From dc683748d3b9d324edaac2e40b2be8903555bbfa Mon Sep 17 00:00:00 2001 From: Dzejkop Date: Thu, 9 Nov 2023 16:25:01 +0100 Subject: [PATCH] Trust & exempt a bunch of crates --- supply-chain/audits.toml | 336 +++++++++++++++++++++ supply-chain/config.toml | 536 ++++++++------------------------- supply-chain/imports.lock | 605 ++++++++++++++++++++++++++++++++++---- 3 files changed, 1015 insertions(+), 462 deletions(-) diff --git a/supply-chain/audits.toml b/supply-chain/audits.toml index 979d9f22..dc19d999 100644 --- a/supply-chain/audits.toml +++ b/supply-chain/audits.toml @@ -3,6 +3,336 @@ [audits] +[[trusted.anstream]] +criteria = "safe-to-deploy" +user-id = 6743 # Ed Page (epage) +start = "2023-03-16" +end = "2024-11-09" + +[[trusted.anstyle]] +criteria = "safe-to-deploy" +user-id = 6743 # Ed Page (epage) +start = "2022-05-18" +end = "2024-11-09" + +[[trusted.anstyle-parse]] +criteria = "safe-to-deploy" +user-id = 6743 # Ed Page (epage) +start = "2023-03-08" +end = "2024-11-09" + +[[trusted.anstyle-query]] +criteria = "safe-to-deploy" +user-id = 6743 # Ed Page (epage) +start = "2023-04-13" +end = "2024-11-09" + +[[trusted.anstyle-wincon]] +criteria = "safe-to-deploy" +user-id = 6743 # Ed Page (epage) +start = "2023-03-08" +end = "2024-11-09" + +[[trusted.anyhow]] +criteria = "safe-to-deploy" +user-id = 3618 # David Tolnay (dtolnay) +start = "2019-10-05" +end = "2024-11-09" + +[[trusted.async-trait]] +criteria = "safe-to-deploy" +user-id = 3618 # David Tolnay (dtolnay) +start = "2019-07-23" +end = "2024-11-09" + +[[trusted.bytes]] +criteria = "safe-to-deploy" +user-id = 359 # Sean McArthur (seanmonstar) +start = "2019-11-27" +end = "2024-11-09" + +[[trusted.bzip2]] +criteria = "safe-to-deploy" +user-id = 1 # Alex Crichton (alexcrichton) +start = "2020-07-06" +end = "2024-11-09" + +[[trusted.bzip2-sys]] +criteria = "safe-to-deploy" +user-id = 1 # Alex Crichton (alexcrichton) +start = "2020-02-24" +end = "2024-11-09" + +[[trusted.cc]] +criteria = "safe-to-deploy" +user-id = 1 # Alex Crichton (alexcrichton) +start = "2019-03-01" +end = "2024-11-09" + +[[trusted.clap_builder]] +criteria = "safe-to-deploy" +user-id = 6743 # Ed Page (epage) +start = "2023-03-28" +end = "2024-11-09" + +[[trusted.clap_lex]] +criteria = "safe-to-deploy" +user-id = 6743 # Ed Page (epage) +start = "2022-04-15" +end = "2024-11-09" + +[[trusted.corosensei]] +criteria = "safe-to-deploy" +user-id = 2915 # Amanieu d'Antras (Amanieu) +start = "2022-02-25" +end = "2024-11-09" + +[[trusted.cxx]] +criteria = "safe-to-deploy" +user-id = 3618 # David Tolnay (dtolnay) +start = "2019-12-28" +end = "2024-11-09" + +[[trusted.cxx-build]] +criteria = "safe-to-deploy" +user-id = 3618 # David Tolnay (dtolnay) +start = "2020-04-30" +end = "2024-11-09" + +[[trusted.cxxbridge-flags]] +criteria = "safe-to-deploy" +user-id = 3618 # David Tolnay (dtolnay) +start = "2020-08-30" +end = "2024-11-09" + +[[trusted.cxxbridge-macro]] +criteria = "safe-to-deploy" +user-id = 3618 # David Tolnay (dtolnay) +start = "2020-01-08" +end = "2024-11-09" + +[[trusted.equivalent]] +criteria = "safe-to-deploy" +user-id = 539 # Josh Stone (cuviper) +start = "2023-02-05" +end = "2024-11-09" + +[[trusted.h2]] +criteria = "safe-to-deploy" +user-id = 359 # Sean McArthur (seanmonstar) +start = "2019-03-13" +end = "2024-11-09" + +[[trusted.hashbrown]] +criteria = "safe-to-deploy" +user-id = 2915 # Amanieu d'Antras (Amanieu) +start = "2019-04-02" +end = "2024-11-09" + +[[trusted.http]] +criteria = "safe-to-deploy" +user-id = 359 # Sean McArthur (seanmonstar) +start = "2019-04-05" +end = "2024-11-09" + +[[trusted.http-body]] +criteria = "safe-to-deploy" +user-id = 359 # Sean McArthur (seanmonstar) +start = "2019-10-01" +end = "2024-11-09" + +[[trusted.httparse]] +criteria = "safe-to-deploy" +user-id = 359 # Sean McArthur (seanmonstar) +start = "2019-07-03" +end = "2024-11-09" + +[[trusted.hyper]] +criteria = "safe-to-deploy" +user-id = 359 # Sean McArthur (seanmonstar) +start = "2019-03-01" +end = "2024-11-09" + +[[trusted.hyper-tls]] +criteria = "safe-to-deploy" +user-id = 359 # Sean McArthur (seanmonstar) +start = "2019-03-19" +end = "2024-11-09" + +[[trusted.indexmap]] +criteria = "safe-to-deploy" +user-id = 539 # Josh Stone (cuviper) +start = "2020-01-15" +end = "2024-11-09" + +[[trusted.itoa]] +criteria = "safe-to-deploy" +user-id = 3618 # David Tolnay (dtolnay) +start = "2019-05-02" +end = "2024-11-09" + +[[trusted.jobserver]] +criteria = "safe-to-deploy" +user-id = 1 # Alex Crichton (alexcrichton) +start = "2019-03-15" +end = "2024-11-09" + +[[trusted.libc]] +criteria = "safe-to-deploy" +user-id = 51017 # Yuki Okushi (JohnTitor) +start = "2020-03-17" +end = "2024-11-09" + +[[trusted.link-cplusplus]] +criteria = "safe-to-deploy" +user-id = 3618 # David Tolnay (dtolnay) +start = "2020-01-24" +end = "2024-11-09" + +[[trusted.mime]] +criteria = "safe-to-deploy" +user-id = 359 # Sean McArthur (seanmonstar) +start = "2019-09-09" +end = "2024-11-09" + +[[trusted.num_cpus]] +criteria = "safe-to-deploy" +user-id = 359 # Sean McArthur (seanmonstar) +start = "2019-06-10" +end = "2024-11-09" + +[[trusted.paste]] +criteria = "safe-to-deploy" +user-id = 3618 # David Tolnay (dtolnay) +start = "2019-03-19" +end = "2024-11-09" + +[[trusted.prettyplease]] +criteria = "safe-to-deploy" +user-id = 3618 # David Tolnay (dtolnay) +start = "2022-01-04" +end = "2024-11-09" + +[[trusted.reqwest]] +criteria = "safe-to-deploy" +user-id = 359 # Sean McArthur (seanmonstar) +start = "2019-03-04" +end = "2024-11-09" + +[[trusted.ryu]] +criteria = "safe-to-deploy" +user-id = 3618 # David Tolnay (dtolnay) +start = "2019-05-02" +end = "2024-11-09" + +[[trusted.scopeguard]] +criteria = "safe-to-deploy" +user-id = 2915 # Amanieu d'Antras (Amanieu) +start = "2020-02-16" +end = "2024-11-09" + +[[trusted.scratch]] +criteria = "safe-to-deploy" +user-id = 3618 # David Tolnay (dtolnay) +start = "2020-09-17" +end = "2024-11-09" + +[[trusted.serde]] +criteria = "safe-to-deploy" +user-id = 3618 # David Tolnay (dtolnay) +start = "2019-03-01" +end = "2024-11-09" + +[[trusted.serde_bytes]] +criteria = "safe-to-deploy" +user-id = 3618 # David Tolnay (dtolnay) +start = "2019-02-25" +end = "2024-11-09" + +[[trusted.serde_derive]] +criteria = "safe-to-deploy" +user-id = 3618 # David Tolnay (dtolnay) +start = "2019-03-01" +end = "2024-11-09" + +[[trusted.serde_json]] +criteria = "safe-to-deploy" +user-id = 3618 # David Tolnay (dtolnay) +start = "2019-02-28" +end = "2024-11-09" + +[[trusted.serde_path_to_error]] +criteria = "safe-to-deploy" +user-id = 3618 # David