windmill-trigger/Cargo.toml b/backend/windmill-trigger/Cargo.toml
index 8132f8b62a..cfa11084d3 100644
--- a/backend/windmill-trigger/Cargo.toml
+++ b/backend/windmill-trigger/Cargo.toml
@@ -7,6 +7,8 @@ edition.workspace = true
 [lib]
 name = "windmill_trigger"
 path = "src/lib.rs"
+# src/ has no doctests: remove this line before adding one, or cargo test never runs it.
+doctest = false
 
 [features]
 default = []
diff --git a/backend/windmill-types/Cargo.toml b/backend/windmill-types/Cargo.toml
index 2472d6bf02..84fa209ddd 100644
--- a/backend/windmill-types/Cargo.toml
+++ b/backend/windmill-types/Cargo.toml
@@ -7,6 +7,8 @@ edition.workspace = true
 [lib]
 name = "windmill_types"
 path = "src/lib.rs"
+# src/ has no doctests: remove this line before adding one, or cargo test never runs it.
+doctest = false
 
 [dependencies]
 windmill-parser.workspace = true
diff --git a/backend/windmill-worker-volumes/Cargo.toml b/backend/windmill-worker-volumes/Cargo.toml
index 08b9a554b2..d94764e7cd 100644
--- a/backend/windmill-worker-volumes/Cargo.toml
+++ b/backend/windmill-worker-volumes/Cargo.toml
@@ -7,6 +7,8 @@ edition.workspace = true
 [lib]
 name = "windmill_worker_volumes"
 path = "src/lib.rs"
+# src/ has no doctests: remove this line before adding one, or cargo test never runs it.
+doctest = false
 
 [features]
 enterprise = []
diff --git a/backend/windmill-worker/Cargo.toml b/backend/windmill-worker/Cargo.toml
index 68728a9713..082166419e 100644
--- a/backend/windmill-worker/Cargo.toml
+++ b/backend/windmill-worker/Cargo.toml
@@ -7,6 +7,8 @@ edition.workspace = true
 [lib]
 name = "windmill_worker"
 path = "src/lib.rs"
+# src/ has no doctests: remove this line before adding one, or cargo test never runs it.
+doctest = false
 
 [features]
 default = []