diff --git a/Cargo.lock b/Cargo.lock index 06cadd3..690044a 100644 --- a/Cargo.lock +++ b/Cargo.lock @@ -145,6 +145,15 @@ version = "1.0.102" source = "registry+https://github.com/rust-lang/crates.io-index" checksum = "7f202df86484c868dbad7eaa557ef785d5c66295e41b460ef922eca0723b842c" +[[package]] +name = "approx" +version = "0.5.1" +source = "registry+https://github.com/rust-lang/crates.io-index" +checksum = "cab112f0a86d568ea0e627cc1d6be74a1e9cd55214684db5561995f6dad897c6" +dependencies = [ + "num-traits", +] + [[package]] name = "ar_archive_writer" version = "0.5.1" @@ -499,7 +508,7 @@ version = "58.1.0" source = "registry+https://github.com/rust-lang/crates.io-index" checksum = "c30a1365d7a7dc50cc847e54154e6af49e4c4b0fddc9f607b687f29212082743" dependencies = [ - "bitflags 2.11.0", + "bitflags 2.13.1", ] [[package]] @@ -664,6 +673,15 @@ dependencies = [ "num-traits", ] +[[package]] +name = "atomic" +version = "0.6.1" +source = "registry+https://github.com/rust-lang/crates.io-index" +checksum = "a89cbf775b137e9b968e67227ef7f775587cde3fd31b0d8599dbd0f598a48340" +dependencies = [ + "bytemuck", +] + [[package]] name = "atomic-waker" version = "1.1.2" @@ -732,15 +750,30 @@ dependencies = [ "serde", ] +[[package]] +name = "bit-set" +version = "0.5.3" +source = "registry+https://github.com/rust-lang/crates.io-index" +checksum = "0700ddab506f33b20a03b13996eccd309a48e5ff77d0d95926aa0210fb4e95f1" +dependencies = [ + "bit-vec 0.6.3", +] + [[package]] name = "bit-set" version = "0.6.0" source = "registry+https://github.com/rust-lang/crates.io-index" checksum = "f0481a0e032742109b1133a095184ee93d88f3dc9e0d28a5d033dc77a073f44f" dependencies = [ - "bit-vec", + "bit-vec 0.7.0", ] +[[package]] +name = "bit-vec" +version = "0.6.3" +source = "registry+https://github.com/rust-lang/crates.io-index" +checksum = "349f9b6a179ed607305526ca489b34ad0a41aed5f7980fa90eb03160b69598fb" + [[package]] name = "bit-vec" version = "0.7.0" @@ -758,9 +791,9 @@ checksum = "bef38d45163c2f1dde094a7dfd33ccf595c92905c8f8f4fdc18d06fb1037718a" [[package]] name = "bitflags" -version = "2.11.0" +version = "2.13.1" source = "registry+https://github.com/rust-lang/crates.io-index" -checksum = "843867be96c8daad0d758b57df9392b6d8d271134fce549de6ce169ff98a92af" +checksum = "b588b76d00fde79687d7646a9b5bdf3cc0f655e0bbd080335a95d7e96f3587da" dependencies = [ "serde_core", ] @@ -827,7 +860,7 @@ dependencies = [ "clap_mangen", "crc", "crc32c", - "crossterm", + "crossterm 0.28.1", "digest 0.10.7", "dirs", "duckdb", @@ -952,7 +985,7 @@ version = "1.0.16" source = "registry+https://github.com/rust-lang/crates.io-index" checksum = "c541c70a910b485670304fd420f0eab8f7bde68439db6a8d98819c3d2774d7e2" dependencies = [ - "bit-vec", + "bit-vec 0.7.0", "getrandom 0.2.17", "siphasher", ] @@ -995,6 +1028,12 @@ version = "3.20.2" source = "registry+https://github.com/rust-lang/crates.io-index" checksum = "5d20789868f4b01b2f2caec9f5c4e0213b41e3e5702a50157d699ae31ced2fcb" +[[package]] +name = "by_address" +version = "1.2.1" +source = "registry+https://github.com/rust-lang/crates.io-index" +checksum = "64fa3c856b712db6612c019f14756e64e4bcea13337a6b33b696333a9eaa2d06" + [[package]] name = "bytemuck" version = "1.25.0" @@ -1029,12 +1068,6 @@ dependencies = [ "tinyvec", ] -[[package]] -name = "cassowary" -version = "0.3.0" -source = "registry+https://github.com/rust-lang/crates.io-index" -checksum = "df8670b8c7b9dae1793364eafadf7239c40d669904660c5960d74cfd80b46a53" - [[package]] name = "cast" version = "0.3.0" @@ -1240,16 +1273,16 @@ version = "7.1.4" source = "registry+https://github.com/rust-lang/crates.io-index" checksum = "4a65ebfec4fb190b6f90e944a817d60499ee0744e582530e2c9900a22e591d9a" dependencies = [ - "crossterm", + "crossterm 0.28.1", "unicode-segmentation", "unicode-width 0.2.0", ] [[package]] name = "compact_str" -version = "0.8.1" +version = "0.9.1" source = "registry+https://github.com/rust-lang/crates.io-index" -checksum = "3b79c4069c6cad78e2e0cdfcbd26275770669fb39fd308a752dc110e83b9af32" +checksum = "9dfdd1c2274d9aa354115b09dc9a901d6c5576818cdf70d14cae2bdb47df00ab" dependencies = [ "castaway", "cfg-if", @@ -1324,6 +1357,15 @@ version = "0.4.2" source = "registry+https://github.com/rust-lang/crates.io-index" checksum = "3d52eff69cd5e647efe296129160853a42795992097e8af39800e1060caeea9b" +[[package]] +name = "convert_case" +version = "0.10.0" +source = "registry+https://github.com/rust-lang/crates.io-index" +checksum = "633458d4ef8c78b72454de2d54fd6ab2e60f9e02be22f3c6104cdc8a4e0fceb9" +dependencies = [ + "unicode-segmentation", +] + [[package]] name = "core-foundation" version = "0.9.4" @@ -1540,6 +1582,12 @@ dependencies = [ "cfg-if", ] +[[package]] +name = "critical-section" +version = "1.2.0" +source = "registry+https://github.com/rust-lang/crates.io-index" +checksum = "790eea4361631c5e7d22598ecd5723ff611904e3344ce8720784c93e3d83d40b" + [[package]] name = "crossbeam-channel" version = "0.5.15" @@ -1589,7 +1637,7 @@ version = "0.28.1" source = "registry+https://github.com/rust-lang/crates.io-index" checksum = "829d955a0bb380ef178a640b91779e3987da38c9aea133b20614cfed8cdea9c6" dependencies = [ - "bitflags 2.11.0", + "bitflags 2.13.1", "crossterm_winapi", "mio 1.2.0", "parking_lot", @@ -1599,6 +1647,24 @@ dependencies = [ "winapi", ] +[[package]] +name = "crossterm" +version = "0.29.0" +source = "registry+https://github.com/rust-lang/crates.io-index" +checksum = "d8b9f2e4c67f833b660cdb0a3523065869fb35570177239812ed4c905aeff87b" +dependencies = [ + "bitflags 2.13.1", + "crossterm_winapi", + "derive_more", + "document-features", + "mio 1.2.0", + "parking_lot", + "rustix 1.1.4", + "signal-hook", + "signal-hook-mio", + "winapi", +] + [[package]] name = "crossterm_winapi" version = "0.9.1" @@ -1645,6 +1711,16 @@ dependencies = [ "hybrid-array", ] +[[package]] +name = "csscolorparser" +version = "0.6.2" +source = "registry+https://github.com/rust-lang/crates.io-index" +checksum = "eb2a7d3066da2de787b7f032c736763eb7ae5d355f81a68bab2675a96008b0bf" +dependencies = [ + "lab", + "phf", +] + [[package]] name = "csv" version = "1.4.0" @@ -1717,7 +1793,7 @@ version = "22.0.0" source = "registry+https://github.com/rust-lang/crates.io-index" checksum = "bdbd1f579714e3c809ebd822c81ef148b1ceaeb3d535352afc73fd0c4c6a0017" dependencies = [ - "bitflags 2.11.0", + "bitflags 2.13.1", "libloading 0.8.9", "winapi", ] @@ -1803,6 +1879,12 @@ version = "0.1.12" source = "registry+https://github.com/rust-lang/crates.io-index" checksum = "ac6b926516df9c60bfa16e107b21086399f8285a44ca9711344b9e553c5146e2" +[[package]] +name = "deltae" +version = "0.3.2" +source = "registry+https://github.com/rust-lang/crates.io-index" +checksum = "5729f5117e208430e437df2f4843f5e5952997175992d1414f94c57d61e270b4" + [[package]] name = "der" version = "0.7.10" @@ -1858,6 +1940,28 @@ dependencies = [ "syn 2.0.117", ] +[[package]] +name = "derive_more" +version = "2.1.1" +source = "registry+https://github.com/rust-lang/crates.io-index" +checksum = "d751e9e49156b02b44f9c1815bcb94b984cdcc4396ecc32521c739452808b134" +dependencies = [ + "derive_more-impl", +] + +[[package]] +name = "derive_more-impl" +version = "2.1.1" +source = "registry+https://github.com/rust-lang/crates.io-index" +checksum = "799a97264921d8623a957f6c3b9011f3b5492f557bbb7a5a19b7fa6d06ba8dcb" +dependencies = [ + "convert_case", + "proc-macro2", + "quote", + "rustc_version", + "syn 2.0.117", +] + [[package]] name = "des" version = "0.8.1" @@ -2122,6 +2226,15 @@ dependencies = [ "windows-sys 0.48.0", ] +[[package]] +name = "euclid" +version = "0.22.14" +source = "registry+https://github.com/rust-lang/crates.io-index" +checksum = "f1a05365e3b1c6d1650318537c7460c6923f1abdd272ad6842baa2b509957a06" +dependencies = [ + "num-traits", +] + [[package]] name = "event-listener" version = "5.4.1" @@ -2145,9 +2258,9 @@ dependencies = [ [[package]] name = "ewf" -version = "0.4.7" +version = "0.4.9" source = "registry+https://github.com/rust-lang/crates.io-index" -checksum = "f9f0aae36d49a5b16a1353b4b80f7d0090666ca19dd910aed7b0ab1d35bf8f60" +checksum = "91ed8c21f060b936723663fe832dcbe25edac7c0a4f323b308033132f5d075ca" dependencies = [ "adler2", "flate2", @@ -2156,6 +2269,7 @@ dependencies = [ "lru", "md-5", "rayon", + "safe-read", "sha-1", "thiserror 2.0.18", ] @@ -2178,6 +2292,16 @@ version = "0.1.9" source = "registry+https://github.com/rust-lang/crates.io-index" checksum = "7360491ce676a36bf9bb3c56c1aa791658183a54d2744120f27285738d90465a" +[[package]] +name = "fancy-regex" +version = "0.11.0" +source = "registry+https://github.com/rust-lang/crates.io-index" +checksum = "b95f7c0680e4142284cf8b22c14a476e87d61b004a3a0861872b32ef7ead40a2" +dependencies = [ + "bit-set 0.5.3", + "regex", +] + [[package]] name = "fastrand" version = "2.4.1" @@ -2209,6 +2333,17 @@ version = "0.2.9" source = "registry+https://github.com/rust-lang/crates.io-index" checksum = "28dea519a9695b9977216879a3ebfddf92f1c08c05d984f8996aecd6ecdc811d" +[[package]] +name = "filedescriptor" +version = "0.8.3" +source = "registry+https://github.com/rust-lang/crates.io-index" +checksum = "e40758ed24c9b2eeb76c35fb0aebc66c626084edd827e07e1552279814c6682d" +dependencies = [ + "libc", + "thiserror 1.0.69", + "winapi", +] + [[package]] name = "filetime" version = "0.2.27" @@ -2226,6 +2361,18 @@ version = "0.1.9" source = "registry+https://github.com/rust-lang/crates.io-index" checksum = "5baebc0774151f905a1a2cc41989300b1e6fbb29aff0ceffa1064fdd3088d582" +[[package]] +name = "finl_unicode" +version = "1.4.0" +source = "registry+https://github.com/rust-lang/crates.io-index" +checksum = "9844ddc3a6e533d62bba727eb6c28b5d360921d5175e9ff0f1e621a5c590a4d5" + +[[package]] +name = "fixedbitset" +version = "0.4.2" +source = "registry+https://github.com/rust-lang/crates.io-index" +checksum = "0ce7134b9999ecaf8bcd65542e436736ef32ddca1b3e06094cb6ec5755203b80" + [[package]] name = "flatbuffers" version = "24.12.23" @@ -2293,6 +2440,12 @@ version = "0.1.5" source = "registry+https://github.com/rust-lang/crates.io-index" checksum = "d9c4f5dac5e15c24eb999c26181a6ca40b39fe946cbe4c263c7209467bc83af2" +[[package]] +name = "foldhash" +version = "0.2.0" +source = "registry+https://github.com/rust-lang/crates.io-index" +checksum = "77ce24cb58228fbb8aa041425bb1050850ac19177686ea6e0f41a70416f56fdb" + [[package]] name = "foreign-types" version = "0.3.2" @@ -2618,7 +2771,7 @@ version = "0.9.1" source = "registry+https://github.com/rust-lang/crates.io-index" checksum = "0bf760ebf69878d9fd8f110c89703d90ce35095324d1f1edcb595c63945ee757" dependencies = [ - "bitflags 2.11.0", + "bitflags 2.13.1", "ignore", "walkdir", ] @@ -2662,7 +2815,7 @@ version = "0.6.0" source = "registry+https://github.com/rust-lang/crates.io-index" checksum = "fbcd2dba93594b227a1f57ee09b8b9da8892c34d55aa332e034a228d0fe6a171" dependencies = [ - "bitflags 2.11.0", + "bitflags 2.13.1", "gpu-alloc-types", ] @@ -2672,7 +2825,7 @@ version = "0.3.0" source = "registry+https://github.com/rust-lang/crates.io-index" checksum = "98ff03b468aa837d70984d55f5d3f846f6ec31fe34bbb97c4f85219caeee1ca4" dependencies = [ - "bitflags 2.11.0", + "bitflags 2.13.1", ] [[package]] @@ -2694,7 +2847,7 @@ version = "0.3.2" source = "registry+https://github.com/rust-lang/crates.io-index" checksum = "b89c83349105e3732062a895becfc71a8f921bb71ecbbdd8ff99263e3b53a0ca" dependencies = [ - "bitflags 2.11.0", + "bitflags 2.13.1", "gpu-descriptor-types", "hashbrown 0.15.5", ] @@ -2705,7 +2858,7 @@ version = "0.2.0" source = "registry+https://github.com/rust-lang/crates.io-index" checksum = "fdf242682df893b86f33a73828fb09ca4b2d3bb6cc95249707fc684d27484b91" dependencies = [ - "bitflags 2.11.0", + "bitflags 2.13.1", ] [[package]] @@ -2754,9 +2907,7 @@ version = "0.15.5" source = "registry+https://github.com/rust-lang/crates.io-index" checksum = "9229cfe53dfd69f0609a49f65461bd93001ea1ef889cd5529dd176593f5338a1" dependencies = [ - "allocator-api2", - "equivalent", - "foldhash", + "foldhash 0.1.5", ] [[package]] @@ -2764,12 +2915,22 @@ name = "hashbrown" version = "0.16.1" source = "registry+https://github.com/rust-lang/crates.io-index" checksum = "841d1cc9bed7f9236f321df977030373f4a4163ae1a7dbfe1a51a2c1a51d9100" +dependencies = [ + "allocator-api2", + "equivalent", + "foldhash 0.2.0", +] [[package]] name = "hashbrown" version = "0.17.0" source = "registry+https://github.com/rust-lang/crates.io-index" checksum = "4f467dd6dccf739c208452f8014c75c18bb8301b050ad1cfb27153803edb0f51" +dependencies = [ + "allocator-api2", + "equivalent", + "foldhash 0.2.0", +] [[package]] name = "hashlink" @@ -2795,7 +2956,7 @@ version = "0.11.0" source = "registry+https://github.com/rust-lang/crates.io-index" checksum = "af2a7e73e1f34c48da31fb668a907f250794837e08faa144fd24f0b8b741e890" dependencies = [ - "bitflags 2.11.0", + "bitflags 2.13.1", "com", "libc", "libloading 0.8.9", @@ -2812,7 +2973,7 @@ checksum = "51610510377a0847d53b78b53f9c6c9b7df3ffb300d1181b2e04f68bba363734" dependencies = [ "aes", "base64 0.22.1", - "bitflags 2.11.0", + "bitflags 2.13.1", "bumpalo", "bytes", "cbc", @@ -3336,6 +3497,15 @@ dependencies = [ "either", ] +[[package]] +name = "itertools" +version = "0.14.0" +source = "registry+https://github.com/rust-lang/crates.io-index" +checksum = "2b192c782037fadd9cfa75548310488aabdbf3d2da73885b31bd0abd03351285" +dependencies = [ + "either", +] + [[package]] name = "itoa" version = "1.0.18" @@ -3469,6 +3639,17 @@ dependencies = [ "sha2", ] +[[package]] +name = "kasuari" +version = "0.4.12" +source = "registry+https://github.com/rust-lang/crates.io-index" +checksum = "bde5057d6143cc94e861d90f591b9303d6716c6b9602309150bd068853c10899" +dependencies = [ + "hashbrown 0.16.1", + "portable-atomic", + "thiserror 2.0.18", +] + [[package]] name = "keccak" version = "0.1.6" @@ -3525,6 +3706,12 @@ dependencies = [ "libc", ] +[[package]] +name = "lab" +version = "0.11.0" +source = "registry+https://github.com/rust-lang/crates.io-index" +checksum = "bf36173d4167ed999940f804952e6b08197cae5ad5d572eb4db150ce8ad5d58f" + [[package]] name = "lazy-regex" version = "3.6.0" @@ -3681,7 +3868,7 @@ version = "0.1.16" source = "registry+https://github.com/rust-lang/crates.io-index" checksum = "e02f3bb43d335493c96bf3fd3a321600bf6bd07ed34bc64118e9293bdffea46c" dependencies = [ - "bitflags 2.11.0", + "bitflags 2.13.1", "libc", "plain", "redox_syscall 0.7.4", @@ -3724,6 +3911,15 @@ dependencies = [ "vcpkg", ] +[[package]] +name = "line-clipping" +version = "0.3.8" +source = "registry+https://github.com/rust-lang/crates.io-index" +checksum = "e752191d037c44ad111a8caa762921926658402f01cc1253f7bef2020ece4f5e" +dependencies = [ + "bitflags 2.13.1", +] + [[package]] name = "linkme" version = "0.3.35" @@ -3818,11 +4014,11 @@ dependencies = [ [[package]] name = "lru" -version = "0.12.5" +version = "0.18.2" source = "registry+https://github.com/rust-lang/crates.io-index" -checksum = "234cf4f4a04dc1f57e24b96cc0cd600cf2af460d4161ac5ecdd0af8e1f3b2a38" +checksum = "5d2f2f9b4ba7e6b24d95e7e899329d35be83bcded72c8540cdd5368932d1d90a" dependencies = [ - "hashbrown 0.15.5", + "hashbrown 0.17.0", ] [[package]] @@ -3850,6 +4046,16 @@ dependencies = [ "crc", ] +[[package]] +name = "mac_address" +version = "1.1.8" +source = "registry+https://github.com/rust-lang/crates.io-index" +checksum = "c0aeb26bf5e836cc1c341c8106051b573f1766dfa05aa87f0b98be5e51b02303" +dependencies = [ + "nix", + "winapi", +] + [[package]] name = "mach2" version = "0.4.3" @@ -3920,6 +4126,12 @@ dependencies = [ "rustix 0.38.44", ] +[[package]] +name = "memmem" +version = "0.1.1" +source = "registry+https://github.com/rust-lang/crates.io-index" +checksum = "a64a92489e2744ce060c349162be1c5f33c6969234104dbd99ddb5feb08b8c15" + [[package]] name = "memo-map" version = "0.3.3" @@ -3950,7 +4162,7 @@ version = "0.29.0" source = "registry+https://github.com/rust-lang/crates.io-index" checksum = "7ecfd3296f8c56b7c1f6fbac3c71cefa9d78ce009850c45000015f206dc7fa21" dependencies = [ - "bitflags 2.11.0", + "bitflags 2.13.1", "block", "core-graphics-types", "foreign-types 0.5.0", @@ -4072,8 +4284,8 @@ source = "registry+https://github.com/rust-lang/crates.io-index" checksum = "8bd5a652b6faf21496f2cfd88fc49989c8db0825d1f6746b1a71a6ede24a63ad" dependencies = [ "arrayvec", - "bit-set", - "bitflags 2.11.0", + "bit-set 0.6.0", + "bitflags 2.13.1", "cfg_aliases 