Tolnay (dtolnay) +start = "2019-08-20" +end = "2024-11-09" + +[[trusted.serde_spanned]] +criteria = "safe-to-deploy" +user-id = 6743 # Ed Page (epage) +start = "2023-01-20" +end = "2024-11-09" + +[[trusted.socket2]] +criteria = "safe-to-deploy" +user-id = 1 # Alex Crichton (alexcrichton) +start = "2019-05-06" +end = "2024-11-09" + +[[trusted.syn]] +criteria = "safe-to-deploy" +user-id = 3618 # David Tolnay (dtolnay) +start = "2019-03-01" +end = "2024-11-09" + +[[trusted.thiserror]] +criteria = "safe-to-deploy" +user-id = 3618 # David Tolnay (dtolnay) +start = "2019-10-09" +end = "2024-11-09" + +[[trusted.thiserror-impl]] +criteria = "safe-to-deploy" +user-id = 3618 # David Tolnay (dtolnay) +start = "2019-10-09" +end = "2024-11-09" + +[[trusted.tokio]] +criteria = "safe-to-deploy" +user-id = 6741 # Alice Ryhl (Darksonn) +start = "2020-12-25" +end = "2024-11-09" + +[[trusted.toml]] +criteria = "safe-to-deploy" +user-id = 6743 # Ed Page (epage) +start = "2022-12-14" +end = "2024-11-09" + +[[trusted.toml_datetime]] +criteria = "safe-to-deploy" +user-id = 6743 # Ed Page (epage) +start = "2022-10-21" +end = "2024-11-09" + +[[trusted.toml_edit]] +criteria = "safe-to-deploy" +user-id = 6743 # Ed Page (epage) +start = "2021-09-13" +end = "2024-11-09" + +[[trusted.try-lock]] +criteria = "safe-to-deploy" +user-id = 359 # Sean McArthur (seanmonstar) +start = "2020-07-10" +end = "2024-11-09" + +[[trusted.unicode-ident]] +criteria = "safe-to-deploy" +user-id = 3618 # David Tolnay (dtolnay) +start = "2021-10-02" +end = "2024-11-09" + [[trusted.windows-sys]] criteria = "safe-to-deploy" user-id = 64539 # Kenny Kerr (kennykerr) @@ -56,3 +386,9 @@ criteria = "safe-to-deploy" user-id = 64539 # Kenny Kerr (kennykerr) start = "2021-10-27" end = "2024-07-18" + +[[trusted.winnow]] +criteria = "safe-to-deploy" +user-id = 6743 # Ed Page (epage) +start = "2023-02-22" +end = "2024-11-09" diff --git a/supply-chain/config.toml b/supply-chain/config.toml index 2f7a25a1..f63541aa 100644 --- a/supply-chain/config.toml +++ b/supply-chain/config.toml @@ -43,10 +43,6 @@ criteria = "safe-to-deploy" version = "0.7.5" criteria = "safe-to-deploy" -[[exemptions.aes]] -version = "0.8.2" -criteria = "safe-to-deploy" - [[exemptions.ahash]] version = "0.7.6" criteria = "safe-to-deploy" @@ -63,30 +59,6 @@ criteria = "safe-to-deploy" version = "0.12.1" criteria = "safe-to-deploy" -[[exemptions.anstream]] -version = "0.3.2" -criteria = "safe-to-deploy" - -[[exemptions.anstyle]] -version = "1.0.0" -criteria = "safe-to-deploy" - -[[exemptions.anstyle-parse]] -version = "0.2.0" -criteria = "safe-to-deploy" - -[[exemptions.anstyle-query]] -version = "1.0.0" -criteria = "safe-to-deploy" - -[[exemptions.anstyle-wincon]] -version = "1.0.1" -criteria = "safe-to-deploy" - -[[exemptions.anyhow]] -version = "1.0.72" -criteria = "safe-to-deploy" - [[exemptions.ark-bn254]] version = "0.3.0" criteria = "safe-to-deploy" @@ -151,10 +123,6 @@ criteria = "safe-to-deploy" version = "0.3.3" criteria = "safe-to-deploy" -[[exemptions.async-trait]] -version = "0.1.71" -criteria = "safe-to-deploy" - [[exemptions.async_io_stream]] version = "0.3.3" criteria = "safe-to-deploy" @@ -163,10 +131,6 @@ criteria = "safe-to-deploy" version = "1.0.0" criteria = "safe-to-deploy" -[[exemptions.auto_impl]] -version = "0.5.0" -criteria = "safe-to-deploy" - [[exemptions.auto_impl]] version = "1.1.0" criteria = "safe-to-deploy" @@ -251,26 +215,10 @@ criteria = "safe-to-deploy" version = "0.4.4" criteria = "safe-to-deploy" -[[exemptions.base16ct]] -version = "0.1.1" -criteria = "safe-to-deploy" - [[exemptions.base16ct]] version = "0.2.0" criteria = "safe-to-deploy" -[[exemptions.base58]] -version = "0.1.0" -criteria = "safe-to-deploy" - -[[exemptions.base58check]] -version = "0.1.0" -criteria = "safe-to-deploy" - -[[exemptions.base64]] -version = "0.12.3" -criteria = "safe-to-deploy" - [[exemptions.base64]] version = "0.13.1" criteria = "safe-to-deploy" @@ -280,7 +228,7 @@ version = "1.5.3" criteria = "safe-to-deploy" [[exemptions.bech32]] -version = "0.7.3" +version = "0.8.1" criteria = "safe-to-deploy" [[exemptions.bincode]] @@ -291,10 +239,6 @@ criteria = "safe-to-deploy" version = "1.3.2" criteria = "safe-to-deploy" -[[exemptions.bitvec]] -version = "0.17.4" -criteria = "safe-to-deploy" - [[exemptions.bitvec]] version = "1.0.1" criteria = "safe-to-deploy" @@ -303,20 +247,8 @@ criteria = "safe-to-deploy" version = "0.9.2" criteria = "safe-to-deploy" -[[exemptions.blake2]] -version = "0.10.5" -criteria = "safe-to-deploy" - -[[exemptions.block-buffer]] -version = "0.7.3" -criteria = "safe-to-deploy" - -[[exemptions.block-padding]] -version = "0.1.5" -criteria = "safe-to-deploy" - [[exemptions.bs58]] -version = "0.4.0" +version = "0.5.0" criteria = "safe-to-deploy" [[exemptions.bstr]] @@ -327,10 +259,6 @@ criteria = "safe-to-deploy" version = "1.2.2" criteria = "safe-to-deploy" -[[exemptions.byte-tools]] -version = "0.3.1" -criteria = "safe-to-deploy" - [[exemptions.bytecheck]] version = "0.6.9" criteria = "safe-to-deploy" @@ -351,14 +279,6 @@ criteria = "safe-to-deploy" version = "0.1.3" criteria = "safe-to-deploy" -[[exemptions.bzip2]] -version = "0.4.4" -criteria = "safe-to-deploy" - -[[exemptions.bzip2-sys]] -version = "0.1.11+1.0.8" -criteria = "safe-to-deploy" - [[exemptions.camino]] version = "1.1.1" criteria = "safe-to-deploy" @@ -368,7 +288,7 @@ version = "0.3.0" criteria = "safe-to-deploy" [[exemptions.cc]] -version = "1.0.77" +version = "1.0.83" criteria = "safe-to-deploy" [[exemptions.chrono]] @@ -384,33 +304,13 @@ version = "2.34.0" criteria = "safe-to-deploy" [[exemptions.clap]] -version = "3.2.23" -criteria = "safe-to-deploy" - -[[exemptions.clap]] -version = "4.3.14" -criteria = "safe-to-deploy" - -[[exemptions.clap_builder]] version = "4.3.14" criteria = "safe-to-deploy" -[[exemptions.clap_derive]] -version = "3.2.18" -criteria = "safe-to-deploy" - [[exemptions.clap_derive]] version = "4.3.12" criteria = "safe-to-deploy" -[[exemptions.clap_lex]] -version = "0.2.4" -criteria = "safe-to-deploy" - -[[exemptions.clap_lex]] -version = "0.5.0" -criteria = "safe-to-deploy" - [[exemptions.cli-batteries]] version = "0.5.0@git:fc1186d1aba6a25120570fe04ad3362b08c8adfd" criteria = "safe-to-deploy" @@ -420,15 +320,15 @@ version = "0.1.2" criteria = "safe-to-deploy" [[exemptions.coins-bip32]] -version = "0.7.0" +version = "0.8.7" criteria = "safe-to-deploy" [[exemptions.coins-bip39]] -version = "0.7.0" +version = "0.8.7" criteria = "safe-to-deploy" [[exemptions.coins-core]] -version = "0.7.0" +version = "0.8.7" criteria = "safe-to-deploy" [[exemptions.color-eyre]] @@ -451,14 +351,6 @@ criteria = "safe-to-deploy" version = "4.6.6" criteria = "safe-to-deploy" -[[exemptions.console]] -version = "0.14.1" -criteria = "safe-to-deploy" - -[[exemptions.console]] -version = "0.15.2" -criteria = "safe-to-deploy" - [[exemptions.const-hex]] version = "1.9.0" criteria = "safe-to-deploy" @@ -471,14 +363,6 @@ criteria = "safe-to-deploy" version = "0.1.5" criteria = "safe-to-deploy" -[[exemptions.convert_case]] -version = "0.6.0" -criteria = "safe-to-deploy" - -[[exemptions.corosensei]] -version = "0.1.3" -criteria = "safe-to-deploy" - [[exemptions.cpufeatures]] version = "0.2.5" criteria = "safe-to-deploy" @@ -519,10 +403,6 @@ criteria = "safe-to-deploy" version = "0.8.14" criteria = "safe-to-deploy" -[[exemptions.crypto-bigint]] -version = "0.4.9" -criteria = "safe-to-deploy" - [[exemptions.crypto-bigint]] version = "0.5.1" criteria = "safe-to-deploy" @@ -547,22 +427,6 @@ criteria = "safe-to-deploy" version = "0.9.2" criteria = "safe-to-deploy" -[[exemptions.cxx]] -version = "1.0.82" -criteria = "safe-to-deploy" - -[[exemptions.cxx-build]] -version = "1.0.82" -criteria = "safe-to-deploy" - -[[exemptions.cxxbridge-flags]] -version = "1.0.82" -criteria = "safe-to-deploy" - -[[exemptions.cxxbridge-macro]] -version = "1.0.82" -criteria = "safe-to-deploy" - [[exemptions.darling]] version = "0.14.2" criteria = "safe-to-deploy" @@ -579,8 +443,8 @@ criteria = "safe-to-deploy" version = "5.4.0" criteria = "safe-to-deploy" -[[exemptions.der]] -version = "0.6.0" +[[exemptions.data-encoding]] +version = "2.4.0" criteria = "safe-to-deploy" [[exemptions.der]] @@ -591,18 +455,10 @@ criteria = "safe-to-deploy" version = "2.2.0" criteria = "safe-to-deploy" -[[exemptions.dialoguer]] -version = "0.8.0" -criteria = "safe-to-deploy" - [[exemptions.diff]] version = "0.1.13" criteria = "safe-to-deploy" -[[exemptions.digest]] -version = "0.8.1" -criteria = "safe-to-deploy" - [[exemptions.digest]] version = "0.9.0" criteria = "safe-to-deploy" @@ -611,6 +467,10 @@ criteria = "safe-to-deploy" version = "4.0.0" criteria = "safe-to-deploy" +[[exemptions.dirs]] +version = "5.0.1" +criteria = "safe-to-deploy" + [[exemptions.dirs-next]] version = "2.0.0" criteria = "safe-to-deploy" @@ -619,6 +479,10 @@ criteria = "safe-to-deploy" version = "0.3.7" criteria = "safe-to-deploy" +[[exemptions.dirs-sys]] +version = "0.4.1" +criteria = "safe-to-deploy" + [[exemptions.dirs-sys-next]] version = "0.1.2" criteria = "safe-to-deploy" @@ -631,18 +495,10 @@ criteria = "safe-to-deploy" version = "1.0.3" criteria = "safe-to-deploy" -[[exemptions.ecdsa]] -version = "0.14.8" -criteria = "safe-to-deploy" - [[exemptions.ecdsa]] version = "0.16.1" criteria = "safe-to-deploy" -[[exemptions.elliptic-curve]] -version = "0.12.3" -criteria = "safe-to-deploy" - [[exemptions.elliptic-curve]] version = "0.13.5" criteria = "safe-to-deploy" @@ -651,8 +507,8 @@ criteria = "safe-to-deploy" version = "0.14.0" criteria = "safe-to-deploy" -[[exemptions.encode_unicode]] -version = "0.3.6" +[[exemptions.enr]] +version = "0.9.1" criteria = "safe-to-deploy" [[exemptions.enum-as-inner]] @@ -699,10 +555,54 @@ criteria = "safe-to-deploy" version = "0.14.0" criteria = "safe-to-deploy" +[[exemptions.ethers]] +version = "2.0.10" +criteria = "safe-to-deploy" + +[[exemptions.ethers-addressbook]] +version = "2.0.10" +criteria = "safe-to-deploy" + +[[exemptions.ethers-contract]] +version = "2.0.10" +criteria = "safe-to-deploy" + +[[exemptions.ethers-contract-abigen]] +version = "2.0.10" +criteria = "safe-to-deploy" + +[[exemptions.ethers-contract-derive]] +version = "2.0.10" +criteria = "safe-to-deploy" + +[[exemptions.ethers-core]] +version = "2.0.10" +criteria = "safe-to-deploy" + [[exemptions.ethers-core]] version = "2.0.10@git:08bcb67c36d9a2869950e51ecf76124c9febe035" criteria = "safe-to-deploy" +[[exemptions.ethers-etherscan]] +version = "2.0.10" +criteria = "safe-to-deploy" + +[[exemptions.ethers-middleware]] +version = "2.0.10" +criteria = "safe-to-deploy" + +[[exemptions.ethers-providers]] +version = "2.0.10" +criteria = "safe-to-deploy" + +[[exemptions.ethers-signers]] +version = "2.0.10" +criteria = "safe-to-deploy" + +[[exemptions.ethers-solc]] +version = "2.0.10" +criteria = "safe-to-deploy" + [[exemptions.event-listener]] version = "2.5.3" criteria = "safe-to-deploy" @@ -711,10 +611,6 @@ criteria = "safe-to-deploy" version = "0.6.8" criteria = "safe-to-deploy" -[[exemptions.fake-simd]] -version = "0.1.2" -criteria = "safe-to-deploy" - [[exemptions.fallible-iterator]] version = "0.2.0" criteria = "safe-to-deploy" @@ -739,6 +635,10 @@ criteria = "safe-to-deploy" version = "1.0.25" criteria = "safe-to-deploy" +[[exemptions.form_urlencoded]] +version = "1.2.0" +criteria = "safe-to-deploy" + [[exemptions.fs2]] version = "0.4.3" criteria = "safe-to-deploy" @@ -775,10 +675,6 @@ criteria = "safe-to-deploy" version = "0.3.28" criteria = "safe-to-deploy" -[[exemptions.generic-array]] -version = "0.12.4" -criteria = "safe-to-deploy" - [[exemptions.generic-array]] version = "0.14.7" criteria = "safe-to-deploy" @@ -791,16 +687,12 @@ criteria = "safe-to-deploy" version = "0.26.2" criteria = "safe-to-deploy" -[[exemptions.group]] -version = "0.12.1" -criteria = "safe-to-deploy" - -[[exemptions.h2]] -version = "0.3.21" +[[exemptions.gloo-timers]] +version = "0.2.6" criteria = "safe-to-deploy" -[[exemptions.hashbrown]] -version = "0.11.2" +[[exemptions.group]] +version = "0.12.1" criteria = "safe-to-deploy" [[exemptions.hashers]] @@ -839,26 +731,14 @@ criteria = "safe-to-deploy" version = "0.5.5" criteria = "safe-to-deploy" -[[exemptions.http]] -version = "0.2.9" -criteria = "safe-to-deploy" - [[exemptions.http-body]] version = "0.4.5" criteria = "safe-to-deploy" -[[exemptions.httparse]] -version = "1.8.0" -criteria = "safe-to-deploy" - [[exemptions.humantime]] version = "2.1.0" criteria = "safe-to-deploy" -[[exemptions.hyper]] -version = "0.14.27" -criteria = "safe-to-deploy" - [[exemptions.hyper-proxy]] version = "0.9.1" criteria = "safe-to-deploy" @@ -875,10 +755,6 @@ criteria = "safe-to-deploy" version = "0.4.1" criteria = "safe-to-deploy" -[[exemptions.hyper-tls]] -version = "0.5.0" -criteria = "safe-to-deploy" - [[exemptions.iana-time-zone]] version = "0.1.53" criteria = "safe-to-deploy" @@ -907,14 +783,6 @@ criteria = "safe-to-deploy" version = "0.3.3" criteria = "safe-to-deploy" -[[exemptions.indexmap]] -version = "1.9.2" -criteria = "safe-to-deploy" - -[[exemptions.indicatif]] -version = "0.16.2" -criteria = "safe-to-deploy" - [[exemptions.instant]] version = "0.1.12" criteria = "safe-to-deploy" @@ -935,40 +803,24 @@ criteria = "safe-to-deploy" version = "0.10.5" criteria = "safe-to-deploy" -[[exemptions.itoa]] -version = "0.4.8" -criteria = "safe-to-deploy" - -[[exemptions.itoa]] -version = "1.0.9" -criteria = "safe-to-deploy" - -[[exemptions.jobserver]] -version = "0.1.25" +[[exemptions.itertools]] +version = "0.11.0" criteria = "safe-to-deploy" [[exemptions.js-sys]] version = "0.3.60" criteria = "safe-to-deploy" -[[exemptions.k256]] -version = "0.11.6" -criteria = "safe-to-deploy" - [[exemptions.k256]] version = "0.13.1" criteria = "safe-to-deploy" [[exemptions.lalrpop]] -version = "0.19.12" +version = "0.20.0" criteria = "safe-to-deploy" [[exemptions.lalrpop-util]] -version = "0.19.12" -criteria = "safe-to-deploy" - -[[exemptions.libc]] -version = "0.2.147" +version = "0.20.0" criteria = "safe-to-deploy" [[exemptions.libloading]] @@ -979,10 +831,6 @@ criteria = "safe-to-deploy" version = "0.1.28" criteria = "safe-to-deploy" -[[exemptions.link-cplusplus]] -version = "1.0.7" -criteria = "safe-to-deploy" - [[exemptions.linux-raw-sys]] version = "0.0.46" criteria = "safe-to-deploy" @@ -1039,10 +887,6 @@ criteria = "safe-to-deploy" version = "0.1.32" criteria = "safe-to-deploy" -[[exemptions.mime]] -version = "0.3.16" -criteria = "safe-to-deploy" - [[exemptions.minimal-lexical]] version = "0.2.1" criteria = "safe-to-deploy" @@ -1075,18 +919,6 @@ criteria = "safe-to-deploy" version = "7.1.1" criteria = "safe-to-deploy" -[[exemptions.nu-ansi-term]] -version = "0.46.0" -criteria = "safe-to-deploy" - -[[exemptions.num_cpus]] -version = "1.16.0" -criteria = "safe-to-deploy" - -[[exemptions.number_prefix]] -version = "0.4.0" -criteria = "safe-to-deploy" - [[exemptions.object]] version = "0.28.4" criteria = "safe-to-deploy" @@ -1103,10 +935,6 @@ criteria = "safe-to-deploy" version = "11.1.3" criteria = "safe-to-deploy" -[[exemptions.opaque-debug]] -version = "0.2.3" -criteria = "safe-to-deploy" - [[exemptions.open-fastrlp]] version = "0.1.4" criteria = "safe-to-deploy" @@ -1155,12 +983,8 @@ criteria = "safe-to-deploy" version = "0.19.0" criteria = "safe-to-deploy" -[[exemptions.os_str_bytes]] -version = "6.4.1" -criteria = "safe-to-deploy" - -[[exemptions.overload]] -version = "0.1.1" +[[exemptions.option-ext]] +version = "0.2.0" criteria = "safe-to-deploy" [[exemptions.owo-colors]] @@ -1195,10 +1019,6 @@ criteria = "safe-to-deploy" version = "0.4.2" criteria = "safe-to-deploy" -[[exemptions.paste]] -version = "1.0.9" -criteria = "safe-to-deploy" - [[exemptions.path-slash]] version = "0.2.1" criteria = "safe-to-deploy" @@ -1207,6 +1027,18 @@ criteria = "safe-to-deploy" version = "0.11.0" criteria = "safe-to-deploy" +[[exemptions.pbkdf2]] +version = "0.12.2" +criteria = "safe-to-deploy" + +[[exemptions.pem]] +version = "1.1.1" +criteria = "safe-to-deploy" + +[[exemptions.percent-encoding]] +version = "2.3.0" +criteria = "safe-to-deploy" + [[exemptions.pest]] version = "2.5.0" criteria = "safe-to-deploy" @@ -1243,10 +1075,6 @@ criteria = "safe-to-deploy" version = "1.1.2" criteria = "safe-to-deploy" -[[exemptions.pkcs8]] -version = "0.9.0" -criteria = "safe-to-deploy" - [[exemptions.pkcs8]] version = "0.10.2" criteria = "safe-to-deploy" @@ -1279,10 +1107,6 @@ criteria = "safe-to-deploy" version = "1.0.4" criteria = "safe-to-deploy" -[[exemptions.proc-macro-hack]] -version = "0.5.19" -criteria = "safe-to-deploy" - [[exemptions.procfs]] version = "0.14.1" criteria = "safe-to-deploy" @@ -1311,10 +1135,6 @@ criteria = "safe-to-deploy" version = "0.1.4" criteria = "safe-to-deploy" -[[exemptions.radium]] -version = "0.3.0" -criteria = "safe-to-deploy" - [[exemptions.radium]] version = "0.7.0" criteria = "safe-to-deploy" @@ -1327,10 +1147,6 @@ criteria = "safe-to-deploy" version = "0.2.16" criteria = "safe-to-deploy" -[[exemptions.redox_syscall]] -version = "0.3.5" -criteria = "safe-to-deploy" - [[exemptions.redox_users]] version = "0.4.3" criteria = "safe-to-deploy" @@ -1367,14 +1183,6 @@ criteria = "safe-to-deploy" version = "0.3.6" criteria = "safe-to-deploy" -[[exemptions.reqwest]] -version = "0.11.18" -criteria = "safe-to-deploy" - -[[exemptions.rfc6979]] -version = "0.3.1" -criteria = "safe-to-deploy" - [[exemptions.rfc6979]] version = "0.4.0" criteria = "safe-to-deploy" @@ -1383,6 +1191,10 @@ criteria = "safe-to-deploy" version = "0.16.20" criteria = "safe-to-deploy" +[[exemptions.ring]] +version = "0.17.5" +criteria = "safe-to-deploy" + [[exemptions.ripemd]] version = "0.1.3" criteria = "safe-to-deploy" @@ -1440,7 +1252,7 @@ version = "0.19.1" criteria = "safe-to-deploy" [[exemptions.rustls]] -version = "0.21.5" +version = "0.21.8" criteria = "safe-to-deploy" [[exemptions.rustls-native-certs]] @@ -1452,11 +1264,7 @@ version = "1.0.1" criteria = "safe-to-deploy" [[exemptions.rustls-webpki]] -version = "0.101.5" -criteria = "safe-to-deploy" - -[[exemptions.ryu]] -version = "1.0.11" +version = "0.101.7" criteria = "safe-to-deploy" [[exemptions.salsa20]] @@ -1479,14 +1287,6 @@ criteria = "safe-to-deploy" version = "0.1.20" criteria = "safe-to-deploy" -[[exemptions.scopeguard]] -version = "1.1.0" -criteria = "safe-to-deploy" - -[[exemptions.scratch]] -version = "1.0.2" -criteria = "safe-to-deploy" - [[exemptions.scrypt]] version = "0.10.0" criteria = "safe-to-deploy" @@ -1499,10 +1299,6 @@ criteria = "safe-to-deploy" version = "4.1.0" criteria = "safe-to-deploy" -[[exemptions.sec1]] -version = "0.3.0" -criteria = "safe-to-deploy" - [[exemptions.sec1]] version = "0.7.1" criteria = "safe-to-deploy" @@ -1528,51 +1324,19 @@ version = "0.10.2" criteria = "safe-to-deploy" [[exemptions.send_wrapper]] -version = "0.5.0" -criteria = "safe-to-deploy" - -[[exemptions.serde]] -version = "1.0.171" -criteria = "safe-to-deploy" - -[[exemptions.serde-aux]] -version = "4.1.2" -criteria = "safe-to-deploy" - -[[exemptions.serde_bytes]] -version = "0.11.7" -criteria = "safe-to-deploy" - -[[exemptions.serde_derive]] -version = "1.0.171" -criteria = "safe-to-deploy" - -[[exemptions.serde_json]] -version = "1.0.103" +version = "0.4.0" criteria = "safe-to-deploy" -[[exemptions.serde_path_to_error]] -version = "0.1.9" +[[exemptions.send_wrapper]] +version = "0.5.0" criteria = "safe-to-deploy" [[exemptions.serde_urlencoded]] version = "0.7.1" criteria = "safe-to-deploy" -[[exemptions.sha-1]] -version = "0.10.0" -criteria = "safe-to-deploy" - -[[exemptions.sha2]] -version = "0.8.2" -criteria = "safe-to-deploy" - [[exemptions.sha2]] -version = "0.9.9" -criteria = "safe-to-deploy" - -[[exemptions.sharded-slab]] -version = "0.1.4" +version = "0.10.8" criteria = "safe-to-deploy" [[exemptions.signal-hook-registry]] @@ -1580,11 +1344,11 @@ version = "1.4.0" criteria = "safe-to-deploy" [[exemptions.signature]] -version = "1.6.4" +version = "2.0.0" criteria = "safe-to-deploy" -[[exemptions.signature]] -version = "2.0.0" +[[exemptions.simple_asn1]] +version = "0.6.2" criteria = "safe-to-deploy" [[exemptions.siphasher]] @@ -1599,16 +1363,20 @@ criteria = "safe-to-deploy" version = "0.4.9" criteria = "safe-to-deploy" +[[exemptions.socket2]] +version = "0.5.5" +criteria = "safe-to-deploy" + [[exemptions.solang-parser]] -version = "0.1.18" +version = "0.3.2" criteria = "safe-to-deploy" [[exemptions.spin]] version = "0.5.2" criteria = "safe-to-deploy" -[[exemptions.spki]] -version = "0.6.0" +[[exemptions.spin]] +version = "0.9.8" criteria = "safe-to-deploy" [[exemptions.spki]] @@ -1676,15 +1444,7 @@ version = "2.4.1" criteria = "safe-to-deploy" [[exemptions.svm-rs]] -version = "0.2.18" -criteria = "safe-to-deploy" - -[[exemptions.syn]] -version = "1.0.107" -criteria = "safe-to-deploy" - -[[exemptions.syn]] -version = "2.0.26" +version = "0.3.2" criteria = "safe-to-deploy" [[exemptions.sync_wrapper]] @@ -1695,6 +1455,14 @@ criteria = "safe-to-deploy" version = "0.5.4" criteria = "safe-to-deploy" +[[exemptions.system-configuration]] +version = "0.5.1" +criteria = "safe-to-deploy" + +[[exemptions.system-configuration-sys]] +version = "0.5.0" +criteria = "safe-to-deploy" + [[exemptions.target-lexicon]] version = "0.12.5" criteria = "safe-to-deploy" @@ -1711,10 +1479,6 @@ criteria = "safe-to-deploy" version = "1.1.3" criteria = "safe-to-deploy" -[[exemptions.terminal_size]] -version = "0.1.17" -criteria = "safe-to-deploy" - [[exemptions.terminal_size]] version = "0.2.2" criteria = "safe-to-deploy" @@ -1735,22 +1499,6 @@ criteria = "safe-to-deploy" version = "0.11.0" criteria = "safe-to-deploy" -[[exemptions.textwrap]] -version = "0.16.0" -criteria = "safe-to-deploy" - -[[exemptions.thiserror]] -version = "1.0.39" -criteria = "safe-to-deploy" - -[[exemptions.thiserror-impl]] -version = "1.0.39" -criteria = "safe-to-deploy" - -[[exemptions.thread_local]] -version = "1.1.4" -criteria = "safe-to-deploy" - [[exemptions.time]] version = "0.1.44" criteria = "safe-to-deploy" @@ -1763,10 +1511,6 @@ criteria = "safe-to-deploy" version = "1.2.1" criteria = "safe-to-deploy" -[[exemptions.tokio]] -version = "1.29.1" -criteria = "safe-to-deploy" - [[exemptions.tokio-io-timeout]] version = "1.2.0" criteria = "safe-to-deploy" @@ -1775,10 +1519,6 @@ criteria = "safe-to-deploy" version = "2.1.0" criteria = "safe-to-deploy" -[[exemptions.tokio-native-tls]] -version = "0.3.0" -criteria = "safe-to-deploy" - [[exemptions.tokio-rustls]] version = "0.22.0" criteria = "safe-to-deploy" @@ -1788,7 +1528,7 @@ version = "0.24.1" criteria = "safe-to-deploy" [[exemptions.tokio-tungstenite]] -version = "0.17.2" +version = "0.20.1" criteria = "safe-to-deploy" [[exemptions.toml]] @@ -1839,10 +1579,6 @@ criteria = "safe-to-deploy" version = "0.2.5" criteria = "safe-to-deploy" -[[exemptions.tracing-log]] -version = "0.1.3" -criteria = "safe-to-deploy" - [[exemptions.tracing-opentelemetry]] version = "0.19.0" criteria = "safe-to-deploy" @@ -1855,10 +1591,6 @@ criteria = "safe-to-deploy" version = "0.2.25" criteria = "safe-to-deploy" -[[exemptions.tracing-subscriber]] -version = "0.3.17" -criteria = "safe-to-deploy" - [[exemptions.tracing-test]] version = "0.2.4" criteria = "safe-to-run" @@ -1867,12 +1599,8 @@ criteria = "safe-to-run" version = "0.2.4" criteria = "safe-to-run" -[[exemptions.try-lock]] -version = "0.2.3" -criteria = "safe-to-deploy" - [[exemptions.tungstenite]] -version = "0.17.3" +version = "0.20.1" criteria = "safe-to-deploy" [[exemptions.typenum]] @@ -1887,14 +1615,18 @@ criteria = "safe-to-deploy" version = "0.9.4" criteria = "safe-to-deploy" -[[exemptions.unicode-ident]] -version = "1.0.5" -criteria = "safe-to-deploy" - [[exemptions.unicode_categories]] version = "0.1.1" criteria = "safe-to-deploy" +[[exemptions.untrusted]] +version = "0.9.0" +criteria = "safe-to-deploy" + +[[exemptions.url]] +version = "2.4.1" +criteria = "safe-to-deploy" + [[exemptions.urlencoding]] version = "2.1.2" criteria = "safe-to-deploy" @@ -1943,10 +1675,6 @@ criteria = "safe-to-deploy" version = "0.2.83" criteria = "safe-to-deploy" -[[exemptions.wasm-timer]] -version = "0.2.5" -criteria = "safe-to-deploy" - [[exemptions.wasmer]] version = "2.3.0" criteria = "safe-to-deploy" @@ -2007,14 +1735,6 @@ criteria = "safe-to-deploy" version = "0.21.4" criteria = "safe-to-deploy" -[[exemptions.webpki]] -version = "0.22.0" -criteria = "safe-to-deploy" - -[[exemptions.webpki-roots]] -version = "0.22.5" -criteria = "safe-to-deploy" - [[exemptions.which]] version = "4.3.0" criteria = "safe-to-deploy" @@ -2048,7 +1768,7 @@ version = "0.44.0" criteria = "safe-to-deploy" [[exemptions.winreg]] -version = "0.10.1" +version = "0.50.0" criteria = "safe-to-deploy" [[exemptions.ws_stream_wasm]] diff --git a/supply-chain/imports.lock b/supply-chain/imports.lock index 2e07fc00..a50deda1 100644 --- a/supply-chain/imports.lock +++ b/supply-chain/imports.lock @@ -1,6 +1,83 @@ # cargo-vet imports lock +[[publisher.anstream]] +version = "0.3.2" +when = "2023-05-01" +user-id = 6743 +user-login = "epage" +user-name = "Ed Page" + +[[publisher.anstyle]] +version = "1.0.0" +when = "2023-04-13" +user-id = 6743 +user-login = "epage" +user-name = "Ed Page" + +[[publisher.anstyle-parse]] +version = "0.2.0" +when = "2023-04-13" +user-id = 6743 +user-login = "epage" +user-name = "Ed Page" + +[[publisher.anstyle-query]] +version = "1.0.0" +when = "2023-04-13" +user-id = 6743 +user-login = "epage" +user-name = "Ed Page" + +[[publisher.anstyle-wincon]] +version = "1.0.1" +when = "2023-04-24" +user-id = 6743 +user-login = "epage" +user-name = "Ed Page" + +[[publisher.anyhow]] +version = "1.0.72" +when = "2023-07-15" +user-id = 3618 +user-login = "dtolnay" +user-name = "David Tolnay" + +[[publisher.async-trait]] +version = "0.1.74" +when = "2023-10-15" +user-id = 3618 +user-login = "dtolnay" +user-name = "David Tolnay" + +[[publisher.bzip2]] +version = "0.4.4" +when = "2023-01-05" +user-id = 1 +user-login = "alexcrichton" +user-name = "Alex Crichton" + +[[publisher.bzip2-sys]] +version = "0.1.11+1.0.8" +when = "2021-06-09" +user-id = 1 +user-login = "alexcrichton" +user-name = "Alex Crichton" + +[[publisher.clap_builder]] +version = "4.3.14" +when = "2023-07-17" +user-id = 6743 +user-login = "epage" +user-name = "Ed