diff --git a/Cargo.lock b/Cargo.lock index e2510015..5d34fb9f 100644 --- a/Cargo.lock +++ b/Cargo.lock @@ -146,9 +146,9 @@ dependencies = [ [[package]] name = "anyhow" -version = "1.0.94" +version = "1.0.95" source = "registry+https://github.com/rust-lang/crates.io-index" -checksum = "c1fd03a028ef38ba2276dce7e33fcd6369c158a1bca17946c4b1b701891c1ff7" +checksum = "34ac096ce696dc2fcabef30516bb13c0a68a11d30131d3df6f04711467681b04" [[package]] name = "arbitrary" @@ -181,7 +181,7 @@ dependencies = [ "proc-macro2", "quote", "swc_macros_common", - "syn 2.0.90", + "syn 2.0.95", ] [[package]] @@ -192,7 +192,7 @@ checksum = "6e0c28dcc82d7c8ead5cb13beb15405b57b8546e93215673ff8ca0349a028107" dependencies = [ "proc-macro2", "quote", - "syn 2.0.90", + "syn 2.0.95", ] [[package]] @@ -259,7 +259,7 @@ dependencies = [ "regex", "rustc-hash", "shlex", - "syn 2.0.90", + "syn 2.0.95", "which", ] @@ -542,7 +542,7 @@ dependencies = [ "heck 0.5.0", "proc-macro2", "quote", - "syn 2.0.90", + "syn 2.0.95", ] [[package]] @@ -838,7 +838,7 @@ dependencies = [ "proc-macro2", "quote", "scratch", - "syn 2.0.90", + "syn 2.0.95", ] [[package]] @@ -855,7 +855,7 @@ checksum = "4b2c1c1776b986979be68bb2285da855f8d8a35851a769fca8740df7c3d07877" dependencies = [ "proc-macro2", "quote", - "syn 2.0.90", + "syn 2.0.95", ] [[package]] @@ -879,7 +879,7 @@ dependencies = [ "proc-macro2", "quote", "strsim", - "syn 2.0.90", + "syn 2.0.95", ] [[package]] @@ -890,7 +890,7 @@ checksum = "d336a2a514f6ccccaa3e09b02d41d35330c07ddf03a62165fcec10bb561c7806" dependencies = [ "darling_core", "quote", - "syn 2.0.90", + "syn 2.0.95", ] [[package]] @@ -927,7 +927,7 @@ dependencies = [ "darling", "proc-macro2", "quote", - "syn 2.0.90", + "syn 2.0.95", ] [[package]] @@ -937,7 +937,7 @@ source = "registry+https://github.com/rust-lang/crates.io-index" checksum = "4abae7035bf79b9877b779505d8cf3749285b80c43941eda66604841889451dc" dependencies = [ "derive_builder_core", - "syn 2.0.90", + "syn 2.0.95", ] [[package]] @@ -1058,9 +1058,9 @@ checksum = "2acce4a10f12dc2fb14a218589d4f1f62ef011b2d0cc4b3cb1bba8e94da14649" [[package]] name = "fastrand" -version = "2.2.0" +version = "2.3.0" source = "registry+https://github.com/rust-lang/crates.io-index" -checksum = "486f806e73c5707928240ddc295403b1b93c96a02038563881c4a2fd84b81ac4" +checksum = "37909eebbb50d72f9059c3b6d82c0463f2ff062c9e95845c43a6c9c0355411be" [[package]] name = "fd-lock" @@ -1111,7 +1111,7 @@ checksum = "8d7ccf961415e7aa17ef93dcb6c2441faaa8e768abe09e659b908089546f74c5" dependencies = [ "proc-macro2", "swc_macros_common", - "syn 2.0.90", + "syn 2.0.95", ] [[package]] @@ -1246,7 +1246,7 @@ dependencies = [ "proc-macro-error2", "proc-macro2", "quote", - "syn 2.0.90", + "syn 2.0.95", ] [[package]] @@ -1267,7 +1267,7 @@ source = "registry+https://github.com/rust-lang/crates.io-index" checksum = "4271d37baee1b8c7e4b708028c57d816cf9d2434acb33a549475f78c181f6253" dependencies = [ "fallible-iterator 0.3.0", - "indexmap 2.2.6", + "indexmap 2.7.0", "stable_deref_trait", ] @@ -1443,12 +1443,12 @@ dependencies = [ [[package]] name = "indexmap" -version = "2.2.6" +version = "2.7.0" source = "registry+https://github.com/rust-lang/crates.io-index" -checksum = "168fb715dda47215e360912c096649d23d58bf392ac62f73919e831745e40f26" +checksum = "62f822373a4fe84d4bb149bf54e584a7f4abec90e072ed49cda0edea5b95471f" dependencies = [ "equivalent", - "hashbrown 0.14.5", + "hashbrown 0.15.2", "serde", ] @@ -1483,7 +1483,7 @@ dependencies = [ "Inflector", "proc-macro2", "quote", - "syn 2.0.90", + "syn 2.0.95", ] [[package]] @@ -1587,8 +1587,8 @@ dependencies = [ "walrus", "wasi-common", "wasm-opt", - "wasmparser 0.221.2", - "wasmprinter 0.221.2", + "wasmparser 0.222.0", + "wasmprinter 0.222.0", "wasmtime", "wasmtime-wasi", "wit-parser", @@ -1632,7 +1632,7 @@ dependencies = [ "tempfile", "uuid", "wasi-common", - "wasmparser 0.221.2", + "wasmparser 0.222.0", "wasmtime", "wasmtime-wasi", ] @@ -1644,7 +1644,7 @@ dependencies = [ "anyhow", "proc-macro2", "quote", - "syn 2.0.90", + "syn 2.0.95", ] [[package]] @@ -1883,7 +1883,7 @@ checksum = "081b846d1d56ddfc18fdf1a922e4f6e07a11768ea1b92dec44e42b72712ccfce" dependencies = [ "crc32fast", "hashbrown 0.14.5", - "indexmap 2.2.6", + "indexmap 2.7.0", "memchr", ] @@ -1950,7 +1950,7 @@ dependencies = [ "phf_shared", "proc-macro2", "quote", - "syn 2.0.90", + "syn 2.0.95", ] [[package]] @@ -2039,7 +2039,7 @@ source = "registry+https://github.com/rust-lang/crates.io-index" checksum = "5f12335488a2f3b0a83b14edad48dca9879ce89b2edd10e80237e4e852dd645e" dependencies = [ "proc-macro2", - "syn 2.0.90", + "syn 2.0.95", ] [[package]] @@ -2095,7 +2095,7 @@ dependencies = [ "proc-macro-error-attr2", "proc-macro2", "quote", - "syn 2.0.90", + "syn 2.0.95", ] [[package]] @@ -2133,7 +2133,7 @@ checksum = "ca414edb151b4c8d125c12566ab0d74dc9cdba36fb80eb7b848c15f495fd32d1" dependencies = [ "proc-macro2", "quote", - "syn 2.0.90", + "syn 2.0.95", ] [[package]] @@ -2149,9 +2149,9 @@ dependencies = [ [[package]] name = "quote" -version = "1.0.37" +version = "1.0.38" source = "registry+https://github.com/rust-lang/crates.io-index" -checksum = "b5b9d34b8991d19d98081b46eacdd8eb58c6f2b201139f7c5f643cc155a633af" +checksum = "0e4dccaaaf89514f546c693ddc140f729f958c247918a13380cccc6078391acc" dependencies = [ "proc-macro2", ] @@ -2240,7 +2240,7 @@ checksum = "bcc303e793d3734489387d205e9b186fac9c6cfacedd98cbb2e8a5943595f3e6" dependencies = [ "proc-macro2", "quote", - "syn 2.0.90", + "syn 2.0.95", ] [[package]] @@ -2342,13 +2342,13 @@ dependencies = [ "convert_case", "fnv", "ident_case", - "indexmap 2.2.6", + "indexmap 2.7.0", "proc-macro-crate", "proc-macro-error", "proc-macro2", "quote", "rquickjs-core", - "syn 2.0.90", + "syn 