0.1.1", "codespan-reporting", "hexf-parse", @@ -4112,6 +4324,19 @@ dependencies = [ "jni-sys 0.3.1", ] +[[package]] +name = "nix" +version = "0.29.0" +source = "registry+https://github.com/rust-lang/crates.io-index" +checksum = "71e2746dc3a24dd78b3cfcb7be93368c6de9963d30f43a6a73998a9cf4b17b46" +dependencies = [ + "bitflags 2.13.1", + "cfg-if", + "cfg_aliases 0.2.1", + "libc", + "memoffset", +] + [[package]] name = "nom" version = "7.1.3" @@ -4134,7 +4359,7 @@ version = "6.1.1" source = "registry+https://github.com/rust-lang/crates.io-index" checksum = "6205bd8bb1e454ad2e27422015fb5e4f2bcc7e08fa8f27058670d208324a4d2d" dependencies = [ - "bitflags 2.11.0", + "bitflags 2.13.1", "crossbeam-channel", "filetime", "fsevent-sys", @@ -4254,6 +4479,15 @@ dependencies = [ "libm", ] +[[package]] +name = "num_threads" +version = "0.1.7" +source = "registry+https://github.com/rust-lang/crates.io-index" +checksum = "5c7398b9c8b70908f6371f47ed36737907c87c52af34c268fed0bf0ceb92ead9" +dependencies = [ + "libc", +] + [[package]] name = "objc" version = "0.2.7" @@ -4381,7 +4615,7 @@ version = "0.10.76" source = "registry+https://github.com/rust-lang/crates.io-index" checksum = "951c002c75e16ea2c65b8c7e4d3d51d5530d8dfa7d060b4776828c88cfb18ecf" dependencies = [ - "bitflags 2.11.0", + "bitflags 2.13.1", "cfg-if", "foreign-types 0.3.2", "libc", @@ -4444,6 +4678,15 @@ dependencies = [ "num-traits", ] +[[package]] +name = "ordered-float" +version = "4.6.0" +source = "registry+https://github.com/rust-lang/crates.io-index" +checksum = "7bb71e1b3fa6ca1c61f383464aaf2bb0e2f8e772a1f01d486832464de363b951" +dependencies = [ + "num-traits", +] + [[package]] name = "ordered-multimap" version = "0.7.3" @@ -4502,6 +4745,39 @@ dependencies = [ "sha2", ] +[[package]] +name = "palette" +version = "0.7.7" +source = "registry+https://github.com/rust-lang/crates.io-index" +checksum = "ddeed8580d347d2abf3dcf06a5f0b3dc020258338526b277847cd4248a70fc64" +dependencies = [ + "approx", + "libm", + "palette_derive", + "palette_math", +] + +[[package]] +name = "palette_derive" +version = "0.7.7" +source = "registry+https://github.com/rust-lang/crates.io-index" +checksum = "88537020289b719d81be994ccf1bbf4990f477e2f69ee52fe3e45f43a02e56be" +dependencies = [ + "by_address", + "proc-macro2", + "quote", + "syn 2.0.117", +] + +[[package]] +name = "palette_math" +version = "0.7.7" +source = "registry+https://github.com/rust-lang/crates.io-index" +checksum = "6e6eb142958d64335fb0e345c5b9ead2ecd6fc438c307e9d7d3c4fd428dbaf12" +dependencies = [ + "libm", +] + [[package]] name = "parking" version = "2.2.1" @@ -4642,6 +4918,100 @@ version = "2.3.2" source = "registry+https://github.com/rust-lang/crates.io-index" checksum = "9b4f627cb1b25917193a259e49bdad08f671f8d9708acfd5fe0a8c1455d87220" +[[package]] +name = "pest" +version = "2.8.8" +source = "registry+https://github.com/rust-lang/crates.io-index" +checksum = "7df728be843c7070fab6ab7c328c4e9e9d78e23bf749c0669c86ee7ebfa050a2" +dependencies = [ + "memchr", + "ucd-trie", +] + +[[package]] +name = "pest_derive" +version = "2.8.8" +source = "registry+https://github.com/rust-lang/crates.io-index" +checksum = "9e2dd6fc3b26b3462ee188aac870f5a41d398f1cd5e2408d16531bd71c9591fd" +dependencies = [ + "pest", + "pest_generator", +] + +[[package]] +name = "pest_generator" +version = "2.8.8" +source = "registry+https://github.com/rust-lang/crates.io-index" +checksum = "6a7a9205cfb6f596a9e8b689c0a15f9ceb7a1aafae7aaf788150ac65b29975b6" +dependencies = [ + "pest", + "pest_meta", + "proc-macro2", + "quote", + "syn 2.0.117", +] + +[[package]] +name = "pest_meta" +version = "2.8.8" +source = "registry+https://github.com/rust-lang/crates.io-index" +checksum = "85abd351c0de1e8384fc791a0737111a350394937e92b956b743dac12429f57c" +dependencies = [ + "pest", +] + +[[package]] +name = "phf" +version = "0.11.3" +source = "registry+https://github.com/rust-lang/crates.io-index" +checksum = "1fd6780a80ae0c52cc120a26a1a42c1ae51b247a253e4e06113d23d2c2edd078" +dependencies = [ + "phf_macros", + "phf_shared", +] + +[[package]] +name = "phf_codegen" +version = "0.11.3" +source = "registry+https://github.com/rust-lang/crates.io-index" +checksum = "aef8048c789fa5e851558d709946d6d79a8ff88c0440c587967f8e94bfb1216a" +dependencies = [ + "phf_generator", + "phf_shared", +] + +[[package]] +name = "phf_generator" +version = "0.11.3" +source = "registry+https://github.com/rust-lang/crates.io-index" +checksum = "3c80231409c20246a13fddb31776fb942c38553c51e871f8cbd687a4cfb5843d" +dependencies = [ + "phf_shared", + "rand 0.8.5", +] + +[[package]] +name = "phf_macros" +version = "0.11.3" +source = "registry+https://github.com/rust-lang/crates.io-index" +checksum = "f84ac04429c13a7ff43785d75ad27569f2951ce0ffd30a3321230db2fc727216" +dependencies = [ + "phf_generator", + "phf_shared", + "proc-macro2", + "quote", + "syn 2.0.117", +] + +[[package]] +name = "phf_shared" +version = "0.11.3" +source = "registry+https://github.com/rust-lang/crates.io-index" +checksum = "67eabc2ef2a60eb7faa00097bd1ffdb5bd28e62bf39990626a582201b7a754e5" +dependencies = [ + "siphasher", +] + [[package]] name = "pin-project-lite" version = "0.2.17" @@ -4714,7 +5084,7 @@ version = "0.18.1" source = "registry+https://github.com/rust-lang/crates.io-index" checksum = "60769b8b31b2a9f263dae2776c37b1b28ae246943cf719eb6946a1db05128a61" dependencies = [ - "bitflags 2.11.0", + "bitflags 2.13.1", "crc32fast", "fdeflate", "flate2", @@ -5144,25 +5514,105 @@ checksum = "ca45419789ae5a7899559e9512e58ca889e41f04f1f2445e9f4b290ceccd1d08" [[package]] name = "ratatui" -version = "0.29.0" +version = "0.30.2" source = "registry+https://github.com/rust-lang/crates.io-index" -checksum = "eabd94c2f37801c20583fc49dd5cd6b0ba68c716787c2dd6ed18571e1e63117b" +checksum = "3274ba0a2c5e1bcad2a2005d20f4dc59dad26b2eb0940fb094500dba4099d57d" dependencies = [ - "bitflags 2.11.0", - "cassowary", - "compact_str", - "crossterm", - "indoc", "instability", - "itertools 0.13.0", + "ratatui-core", + "ratatui-crossterm", + "ratatui-macros", + "ratatui-termina", + "ratatui-termwiz", + "ratatui-widgets", + "serde", +] + +[[package]] +name = "ratatui-core" +version = "0.1.2" +source = "registry+https://github.com/rust-lang/crates.io-index" +checksum = "cbb175c433c8e28a809d1f5773a2ae96e68c0ce40db865cbab1020bf33ae479c" +dependencies = [ + "bitflags 2.13.1", + "compact_str", + "critical-section", + "hashbrown 0.17.0", + "itertools 0.14.0", + "kasuari", "lru", - "paste", - "strum 0.26.3", + "palette", + "serde", + "strum 0.28.0", + "thiserror 2.0.18", "unicode-segmentation", "unicode-truncate", "unicode-width 0.2.0", ] +[[package]] +name = "ratatui-crossterm" +version = "0.1.2" +source = "registry+https://github.com/rust-lang/crates.io-index" +checksum = "567584a3b0e6a8203c23de40b4861497266725eb5363dbfd18a1edd603cca9f0" +dependencies = [ + "cfg-if", + "crossterm 0.29.0", + "instability", + "ratatui-core", +] + +[[package]] +name = "ratatui-macros" +version = "0.7.2" +source = "registry+https://github.com/rust-lang/crates.io-index" +checksum = "ed7dc68daa7498a43e4d68e0eb078427e10c38fbcfbb1e42d955f1fa2140d814" +dependencies = [ + "ratatui-core", + "ratatui-widgets", +] + +[[package]] +name = "ratatui-termina" +version = "0.1.0" +source = "registry+https://github.com/rust-lang/crates.io-index" +checksum = "c0bf912d9e66f057a759d92e386a280ea886b352ab757d6ac4d653c7ed2c43c2" +dependencies = [ + "instability", + "ratatui-core", + "termina", +] + +[[package]] +name = "ratatui-termwiz" +version = "0.1.2" +source = "registry+https://github.com/rust-lang/crates.io-index" +checksum = "faf03e0380b7744054d6cb74224fe3adf062a029754933f575ca1e3b4c2ce977" +dependencies = [ + "ratatui-core", + "termwiz", +] + +[[package]] +name = "ratatui-widgets" +version = "0.3.2" +source = "registry+https://github.com/rust-lang/crates.io-index" +checksum = "66e3d19bcc9130ca376277d93b60767ff121ace3be06f5f95f81dd68956407d1" +dependencies = [ + "bitflags 2.13.1", + "hashbrown 0.17.0", + "indoc", + "instability", + "itertools 0.14.0", + "line-clipping", + "ratatui-core", + "serde", + "strum 0.28.0", + "time", + "unicode-segmentation", + "unicode-width 0.2.0", +] + [[package]] name = "raw-window-handle" version = "0.6.2" @@ -5195,7 +5645,7 @@ version = "0.5.18" source = "registry+https://github.com/rust-lang/crates.io-index" checksum = "ed2bf2547551a7053d6fdfafda3f938979645c44812fbfcda098faae3f1a362d" dependencies = [ - "bitflags 2.11.0", + "bitflags 2.13.1", ] [[package]] @@ -5204,7 +5654,7 @@ version = "0.7.4" source = "registry+https://github.com/rust-lang/crates.io-index" checksum = "f450ad9c3b1da563fb6948a8e0fb0fb9269711c9c73d9ea1de5058c79c8d643a" dependencies = [ - "bitflags 2.11.0", + "bitflags 2.13.1", ] [[package]] @@ -5454,7 +5904,7 @@ version = "0.31.0" source = "registry+https://github.com/rust-lang/crates.io-index" checksum = "b838eba278d213a8beaf485bd313fd580ca4505a00d5871caeb1457c55322cae" dependencies = [ - "bitflags 2.11.0", + "bitflags 2.13.1", "fallible-iterator 0.3.0", "fallible-streaming-iterator", "hashlink 0.9.1", @@ -5508,7 +5958,7 @@ version = "0.38.44" source = "registry+https://github.com/rust-lang/crates.io-index" checksum = "fdb5bc1ae2baa591800df16c9ca78619bf65c0488b41b96ccec5d11220d8c154" dependencies = [ - "bitflags 2.11.0", + "bitflags 2.13.1", "errno", "libc", "linux-raw-sys 0.4.15", @@ -5521,7 +5971,7 @@ version = "1.1.4" source = "registry+https://github.com/rust-lang/crates.io-index" checksum = "b6fe4565b9518b83ef4f91bb47ce29620ca828bd32cb7e408f0062e9930ba190" dependencies = [ - "bitflags 2.11.0", + "bitflags 2.13.1", "errno", "libc", "linux-raw-sys 0.12.1", @@ -5615,6 +6065,12 @@ version = "1.0.23" source = "registry+https://github.com/rust-lang/crates.io-index" checksum = "9774ba4a74de5f7b1c1451ed6cd5285a32eddb5cccb8cc655a4e50009e06477f" +[[package]] +name = "safe-read" +version = "0.2.2" +source = "registry+https://github.com/rust-lang/crates.io-index" +checksum = "67fa5cb4ac7edaf64ee1843699d72fb9c72b52411d4ec5e7142340be61ce6c09" + [[package]] name = "salsa20" version = "0.10.2" @@ -5689,7 +6145,7 @@ version = "3.7.0" source = "registry+https://github.com/rust-lang/crates.io-index" checksum = "b7f4bc775c73d9a02cde8bf7b2ec4c9d12743edf609006c7facc23998404cd1d" dependencies = [ - "bitflags 2.11.0", + "bitflags 2.13.1", "core-foundation 0.10.1", "core-foundation-sys", "libc", @@ -6002,7 +6458,7 @@ version = "0.3.0+sdk-1.3.268.0" source = "registry+https://github.com/rust-lang/crates.io-index" checksum = "eda41003dc44290527a59b13432d4a0379379fa074b70174882adfbdfd917844" dependencies = [ - "bitflags 2.11.0", + "bitflags 2.13.1", ] [[package]] @@ -6143,7 +6599,7 @@ checksum = "5afe4c38a9b417b6a9a5eeffe7235d0a106716495536e7727d1c7f4b1ff3eba6" dependencies = [ "atoi", "base64 0.22.1", - "bitflags 2.11.0", + "bitflags 2.13.1", "byteorder", "bytes", "crc", @@ -6185,7 +6641,7 @@ checksum = "b1dbb157e65f10dbe01f729339c06d239120221c9ad9fa0ba8408c4cc18ecf21" dependencies = [ "atoi", "base64 0.22.1", - "bitflags 2.11.0", + "bitflags 2.13.1", "byteorder", "crc", "dotenvy", @@ -6244,7 +6700,7 @@ version = "0.9.5" source = "registry+https://github.com/rust-lang/crates.io-index" checksum = "2f84d13b3b8a0d4e91a2629911e951db1bb8671512f5c09d7d4ba34500ba68c8" dependencies = [ - "bitflags 2.11.0", + "bitflags 2.13.1", "libc", "libssh2-sys", "parking_lot", @@ -6313,40 +6769,39 @@ dependencies = [ [[package]] name = "strum" -version = "0.26.3" +version = "0.27.2" source = "registry+https://github.com/rust-lang/crates.io-index" -checksum = "8fec0f0aef304996cf250b31b5a10dee7980c85da9d759361292b8bca5a18f06" +checksum = "af23d6f6c1a224baef9d3f61e287d2761385a5b88fdab4eb4c6f11aeb54c4bcf" dependencies = [ - "strum_macros 0.26.4", + "strum_macros 0.27.2", ] [[package]] name = "strum" -version = "0.27.2" +version = "0.28.0" source = "registry+https://github.com/rust-lang/crates.io-index" -checksum = "af23d6f6c1a224baef9d3f61e287d2761385a5b88fdab4eb4c6f11aeb54c4bcf" +checksum = "9628de9b8791db39ceda2b119bbe13134770b56c138ec1d3af810d045c04f9bd" dependencies = [ - "strum_macros 0.27.2", + "strum_macros 0.28.0", ] [[package]] name = "strum_macros" -version = "0.26.4" +version = "0.27.2" source = "registry+https://github.com/rust-lang/crates.io-index" -checksum = "4c6bee85a5a24955dc440386795aa378cd9cf82acd5f764469152d2270e581be" +checksum = "7695ce3845ea4b33927c055a39dc438a45b059f7c1b3d91d38d10355fb8cbca7" dependencies = [ "heck 0.5.0", "proc-macro2", "quote", - "rustversion", "syn 2.0.117", ] [[package]] name = "strum_macros" -version = "0.27.2" +version = "0.28.0" source = "registry+https://github.com/rust-lang/crates.io-index" -checksum = "7695ce3845ea4b33927c055a39dc438a45b059f7c1b3d91d38d10355fb8cbca7" +checksum = "ab85eea0270ee17587ed4156089e10b9e6880ee688791d45a905f5b1ca36f664" dependencies = [ "heck 0.5.0", "proc-macro2", @@ -6467,12 +6922,88 @@ dependencies = [ "winapi-util", ] +[[package]] +name = "termina" +version = "0.3.3" +source = "registry+https://github.com/rust-lang/crates.io-index" +checksum = "9048a889effe34a5cddee0af7f53285198b16dca3be510858d38dfdb3e62a04e" +dependencies = [ + "bitflags 2.13.1", + "parking_lot", + "rustix 1.1.4", + "signal-hook", + "windows-sys 0.61.2", +] + +[[package]] +name = "terminfo" +version = "0.9.0" +source = "registry+https://github.com/rust-lang/crates.io-index" +checksum = "d4ea810f0692f9f51b382fff5893887bb4580f5fa246fde546e0b13e7fcee662" +dependencies = [ + "fnv", + "nom", + "phf", + "phf_codegen", +] + +[[package]] +name = "termios" +version = "0.3.3" +source = "registry+https://github.com/rust-lang/crates.io-index" +checksum = "411c5bf740737c7918b8b1fe232dca4dc9f8e754b8ad5e20966814001ed0ac6b" +dependencies = [ + "libc", +] + [[package]] name = "termtree" version = "0.5.1" source = "registry+https://github.com/rust-lang/crates.io-index" checksum = "8f50febec83f5ee1df3015341d8bd429f2d1cc62bcba7ea2076759d315084683" +[[package]] +name = "termwiz" +version = "0.23.3" +source = "registry+https://github.com/rust-lang/crates.io-index" +checksum = "4676b37242ccbd1aabf56edb093a4827dc49086c0ffd764a5705899e0f35f8f7" +dependencies = [ + "anyhow", + "base64 0.22.1", + "bitflags 2.13.1", + "fancy-regex", + "filedescriptor", + "finl_unicode", + "fixedbitset", + "hex", + "lazy_static", + "libc", + "log", + "memmem", + "nix", + "num-derive", + "num-traits", + "ordered-float 4.6.0", + "pest", + "pest_derive", + "phf", + "sha2", + "signal-hook", + "siphasher", + "terminfo", + "termios", + "thiserror 1.0.69", + "ucd-trie", + "unicode-segmentation", + "vtparse", + "wezterm-bidi", + "wezterm-blob-leases", + "wezterm-color-types", + "wezterm-dynamic", + "wezterm-input-types", + "winapi", +] + [[package]] name = "text-size" version = "1.1.1" @@ -6527,7 +7058,7 @@ checksum = "7e54bc85fc7faa8bc175c4bab5b92ba8d9a3ce893d0e9f42cc455c8ab16a9e09" dependencies = [ "byteorder", "integer-encoding", - "ordered-float", + "ordered-float 2.10.1", ] [[package]] @@ -6547,7 +7078,9 @@ checksum = "743bd48c283afc0388f9b8827b976905fb217ad9e647fae3a379a9283c4def2c" dependencies = [ "deranged", "itoa", + "libc", "num-conv", + "num_threads", "powerfmt", "serde_core", "time-core", @@ -6748,7 +7281,7 @@ version = "0.6.8" source = "registry+https://github.com/rust-lang/crates.io-index" checksum = "d4e6559d53cc268e5031cd8429d05415bc4cb4aefc4aa5d6cc35fbf5b924a1f8" dependencies = [ - "bitflags 2.11.0", + "bitflags 2.13.1", "bytes", "futures-util", "http", @@ -6832,6 +7365,12 @@ version = "1.19.0" source = "registry+https://github.com/rust-lang/crates.io-index" checksum = "562d481066bde0658276a35467c4af00bdc6ee726305698a55b86e61d7ad82bb" +[[package]] +name = "ucd-trie" +version = "0.1.7" +source = "registry+https://github.com/rust-lang/crates.io-index" +checksum = "2896d95c02a80c6d6a5d6e953d479f5ddf2dfdb6a244441010e373ac0fb88971" + [[package]] name = "unicase" version = "2.9.0" @@ -6873,13 +7412,13 @@ checksum = "9629274872b2bfaf8d66f5f15725007f635594914870f65218920345aa11aa8c" [[package]] name = "unicode-truncate" -version = "1.1.0" +version = "2.0.1" source = "registry+https://github.com/rust-lang/crates.io-index" -checksum = "b3644627a5af5fa321c95b9b235a72fd24cd29c648c2c379431e6628655627bf" +checksum = "16b380a1238663e5f8a691f9039c73e1cdae598a30e9855f541d29b08b53e9a5" dependencies = [ - "itertools 0.13.0", + "itertools 0.14.0", "unicode-segmentation", - "unicode-width 