From e8657c64de2d0fab7605065a8b8987c53a53500d Mon Sep 17 00:00:00 2001 From: Albert Hui Date: Sun, 2 Aug 2026 11:14:47 +0800 Subject: [PATCH 1/2] fix(deps): widen ewf 0.2 -> 0.4, caret-trapped below the maintained line MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit `ewf = { version = "0.2", optional = true }` cannot reach 0.4.x. `cargo update` will not cross a caret, so the pin has sat at 0.2.3 while the crate moved to 0.4.7 (published 2026-07-25) — the layer-1 freshness trap, invisible to both `cargo update` and Renovate's default rangeStrategy. `ewf` is not a spare wheel here. `forensic-image` is a DEFAULT feature and it gates `dep:ewf`, so every stock build ships this code path: src/forensic_image/ewf_backend.rs:2 use ewf::EwfReader; src/forensic_image/mod.rs:261 ImageFormat::Ewf => ewf_backend::verify_ewf(path) 0.2 -> 0.4 crosses two 0.x minors, which are breaking by convention, so this was checked rather than assumed. The surface actually consumed is `EwfReader::open`, `total_size`, `stored_hashes`, `metadata`, and `verify` plus the fields of what those return. All of it still compiles, and — the part that matters — still produces the same answers on a real image: test tests::verify_ewf_image_passes ... ok test tests::verify_ewf_image_returns_stored_hashes ... ok test tests::verify_ewf_image_returns_metadata ... ok test tests::detect_ewf_format ... ok test tests::cli_verify_image_e01 ... ok test result: ok. 19 passed; 0 failed; 0 ignored Those are not compile-only. `tests/data/nps-2010-emails.E01` is a real 518,680-byte EWF image from the NPS corpus; the test decompresses it, computes MD5 and SHA-1 over the media, and compares against the hashes the original 2010 acquisition tool stored inside the file. The expected values were authored by a third party, not by us, so a silent behavioural regression in 0.4's reader or verifier would surface as a mismatch rather than a passing tautology. The dependency graph gets smaller, not larger. One in, five out: ADDED : ewf 0.4.7 REMOVED: ewf 0.2.3, instant 0.1.13, parking_lot 0.11.2, parking_lot_core 0.8.6, redox_syscall 0.2.16, socket2 0.5.10 Worth correcting one thing about the unpushed commit 41e1090, which does the same widening and was used only as a starting point to verify: its lock diff shows `adler2` being ADDED to ewf's dependencies. That is not true against a re-synced lock — `adler2` is already present from the earlier adler->adler2 migration, so the real delta is a net removal of five packages. `[[trusted.ewf]]` already covers 0.4.7: the trust is bound to the publisher and a date window, not to a version, and 0.4.7 was published inside it. cargo-vet refreshed the `imports.lock` publisher record from 0.2.3 to 0.4.7 by itself. Vetting Succeeded (169 fully audited, 5 partially audited, 624 exempted) Co-Authored-By: Claude Opus 5 (1M context) --- Cargo.lock | 102 ++++++++++---------------------------- Cargo.toml | 2 +- supply-chain/imports.lock | 4 +- 3 files changed, 28 insertions(+), 80 deletions(-) diff --git a/Cargo.lock b/Cargo.lock index fb0e9a7..06cadd3 100644 --- a/Cargo.lock +++ b/Cargo.lock @@ -125,7 +125,7 @@ version = "1.1.5" source = "registry+https://github.com/rust-lang/crates.io-index" checksum = "40c48f72fd53cd289104fc64099abca73db4166ad86ea0b4341abe65af83dadc" dependencies = [ - "windows-sys 0.60.2", + "windows-sys 0.61.2", ] [[package]] @@ -136,7 +136,7 @@ checksum = "291e6a250ff86cd4a820112fb8898808a366d8f9f58ce16d1f538353ad55747d" dependencies = [ "anstyle", "once_cell_polyfill", - "windows-sys 0.60.2", + "windows-sys 0.61.2", ] [[package]] @@ -1592,7 +1592,7 @@ dependencies = [ "bitflags 2.11.0", "crossterm_winapi", "mio 1.2.0", - "parking_lot 0.12.5", + "parking_lot", "rustix 0.38.44", "signal-hook", "signal-hook-mio", @@ -1944,7 +1944,7 @@ checksum = "6e39034cee21a2f5bbb66ba0e3689819c4bb5d00382a282006e802a7ffa6c41d" dependencies = [ "cfg-if", "libc", - "socket2 0.6.3", + "socket2", "windows-sys 0.60.2", ] @@ -2108,7 +2108,7 @@ source = "registry+https://github.com/rust-lang/crates.io-index" checksum = "39cab71617ae0d63f51a36d69f866391735b51691dbda63cf6f96d042b63efeb" dependencies = [ "libc", - "windows-sys 0.60.2", + "windows-sys 0.61.2", ] [[package]] @@ -2145,10 +2145,11 @@ dependencies = [ [[package]] name = "ewf" -version = "0.2.3" +version = "0.4.7" source = "registry+https://github.com/rust-lang/crates.io-index" -checksum = "f2fde641ed13ecc3cbefd1db2133530f4d7ac681bdd4a60aee0563279fca97fb" +checksum = "f9f0aae36d49a5b16a1353b4b80f7d0090666ca19dd910aed7b0ab1d35bf8f60" dependencies = [ + "adler2", "flate2", "glob", "log", @@ -2418,7 +2419,7 @@ checksum = "1d930c203dd0b6ff06e0201a4a2fe9149b43c684fd4420555b26d21b1a02956f" dependencies = [ "futures-core", "lock_api", - "parking_lot 0.12.5", + "parking_lot", ] [[package]] @@ -2836,7 +2837,7 @@ dependencies = [ "rand 0.9.3", "regex", "roxmltree 0.21.1", - "socket2 0.6.3", + "socket2", "thiserror 2.0.18", "tokio", "url", @@ -3022,7 +3023,7 @@ dependencies = [ "libc", "percent-encoding", "pin-project-lite", - "socket2 0.5.10", + "socket2", "tokio", "tower-service", "tracing", @@ -3283,15 +3284,6 @@ dependencies = [ "syn 2.0.117", ] -[[package]] -name = "instant" -version = "0.1.13" -source = "registry+https://github.com/rust-lang/crates.io-index" -checksum = "e0242819d153cba4b4b05a5a8f2a7e9bbf97b6055b2a002b395c96b5ff3c0222" -dependencies = [ - "cfg-if", -] - [[package]] name = "intaglio" version = "1.13.3" @@ -3362,7 +3354,7 @@ dependencies = [ "portable-atomic", "portable-atomic-util", "serde_core", - "windows-sys 0.60.2", + "windows-sys 0.61.2", ] [[package]] @@ -4056,7 +4048,7 @@ dependencies = [ "equivalent", "event-listener", "futures-util", - "parking_lot 