Page" + +[[publisher.clap_lex]] +version = "0.5.0" +when = "2023-05-19" +user-id = 6743 +user-login = "epage" +user-name = "Ed Page" + [[publisher.core-foundation]] version = "0.9.3" when = "2022-02-07" @@ -15,6 +92,13 @@ user-id = 2396 user-login = "jdm" user-name = "Josh Matthews" +[[publisher.corosensei]] +version = "0.1.3" +when = "2022-07-02" +user-id = 2915 +user-login = "Amanieu" +user-name = "Amanieu d'Antras" + [[publisher.cranelift-bforest]] version = "0.82.3" when = "2022-04-11" @@ -51,6 +135,307 @@ when = "2022-04-11" user-id = 73222 user-login = "wasmtime-publish" +[[publisher.cxx]] +version = "1.0.82" +when = "2022-11-18" +user-id = 3618 +user-login = "dtolnay" +user-name = "David Tolnay" + +[[publisher.cxx-build]] +version = "1.0.82" +when = "2022-11-18" +user-id = 3618 +user-login = "dtolnay" +user-name = "David Tolnay" + +[[publisher.cxxbridge-flags]] +version = "1.0.82" +when = "2022-11-18" +user-id = 3618 +user-login = "dtolnay" +user-name = "David Tolnay" + +[[publisher.cxxbridge-macro]] +version = "1.0.82" +when = "2022-11-18" +user-id = 3618 +user-login = "dtolnay" +user-name = "David Tolnay" + +[[publisher.equivalent]] +version = "1.0.1" +when = "2023-07-10" +user-id = 539 +user-login = "cuviper" +user-name = "Josh Stone" + +[[publisher.h2]] +version = "0.3.21" +when = "2023-08-21" +user-id = 359 +user-login = "seanmonstar" +user-name = "Sean McArthur" + +[[publisher.hashbrown]] +version = "0.11.2" +when = "2021-03-25" +user-id = 2915 +user-login = "Amanieu" +user-name = "Amanieu d'Antras" + +[[publisher.hashbrown]] +version = "0.14.2" +when = "2023-10-19" +user-id = 2915 +user-login = "Amanieu" +user-name = "Amanieu d'Antras" + +[[publisher.http]] +version = "0.2.9" +when = "2023-02-17" +user-id = 359 +user-login = "seanmonstar" +user-name = "Sean McArthur" + +[[publisher.httparse]] +version = "1.8.0" +when = "2022-08-30" +user-id = 359 +user-login = "seanmonstar" +user-name = "Sean McArthur" + +[[publisher.hyper]] +version = "0.14.27" +when = "2023-06-26" +user-id = 359 +user-login = "seanmonstar" +user-name = "Sean McArthur" + +[[publisher.hyper-tls]] +version = "0.5.0" +when = "2020-12-29" +user-id = 359 +user-login = "seanmonstar" +user-name = "Sean McArthur" + +[[publisher.indexmap]] +version = "1.9.2" +when = "2022-11-17" +user-id = 539 +user-login = "cuviper" +user-name = "Josh Stone" + +[[publisher.indexmap]] +version = "2.1.0" +when = "2023-10-31" +user-id = 539 +user-login = "cuviper" +user-name = "Josh Stone" + +[[publisher.itoa]] +version = "0.4.8" +when = "2021-08-22" +user-id = 3618 +user-login = "dtolnay" +user-name = "David Tolnay" + +[[publisher.itoa]] +version = "1.0.9" +when = "2023-07-15" +user-id = 3618 +user-login = "dtolnay" +user-name = "David Tolnay" + +[[publisher.jobserver]] +version = "0.1.25" +when = "2022-09-23" +user-id = 1 +user-login = "alexcrichton" +user-name = "Alex Crichton" + +[[publisher.libc]] +version = "0.2.150" +when = "2023-11-05" +user-id = 51017 +user-login = "JohnTitor" +user-name = "Yuki Okushi" + +[[publisher.link-cplusplus]] +version = "1.0.7" +when = "2022-08-22" +user-id = 3618 +user-login = "dtolnay" +user-name = "David Tolnay" + +[[publisher.mime]] +version = "0.3.16" +when = "2020-01-07" +user-id = 359 +user-login = "seanmonstar" +user-name = "Sean McArthur" + +[[publisher.num_cpus]] +version = "1.16.0" +when = "2023-06-29" +user-id = 359 +user-login = "seanmonstar" +user-name = "Sean McArthur" + +[[publisher.paste]] +version = "1.0.9" +when = "2022-08-31" +user-id = 3618 +user-login = "dtolnay" +user-name = "David Tolnay" + +[[publisher.prettyplease]] +version = "0.2.15" +when = "2023-09-07" +user-id = 3618 +user-login = "dtolnay" +user-name = "David Tolnay" + +[[publisher.reqwest]] +version = "0.11.22" +when = "2023-10-03" +user-id = 359 +user-login = "seanmonstar" +user-name = "Sean McArthur" + +[[publisher.ryu]] +version = "1.0.11" +when = "2022-08-03" +user-id = 3618 +user-login = "dtolnay" +user-name = "David Tolnay" + +[[publisher.scopeguard]] +version = "1.1.0" +when = "2020-02-16" +user-id = 2915 +user-login = "Amanieu" +user-name = "Amanieu d'Antras" + +[[publisher.scratch]] +version = "1.0.2" +when = "2022-08-03" +user-id = 3618 +user-login = "dtolnay" +user-name = "David Tolnay" + +[[publisher.serde]] +version = "1.0.171" +when = "2023-07-10" +user-id = 3618 +user-login = "dtolnay" +user-name = "David Tolnay" + +[[publisher.serde_bytes]] +version = "0.11.7" +when = "2022-08-03" +user-id = 3618 +user-login = "dtolnay" +user-name = "David Tolnay" + +[[publisher.serde_derive]] +version = "1.0.171" +when = "2023-07-10" +user-id = 3618 +user-login = "dtolnay" +user-name = "David Tolnay" + +[[publisher.serde_json]] +version = "1.0.103" +when = "2023-07-15" +user-id = 3618 +user-login = "dtolnay" +user-name = "David Tolnay" + +[[publisher.serde_path_to_error]] +version = "0.1.9" +when = "2022-12-17" +user-id = 3618 +user-login = "dtolnay" +user-name = "David Tolnay" + +[[publisher.serde_spanned]] +version = "0.6.4" +when = "2023-10-23" +user-id = 6743 +user-login = "epage" +user-name = "Ed Page" + +[[publisher.syn]] +version = "1.0.107" +when = "2022-12-18" +user-id = 3618 +user-login = "dtolnay" +user-name = "David Tolnay" + +[[publisher.syn]] +version = "2.0.32" +when = "2023-09-10" +user-id = 3618 +user-login = "dtolnay" +user-name = "David Tolnay" + +[[publisher.thiserror]] +version = "1.0.39" +when = "2023-03-05" +user-id = 3618 +user-login = "dtolnay" +user-name = "David Tolnay" + +[[publisher.thiserror-impl]] +version = "1.0.39" +when = "2023-03-05" +user-id = 3618 +user-login = "dtolnay" +user-name = "David Tolnay" + +[[publisher.tokio]] +version = "1.33.0" +when = "2023-10-09" +user-id = 6741 +user-login = "Darksonn" +user-name = "Alice Ryhl" + +[[publisher.toml]] +version = "0.7.8" +when = "2023-09-09" +user-id = 6743 +user-login = "epage" +user-name = "Ed Page" + +[[publisher.toml_datetime]] +version = "0.6.5" +when = "2023-10-23" +user-id = 6743 +user-login = "epage" +user-name = "Ed Page" + +[[publisher.toml_edit]] +version = "0.19.15" +when = "2023-09-08" +user-id = 6743 +user-login = "epage" +user-name = "Ed Page" + +[[publisher.try-lock]] +version = "0.2.3" +when = "2020-07-10" +user-id = 359 +user-login = "seanmonstar" +user-name = "Sean McArthur" + +[[publisher.unicode-ident]] +version = "1.0.5" +when = "2022-10-08" +user-id = 3618 +user-login = "dtolnay" +user-name = "David Tolnay" + [[publisher.unicode-normalization]] version = "0.1.22" when = "2022-09-16" @@ -289,6 +674,13 @@ user-id = 64539 user-login = "kennykerr" user-name = "Kenny