0.1.14", + "unicode-width 0.2.0", ] [[package]] @@ -7000,6 +7539,7 @@ version = "1.23.0" source = "registry+https://github.com/rust-lang/crates.io-index" checksum = "5ac8b6f42ead25368cf5b098aeb3dc8a1a2c05a3eee8a9a1a68c640edbfc79d9" dependencies = [ + "atomic", "getrandom 0.4.2", "js-sys", "serde_core", @@ -7019,6 +7559,15 @@ version = "0.9.5" source = "registry+https://github.com/rust-lang/crates.io-index" checksum = "0b928f33d975fc6ad9f86c8f283853ad26bdd5b10b7f1542aa2fa15e2289105a" +[[package]] +name = "vtparse" +version = "0.6.2" +source = "registry+https://github.com/rust-lang/crates.io-index" +checksum = "6d9b2acfb050df409c972a37d3b8e08cdea3bddb0c09db9d53137e504cfabed0" +dependencies = [ + "utf8parse", +] + [[package]] name = "wait-timeout" version = "0.2.1" @@ -7220,7 +7769,7 @@ source = "registry+https://github.com/rust-lang/crates.io-index" checksum = "8d28bc49ba1e5c5b61ffa7a2eace10820443c4b7d1c0b144109261d14570fdf8" dependencies = [ "ahash", - "bitflags 2.11.0", + "bitflags 2.13.1", "hashbrown 0.14.5", "indexmap 2.14.0", "semver", @@ -7234,7 +7783,7 @@ source = "registry+https://github.com/rust-lang/crates.io-index" checksum = "65a5a0689975b9fd93c02f5400cfd9669858b99607e54e7b892c6080cba598bb" dependencies = [ "ahash", - "bitflags 2.11.0", + "bitflags 2.13.1", "hashbrown 0.14.5", "indexmap 2.14.0", "semver", @@ -7247,7 +7796,7 @@ version = "0.244.0" source = "registry+https://github.com/rust-lang/crates.io-index" checksum = "47b807c72e1bac69382b3a6fb3dbe8ea4c0ed87ff5629b8685ae6b9a611028fe" dependencies = [ - "bitflags 2.11.0", + "bitflags 2.13.1", "hashbrown 0.15.5", "indexmap 2.14.0", "semver", @@ -7271,7 +7820,7 @@ source = "registry+https://github.com/rust-lang/crates.io-index" checksum = "f38dbf42dc56a6fe41ccd77211ea8ec90855de05e52cd00df5a0a3bca87d6147" dependencies = [ "anyhow", - "bitflags 2.11.0", + "bitflags 2.13.1", "bumpalo", "cc", "cfg-if", @@ -7481,6 +8030,78 @@ dependencies = [ "rustls-pki-types", ] +[[package]] +name = "wezterm-bidi" +version = "0.2.3" +source = "registry+https://github.com/rust-lang/crates.io-index" +checksum = "0c0a6e355560527dd2d1cf7890652f4f09bb3433b6aadade4c9b5ed76de5f3ec" +dependencies = [ + "log", + "wezterm-dynamic", +] + +[[package]] +name = "wezterm-blob-leases" +version = "0.1.1" +source = "registry+https://github.com/rust-lang/crates.io-index" +checksum = "692daff6d93d94e29e4114544ef6d5c942a7ed998b37abdc19b17136ea428eb7" +dependencies = [ + "getrandom 0.3.4", + "mac_address", + "sha2", + "thiserror 1.0.69", + "uuid", +] + +[[package]] +name = "wezterm-color-types" +version = "0.3.0" +source = "registry+https://github.com/rust-lang/crates.io-index" +checksum = "7de81ef35c9010270d63772bebef2f2d6d1f2d20a983d27505ac850b8c4b4296" +dependencies = [ + "csscolorparser", + "deltae", + "lazy_static", + "wezterm-dynamic", +] + +[[package]] +name = "wezterm-dynamic" +version = "0.2.1" +source = "registry+https://github.com/rust-lang/crates.io-index" +checksum = "5f2ab60e120fd6eaa68d9567f3226e876684639d22a4219b313ff69ec0ccd5ac" +dependencies = [ + "log", + "ordered-float 4.6.0", + "strsim", + "thiserror 1.0.69", + "wezterm-dynamic-derive", +] + +[[package]] +name = "wezterm-dynamic-derive" +version = "0.1.1" +source = "registry+https://github.com/rust-lang/crates.io-index" +checksum = "46c0cf2d539c645b448eaffec9ec494b8b19bd5077d9e58cb1ae7efece8d575b" +dependencies = [ + "proc-macro2", + "quote", + "syn 1.0.109", +] + +[[package]] +name = "wezterm-input-types" +version = "0.1.0" +source = "registry+https://github.com/rust-lang/crates.io-index" +checksum = "7012add459f951456ec9d6c7e6fc340b1ce15d6fc9629f8c42853412c029e57e" +dependencies = [ + "bitflags 1.3.2", + "euclid", + "lazy_static", + "serde", + "wezterm-dynamic", +] + [[package]] name = "wgpu" version = "22.1.0" @@ -7513,8 +8134,8 @@ source = "registry+https://github.com/rust-lang/crates.io-index" checksum = "0348c840d1051b8e86c3bcd31206080c5e71e5933dabd79be1ce732b0b2f089a" dependencies = [ "arrayvec", - "bit-vec", - "bitflags 2.11.0", + "bit-vec 0.7.0", + "bitflags 2.13.1", "cfg_aliases 0.1.1", "document-features", "indexmap 2.14.0", @@ -7540,8 +8161,8 @@ dependencies = [ "android_system_properties", "arrayvec", "ash", - "bit-set", - "bitflags 2.11.0", + "bit-set 0.6.0", + "bitflags 2.13.1", "block", "cfg_aliases 0.1.1", "core-graphics-types", @@ -7582,7 +8203,7 @@ version = "22.0.0" source = "registry+https://github.com/rust-lang/crates.io-index" checksum = "bc9d91f0e2c4b51434dfa6db77846f2793149d8e73f800fa2e41f52b8eac3c5d" dependencies = [ - "bitflags 2.11.0", + "bitflags 2.13.1", "js-sys", "web-sys", ] @@ -8032,7 +8653,7 @@ source = "registry+https://github.com/rust-lang/crates.io-index" checksum = "9d66ea20e9553b30172b5e831994e35fbde2d165325bec84fc43dbf6f4eb9cb2" dependencies = [ "anyhow", - "bitflags 2.11.0", + "bitflags 2.13.1", "indexmap 2.14.0", "log", "serde", diff --git a/Cargo.toml b/Cargo.toml index 9242dd1..5566eaf 100644 --- a/Cargo.toml +++ b/Cargo.toml @@ -137,7 +137,7 @@ indicatif = "0.18" clap_complete = "4" clap_mangen = "0.2" uuid = { version = "1", features = ["v5"] } -ratatui = { version = "0.29", optional = true } +ratatui = { version = "0.30", optional = true } crossterm = { version = "0.28", optional = true } tempfile = "3" # >=1.10505.0 (bundles DuckDB 1.5.5): earlier bundled fmt used diff --git a/deny.toml b/deny.toml index 4b32e1c..30d4e6b 100644 --- a/deny.toml +++ b/deny.toml @@ -28,6 +28,21 @@ features = [ [advisories] version = 2 ignore = [ + # RUSTSEC-2026-0222 (wasmtime, "Stores can mix up type indices between engines"). + # Reached only through yara-x, which compiles YARA rules to WASM internally; + # blazehash never executes untrusted WASM itself. + # + # resolved: wasmtime 25.0.3 <- yara-x 0.9.0 + # patched: >=24.0.12,<25 | >=36.0.13,<37 | >=46.0.2,<47 | >=47.0.3 + # latest yara-x 1.19.0 requires wasmtime ^43.0.2 — not a patched line + # + # So no yara-x release resolves to a patched wasmtime, and upgrading yara-x + # does not clear this. Pinning to issen's wasmtime does not help either: that + # is 26.0.1, equally outside every patched range. + # CVSS AV:L/AC:H/PR:H/UI:R — local, high complexity, high privilege, user + # interaction. + # REMOVE WHEN: yara-x depends on wasmtime >= 46.0.2 (or >= 47.0.3). + { id = "RUSTSEC-2026-0222", reason = "wasmtime via yara-x; no yara-x release resolves to a patched wasmtime line (latest 1.19.0 needs ^43.0.2; patched are 24.0.12+/36.0.13+/46.0.2+/47.0.3+)" }, # paste v1 is unmaintained but is a transitive dep of metal (wgpu-hal, GPU feature). # No action available until wgpu updates its metal dependency. "RUSTSEC-2024-0436", diff --git a/supply-chain/audits.toml b/supply-chain/audits.toml index ca04aeb..e8c8cd1 100644 --- a/supply-chain/audits.toml +++ b/supply-chain/audits.toml @@ -3,6 +3,12 @@ [audits] +[[trusted.blazehash-core]] +criteria = "safe-to-deploy" +user-id = 347968 # Albert Hui (h4x0r) +start = "2026-06-16" +end = "2027-08-06" + [[trusted.comfy-table]] criteria = "safe-to-deploy" user-id = 70603 # Arne Christian Beer (Nukesor) @@ -19,7 +25,25 @@ end = "2027-07-26" criteria = "safe-to-deploy" user-id = 347968 # Albert Hui (h4x0r) start = "2026-03-05" -end = "2027-08-02" +end = "2027-08-06" + +[[trusted.forensicnomicon]] +criteria = "safe-to-deploy" +user-id = 347968 # Albert Hui (h4x0r) +start = "2026-06-05" +end = "2027-08-06" + +[[trusted.forensicnomicon-core]] +criteria = "safe-to-deploy" +user-id = 347968 # Albert Hui (h4x0r) +start = "2026-06-28" +end = "2027-08-06" + +[[trusted.forensicnomicon-data]] +criteria = "safe-to-deploy" +user-id = 347968 # Albert Hui (h4x0r) +start = "2026-06-28" +end = "2027-08-06" [[trusted.jsonguard]] criteria = "safe-to-deploy" @@ -33,6 +57,12 @@ user-id = 105137 # Mark (Mytherin) start = "2025-02-12" end = "2027-07-26" +[[trusted.safe-read]] +criteria = "safe-to-deploy" +user-id = 347968 # Albert Hui (h4x0r) +start = "2026-07-15" +end = "2027-08-06" + [[trusted.ureq]] criteria = "safe-to-deploy" user-id = 5441 # Martin Algesten (algesten) diff --git a/supply-chain/config.toml b/supply-chain/config.toml index de49285..4ce7582 100644 --- a/supply-chain/config.toml +++ b/supply-chain/config.toml @@ -74,6 +74,10 @@ criteria = "safe-to-deploy" version = "1.0.102" criteria = "safe-to-deploy" +[[exemptions.approx]] +version = "0.5.1" +criteria = "safe-to-deploy" + [[exemptions.ar_archive_writer]] version = "0.5.1" criteria = "safe-to-deploy" @@ -218,6 +222,10 @@ criteria = "safe-to-deploy" version = "2.0.0" criteria = "safe-to-deploy" +[[exemptions.atomic]] +version = "0.6.1" +criteria = "safe-to-deploy" + [[exemptions.autocfg]] version = "1.5.0" criteria = "safe-to-deploy" @@ -243,7 +251,7 @@ version = "1.3.3" criteria = "safe-to-deploy" [[exemptions.bitflags]] -version = "2.11.0" +version = "2.13.1" criteria = "safe-to-deploy" [[exemptions.bitmask]] @@ -294,6 +302,10 @@ criteria = "safe-to-deploy" version = "1.12.1" criteria = "safe-to-deploy" +[[exemptions.by_address]] +version = "1.2.1" +criteria = "safe-to-deploy" + [[exemptions.bytemuck]] version = "1.25.0" criteria = "safe-to-deploy" @@ -310,10 +322,6 @@ criteria = "safe-to-deploy" version = "0.1.2" criteria = "safe-to-deploy" -[[exemptions.cassowary]] -version = "0.3.0" -criteria = "safe-to-deploy" - [[exemptions.cast]] version = "0.3.0" criteria = "safe-to-deploy" @@ -383,7 +391,7 @@ version = "0.6.0" criteria = "safe-to-deploy" [[exemptions.compact_str]] -version = "0.8.1" +version = "0.9.1" criteria = "safe-to-deploy" [[exemptions.concurrent-queue]] @@ -418,6 +426,10 @@ criteria = "safe-to-deploy" version = "0.4.2" criteria = "safe-to-deploy" +[[exemptions.convert_case]] +version = "0.10.0" +criteria = "safe-to-deploy" + [[exemptions.core-foundation]] version = "0.10.1" criteria = "safe-to-deploy" @@ -454,6 +466,10 @@ criteria = "safe-to-deploy" version = "1.5.0" criteria = "safe-to-deploy" +[[exemptions.critical-section]] +version = "1.2.0" +criteria = "safe-to-deploy" + [[exemptions.crossbeam-channel]] version = "0.5.15" criteria = "safe-to-deploy" @@ -478,6 +494,10 @@ criteria = "safe-to-deploy" version = "0.28.1" criteria = "safe-to-deploy" +[[exemptions.crossterm]] +version = "0.29.0" +criteria = "safe-to-deploy" + [[exemptions.crossterm_winapi]] version = "0.9.1" criteria = "safe-to-deploy" @@ -498,6 +518,10 @@ criteria = "safe-to-deploy" version = "0.2.1" criteria = "safe-to-deploy" +[[exemptions.csscolorparser]] +version = "0.6.2" +criteria = "safe-to-deploy" + [[exemptions.csv]] version = "1.4.0" criteria = "safe-to-deploy" @@ -558,6 +582,10 @@ criteria = "safe-to-deploy" version = "0.1.12" criteria = "safe-to-deploy" +[[exemptions.deltae]] +version = "0.3.2" +criteria = "safe-to-deploy" + [[exemptions.der]] version = "0.8.0" criteria = "safe-to-deploy" @@ -566,6 +594,14 @@ criteria = "safe-to-deploy" version = "9.0.0" criteria = "safe-to-deploy" +[[exemptions.derive_more]] +version = "2.1.1" +criteria = "safe-to-deploy" + +[[exemptions.derive_more-impl]] +version = "2.1.1" +criteria = "safe-to-deploy" + [[exemptions.des]] version = "0.8.1" criteria = "safe-to-deploy" @@ -646,6 +682,10 @@ criteria = "safe-to-deploy" version = "0.5.4" criteria = "safe-to-deploy" +[[exemptions.fancy-regex]] +version = "0.11.0" +criteria = "safe-to-deploy" + [[exemptions.fastrand]] version = "2.4.1" criteria = "safe-to-deploy" @@ -658,6 +698,10 @@ criteria = "safe-to-deploy" version = "0.2.9" criteria = "safe-to-deploy" +[[exemptions.filedescriptor]] +version = "0.8.3" +criteria = "safe-to-deploy" + [[exemptions.filetime]] version = "0.2.27" criteria = "safe-to-deploy" @@ -666,6 +710,10 @@ criteria = "safe-to-deploy" version = "0.1.9" criteria = "safe-to-deploy" +[[exemptions.finl_unicode]] +version = "1.4.0" +criteria = "safe-to-deploy" + [[exemptions.flatbuffers]] version = "24.12.23" criteria = "safe-to-deploy" @@ -778,10 +826,6 @@ criteria = "safe-to-deploy" version = "0.14.0" criteria = "safe-to-deploy" -[[exemptions.glob]] -version = "0.3.3" -criteria = "safe-to-deploy" - [[exemptions.globset]] version = "0.4.18" criteria = "safe-to-deploy" @@ -946,10 +990,6 @@ criteria = "safe-to-deploy" version = "1.9.3" criteria = "safe-to-deploy" -[[exemptions.indexmap]] -version = "2.14.0" -criteria = "safe-to-deploy" - [[exemptions.indicatif]] version = "0.18.6" criteria = "safe-to-deploy" @@ -1050,6 +1090,10 @@ criteria = "safe-to-deploy" version = "0.16.0" criteria = "safe-to-deploy" +[[exemptions.kasuari]] +version = "0.4.12" +criteria = "safe-to-deploy" + [[exemptions.keccak]] version = "0.1.6" criteria = "safe-to-deploy" @@ -1074,6 +1118,10 @@ criteria = "safe-to-deploy" version = "1.0.4" criteria = "safe-to-deploy" +[[exemptions.lab]] +version = "0.11.0" +criteria = "safe-to-deploy" + [[exemptions.lazy-regex]] version = "3.6.0" criteria = "safe-to-deploy" @@ -1134,6 +1182,10 @@ criteria = "safe-to-deploy" version = "1.1.24" criteria = "safe-to-deploy" +[[exemptions.line-clipping]] +version = "0.3.8" +criteria = "safe-to-deploy" + [[exemptions.linkme]] version = "0.3.35" criteria = "safe-to-deploy" @@ -1175,7 +1227,7 @@ version = "0.14.4" criteria = "safe-to-deploy" [[exemptions.lru]] -version = "0.12.5" +version = "0.18.2" criteria = "safe-to-deploy" [[exemptions.lru-slab]] @@ -1190,6 +1242,10 @@ criteria = "safe-to-deploy" version = "0.3.0" criteria = "safe-to-deploy" +[[exemptions.mac_address]] +version = "1.1.8" +criteria = "safe-to-deploy" + [[exemptions.mach2]] version = "0.4.3" criteria = "safe-to-deploy" @@ -1214,6 +1270,10 @@ criteria = "safe-to-deploy" version = "0.7.6" criteria = "safe-to-deploy" +[[exemptions.memmem]] +version = "0.1.1" +criteria = "safe-to-deploy" + [[exemptions.memo-map]] version = "0.3.3" criteria = "safe-to-deploy" @@ -1270,6 +1330,10 @@ criteria = "safe-to-deploy" version = "0.5.0+25.2.9519653" criteria = "safe-to-deploy" +[[exemptions.nix]] +version = "0.15.0" +criteria = "safe-to-deploy" + [[exemptions.notify]] version = "6.1.1" criteria = "safe-to-deploy" @@ -1294,6 +1358,10 @@ criteria = "safe-to-deploy" version = "0.1.45" criteria = "safe-to-deploy" +[[exemptions.num_threads]] +version = "0.1.7" +criteria = "safe-to-deploy" + [[exemptions.objc]] version = "0.2.7" criteria = "safe-to-deploy" @@ -1350,6 +1418,10 @@ criteria = "safe-to-deploy" version = "2.10.1" criteria = "safe-to-deploy" +[[exemptions.ordered-float]] +version = "4.6.0" +criteria = "safe-to-deploy" + [[exemptions.ordered-multimap]] version = "0.7.3" criteria = "safe-to-deploy" @@ -1370,16 +1442,20 @@ criteria = "safe-to-deploy" version = "0.13.1" criteria = "safe-to-deploy" -[[exemptions.parking_lot]] -version = "0.11.2" +[[exemptions.palette]] +version = "0.7.7" criteria = "safe-to-deploy" -[[exemptions.parking_lot]] -version = "0.12.5" +[[exemptions.palette_derive]] +version = "0.7.7" criteria = "safe-to-deploy" -[[exemptions.parking_lot_core]] -version = "0.8.6" +[[exemptions.palette_math]] +version = "0.7.7" +criteria = "safe-to-deploy" + +[[exemptions.parking_lot]] +version = "0.12.5" criteria = "safe-to-deploy" [[exemptions.parking_lot_core]] @@ -1414,6 +1490,42 @@ criteria = "safe-to-deploy" version = "3.0.6" criteria = "safe-to-deploy" +[[exemptions.pest]] +version = "2.8.8" +criteria = "safe-to-deploy" + +[[exemptions.pest_derive]] +version = "2.8.8" +criteria = "safe-to-deploy" + +[[exemptions.pest_generator]] +version = "2.8.8" +criteria = "safe-to-deploy" + +[[exemptions.pest_meta]] +version = "2.8.8" +criteria = "safe-to-deploy" + +[[exemptions.phf]] +version = "0.11.3" +criteria = "safe-to-deploy" + +[[exemptions.phf_codegen]] +version = "0.11.3" +criteria = "safe-to-deploy" + +[[exemptions.phf_generator]] +version = "0.11.3" +criteria = "safe-to-deploy" + +[[exemptions.phf_macros]] +version = "0.11.3" +criteria = "safe-to-deploy" + +[[exemptions.phf_shared]] +version = "0.11.3" +criteria = "safe-to-deploy" + [[exemptions.pin-project-lite]] version = "0.2.17" criteria = "safe-to-deploy" @@ -1567,7 +1679,31 @@ version = "0.1.5" criteria = "safe-to-deploy" [[exemptions.ratatui]] -version = "0.29.0" +version = "0.30.2" +criteria = "safe-to-deploy" + +[[exemptions.ratatui-core]] +version = "0.1.2" +criteria = "safe-to-deploy" + +[[exemptions.ratatui-crossterm]] +version = "0.1.2" +criteria = "safe-to-deploy" + +[[exemptions.ratatui-macros]] +version = "0.7.2" +criteria = "safe-to-deploy" + +[[exemptions.ratatui-termina]] +version = "0.1.0" +criteria = "safe-to-deploy" + +[[exemptions.ratatui-termwiz]] +version = "0.1.2" +criteria = "safe-to-deploy" + +[[exemptions.ratatui-widgets]] +version = "0.3.2" criteria = "safe-to-deploy" [[exemptions.rayon]] @@ -1578,10 +1714,6 @@ criteria = "safe-to-deploy" version = "1.13.0" criteria = "safe-to-deploy" -[[exemptions.redox_syscall]] -version = "0.2.16" -criteria = "safe-to-deploy" - [[exemptions.redox_syscall]] version = "0.5.18" criteria = "safe-to-deploy" @@ -1758,10 +1890,6 @@ criteria = "safe-to-deploy" version = "2.17.0" criteria = "safe-to-deploy" -[[exemptions.semver]] -version = "1.0.28" -criteria = "safe-to-deploy" - [[exemptions.seq-macro]] version = "0.3.6" criteria = "safe-to-deploy" @@ -1862,10 +1990,6 @@ criteria = "safe-to-deploy" version = "1.1.1" criteria = "safe-to-deploy" -[[exemptions.socket2]] -version = "0.5.10" -criteria = "safe-to-deploy" - [[exemptions.socket2]] version = "0.6.3" criteria = "safe-to-deploy" @@ -1946,10 +2070,18 @@ criteria = "safe-to-deploy" version = "0.27.2" criteria = "safe-to-deploy" +[[exemptions.strum]] +version = "0.28.0" +criteria = "safe-to-deploy" + [[exemptions.strum_macros]] version = "0.27.2" criteria = "safe-to-deploy" +[[exemptions.strum_macros]] +version = "0.28.0" +criteria = "safe-to-deploy" + [[exemptions.subtle]] version = "2.6.1" criteria = "safe-to-deploy" @@ -1990,6 +2122,22 @@ criteria = "safe-to-deploy" version = "1.4.1" criteria = "safe-to-deploy" +[[exemptions.termina]] +version = "0.3.3" +criteria = "safe-to-deploy" + +[[exemptions.terminfo]] +version = "0.9.0" +criteria = "safe-to-deploy" + +[[exemptions.termios]] +version = "0.3.3" +criteria = "safe-to-deploy" + +[[exemptions.termwiz]] +version = "0.23.3" +criteria = "safe-to-deploy" + [[exemptions.text-size]] version = "1.1.1" criteria = "safe-to-deploy" @@ -2122,6 +2270,10 @@ criteria = "safe-to-deploy" version = "1.19.0" criteria = "safe-to-deploy" +[[exemptions.ucd-trie]] +version = "0.1.7" +criteria = "safe-to-deploy" + [[exemptions.unicase]] version = "2.9.0" criteria = "safe-to-deploy" @@ -2135,7 +2287,7 @@ version = "0.1.4" criteria = "safe-to-deploy" [[exemptions.unicode-truncate]] -version = "1.1.0" +version = "2.0.1" criteria = "safe-to-deploy" [[exemptions.unicode_categories]] @@ -2162,6 +2314,10 @@ criteria = "safe-to-deploy" version = "0.9.5" criteria = "safe-to-deploy" +[[exemptions.vtparse]] +version = "0.6.2" +criteria = "safe-to-deploy" + [[exemptions.walkdir]] version = "2.5.0" criteria = "safe-to-deploy" @@ -2234,6 +2390,30 @@ criteria = "safe-to-deploy" version = "1.0.6" criteria = "safe-to-deploy" +[[exemptions.wezterm-bidi]] +version = "0.2.3" +criteria = "safe-to-deploy" + +[[exemptions.wezterm-blob-leases]] +version = "0.1.1" +criteria = "safe-to-deploy" + +[[exemptions.wezterm-color-types]] +version = "0.3.0" +criteria = "safe-to-deploy" + +[[exemptions.wezterm-dynamic]] +version = "0.2.1" +criteria = "safe-to-deploy" + +[[exemptions.wezterm-dynamic-derive]] +version = "0.1.1" +criteria = "safe-to-deploy" + +[[exemptions.wezterm-input-types]] +version = "0.1.0" +criteria = "safe-to-deploy" + [[exemptions.wgpu]] version = "22.1.0" criteria = "safe-to-deploy" @@ -2518,10 +2698,6 @@ criteria = "safe-to-deploy" version = "0.6.3" criteria = "safe-to-deploy" -[[exemptions.zmij]] -version = "1.0.21" -criteria = "safe-to-deploy" - [[exemptions.zopfli]] version = "0.8.3" criteria = "safe-to-deploy" diff --git a/supply-chain/imports.lock b/supply-chain/imports.lock index daed979..0d48090 100644 --- a/supply-chain/imports.lock +++ b/supply-chain/imports.lock @@ -110,9 +110,16 @@ user-id = 105137 user-login = "Mytherin" user-name = "Mark" +[[publisher.euclid]] +version = "0.22.14" +when = "2026-03-18" +user-id = 1281 +user-login = "nical" +user-name = "Nicolas Silva" + [[publisher.ewf]] -version = "0.4.7" -when = "2026-07-25" +version = "0.4.9" +when = "2026-08-06" user-id = 347968 user-login = "h4x0r" user-name = "Albert Hui" @@ -144,6 +151,13 @@ user-id = 187138 user-login = "elliottt" user-name = "Trevor Elliott" +[[publisher.safe-read]] +version = "0.2.2" +when = "2026-08-06" +user-id = 347968 +user-login = "h4x0r" +user-name = "Albert Hui" + [[publisher.unicode-normalization]] version = "0.1.25" when = "2025-10-30" @@ -799,6 +813,16 @@ this crate has to do with iterators and `Result` and such. No `unsafe` or anything like that, all looks good. """ +[[audits.bytecode-alliance.audits.fixedbitset]] +who = "Nick Fitzgerald " +criteria = "safe-to-deploy" +version = "0.4.2" +notes = """ +No ambient I/O. Uses some `unsafe`, but the uses look good and are guarded by +relevant assertions, although could use some comments and some slight +refactoring into helpers to dedupe unsafe blocks in my personal opinion. +""" + [[audits.bytecode-alliance.audits.foldhash]] who = "Alex Crichton " criteria = "safe-to-deploy" @@ -846,17 +870,14 @@ crate is broadly used throughout the ecosystem and does not contain anything suspicious. """ -[[audits.bytecode-alliance.audits.instant]] -who = "Chris Fallin " -criteria = "safe-to-deploy" -version = "0.1.12" -notes = "Small crate wrapping platform primitives for time that uses `unsafe` only for FFI." - -[[audits.bytecode-alliance.audits.instant]] +[[audits.bytecode-alliance.audits.itertools]] who = "Alex Crichton " criteria = "safe-to-deploy" -delta = "0.1.12 -> 0.1.13" -notes = "Nothing major changed in this update" +delta = "0.12.1 -> 0.14.0" +notes = """ +Lots of new iterators and shuffling some things around. Some new unsafe code but +it's well-documented and well-tested. Nothing suspicious. +""" [[audits.bytecode-alliance.audits.leb128]] who = "Nick Fitzgerald " @@ -1007,6 +1028,12 @@ criteria = "safe-to-deploy" delta = "1.0.8 -> 1.1.3" notes = "Substantial updates, but nothing out of the ordinary one would expect from a serialization crate. Minor `unsafe` updates, but nothing major from what was already there." +[[audits.bytecode-alliance.audits.semver]] +who = "Pat Hickey " +criteria = "safe-to-deploy" +version = "1.0.17" +notes = "plenty of unsafe pointer and vec tricks, but in well-structured and commented code that appears to be correct" + [[audits.bytecode-alliance.audits.sha1]] who = "Andrew Brown " criteria = "safe-to-deploy" @@ -1352,6 +1379,12 @@ delta = "0.1.4 -> 0.1.5" notes = "No new `unsafe`." aggregated-from = "https://chromium.googlesource.com/chromium/src/+/main/third_party/rust/chromium_crates_io/supply-chain/audits.toml?format=TEXT" +[[audits.google.audits.glob]] +who = "George Burgess IV " +criteria = "safe-to-deploy" +version = "0.3.1" +aggregated-from = "https://chromium.googlesource.com/chromiumos/third_party/rust_crates/+/refs/heads/main/cargo-vet/audits.toml?format=TEXT" + [[audits.google.audits.heck]] who = "Lukasz Anforowicz " criteria = "safe-to-deploy" @@ -1365,6 +1398,31 @@ https://source.chromium.org/chromium/chromium/src/+/28841c33c77833cc30b286f9ae24 """ aggregated-from = "https://chromium.googlesource.com/chromium/src/+/main/third_party/rust/chromium_crates_io/supply-chain/audits.toml?format=TEXT" +[[audits.google.audits.indexmap]] +who = "Lukasz Anforowicz " +criteria = "safe-to-deploy" +version = "2.7.1" +notes = ''' +Grepped for `-i cipher`, `-i crypto`, `'\bfs\b'`, `'\bnet\b'` +and there were no hits. + +There is a little bit of `unsafe` Rust code - the audit can be found at +https://chromium-review.googlesource.com/c/chromium/src/+/6187726/2 +''' +aggregated-from = "https://chromium.googlesource.com/chromium/src/+/main/third_party/rust/chromium_crates_io/supply-chain/audits.toml?format=TEXT" + +[[audits.google.audits.indexmap]] +who = "Lukasz Anforowicz " +criteria = "safe-to-deploy" +delta = "2.7.1 -> 2.8.0" +notes = """ +No `unsafe` introduced or affected in: +* `indexmap_with_default!` and `indexset_with_default!