[WIP] Build(deps): Bump the extractor group with 11 updates

Cargo.toml

@@ -31,3 +31,9 @@ ghastoolkit = { version = "^0.12", features = ["toolcache"] }
 octocrab = "^0.48"
 openssl = { version = "0.10", features = ["vendored"] }
 serde_json = "1.0"
+
+# Patch ghastoolkit to fix compilation errors with ghactions-toolcache 0.18.4:
+# 1. Double reference bug: `&asset` -> `asset` in download_asset call
+# 2. Missing error conversion: ToolCacheError -> GHASError via map_err
+[patch.crates-io]
+ghastoolkit = { path = "vendor/ghastoolkit" }

vendor/ghastoolkit/.cargo-ok

@@ -0,0 +1 @@
+{"v":1}

vendor/ghastoolkit/.cargo_vcs_info.json

@@ -0,0 +1,6 @@
+{
+  "git": {
+    "sha1": "0348552de89d2f10b536cdb0248aeb2f82dfe83d"
+  },
+  "path_in_vcs": "core"
+}

vendor/ghastoolkit/.gitignore

@@ -0,0 +1,3 @@
+# Remove Cargo.lock from gitignore if creating an executable, leave it for libraries
+# More information here https://doc.rust-lang.org/cargo/guide/cargo-toml-vs-cargo-lock.html
+Cargo.lock

vendor/ghastoolkit/Cargo.toml

@@ -0,0 +1,135 @@
+# THIS FILE IS AUTOMATICALLY GENERATED BY CARGO
+#
+# When uploading crates to the registry Cargo will automatically
+# "normalize" Cargo.toml files for maximal compatibility
+# with all versions of Cargo and also rewrite `path` dependencies
+# to registry (e.g., crates.io) dependencies.
+#
+# If you are reading this file be aware that the original Cargo.toml
+# will likely look very different (and much more reasonable).
+# See Cargo.toml.orig for the original contents.
+
+[package]
+edition = "2024"
+rust-version = "1.85"
+name = "ghastoolkit"
+version = "0.12.2"
+authors = ["GeekMasher"]
+build = false
+autolib = false
+autobins = false
+autoexamples = false
+autotests = false
+autobenches = false
+description = "GitHub Advanced Security Toolkit in Rust"
+documentation = "https://docs.rs/ghastoolkit/latest/ghastoolkit/"
+readme = "README.md"
+keywords = [
+    "github",
+    "security",
+    "ghas",
+]
+categories = ["development-tools"]
+license = "MIT"
+repository = "https://github.com/GeekMasher/ghastoolkit-rs"
+resolver = "2"
+
+[features]
+async = [
+    "dep:async-trait",
+    "dep:tokio",
+]
+default = ["async"]
+toolcache = [
+    "async",
+    "dep:ghactions",
+]
+
+[lib]
+name = "ghastoolkit"
+path = "src/lib.rs"
+
+[dependencies.anyhow]
+version = "1"
+
+[dependencies.async-trait]
+version = "0.1"
+optional = true
+
+[dependencies.chrono]
+version = "0.4"
+features = ["serde"]
+
+[dependencies.ghactions]
+version = "^0.18"
+features = ["toolcache-all"]
+optional = true
+
+[dependencies.git2]
+version = "0.20"
+
+[dependencies.glob]
+version = "0.3"
+
+[dependencies.http]
+version = "1.3"
+
+[dependencies.log]
+version = "0.4"
+
+[dependencies.octocrab]
+version = "^0.48"
+
+[dependencies.purl]
+version = "0.1"
+features = ["serde"]
+
+[dependencies.regex]
+version = "1.11"
+
+[dependencies.reqwest]
+version = "^0.12"
+
+[dependencies.serde]
+version = "1"
+features = ["derive"]
+
+[dependencies.serde_json]
+version = "1"
+
+[dependencies.serde_yaml]
+version = "0.9"
+
+[dependencies.thiserror]
+version = "2"
+
+[dependencies.time]
+version = "0.3.36"
+
+[dependencies.tokio]
+version = "^1.45"
+features = ["full"]
+optional = true
+
+[dependencies.url]
+version = "2.5"
+features = ["serde"]
+
+[dependencies.walkdir]
+version = "2.5"
+
+[dependencies.zip]
+version = "^6.0"
+
+[dev-dependencies.anyhow]
+version = "1"
+
+[dev-dependencies.env_logger]
+version = "^0.11"
+
+[dev-dependencies.log]
+version = "^0.4"
+
+[dev-dependencies.tokio]
+version = "1.42"
+features = ["full"]