Kerr" +[[publisher.winnow]] +version = "0.5.19" +when = "2023-11-03" +user-id = 6743 +user-login = "epage" +user-name = "Ed Page" + [[audits.bytecodealliance.wildcard-audits.cranelift-bforest]] who = "Bobby Holley " criteria = "safe-to-deploy" @@ -467,16 +859,6 @@ who = "Pat Hickey " criteria = "safe-to-deploy" version = "0.1.1" -[[audits.bytecodealliance.audits.form_urlencoded]] -who = "Alex Crichton " -criteria = "safe-to-deploy" -version = "1.1.0" -notes = """ -This is a small crate for working with url-encoded forms which doesn't have any -more than what it says on the tin. Contains one `unsafe` block related to -performance around utf-8 validation which is fairly easy to verify as correct. -""" - [[audits.bytecodealliance.audits.futures-channel]] who = "Pat Hickey " criteria = "safe-to-deploy" @@ -554,6 +936,12 @@ criteria = "safe-to-deploy" version = "0.2.11" notes = "build is only looking for environment variables to set cfg. only two minor uses of unsafe,on macos, with ffi bindings to digest primitives and libc atexit. otherwise, this is an abstraction over three very complex systems (schannel, security-framework, and openssl) which may end up having subtle differences, but none of those are apparent from the implementation of this crate" +[[audits.bytecodealliance.audits.nu-ansi-term]] +who = "Pat Hickey " +criteria = "safe-to-deploy" +version = "0.46.0" +notes = "one use of unsafe to call windows specific api to get console handle." + [[audits.bytecodealliance.audits.openssl-macros]] who = "Pat Hickey " criteria = "safe-to-deploy" @@ -565,15 +953,11 @@ criteria = "safe-to-deploy" version = "0.1.5" notes = "IO is only checking for the existence of paths in the filesystem" -[[audits.bytecodealliance.audits.percent-encoding]] -who = "Alex Crichton " +[[audits.bytecodealliance.audits.overload]] +who = "Pat Hickey " criteria = "safe-to-deploy" -version = "2.2.0" -notes = """ -This crate is a single-file crate that does what it says on the tin. There are -a few `unsafe` blocks related to utf-8 validation which are locally verifiable -as correct and otherwise this crate is good to go. -""" +version = "0.1.1" +notes = "small crate, only defines macro-rules!, nicely documented as well" [[audits.bytecodealliance.audits.pin-utils]] who = "Pat Hickey " @@ -617,12 +1001,24 @@ criteria = "safe-to-deploy" version = "0.7.0" notes = "no unsafe, no build, no ambient capabilities" +[[audits.bytecodealliance.audits.sharded-slab]] +who = "Pat Hickey " +criteria = "safe-to-deploy" +version = "0.1.4" +notes = "I always really enjoy reading eliza's code, she left perfect comments at every use of unsafe." + [[audits.bytecodealliance.audits.slab]] who = "Pat Hickey " criteria = "safe-to-deploy" version = "0.4.6" notes = "provides a datastructure implemented using std's Vec. all uses of unsafe are just delegating to the underlying unsafe Vec methods." +[[audits.bytecodealliance.audits.thread_local]] +who = "Pat Hickey " +criteria = "safe-to-deploy" +version = "1.1.4" +notes = "uses unsafe to implement thread local storage of objects" + [[audits.bytecodealliance.audits.tinyvec]] who = "Alex Crichton " criteria = "safe-to-deploy" @@ -643,12 +1039,32 @@ intended to multiplex across the internal representation of a tinyvec, presumably. This trivially doesn't contain anything bad. """ +[[audits.bytecodealliance.audits.tokio-native-tls]] +who = "Pat Hickey " +criteria = "safe-to-deploy" +version = "0.3.1" +notes = "unsafety is used for smuggling std::task::Context as a raw pointer. Lifetime and type safety appears to be taken care of correctly." + [[audits.bytecodealliance.audits.tokio-util]] who = "Pat Hickey " criteria = "safe-to-deploy" version = "0.7.4" notes = "Alex Crichton audited the safety of src/sync/reusable_box.rs, I audited the remainder of the crate." +[[audits.bytecodealliance.audits.tracing-log]] +who = "Alex Crichton " +criteria = "safe-to-deploy" +version = "0.1.3" +notes = """ +This is a standard adapter between the `log` ecosystem and the `tracing` +ecosystem. There's one `unsafe` block in this crate and it's well-scoped. +""" + +[[audits.bytecodealliance.audits.tracing-subscriber]] +who = "Pat Hickey " +criteria = "safe-to-deploy" +version = "0.3.17" + [[audits.bytecodealliance.audits.unicase]] who = "Alex Crichton " criteria = "safe-to-deploy" @@ -667,19 +1083,6 @@ This crate has no unsafe code and does not use `std::*`. Skimming the crate it does not attempt to out of the bounds of what it's already supposed to be doing. """ -[[audits.bytecodealliance.audits.url]] -who = "Alex Crichton " -criteria = "safe-to-deploy" -version = "2.3.1" -notes = """ -This crate contains no `unsafe` code and otherwise doesn't use any functionality -it's not supposed to from `std` or such. This crate is the defacto standard for -URL parsing in the Rust community with widespread usage to battle-test, harden, -and suss out bugs. I've historically reviewed this crate in the past and it -is similar to what it once was back then. Skimming over the crate there is -nothing suspicious and it's everything you'd expect a Rust URL parser to be. -""" - [[audits.bytecodealliance.audits.vcpkg]] who = "Pat Hickey " criteria = "safe-to-deploy" @@ -709,12 +1112,28 @@ criteria = "safe-to-deploy" version = "1.0.52" notes = "The Bytecode Alliance is the author of this crate." +[[audits.bytecodealliance.audits.webpki-roots]] +who = "Pat Hickey " +criteria = "safe-to-deploy" +delta = "0.22.4 -> 0.23.0" + +[[audits.bytecodealliance.audits.webpki-roots]] +who = "Pat Hickey " +criteria = "safe-to-deploy" +delta = "0.23.0 -> 0.25.2" + [[audits.embark.audits.cargo_metadata]] who = "Johan Andersson " criteria = "safe-to-deploy" delta = "0.15.3 -> 0.15.4" notes = "No notable changes" +[[audits.embark.audits.cargo_metadata]] +who = "Johan Andersson " +criteria = "safe-to-deploy" +delta = "0.15.4 -> 0.17.0" +notes = "No notable changes" + [[audits.embark.audits.colorchoice]] who = "Johan Andersson " criteria = "safe-to-deploy" @@ -745,6 +1164,18 @@ criteria = "safe-to-deploy" version = "1.0.1" notes = "No unsafe usage or ambient capabilities" +[[audits.embark.audits.idna]] +who = "Johan Andersson " +criteria = "safe-to-deploy" +delta = "0.3.0 -> 0.4.0" +notes = "No unsafe usage or ambient capabilities" + +[[audits.embark.audits.jsonwebtoken]] +who = "Johan Andersson " +criteria = "safe-to-deploy" +version = "8.3.0" +notes = "No unsafe usage or ambient capabilities" + [[audits.embark.audits.num_enum]] who = "Johan Andersson " criteria = "safe-to-deploy" @@ -785,18 +1216,6 @@ criteria = "safe-to-deploy" version = "0.1.2" notes = "No unsafe usage or ambient capabilities. Old crate from released and unchanged from 2017" -[[audits.embark.audits.strum]] -who = "Johan Andersson " -criteria = "safe-to-deploy" -version = "0.24.1" -notes = "Tiny layer on top of the proc macro crate, found no unsafe or system usage" - -[[audits.embark.audits.strum_macros]] -who = "Johan Andersson " -criteria = "safe-to-deploy" -version = "0.24.3" -notes = "Proc macro. No unsafe or added ambient capabilities" - [[audits.embark.audits.tap]] who = "Johan Andersson " criteria = "safe-to-deploy" @@ -821,6 +1240,25 @@ criteria = "safe-to-deploy" version = "0.8.2" notes = "No unsafe usage or ambient capabilities" +[[audits.embark.audits.webpki-roots]] +who = "Johan Andersson " +criteria = "safe-to-deploy" +version = "0.22.4" +notes = "Inspected it to confirm that it only contains data definitions and no runtime code" + +[[audits.google.audits.aes]] +who = "Joshua Liebow-Feeser " +criteria = "safe-to-deploy" +delta = "0.7.5 -> 0.8.2" +notes = """ +Note for reviewers of future updates to this crate: There exist +internal APIs such as [1] which are safe but have undocumented safety +invariants. + +[1] https://fuchsia-review.git.corp.google.com/c/fuchsia/+/711365/comment/7a8cdc16_9e9f45ca/ +""" +aggregated-from = "https://fuchsia.googlesource.com/fuchsia/+/refs/heads/main/third_party/rust_crates/supply-chain/audits.toml?format=TEXT" + [[audits.google.audits.fastrand]] who = "George Burgess IV " criteria = "safe-to-deploy" @@ -910,6 +1348,12 @@ who = "David Cook " criteria = "safe-to-deploy" version = "1.6.1" +[[audits.isrg.audits.getrandom]] +who = "Tim Geoghegan " +criteria = "safe-to-deploy" +delta = "0.2.9 -> 0.2.10" +notes = "These changes include some new `unsafe` code for the `emscripten` and `psvita` targets, but all it does is call `libc::getentropy`." + [[audits.isrg.audits.hmac]] who = "David Cook " criteria = "safe-to-deploy" @@ -925,6 +1369,16 @@ who = "Brandon Pitman " criteria = "safe-to-deploy" delta = "0.1.2 -> 0.1.3" +[[audits.isrg.audits.once_cell]] +who = "Brandon Pitman " +criteria = "safe-to-deploy" +delta = "1.17.1 -> 1.17.2" + +[[audits.isrg.audits.once_cell]] +who = "David Cook " +criteria = "safe-to-deploy" +delta = "1.17.2 -> 1.18.0" + [[audits.isrg.audits.opaque-debug]] who = "David Cook " criteria = "safe-to-deploy" @@ -950,11 +1404,6 @@ who = "Brandon Pitman " criteria = "safe-to-deploy" delta = "1.10.2 -> 1.11.0" -[[audits.isrg.audits.sha2]] -who = "David Cook " -criteria = "safe-to-deploy" -version = "0.10.2" - [[audits.isrg.audits.sha3]] who = "David Cook " criteria = "safe-to-deploy" @@ -1181,6 +1630,12 @@ version = "0.2.1" notes = "Straightforward crate with no unsafe code, does what it says on the tin." aggregated-from = "https://hg.mozilla.org/mozilla-central/raw-file/tip/supply-chain/audits.toml" +[[audits.mozilla.audits.getrandom]] +who = "Yannis Juglaret " +criteria = "safe-to-deploy" +delta = "0.2.8 -> 0.2.9" +aggregated-from = "https://hg.mozilla.org/mozilla-central/raw-file/tip/supply-chain/audits.toml" + [[audits.mozilla.audits.half]] who = "John M. Schanck " criteria = "safe-to-deploy" @@ -1299,6 +1754,30 @@ version = "0.2.15" notes = "All code written or reviewed by Josh Stone." aggregated-from = "https://hg.mozilla.org/mozilla-central/raw-file/tip/supply-chain/audits.toml" +[[audits.mozilla.audits.phf]] +who = "Mike Hommey " +criteria = "safe-to-deploy" +delta = "0.10.1 -> 0.11.2" +aggregated-from = "https://hg.mozilla.org/mozilla-central/raw-file/tip/supply-chain/audits.toml" + +[[audits.mozilla.audits.phf_generator]] +who = "Mike Hommey " +criteria = "safe-to-deploy" +delta = "0.10.0 -> 0.11.2" +aggregated-from = "https://hg.mozilla.org/mozilla-central/raw-file/tip/supply-chain/audits.toml" + +[[audits.mozilla.audits.phf_macros]] +who = "Mike Hommey " +criteria = "safe-to-deploy" +delta = "0.10.0 -> 0.11.2" +aggregated-from = "https://hg.mozilla.org/mozilla-central/raw-file/tip/supply-chain/audits.toml" + +[[audits.mozilla.audits.phf_shared]] +who = "Mike Hommey " +criteria = "safe-to-deploy" +delta = "0.10.0 -> 0.11.2" +aggregated-from = "https://hg.mozilla.org/mozilla-central/raw-file/tip/supply-chain/audits.toml" + [[audits.mozilla.audits.pkg-config]] who = "Mike Hommey " criteria = "safe-to-deploy" @@ -1454,6 +1933,12 @@ criteria = "safe-to-deploy" delta = "1.10.1 -> 1.10.2" aggregated-from = "https://hg.mozilla.org/mozilla-central/raw-file/tip/supply-chain/audits.toml" +[[audits.mozilla.audits.redox_syscall]] +who = "Jan-Erik Rediger " +criteria = "safe-to-deploy" +delta = "0.2.16 -> 0.3.5" +aggregated-from = "https://raw.githubusercontent.com/mozilla/glean/main/supply-chain/audits.toml" + [[audits.mozilla.audits.rustc-hash]] who = "Bobby Holley " criteria = "safe-to-deploy" @@ -1485,12 +1970,6 @@ criteria = "safe-to-deploy" delta = "0.11.1 -> 0.11.2" aggregated-from = "https://hg.mozilla.org/mozilla-central/raw-file/tip/supply-chain/audits.toml" -[[audits.mozilla.audits.sha2]] -who = "Mike Hommey " -criteria = "safe-to-deploy" -delta = "0.10.2 -> 0.10.6" -aggregated-from = "https://hg.mozilla.org/mozilla-central/raw-file/tip/supply-chain/audits.toml" - [[audits.mozilla.audits.slab]] who = "Mike Hommey " criteria = "safe-to-deploy" @@ -1532,6 +2011,18 @@ criteria = "safe-to-deploy" version = "0.2.6" aggregated-from = "https://hg.mozilla.org/mozilla-central/raw-file/tip/supply-chain/audits.toml" +[[audits.mozilla.audits.unicode-bidi]] +who = "Makoto Kato " +criteria = "safe-to-deploy" +delta = "0.3.8 -> 0.3.13" +aggregated-from = "https://hg.mozilla.org/mozilla-central/raw-file/tip/supply-chain/audits.toml" + +[[audits.zcash.audits.bech32]] +who = "Jack Grigg " +criteria = "safe-to-deploy" +delta = "0.8.1 -> 0.9.1" +aggregated-from = "https://raw.githubusercontent.com/zcash/zcash/master/qa/supply-chain/audits.toml" + [[audits.zcash.audits.bitflags]] who = "Jack Grigg " criteria = "safe-to-deploy" @@ -1577,6 +2068,12 @@ delta = "0.11.2 -> 0.12.1" notes = "Most `unsafe {}` changes were to reduce the scope of the unsafe blocks. I didn't closely review the migration to the asm! macro but it looks reasonable." aggregated-from = "https://raw.githubusercontent.com/zcash/zcash/master/qa/supply-chain/audits.toml" +[[audits.zcash.audits.pin-project-lite]] +who = "Jack Grigg " +criteria = "safe-to-deploy" +delta = "0.2.9 -> 0.2.13" +aggregated-from = "https://raw.githubusercontent.com/zcash/zcash/master/qa/supply-chain/audits.toml" + [[audits.zcash.audits.rustc_version]] who = "Jack Grigg " criteria = "safe-to-deploy"