` macros +* New `PartialEq` implementations +* `fn slice_eq` in `util.rs` +""" +aggregated-from = "https://chromium.googlesource.com/chromium/src/+/main/third_party/rust/chromium_crates_io/supply-chain/audits.toml?format=TEXT" + [[audits.google.audits.lazy_static]] who = "Lukasz Anforowicz " criteria = "safe-to-deploy" @@ -1685,28 +1743,6 @@ Previously reviewed during security review and the audit is grandparented in. """ aggregated-from = "https://chromium.googlesource.com/chromium/src/+/main/third_party/rust/chromium_crates_io/supply-chain/audits.toml?format=TEXT" -[[audits.google.audits.strum]] -who = "danakj@chromium.org" -criteria = "safe-to-deploy" -version = "0.25.0" -notes = """ -Reviewed in https://crrev.com/c/5171063 - -Previously reviewed during security review and the audit is grandparented in. -""" -aggregated-from = "https://chromium.googlesource.com/chromium/src/+/main/third_party/rust/chromium_crates_io/supply-chain/audits.toml?format=TEXT" - -[[audits.google.audits.strum_macros]] -who = "danakj@chromium.org" -criteria = "safe-to-deploy" -version = "0.25.3" -notes = """ -Reviewed in https://crrev.com/c/5171063 - -Previously reviewed during security review and the audit is grandparented in. -""" -aggregated-from = "https://chromium.googlesource.com/chromium/src/+/main/third_party/rust/chromium_crates_io/supply-chain/audits.toml?format=TEXT" - [[audits.google.audits.synstructure]] who = "Manish Goregaokar " criteria = "safe-to-deploy" @@ -1760,6 +1796,15 @@ renew = false notes = "I've reviewed every source contribution that was neither authored nor reviewed by Mozilla." aggregated-from = "https://hg.mozilla.org/mozilla-central/raw-file/tip/supply-chain/audits.toml" +[[audits.mozilla.wildcard-audits.euclid]] +who = "Nicolas Silva " +criteria = "safe-to-deploy" +user-id = 1281 # Nicolas Silva (nical) +start = "2019-03-14" +end = "2027-01-15" +notes = "I wrote most of the commits in the euclid reprository and review every change that is not produced by me." +aggregated-from = "https://hg.mozilla.org/mozilla-central/raw-file/tip/supply-chain/audits.toml" + [[audits.mozilla.wildcard-audits.unicode-normalization]] who = "Manish Goregaokar " criteria = "safe-to-deploy" @@ -1972,6 +2017,12 @@ version = "1.0.7" notes = "Simple hasher implementation with no unsafe code." aggregated-from = "https://hg.mozilla.org/mozilla-central/raw-file/tip/supply-chain/audits.toml" +[[audits.mozilla.audits.foldhash]] +who = "Erich Gubler " +criteria = "safe-to-deploy" +delta = "0.1.5 -> 0.2.0" +aggregated-from = "https://hg.mozilla.org/mozilla-central/raw-file/tip/supply-chain/audits.toml" + [[audits.mozilla.audits.foreign-types]] who = "Teodor Tanasoaia " criteria = "safe-to-deploy" @@ -2025,6 +2076,13 @@ delta = "0.30.0 -> 0.29.0" notes = "No unsafe code, mostly algorithms and parsing. Very unlikely to cause security issues." aggregated-from = "https://hg.mozilla.org/mozilla-central/raw-file/tip/supply-chain/audits.toml" +[[audits.mozilla.audits.glob]] +who = "Ben Dean-Kawamura " +criteria = "safe-to-deploy" +delta = "0.3.1 -> 0.3.3" +notes = "Very few changes. No new unsafe code." +aggregated-from = "https://hg.mozilla.org/mozilla-central/raw-file/tip/supply-chain/audits.toml" + [[audits.mozilla.audits.gpu-allocator]] who = "Erich Gubler " criteria = "safe-to-deploy" @@ -2118,6 +2176,19 @@ criteria = "safe-to-deploy" delta = "1.2.0 -> 1.2.1" aggregated-from = "https://hg.mozilla.org/mozilla-central/raw-file/tip/supply-chain/audits.toml" +[[audits.mozilla.audits.indexmap]] +who = "Erich Gubler " +criteria = "safe-to-deploy" +delta = "2.8.0 -> 2.11.4" +aggregated-from = "https://hg.mozilla.org/mozilla-central/raw-file/tip/supply-chain/audits.toml" + +[[audits.mozilla.audits.indexmap]] +who = "Ben Dean-Kawamura " +criteria = "safe-to-deploy" +delta = "2.11.4 -> 2.14.0" +notes = "Mostly internal refactorings. No new unsafe code." +aggregated-from = "https://hg.mozilla.org/mozilla-central/raw-file/tip/supply-chain/audits.toml" + [[audits.mozilla.audits.libloading]] who = "Jan-Erik Rediger " criteria = "safe-to-deploy" @@ -2188,6 +2259,47 @@ criteria = "safe-to-deploy" delta = "0.28.0 -> 0.29.0" aggregated-from = "https://hg.mozilla.org/mozilla-central/raw-file/tip/supply-chain/audits.toml" +[[audits.mozilla.audits.nix]] +who = "Gabriele Svelto " +criteria = "safe-to-deploy" +delta = "0.15.0 -> 0.25.0" +notes = "Plenty of new bindings but also several important bug fixes (including buffer overflows). New unsafe sections are restricted to wrappers and are no more dangerous than calling the C functions." +aggregated-from = "https://hg.mozilla.org/mozilla-central/raw-file/tip/supply-chain/audits.toml" + +[[audits.mozilla.audits.nix]] +who = "Mike Hommey " +criteria = "safe-to-deploy" +delta = "0.25.0 -> 0.25.1" +aggregated-from = "https://hg.mozilla.org/mozilla-central/raw-file/tip/supply-chain/audits.toml" + +[[audits.mozilla.audits.nix]] +who = "Mike Hommey " +criteria = "safe-to-deploy" +delta = "0.25.1 -> 0.26.2" +aggregated-from = "https://hg.mozilla.org/mozilla-central/raw-file/tip/supply-chain/audits.toml" + +[[audits.mozilla.audits.nix]] +who = "Gabriele Svelto " +criteria = "safe-to-deploy" +delta = "0.26.2 -> 0.27.1" +aggregated-from = "https://hg.mozilla.org/mozilla-central/raw-file/tip/supply-chain/audits.toml" + +[[audits.mozilla.audits.nix]] +who = "Alex Franchuk " +criteria = "safe-to-deploy" +delta = "0.27.1 -> 0.28.0" +notes = """ +Many new features and bugfixes. Obviously there's a lot of unsafe code calling +libc, but the usage looks correct. +""" +aggregated-from = "https://hg.mozilla.org/mozilla-central/raw-file/tip/supply-chain/audits.toml" + +[[audits.mozilla.audits.nix]] +who = "Alex Franchuk " +criteria = "safe-to-deploy" +delta = "0.28.0 -> 0.29.0" +aggregated-from = "https://hg.mozilla.org/mozilla-central/raw-file/tip/supply-chain/audits.toml" + [[audits.mozilla.audits.num-conv]] who = "Alex Franchuk " criteria = "safe-to-deploy" @@ -2333,6 +2445,19 @@ version = "1.1.0" notes = "Straightforward crate with no unsafe code, does what it says on the tin." aggregated-from = "https://hg.mozilla.org/mozilla-central/raw-file/tip/supply-chain/audits.toml" +[[audits.mozilla.audits.semver]] +who = "Ben Dean-Kawamura " +criteria = "safe-to-deploy" +delta = "1.0.16 -> 1.0.28" +notes = "Very few changes, mostly removes support for older Rust versions. Some unsafe code refactored, but it seemed to be functionally equivalent to me." +aggregated-from = "https://hg.mozilla.org/mozilla-central/raw-file/tip/supply-chain/audits.toml" + +[[audits.mozilla.audits.semver]] +who = "Bobby Holley " +criteria = "safe-to-deploy" +delta = "1.0.17 -> 1.0.16" +aggregated-from = "https://hg.mozilla.org/mozilla-central/raw-file/tip/supply-chain/audits.toml" + [[audits.mozilla.audits.shlex]] who = "Max Inden " criteria = "safe-to-deploy" @@ -2351,18 +2476,6 @@ criteria = "safe-to-deploy" delta = "0.10.0 -> 0.11.1" aggregated-from = "https://hg.mozilla.org/mozilla-central/raw-file/tip/supply-chain/audits.toml" -[[audits.mozilla.audits.strum]] -who = "Teodor Tanasoaia " -criteria = "safe-to-deploy" -delta = "0.25.0 -> 0.26.3" -aggregated-from = "https://hg.mozilla.org/mozilla-central/raw-file/tip/supply-chain/audits.toml" - -[[audits.mozilla.audits.strum_macros]] -who = "Teodor Tanasoaia " -criteria = "safe-to-deploy" -delta = "0.25.3 -> 0.26.4" -aggregated-from = "https://hg.mozilla.org/mozilla-central/raw-file/tip/supply-chain/audits.toml" - [[audits.mozilla.audits.synstructure]] who = "Nika Layzell " criteria = "safe-to-deploy" @@ -2639,3 +2752,21 @@ who = "Lars Eggert " criteria = "safe-to-deploy" delta = "2.1.3 -> 2.4.2" aggregated-from = "https://hg.mozilla.org/mozilla-central/raw-file/tip/supply-chain/audits.toml" + +[[audits.mozilla.audits.zmij]] +who = "Benjamin VanderSloot " +criteria = "safe-to-deploy" +version = "1.0.20" +notes = """ +A lot of unsafe code here, included as a dependency of serde_json. +The testing is very thorough, validating all 32-bit floats, and 100m +random 64-bit floats. No unsafe imports. +""" +aggregated-from = "https://hg.mozilla.org/mozilla-central/raw-file/tip/supply-chain/audits.toml" + +[[audits.mozilla.audits.zmij]] +who = "Ben Dean-Kawamura " +criteria = "safe-to-deploy" +delta = "1.0.20 -> 1.0.21" +notes = "Almost no code changes. No new unsafe code." +aggregated-from = "https://hg.mozilla.org/mozilla-central/raw-file/tip/supply-chain/audits.toml"