0.12.5", + "parking_lot", "portable-atomic", "smallvec", "tagptr", @@ -4516,17 +4508,6 @@ version = "2.2.1" source = "registry+https://github.com/rust-lang/crates.io-index" checksum = "f38d5652c16fde515bb1ecef450ab0f6a219d619a7274976324d5e377f7dceba" -[[package]] -name = "parking_lot" -version = "0.11.2" -source = "registry+https://github.com/rust-lang/crates.io-index" -checksum = "7d17b78036a60663b797adeaee46f5c9dfebb86948d1255007a1d6be0271ff99" -dependencies = [ - "instant", - "lock_api", - "parking_lot_core 0.8.6", -] - [[package]] name = "parking_lot" version = "0.12.5" @@ -4534,21 +4515,7 @@ source = "registry+https://github.com/rust-lang/crates.io-index" checksum = "93857453250e3077bd71ff98b6a65ea6621a19bb0f559a85248955ac12c45a1a" dependencies = [ "lock_api", - "parking_lot_core 0.9.12", -] - -[[package]] -name = "parking_lot_core" -version = "0.8.6" -source = "registry+https://github.com/rust-lang/crates.io-index" -checksum = "60a2cfe6f0ad2bfc16aefa463b497d5c7a5ecd44a23efa72aa342d90177356dc" -dependencies = [ - "cfg-if", - "instant", - "libc", - "redox_syscall 0.2.16", - "smallvec", - "winapi", + "parking_lot_core", ] [[package]] @@ -5035,7 +5002,7 @@ dependencies = [ "quinn-udp", "rustc-hash 2.1.2", "rustls 0.23.37", - "socket2 0.5.10", + "socket2", "thiserror 2.0.18", "tokio", "tracing", @@ -5072,7 +5039,7 @@ dependencies = [ "cfg_aliases 0.2.1", "libc", "once_cell", - "socket2 0.5.10", + "socket2", "tracing", "windows-sys 0.60.2", ] @@ -5222,15 +5189,6 @@ dependencies = [ "crossbeam-utils", ] -[[package]] -name = "redox_syscall" -version = "0.2.16" -source = "registry+https://github.com/rust-lang/crates.io-index" -checksum = "fb5a58c1855b4b6819d59012155603f0b22ad30cad752600aadfcb695265519a" -dependencies = [ - "bitflags 1.3.2", -] - [[package]] name = "redox_syscall" version = "0.5.18" @@ -5567,7 +5525,7 @@ dependencies = [ "errno", "libc", "linux-raw-sys 0.12.1", - "windows-sys 0.60.2", + "windows-sys 0.61.2", ] [[package]] @@ -6019,16 +5977,6 @@ version = "1.1.1" source = "registry+https://github.com/rust-lang/crates.io-index" checksum = "1b6b67fb9a61334225b5b790716f609cd58395f895b3fe8b328786812a40bc3b" -[[package]] -name = "socket2" -version = "0.5.10" -source = "registry+https://github.com/rust-lang/crates.io-index" -checksum = "e22376abed350d73dd1cd119b57ffccad95b4e585a7cda43e286245ce23c0678" -dependencies = [ - "libc", - "windows-sys 0.52.0", -] - [[package]] name = "socket2" version = "0.6.3" @@ -6036,7 +5984,7 @@ source = "registry+https://github.com/rust-lang/crates.io-index" checksum = "3a766e1110788c36f4fa1c2b71b387a7815aa65f88ce0229841826633d93723e" dependencies = [ "libc", - "windows-sys 0.60.2", + "windows-sys 0.61.2", ] [[package]] @@ -6299,7 +6247,7 @@ dependencies = [ "bitflags 2.11.0", "libc", "libssh2-sys", - "parking_lot 0.12.5", + "parking_lot", ] [[package]] @@ -6507,7 +6455,7 @@ dependencies = [ "getrandom 0.4.2", "once_cell", "rustix 1.1.4", - "windows-sys 0.60.2", + "windows-sys 0.61.2", ] [[package]] @@ -6678,7 +6626,7 @@ dependencies = [ "libc", "mio 1.2.0", "pin-project-lite", - "socket2 0.6.3", + "socket2", "tokio-macros", "windows-sys 0.61.2", ] @@ -7545,7 +7493,7 @@ dependencies = [ "js-sys", "log", "naga", - "parking_lot 0.11.2", + "parking_lot", "profiling", "raw-window-handle", "smallvec", @@ -7573,7 +7521,7 @@ dependencies = [ "log", "naga", "once_cell", - "parking_lot 0.11.2", + "parking_lot", "profiling", "raw-window-handle", "rustc-hash 1.1.0", @@ -7614,7 +7562,7 @@ dependencies = [ "ndk-sys", "objc", "once_cell", - "parking_lot 0.11.2", + "parking_lot", "profiling", "range-alloc", "raw-window-handle", @@ -7699,7 +7647,7 @@ version = "0.1.11" source = "registry+https://github.com/rust-lang/crates.io-index" checksum = "c2a7b1c03c876122aa43f3020e6c3c3ee5c05081c9a00739faf7503aeba10d22" dependencies = [ - "windows-sys 0.48.0", + "windows-sys 0.61.2", ] [[package]] diff --git a/Cargo.toml b/Cargo.toml index f4801bb..9242dd1 100644 --- a/Cargo.toml +++ b/Cargo.toml @@ -112,7 +112,7 @@ ed25519-dalek = { version = "2", features = ["rand_core"] } rand = "0.8" argon2 = "0.5" rpassword = "6" -ewf = { version = "0.2", optional = true } +ewf = { version = "0.4", optional = true } wgpu = { version = "22", optional = true } pollster = { version = "0.3", optional = true } toml = "0.8" diff --git a/supply-chain/imports.lock b/supply-chain/imports.lock index 5ece3a9..029675f 100644 --- a/supply-chain/imports.lock +++ b/supply-chain/imports.lock @@ -111,8 +111,8 @@ user-login = "Mytherin" user-name = "Mark" [[publisher.ewf]] -version = "0.2.3" -when = "2026-06-26" +version = "0.4.7" +when = "2026-07-25" user-id = 347968 user-login = "h4x0r" user-name = "Albert Hui" From 2077fe07d99499670336604499231b1b8976d463 Mon Sep 17 00:00:00 2001 From: Albert Hui Date: Sun, 2 Aug 2026 11:08:52 +0800 Subject: [PATCH 2/2] chore(supply-chain): prune the 157 exemptions the lock re-sync orphaned MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit Re-syncing Cargo.lock dropped 150 package-versions from the graph. Their cargo-vet exemptions stayed behind, so `cargo vet` has been warning: WARN Your supply-chain has unnecessary exemptions which could be relaxed or pruned. WARN Consider running `cargo vet prune` to prune unnecessary exemptions and imports. $ cargo vet prune Pure deletion — 713 lines out, none in: supply-chain/config.toml | 628 ------------------------------------ supply-chain/imports.lock | 85 ------ Verified rather than assumed. Comparing exemption `(name, version)` pairs against the package-versions actually in the lock: exemption entries: 786 -> 629 removed=157 added=0 removed exemptions whose exact (name, version) is still in the lock: 0 So every pruned entry names a package-version that genuinely left the graph. The name-level view is misleading here and worth stating: 20 of the removed names — `rand`, `http`, `hyper`, `tower`, `prost`, `windows` and friends — still appear in the lock. Those are the duplicate-major cases. The exemption removed is for the OLD version that left; the surviving version keeps its own entry. All four aggregate import sets are intact, as ADR-0018 requires: [imports.bytecode-alliance] [imports.embark] [imports.google] [imports.mozilla] One inert leftover cargo-vet chose not to prune: `crossbeam-epoch 0.9.18` while the lock carries 0.9.20. An exemption for an absent version grants nothing, and removing it is cargo-vet's call to make, not a hand edit. Before: Vetting Succeeded (170 fully audited, 5 partially, 628 exempted) + 2 WARN After: Vetting Succeeded (170 fully audited, 5 partially, 628 exempted) Kept out of the lock PR deliberately. That PR's whole value is that a reviewer can confirm "strict subset, nothing added" at a glance, and folding 628 deleted policy lines into it would destroy exactly that property. Co-Authored-By: Claude Opus 5 (1M context) --- supply-chain/config.toml | 628 -------------------------------------- supply-chain/imports.lock | 85 ------ 2 files changed, 713 deletions(-) diff --git a/supply-chain/config.toml b/supply-chain/config.toml index 1c51bd2..de49285 100644 --- a/supply-chain/config.toml +++ b/supply-chain/config.toml @@ -26,10 +26,6 @@ audit-as-crates-io = false version = "0.8.4" criteria = "safe-to-deploy" -[[exemptions.ahash]] -version = "0.7.8" -criteria = "safe-to-deploy" - [[exemptions.ahash]] version = "0.8.12" criteria = "safe-to-deploy" @@ -82,10 +78,6 @@ criteria = "safe-to-deploy" version = "0.5.1" criteria = "safe-to-deploy" -[[exemptions.arc-swap]] -version = "1.9.1" -criteria = "safe-to-deploy" - [[exemptions.argon2]] version = "0.5.3" criteria = "safe-to-deploy" @@ -218,18 +210,6 @@ criteria = "safe-to-deploy" version = "3.4.2" criteria = "safe-to-deploy" -[[exemptions.async-recursion]] -version = "0.3.2" -criteria = "safe-to-deploy" - -[[exemptions.async-stream]] -version = "0.3.6" -criteria = "safe-to-deploy" - -[[exemptions.async-stream-impl]] -version = "0.3.6" -criteria = "safe-to-deploy" - [[exemptions.async-trait]] version = "0.1.89" criteria = "safe-to-deploy" @@ -238,30 +218,10 @@ criteria = "safe-to-deploy" version = "2.0.0" criteria = "safe-to-deploy" -[[exemptions.auto-const-array]] -version = "0.2.2" -criteria = "safe-to-deploy" - [[exemptions.autocfg]] version = "1.5.0" criteria = "safe-to-deploy" -[[exemptions.axum]] -version = "0.6.20" -criteria = "safe-to-deploy" - -[[exemptions.axum]] -version = "0.8.8" -criteria = "safe-to-deploy" - -[[exemptions.axum-core]] -version = "0.3.4" -criteria = "safe-to-deploy" - -[[exemptions.axum-core]] -version = "0.5.6" -criteria = "safe-to-deploy" - [[exemptions.backon]] version = "1.6.0" criteria = "safe-to-deploy" @@ -278,18 +238,10 @@ criteria = "safe-to-deploy" version = "1.8.3" criteria = "safe-to-deploy" -[[exemptions.bb8]] -version = "0.9.1" -criteria = "safe-to-deploy" - [[exemptions.bincode]] version = "1.3.3" criteria = "safe-to-deploy" -[[exemptions.bindgen]] -version = "0.65.1" -criteria = "safe-to-deploy" - [[exemptions.bitflags]] version = "2.11.0" criteria = "safe-to-deploy" @@ -330,14 +282,6 @@ criteria = "safe-to-deploy" version = "1.0.16" criteria = "safe-to-deploy" -[[exemptions.borsh]] -version = "1.6.1" -criteria = "safe-to-deploy" - -[[exemptions.borsh-derive]] -version = "1.6.1" -criteria = "safe-to-deploy" - [[exemptions.brotli]] version = "7.0.0" criteria = "safe-to-deploy" @@ -346,26 +290,10 @@ criteria = "safe-to-deploy" version = "4.0.3" criteria = "safe-to-deploy" -[[exemptions.bson]] -version = "2.15.0" -criteria = "safe-to-deploy" - [[exemptions.bstr]] version = "1.12.1" criteria = "safe-to-deploy" -[[exemptions.bytecheck]] -version = "0.6.12" -criteria = "safe-to-deploy" - -[[exemptions.bytecheck_derive]] -version = "0.6.12" -criteria = "safe-to-deploy" - -[[exemptions.bytecount]] -version = "0.6.9" -criteria = "safe-to-deploy" - [[exemptions.bytemuck]] version = "1.25.0" criteria = "safe-to-deploy" @@ -382,26 +310,6 @@ criteria = "safe-to-deploy" version = "0.1.2" criteria = "safe-to-deploy" -[[exemptions.bzip2-sys]] -version = "0.1.13+1.0.8" -criteria = "safe-to-deploy" - -[[exemptions.cacache]] -version = "13.1.0" -criteria = "safe-to-deploy" - -[[exemptions.camino]] -version = "1.2.2" -criteria = "safe-to-deploy" - -[[exemptions.cargo-platform]] -version = "0.1.9" -criteria = "safe-to-deploy" - -[[exemptions.cargo_metadata]] -version = "0.14.2" -criteria = "safe-to-deploy" - [[exemptions.cassowary]] version = "0.3.0" criteria = "safe-to-deploy" @@ -430,10 +338,6 @@ criteria = "safe-to-deploy" version = "0.4.44" criteria = "safe-to-deploy" -[[exemptions.clang-sys]] -version = "1.8.1" -criteria = "safe-to-deploy" - [[exemptions.clap]] version = "4.6.0" criteria = "safe-to-deploy" @@ -478,50 +382,10 @@ criteria = "safe-to-deploy" version = "0.6.0" criteria = "safe-to-deploy" -[[exemptions.combine]] -version = "4.6.7" -criteria = "safe-to-deploy" - [[exemptions.compact_str]] version = "0.8.1" criteria = "safe-to-deploy" -[[exemptions.compio]] -version = "0.16.1" -criteria = "safe-to-deploy" - -[[exemptions.compio-buf]] -version = "0.7.2" -criteria = "safe-to-deploy" - -[[exemptions.compio-dispatcher]] -version = "0.8.1" -criteria = "safe-to-deploy" - -[[exemptions.compio-driver]] -version = "0.9.2" -criteria = "safe-to-deploy" - -[[exemptions.compio-fs]] -version = "0.9.0" -criteria = "safe-to-deploy" - -[[exemptions.compio-io]] -version = "0.8.4" -criteria = "safe-to-deploy" - -[[exemptions.compio-log]] -version = "0.1.0" -criteria = "safe-to-deploy" - -[[exemptions.compio-net]] -version = "0.9.0" -criteria = "safe-to-deploy" - -[[exemptions.compio-runtime]] -version = "0.9.5" -criteria = "safe-to-deploy" - [[exemptions.concurrent-queue]] version = "2.5.0" criteria = "safe-to-deploy" @@ -554,18 +418,10 @@ criteria = "safe-to-deploy" version = "0.4.2" criteria = "safe-to-deploy" -[[exemptions.convert_case]] -version = "0.10.0" -criteria = "safe-to-deploy" - [[exemptions.core-foundation]] version = "0.10.1" criteria = "safe-to-deploy" -[[exemptions.core_affinity]] -version = "0.8.3" -criteria = "safe-to-deploy" - [[exemptions.countme]] version = "3.0.1" criteria = "safe-to-deploy" @@ -590,10 +446,6 @@ criteria = "safe-to-deploy" version = "2.4.0" criteria = "safe-to-deploy" -[[exemptions.crc16]] -version = "0.4.0" -criteria = "safe-to-deploy" - [[exemptions.crc32c]] version = "0.6.8" criteria = "safe-to-deploy" @@ -602,10 +454,6 @@ criteria = "safe-to-deploy" version = "1.5.0" criteria = "safe-to-deploy" -[[exemptions.critical-section]] -version = "1.2.0" -criteria = "safe-to-deploy" - [[exemptions.crossbeam-channel]] version = "0.5.15" criteria = "safe-to-deploy" @@ -702,14 +550,6 @@ criteria = "safe-to-deploy" version = "0.23.0" criteria = "safe-to-deploy" -[[exemptions.dashmap]] -version = "5.5.3" -criteria = "safe-to-deploy" - -[[exemptions.dashmap]] -version = "6.1.0" -criteria = "safe-to-deploy" - [[exemptions.data-encoding]] version = "2.10.0" criteria = "safe-to-deploy" @@ -726,22 +566,6 @@ criteria = "safe-to-deploy" version = "9.0.0" criteria = "safe-to-deploy" -[[exemptions.derive-syn-parse]] -version = "0.2.0" -criteria = "safe-to-deploy" - -[[exemptions.derive-where]] -version = "1.6.1" -criteria = "safe-to-deploy" - -[[exemptions.derive_more]] -version = "2.1.1" -criteria = "safe-to-deploy" - -[[exemptions.derive_more-impl]] -version = "2.1.1" -criteria = "safe-to-deploy" - [[exemptions.des]] version = "0.8.1" criteria = "safe-to-deploy" @@ -802,10 +626,6 @@ criteria = "safe-to-deploy" version = "1.0.0" criteria = "safe-to-deploy" -[[exemptions.enum-as-inner]] -version = "0.6.1" -criteria = "safe-to-deploy" - [[exemptions.enum_dispatch]] version = "0.3.13" criteria = "safe-to-deploy" @@ -814,14 +634,6 @@ criteria = "safe-to-deploy" version = "0.3.14" criteria = "safe-to-deploy" -[[exemptions.error-chain]] -version = "0.12.4" -criteria = "safe-to-deploy" - -[[exemptions.etcd-client]] -version = "0.17.0" -criteria = "safe-to-deploy" - [[exemptions.etcetera]] version = "0.8.0" criteria = "safe-to-deploy" @@ -834,10 +646,6 @@ criteria = "safe-to-deploy" version = "0.5.4" criteria = "safe-to-deploy" -[[exemptions.fail]] -version = "0.4.0" -criteria = "safe-to-deploy" - [[exemptions.fastrand]] version = "2.4.1" criteria = "safe-to-deploy" @@ -858,10 +666,6 @@ criteria = "safe-to-deploy" version = "0.1.9" criteria = "safe-to-deploy" -[[exemptions.fixedbitset]] -version = "0.5.7" -criteria = "safe-to-deploy" - [[exemptions.flatbuffers]] version = "24.12.23" criteria = "safe-to-deploy" @@ -882,10 +686,6 @@ criteria = "safe-to-deploy" version = "0.3.3" criteria = "safe-to-deploy" -[[exemptions.fs2]] -version = "0.4.3" -criteria = "safe-to-deploy" - [[exemptions.fs4]] version = "0.6.6" criteria = "safe-to-deploy" @@ -958,10 +758,6 @@ criteria = "safe-to-deploy" version = "0.14.7" criteria = "safe-to-deploy" -[[exemptions.getrandom]] -version = "0.1.16" -criteria = "safe-to-deploy" - [[exemptions.getrandom]] version = "0.2.17" criteria = "safe-to-deploy" @@ -974,10 +770,6 @@ criteria = "safe-to-deploy" version = "0.4.2" criteria = "safe-to-deploy" -[[exemptions.ghac]] -version = "0.2.0" -criteria = "safe-to-deploy" - [[exemptions.gimli]] version = "0.26.2" criteria = "safe-to-deploy" @@ -1030,14 +822,6 @@ criteria = "safe-to-deploy" version = "0.13.0" criteria = "safe-to-deploy" -[[exemptions.h2]] -version = "0.3.27" -criteria = "safe-to-deploy" - -[[exemptions.h2]] -version = "0.4.13" -criteria = "safe-to-deploy" - [[exemptions.half]] version = "2.7.1" criteria = "safe-to-deploy" @@ -1058,22 +842,10 @@ criteria = "safe-to-deploy" version = "0.13.5" criteria = "safe-to-deploy" -[[exemptions.hermit-abi]] -version = "0.5.2" -criteria = "safe-to-deploy" - [[exemptions.hexf-parse]] version = "0.2.1" criteria = "safe-to-deploy" -[[exemptions.hickory-proto]] -version = "0.25.2" -criteria = "safe-to-deploy" - -[[exemptions.hickory-resolver]] -version = "0.25.2" -criteria = "safe-to-deploy" - [[exemptions.hkdf]] version = "0.12.4" criteria = "safe-to-deploy" @@ -1086,10 +858,6 @@ criteria = "safe-to-deploy" version = "0.5.12" criteria = "safe-to-deploy" -[[exemptions.http]] -version = "0.2.12" -criteria = "safe-to-deploy" - [[exemptions.http]] version = "1.4.0" criteria = "safe-to-deploy" @@ -1098,10 +866,6 @@ criteria = "safe-to-deploy" version = "0.1.10" criteria = "safe-to-deploy" -[[exemptions.http-body]] -version = "0.4.6" -criteria = "safe-to-deploy" - [[exemptions.http-body]] version = "1.0.1" criteria = "safe-to-deploy" @@ -1118,10 +882,6 @@ criteria = "safe-to-deploy" version = "0.4.10" criteria = "safe-to-deploy" -[[exemptions.hyper]] -version = "0.14.32" -criteria = "safe-to-deploy" - [[exemptions.hyper]] version = "1.9.0" criteria = "safe-to-deploy" @@ -1130,14 +890,6 @@ criteria = "safe-to-deploy" version = "0.27.7" criteria = "safe-to-deploy" -[[exemptions.hyper-timeout]] -version = "0.4.1" -criteria = "safe-to-deploy" - -[[exemptions.hyper-timeout]] -version = "0.5.2" -criteria = "safe-to-deploy" - [[exemptions.hyper-tls]] version = "0.6.0" criteria = "safe-to-deploy" @@ -1230,22 +982,6 @@ criteria = "safe-to-deploy" version = "3.0.4" criteria = "safe-to-deploy" -[[exemptions.io-uring]] -version = "0.6.4" -criteria = "safe-to-deploy" - -[[exemptions.io-uring]] -version = "0.7.11" -criteria = "safe-to-deploy" - -[[exemptions.io_uring_buf_ring]] -version = "0.2.3" -criteria = "safe-to-deploy" - -[[exemptions.ipconfig]] -version = "0.3.2" -criteria = "safe-to-deploy" - [[exemptions.ipnet]] version = "2.12.0" criteria = "safe-to-deploy" @@ -1346,10 +1082,6 @@ criteria = "safe-to-deploy" version = "3.6.0" criteria = "safe-to-deploy" -[[exemptions.lazycell]] -version = "1.3.0" -criteria = "safe-to-deploy" - [[exemptions.lexical-core]] version = "1.0.6" criteria = "safe-to-deploy" @@ -1390,10 +1122,6 @@ criteria = "safe-to-deploy" version = "0.1.16" criteria = "safe-to-deploy" -[[exemptions.librocksdb-sys]] -version = "0.11.0+8.1.1" -criteria = "safe-to-deploy" - [[exemptions.libsqlite3-sys]] version = "0.28.0" criteria = "safe-to-deploy" @@ -1466,30 +1194,6 @@ criteria = "safe-to-deploy" version = "0.4.3" criteria = "safe-to-deploy" -[[exemptions.macro_magic]] -version = "0.5.1" -criteria = "safe-to-deploy" - -[[exemptions.macro_magic_core]] -version = "0.5.1" -criteria = "safe-to-deploy" - -[[exemptions.macro_magic_core_macros]] -version = "0.5.1" -criteria = "safe-to-deploy" - -[[exemptions.macro_magic_macros]] -version = "0.5.1" -criteria = "safe-to-deploy" - -[[exemptions.matchit]] -version = "0.7.3" -criteria = "safe-to-deploy" - -[[exemptions.matchit]] -version = "0.8.4" -criteria = "safe-to-deploy" - [[exemptions.md-5]] version = "0.10.6" criteria = "safe-to-deploy" @@ -1502,10 +1206,6 @@ criteria = "safe-to-deploy" version = "2.8.0" criteria = "safe-to-deploy" -[[exemptions.memmap2]] -version = "0.5.10" -criteria = "safe-to-deploy" - [[exemptions.memmap2]] version = "0.9.10" criteria = "safe-to-deploy" @@ -1518,10 +1218,6 @@ criteria = "safe-to-deploy" version = "0.3.3" criteria = "safe-to-deploy" -[[exemptions.memoffset]] -version = "0.7.1" -criteria = "safe-to-deploy" - [[exemptions.memoffset]] version = "0.9.1" criteria = "safe-to-deploy" @@ -1530,22 +1226,6 @@ criteria = "safe-to-deploy" version = "0.1.32" criteria = "safe-to-deploy" -[[exemptions.miette]] -version = "5.10.0" -criteria = "safe-to-deploy" - -[[exemptions.miette-derive]] -version = "5.10.0" -criteria = "safe-to-deploy" - -[[exemptions.mime]] -version = "0.3.17" -criteria = "safe-to-deploy" - -[[exemptions.mini-moka]] -version = "0.10.3" -criteria = "safe-to-deploy" - [[exemptions.minijinja]] version = "2.19.0" criteria = "safe-to-deploy" @@ -1574,46 +1254,14 @@ criteria = "safe-to-deploy" version = "0.12.12" criteria = "safe-to-deploy" -[[exemptions.mongocrypt]] -version = "0.3.2" -criteria = "safe-to-deploy" - -[[exemptions.mongocrypt-sys]] -version = "0.1.5+1.15.1" -criteria = "safe-to-deploy" - -[[exemptions.mongodb]] -version = "3.5.2" -criteria = "safe-to-deploy" - -[[exemptions.mongodb-internal-macros]] -version = "3.5.2" -criteria = "safe-to-deploy" - -[[exemptions.monoio]] -version = "0.2.4" -criteria = "safe-to-deploy" - -[[exemptions.monoio-macros]] -version = "0.1.0" -criteria = "safe-to-deploy" - [[exemptions.moxcms]] version = "0.8.1" criteria = "safe-to-deploy" -[[exemptions.multimap]] -version = "0.10.1" -criteria = "safe-to-deploy" - [[exemptions.naga]] version = "22.1.0" criteria = "safe-to-deploy" -[[exemptions.nanorand]] -version = "0.7.0" -criteria = "safe-to-deploy" - [[exemptions.native-tls]] version = "0.2.18" criteria = "safe-to-deploy" @@ -1622,10 +1270,6 @@ criteria = "safe-to-deploy" version = "0.5.0+25.2.9519653" criteria = "safe-to-deploy" -[[exemptions.nix]] -version = "0.26.4" -criteria = "safe-to-deploy" - [[exemptions.notify]] version = "6.1.1" criteria = "safe-to-deploy" @@ -1650,10 +1294,6 @@ criteria = "safe-to-deploy" version = "0.1.45" criteria = "safe-to-deploy" -[[exemptions.num_cpus]] -version = "1.17.0" -criteria = "safe-to-deploy" - [[exemptions.objc]] version = "0.2.7" criteria = "safe-to-deploy" @@ -1714,10 +1354,6 @@ criteria = "safe-to-deploy" version = "0.7.3" criteria = "safe-to-deploy" -[[exemptions.os_pipe]] -version = "1.2.3" -criteria = "safe-to-deploy" - [[exemptions.ouroboros]] version = "0.18.5" criteria = "safe-to-deploy" @@ -1778,22 +1414,6 @@ criteria = "safe-to-deploy" version = "3.0.6" criteria = "safe-to-deploy" -[[exemptions.persy]] -version = "1.7.1" -criteria = "safe-to-deploy" - -[[exemptions.petgraph]] -version = "0.8.3" -criteria = "safe-to-deploy" - -[[exemptions.pin-project]] -version = "1.1.11" -criteria = "safe-to-deploy" - -[[exemptions.pin-project-internal]] -version = "1.1.11" -criteria = "safe-to-deploy" - [[exemptions.pin-project-lite]] version = "0.2.17" criteria = "safe-to-deploy" @@ -1822,10 +1442,6 @@ criteria = "safe-to-deploy" version = "0.18.1" criteria = "safe-to-deploy" -[[exemptions.polling]] -version = "3.11.0" -criteria = "safe-to-deploy" - [[exemptions.portable-atomic]] version = "1.13.1" criteria = "safe-to-deploy" @@ -1850,10 +1466,6 @@ criteria = "safe-to-deploy" version = "0.13.6" criteria = "safe-to-deploy" -[[exemptions.proc-macro-crate]] -version = "3.5.0" -criteria = "safe-to-deploy" - [[exemptions.proc-macro2-diagnostics]] version = "0.10.1" criteria = "safe-to-deploy" @@ -1862,34 +1474,10 @@ criteria = "safe-to-deploy" version = "1.0.17" criteria = "safe-to-deploy" -[[exemptions.prometheus]] -version = "0.13.4" -criteria = "safe-to-deploy" - -[[exemptions.prost]] -version = "0.12.6" -criteria = "safe-to-deploy" - [[exemptions.prost]] -version = "0.13.5" -criteria = "safe-to-deploy" - -[[exemptions.prost]] -version = "0.14.3" -criteria = "safe-to-deploy" - -[[exemptions.prost-build]] version = "0.14.3" criteria = "safe-to-deploy" -[[exemptions.prost-derive]] -version = "0.12.6" -criteria = "safe-to-deploy" - -[[exemptions.prost-derive]] -version = "0.13.5" -criteria = "safe-to-deploy" - [[exemptions.prost-derive]] version = "0.14.3" criteria = "safe-to-deploy" @@ -1918,26 +1506,6 @@ criteria = "safe-to-deploy" version = "0.1.30" criteria = "safe-to-deploy" -[[exemptions.ptr_meta]] -version = "0.1.4" -criteria = "safe-to-deploy" - -[[exemptions.ptr_meta_derive]] -version = "0.1.4" -criteria = "safe-to-deploy" - -[[exemptions.pulldown-cmark]] -version = "0.9.6" -criteria = "safe-to-deploy" - -[[exemptions.pulldown-cmark]] -version = "0.13.3" -criteria = "safe-to-deploy" - -[[exemptions.pulldown-cmark-to-cmark]] -version = "22.0.0" -criteria = "safe-to-deploy" - [[exemptions.pxfm]] version = "0.1.28" criteria = "safe-to-deploy" @@ -1978,26 +1546,14 @@ criteria = "safe-to-deploy" version = "0.7.0" criteria = "safe-to-deploy" -[[exemptions.rand]] -version = "0.7.3" -criteria = "safe-to-deploy" - [[exemptions.rand]] version = "0.9.3" criteria = "safe-to-deploy" -[[exemptions.rand_chacha]] -version = "0.2.2" -criteria = "safe-to-deploy" - [[exemptions.rand_chacha]] version = "0.9.0" criteria = "safe-to-deploy" -[[exemptions.rand_core]] -version = "0.5.1" -criteria = "safe-to-deploy" - [[exemptions.rand_core]] version = "0.9.5" criteria = "safe-to-deploy" @@ -2006,10 +1562,6 @@ criteria = "safe-to-deploy" version = "0.10.0" criteria = "safe-to-deploy" -[[exemptions.rand_hc]] -version = "0.2.0" -criteria = "safe-to-deploy" - [[exemptions.range-alloc]] version = "0.1.5" criteria = "safe-to-deploy" @@ -2026,14 +1578,6 @@ criteria = "safe-to-deploy" version = "1.13.0" criteria = "safe-to-deploy" -[[exemptions.redb]] -version = "2.6.3" -criteria = "safe-to-deploy" - -[[exemptions.redis]] -version = "0.32.7" -criteria = "safe-to-deploy" - [[exemptions.redox_syscall]] version = "0.2.16" criteria = "safe-to-deploy" @@ -2050,10 +1594,6 @@ criteria = "safe-to-deploy" version = "0.4.6" criteria = "safe-to-deploy" -[[exemptions.reflink-copy]] -version = "0.1.29" -criteria = "safe-to-deploy" - [[exemptions.regex]] version = "1.12.3" criteria = "safe-to-deploy" @@ -2070,10 +1610,6 @@ criteria = "safe-to-deploy" version = "0.8.10" criteria = "safe-to-deploy" -[[exemptions.rend]] -version = "0.4.2" -criteria = "safe-to-deploy" - [[exemptions.renderdoc-sys]] version = "1.1.0" criteria = "safe-to-deploy" @@ -2086,10 +1622,6 @@ criteria = "safe-to-deploy" version = "0.12.28" criteria = "safe-to-deploy" -[[exemptions.resolv-conf]] -version = "0.7.4" -criteria = "safe-to-deploy" - [[exemptions.rfc6979]] version = "0.4.0" criteria = "safe-to-deploy" @@ -2102,18 +1634,6 @@ criteria = "safe-to-deploy" version = "0.1.3" criteria = "safe-to-deploy" -[[exemptions.rkyv]] -version = "0.7.46" -criteria = "safe-to-deploy" - -[[exemptions.rkyv_derive]] -version = "0.7.46" -criteria = "safe-to-deploy" - -[[exemptions.rocksdb]] -version = "0.21.0" -criteria = "safe-to-deploy" - [[exemptions.roff]] version = "1.1.1" criteria = "safe-to-deploy" @@ -2146,10 +1666,6 @@ criteria = "safe-to-deploy" version = "0.21.3" criteria = "safe-to-deploy" -[[exemptions.rust_decimal]] -version = "1.41.0" -criteria = "safe-to-deploy" - [[exemptions.rustc-hash]] version = "2.1.2" criteria = "safe-to-deploy" @@ -2158,10 +1674,6 @@ criteria = "safe-to-deploy" version = "0.4.1" criteria = "safe-to-deploy" -[[exemptions.rustc_version_runtime]] -version = "0.3.0" -criteria = "safe-to-deploy" - [[exemptions.rusticata-macros]] version = "4.1.0" criteria = "safe-to-deploy" @@ -2182,10 +1694,6 @@ criteria = "safe-to-deploy" version = "0.23.37" criteria = "safe-to-deploy" -[[exemptions.rustls-native-certs]] -version = "0.8.3" -criteria = "safe-to-deploy" - [[exemptions.rustls-pemfile]] version = "1.0.4" criteria = "safe-to-deploy" @@ -2226,10 +1734,6 @@ criteria = "safe-to-deploy" version = "0.1.29" criteria = "safe-to-deploy" -[[exemptions.scoped-tls]] -version = "1.0.1" -criteria = "safe-to-deploy" - [[exemptions.scopeguard]] version = "1.2.0" criteria = "safe-to-deploy" @@ -2266,10 +1770,6 @@ criteria = "safe-to-deploy" version = "1.0.228" criteria = "safe-to-deploy" -[[exemptions.serde_bytes]] -version = "0.11.19" -criteria = "safe-to-deploy" - [[exemptions.serde_core]] version = "1.0.228" criteria = "safe-to-deploy" @@ -2290,14 +1790,6 @@ criteria = "safe-to-deploy" version = "0.7.1" criteria = "safe-to-deploy" -[[exemptions.serde_with]] -version = "3.18.0" -criteria = "safe-to-deploy" - -[[exemptions.serde_with_macros]] -version = "3.18.0" -criteria = "safe-to-deploy" - [[exemptions.sha-1]] version = "0.10.1" criteria = "safe-to-deploy" @@ -2350,18 +1842,10 @@ criteria = "safe-to-deploy" version = "1.0.2" criteria = "safe-to-deploy" -[[exemptions.skeptic]] -version = "0.13.7" -criteria = "safe-to-deploy" - [[exemptions.slab]] version = "0.4.12" criteria = "safe-to-deploy" -[[exemptions.sled]] -version = "0.34.7" -criteria = "safe-to-deploy" - [[exemptions.slice-group-by]] version = "0.3.1" criteria = "safe-to-deploy" @@ -2438,10 +1922,6 @@ criteria = "safe-to-deploy" version = "0.9.5" criteria = "safe-to-deploy" -[[exemptions.ssri]] -version = "9.2.0" -criteria = "safe-to-deploy" - [[exemptions.stable_deref_trait]] version = "1.2.1" criteria = "safe-to-deploy" @@ -2486,10 +1966,6 @@ criteria = "safe-to-deploy" version = "2.0.117" criteria = "safe-to-deploy" -[[exemptions.sync_wrapper]] -version = "0.1.2" -criteria = "safe-to-deploy" - [[exemptions.sync_wrapper]] version = "1.0.2" criteria = "safe-to-deploy" @@ -2534,10 +2010,6 @@ criteria = "safe-to-deploy" version = "2.0.18" criteria = "safe-to-deploy" -[[exemptions.threadpool]] -version = "1.8.1" -criteria = "safe-to-deploy" - [[exemptions.thrift]] version = "0.17.0" criteria = "safe-to-deploy" @@ -2546,10 +2018,6 @@ criteria = "safe-to-deploy" version = "0.2.1" criteria = "safe-to-deploy" -[[exemptions.tikv-client]] -version = "0.3.0" -criteria = "safe-to-deploy" - [[exemptions.time]] version = "0.3.47" criteria = "safe-to-deploy" @@ -2578,18 +2046,10 @@ criteria = "safe-to-deploy" version = "1.51.1" criteria = "safe-to-deploy" -[[exemptions.tokio-io-timeout]] -version = "1.2.1" -criteria = "safe-to-deploy" - [[exemptions.tokio-macros]] version = "2.7.0" criteria = "safe-to-deploy" -[[exemptions.tokio-rustls]] -version = "0.24.1" -criteria = "safe-to-deploy" - [[exemptions.tokio-rustls]] version = "0.26.4" criteria = "safe-to-deploy" @@ -2610,50 +2070,14 @@ criteria = "safe-to-deploy" version = "0.6.11" criteria = "safe-to-deploy" -[[exemptions.toml_datetime]] -version = "1.1.1+spec-1.1.0" -criteria = "safe-to-deploy" - [[exemptions.toml_edit]] version = "0.22.27" criteria = "safe-to-deploy" -[[exemptions.toml_edit]] -version = "0.25.11+spec-1.1.0" -criteria = "safe-to-deploy" - -[[exemptions.toml_parser]] -version = "1.1.2+spec-1.1.0" -criteria = "safe-to-deploy" - [[exemptions.toml_write]] version = "0.1.2" criteria = "safe-to-deploy" -[[exemptions.tonic]] -version = "0.10.2" -criteria = "safe-to-deploy" - -[[exemptions.tonic]] -version = "0.14.2" -criteria = "safe-to-deploy" - -[[exemptions.tonic-build]] -version = "0.14.5" -criteria = "safe-to-deploy" - -[[exemptions.tonic-prost]] -version = "0.14.5" -criteria = "safe-to-deploy" - -[[exemptions.tonic-prost-build]] -version = "0.14.5" -criteria = "safe-to-deploy" - -[[exemptions.tower]] -version = "0.4.13" -criteria = "safe-to-deploy" - [[exemptions.tower]] version = "0.5.3" criteria = "safe-to-deploy" @@ -2682,10 +2106,6 @@ criteria = "safe-to-deploy" version = "0.1.36" criteria = "safe-to-deploy" -[[exemptions.triomphe]] -version = "0.1.15" -criteria = "safe-to-deploy" - [[exemptions.try-lock]] version = "0.2.5" criteria = "safe-to-deploy" @@ -2698,14 +2118,6 @@ criteria = "safe-to-deploy" version = "2.1.2" criteria = "safe-to-deploy" -[[exemptions.typed-builder]] -version = "0.22.0" -criteria = "safe-to-deploy" - -[[exemptions.typed-builder-macro]] -version = "0.22.0" -criteria = "safe-to-deploy" - [[exemptions.typenum]] version = "1.19.0" criteria = "safe-to-deploy" @@ -2734,10 +2146,6 @@ criteria = "safe-to-deploy" version = "0.5.2" criteria = "safe-to-deploy" -[[exemptions.unsigned-varint]] -version = "0.8.0" -criteria = "safe-to-deploy" - [[exemptions.untrusted]] version = "0.9.0" criteria = "safe-to-deploy" @@ -2770,10 +2178,6 @@ criteria = "safe-to-deploy" version = "0.3.1" criteria = "safe-to-deploy" -[[exemptions.wasi]] -version = "0.9.0+wasi-snapshot-preview1" -criteria = "safe-to-deploy" - [[exemptions.wasi]] version = "0.11.1+wasi-snapshot-preview1" criteria = "safe-to-deploy" @@ -2874,22 +2278,10 @@ criteria = "safe-to-deploy" version = "0.52.0" criteria = "safe-to-deploy" -[[exemptions.windows]] -version = "0.62.2" -criteria = "safe-to-deploy" - -[[exemptions.windows-collections]] -version = "0.3.2" -criteria = "safe-to-deploy" - [[exemptions.windows-core]] version = "0.62.2" criteria = "safe-to-deploy" -[[exemptions.windows-future]] -version = "0.3.2" -criteria = "safe-to-deploy" - [[exemptions.windows-implement]] version = "0.60.2" criteria = "safe-to-deploy" @@ -2902,10 +2294,6 @@ criteria = "safe-to-deploy" version = "0.2.1" criteria = "safe-to-deploy" -[[exemptions.windows-numerics]] -version = "0.3.1" -criteria = "safe-to-deploy" - [[exemptions.windows-result]] version = "0.4.1" criteria = "safe-to-deploy" @@ -2946,10 +2334,6 @@ criteria = "safe-to-deploy" version = "0.53.5" criteria = "safe-to-deploy" -[[exemptions.windows-threading]] -version = "0.2.1" -criteria = "safe-to-deploy" - [[exemptions.windows_aarch64_gnullvm]] version = "0.48.5" criteria = "safe-to-deploy" @@ -3046,14 +2430,6 @@ criteria = "safe-to-deploy" version = "0.7.15" criteria = "safe-to-deploy" -[[exemptions.winnow]] -version = "1.0.1" -criteria = "safe-to-deploy" - -[[exemptions.winreg]] -version = "0.50.0" -criteria = "safe-to-deploy" - [[exemptions.writeable]] version = "0.6.3" criteria = "safe-to-deploy" @@ -3130,10 +2506,6 @@ criteria = "safe-to-deploy" version = "0.11.3" criteria = "safe-to-deploy" -[[exemptions.zigzag]] -version = "0.1.0" -criteria = "safe-to-deploy" - [[exemptions.zip]] version = "6.0.0" criteria = "safe-to-deploy" diff --git a/supply-chain/imports.lock b/supply-chain/imports.lock index 029675f..daed979 100644 --- a/supply-chain/imports.lock +++ b/supply-chain/imports.lock @@ -729,12 +729,6 @@ The changes appear to be reasonable updates from Rust's stdlib imported into `allocator-api2`'s copy of this code. """ -[[audits.bytecode-alliance.audits.async-task]] -who = "Chris Fallin " -criteria = "safe-to-deploy" -version = "4.7.1" -notes = "Fairly significant chunk of unsafe code in the async executor core, but seems isolated to well-understood patterns, e.g. a manual vtable and some manual layout code." - [[audits.bytecode-alliance.audits.atomic-waker]] who = "Alex Crichton " criteria = "safe-to-deploy" @@ -962,12 +956,6 @@ criteria = "safe-to-deploy" version = "2.2.1" notes = "forbid-unsafe crate with straightforward imports." -[[audits.bytecode-alliance.audits.peeking_take_while]] -who = "Nick Fitzgerald " -criteria = "safe-to-deploy" -version = "1.0.0" -notes = "I am the author of this crate." - [[audits.bytecode-alliance.audits.pem-rfc7468]] who = "Chris Fallin " criteria = "safe-to-deploy" @@ -984,11 +972,6 @@ a few `unsafe` blocks related to utf-8 validation which are locally verifiable as correct and otherwise this crate is good to go. """ -[[audits.bytecode-alliance.audits.pin-utils]] -who = "Pat Hickey " -criteria = "safe-to-deploy" -version = "0.1.0" - [[audits.bytecode-alliance.audits.pkg-config]] who = "Pat Hickey " criteria = "safe-to-deploy" @@ -1175,12 +1158,6 @@ criteria = "safe-to-deploy" version = "0.1.1" notes = "No unsafe usage or ambient capabilities" -[[audits.embark.audits.derive-new]] -who = "Johan Andersson " -criteria = "safe-to-deploy" -version = "0.5.9" -notes = "Proc macro. No unsafe usage or ambient capabilities" - [[audits.embark.audits.ident_case]] who = "Johan Andersson " criteria = "safe-to-deploy" @@ -1388,12 +1365,6 @@ https://source.chromium.org/chromium/chromium/src/+/28841c33c77833cc30b286f9ae24 """ aggregated-from = "https://chromium.googlesource.com/chromium/src/+/main/third_party/rust/chromium_crates_io/supply-chain/audits.toml?format=TEXT" -[[audits.google.audits.httpdate]] -who = "George Burgess IV " -criteria = "safe-to-deploy" -version = "1.0.3" -aggregated-from = "https://chromium.googlesource.com/chromiumos/third_party/rust_crates/+/refs/heads/main/cargo-vet/audits.toml?format=TEXT" - [[audits.google.audits.lazy_static]] who = "Lukasz Anforowicz " criteria = "safe-to-deploy" @@ -1743,13 +1714,6 @@ version = "0.13.1" notes = "Exposes unsafe codegen APIs but does not itself contain unsafe" aggregated-from = "https://chromium.googlesource.com/chromium/src/+/main/third_party/rust/chromium_crates_io/supply-chain/audits.toml?format=TEXT" -[[audits.google.audits.take_mut]] -who = "David Koloski " -criteria = "safe-to-deploy" -version = "0.2.2" -notes = "Reviewed on https://fxrev.dev/883543" -aggregated-from = "https://fuchsia.googlesource.com/fuchsia/+/refs/heads/main/third_party/rust_crates/supply-chain/audits.toml?format=TEXT" - [[audits.google.audits.termtree]] who = "Max Lee " criteria = "safe-to-run" @@ -1776,15 +1740,6 @@ version = "0.52.0" notes = "Implements Windows system APIs" aggregated-from = "https://chromium.googlesource.com/chromium/src/+/main/third_party/rust/chromium_crates_io/supply-chain/audits.toml?format=TEXT" -[[audits.mozilla.wildcard-audits.cexpr]] -who = "Emilio Cobos Álvarez " -criteria = "safe-to-deploy" -user-id = 3788 -start = "2021-06-21" -end = "2024-04-21" -notes = "No unsafe code, rather straight-forward parser." -aggregated-from = "https://hg.mozilla.org/mozilla-central/raw-file/tip/supply-chain/audits.toml" - [[audits.mozilla.wildcard-audits.core-foundation]] who = "Bobby Holley " criteria = "safe-to-deploy" @@ -2053,13 +2008,6 @@ criteria = "safe-to-deploy" delta = "1.2.1 -> 1.2.2" aggregated-from = "https://hg.mozilla.org/mozilla-central/raw-file/tip/supply-chain/audits.toml" -[[audits.mozilla.audits.fxhash]] -who = "Bobby Holley " -criteria = "safe-to-deploy" -version = "0.2.1" -notes = "Straightforward crate with no unsafe code, does what it says on the tin." -aggregated-from = "https://hg.mozilla.org/mozilla-central/raw-file/tip/supply-chain/audits.toml" - [[audits.mozilla.audits.gimli]] who = "Alex Franchuk " criteria = "safe-to-deploy" @@ -2177,20 +2125,6 @@ version = "0.9.0" notes = "The exposed functionality is inherently unsafe, but all such functions are correctly tagged as `unsafe` and requirements documented. It also includes extensive documentation about the choices made about differing platform APIs" aggregated-from = "https://raw.githubusercontent.com/mozilla/glean/main/supply-chain/audits.toml" -[[audits.mozilla.audits.linked-hash-map]] -who = "Aria Beingessner " -criteria = "safe-to-deploy" -version = "0.5.4" -notes = "I own this crate (I am contain-rs) and 0.5.4 passes miri. This code is very old and used by lots of people, so I'm pretty confident in it, even though it's in maintenance-mode and missing some nice-to-have APIs." -aggregated-from = "https://hg.mozilla.org/mozilla-central/raw-file/tip/supply-chain/audits.toml" - -[[audits.mozilla.audits.linked-hash-map]] -who = "Alex Franchuk " -criteria = "safe-to-deploy" -delta = "0.5.4 -> 0.5.6" -notes = "New unsafe code has debug assertions and meets invariants. All other changes are formatting-related." -aggregated-from = "https://hg.mozilla.org/mozilla-central/raw-file/tip/supply-chain/audits.toml" - [[audits.mozilla.audits.log]] who = "Erich Gubler " criteria = "safe-to-deploy" @@ -2296,13 +2230,6 @@ criteria = "safe-to-deploy" version = "0.2.0" aggregated-from = "https://raw.githubusercontent.com/mozilla/cargo-vet/main/supply-chain/audits.toml" -[[audits.mozilla.audits.peeking_take_while]] -who = "Bobby Holley " -criteria = "safe-to-deploy" -delta = "1.0.0 -> 0.1.2" -notes = "Small refactor of some simple iterator logic, no unsafe code or capabilities." -aggregated-from = "https://hg.mozilla.org/mozilla-central/raw-file/tip/supply-chain/audits.toml" - [[audits.mozilla.audits.percent-encoding]] who = "Valentin Gosu " criteria = "safe-to-deploy" @@ -2406,18 +2333,6 @@ version = "1.1.0" notes = "Straightforward crate with no unsafe code, does what it says on the tin." aggregated-from = "https://hg.mozilla.org/mozilla-central/raw-file/tip/supply-chain/audits.toml" -[[audits.mozilla.audits.seahash]] -who = "Benjamin VanderSloot " -criteria = "safe-to-deploy" -version = "4.1.0" -notes = """ -Uses unsafe to compute a non-cryptographic hash over &[u8], -grabbing u64s out of the buffer for XORs. Logic looks sound, -careful not to read over the end of the buffer, and the unsafety -is well contained. -""" -aggregated-from = "https://hg.mozilla.org/mozilla-central/raw-file/tip/supply-chain/audits.toml" - [[audits.mozilla.audits.shlex]] who = "Max Inden " criteria = "safe-to-deploy"