2.0.95", ] [[package]] @@ -2462,9 +2462,9 @@ checksum = "388a1df253eca08550bef6c72392cfe7c30914bf41df5269b68cbd6ff8f570a3" [[package]] name = "serde" -version = "1.0.215" +version = "1.0.217" source = "registry+https://github.com/rust-lang/crates.io-index" -checksum = "6513c1ad0b11a9376da888e3e0baa0077f1aed55c17f50e7b2397136129fb88f" +checksum = "02fc4265df13d6fa1d00ecff087228cc0a2b5f3c0e87e258d8b94a156e984c70" dependencies = [ "serde_derive", ] @@ -2480,20 +2480,20 @@ dependencies = [ [[package]] name = "serde_derive" -version = "1.0.215" +version = "1.0.217" source = "registry+https://github.com/rust-lang/crates.io-index" -checksum = "ad1e866f866923f252f05c889987993144fb74e722403468a4ebd70c3cd756c0" +checksum = "5a9bf7cf98d04a2b28aead066b7496853d4779c9cc183c440dbac457641e19a0" dependencies = [ "proc-macro2", "quote", - "syn 2.0.90", + "syn 2.0.95", ] [[package]] name = "serde_json" -version = "1.0.133" +version = "1.0.135" source = "registry+https://github.com/rust-lang/crates.io-index" -checksum = "c7fceb2473b9166b2294ef05efcb65a3db80803f0b03ef86a5fc88a2b85ee377" +checksum = "2b0d7ba2887406110130a978386c4e1befb98c674b4fba677954e4db976630d9" dependencies = [ "itoa", "memchr", @@ -2667,7 +2667,7 @@ dependencies = [ "proc-macro2", "quote", "swc_macros_common", - "syn 2.0.90", + "syn 2.0.95", ] [[package]] @@ -2810,7 +2810,7 @@ checksum = "2409f9c896f99481d9f609de89c7786ccd0dba008650a4116f1aef7a58926422" dependencies = [ "better_scoped_tls", "bitflags", - "indexmap 2.2.6", + "indexmap 2.7.0", "once_cell", "phf", "rustc-hash", @@ -2831,7 +2831,7 @@ version = "6.0.0" source = "registry+https://github.com/rust-lang/crates.io-index" checksum = "527fad9bdb16883782d55291fd3330925b3572f512ef89b3d92a29e2f713fe4f" dependencies = [ - "indexmap 2.2.6", + "indexmap 2.7.0", "num_cpus", "once_cell", "rustc-hash", @@ -2867,7 +2867,7 @@ checksum = "e96e15288bf385ab85eb83cff7f9e2d834348da58d0a31b33bdb572e66ee413e" dependencies = [ "proc-macro2", "quote", - "syn 2.0.90", + "syn 2.0.95", ] [[package]] @@ -2878,7 +2878,7 @@ checksum = "a509f56fca05b39ba6c15f3e58636c3924c78347d63853632ed2ffcb6f5a0ac7" dependencies = [ "proc-macro2", "quote", - "syn 2.0.90", + "syn 2.0.95", ] [[package]] @@ -2904,9 +2904,9 @@ dependencies = [ [[package]] name = "syn" -version = "2.0.90" +version = "2.0.95" source = "registry+https://github.com/rust-lang/crates.io-index" -checksum = "919d3b74a5dd0ccd15aeb8f93e7006bd9e14c295087c9896a110f490752bcf31" +checksum = "46f71c0377baf4ef1cc3e3402ded576dccc315800fbc62dfc7fe04b009773b4a" dependencies = [ "proc-macro2", "quote", @@ -2943,12 +2943,13 @@ checksum = "4873307b7c257eddcb50c9bedf158eb669578359fb28428bef438fec8e6ba7c2" [[package]] name = "tempfile" -version = "3.14.0" +version = "3.15.0" source = "registry+https://github.com/rust-lang/crates.io-index" -checksum = "28cce251fcbc87fac86a866eeb0d6c2d536fc16d06f184bb61aeae11aa4cee0c" +checksum = "9a8a559c81686f576e8cd0290cd2a24a2a9ad80c98b3478856500fcbd7acd704" dependencies = [ "cfg-if", "fastrand", + "getrandom", "once_cell", "rustix", "windows-sys 0.59.0", @@ -2980,7 +2981,7 @@ checksum = "46c3384250002a6d5af4d114f2845d37b57521033f30d5c3f46c4d70e1197533" dependencies = [ "proc-macro2", "quote", - "syn 2.0.90", + "syn 2.0.95", ] [[package]] @@ -3051,7 +3052,7 @@ version = "0.19.15" source = "registry+https://github.com/rust-lang/crates.io-index" checksum = "1b5bb770da30e5cbfde35a2d7b9b8a2c4b8ef89548a7a6aeab5c9a576e3e7421" dependencies = [ - "indexmap 2.2.6", + "indexmap 2.7.0", "toml_datetime", "winnow 0.5.40", ] @@ -3062,7 +3063,7 @@ version = "0.22.14" source = "registry+https://github.com/rust-lang/crates.io-index" checksum = "f21c7aaf97f1bd9ca9d4f9e73b0a6c74bd5afef56f2bc931943a6e1c37e04e38" dependencies = [ - "indexmap 2.2.6", + "indexmap 2.7.0", "serde", "serde_spanned", "toml_datetime", @@ -3089,7 +3090,7 @@ checksum = "34704c8d6ebcbc939824180af020566b01a7c01f80641264eba0999f6c2b6be7" dependencies = [ "proc-macro2", "quote", - "syn 2.0.90", + "syn 2.0.95", ] [[package]] @@ -3257,9 +3258,9 @@ dependencies = [ [[package]] name = "walrus" -version = "0.23.2" +version = "0.23.3" source = "registry+https://github.com/rust-lang/crates.io-index" -checksum = "031bc51853697a6a01731f1c2d6d56989c3a742d63316f59918c90b709a6edd9" +checksum = "6481311b98508f4bc2d0abbfa5d42172e7a54b4b24d8f15e28b0dc650be0c59f" dependencies = [ "anyhow", "gimli 0.26.2", @@ -3280,7 +3281,7 @@ dependencies = [ "heck 0.5.0", "proc-macro2", "quote", - "syn 2.0.90", + "syn 2.0.95", ] [[package]] @@ -3336,7 +3337,7 @@ dependencies = [ "once_cell", "proc-macro2", "quote", - "syn 2.0.90", + "syn 2.0.95", "wasm-bindgen-shared", ] @@ -3358,7 +3359,7 @@ checksum = "e94f17b526d0a461a191c78ea52bbce64071ed5c04c9ffe424dcb38f74171bb7" dependencies = [ "proc-macro2", "quote", - "syn 2.0.90", + "syn 2.0.95", "wasm-bindgen-backend", "wasm-bindgen-shared", ] @@ -3443,7 +3444,7 @@ source = "registry+https://github.com/rust-lang/crates.io-index" checksum = "d6998515d3cf3f8b980ef7c11b29a9b1017d4cf86b99ae93b546992df9931413" dependencies = [ "bitflags", - "indexmap 2.2.6", + "indexmap 2.7.0", "semver 1.0.23", ] @@ -3456,7 +3457,7 @@ dependencies = [ "ahash", "bitflags", "hashbrown 0.14.5", - "indexmap 2.2.6", + "indexmap 2.7.0", "semver 1.0.23", "serde", ] @@ -3470,20 +3471,20 @@ dependencies = [ "ahash", "bitflags", "hashbrown 0.14.5", - "indexmap 2.2.6", + "indexmap 2.7.0", "semver 1.0.23", "serde", ] [[package]] name = "wasmparser" -version = "0.221.2" +version = "0.222.0" source = "registry+https://github.com/rust-lang/crates.io-index" -checksum = "9845c470a2e10b61dd42c385839cdd6496363ed63b5c9e420b5488b77bd22083" +checksum = "4adf50fde1b1a49c1add6a80d47aea500c88db70551805853aa8b88f3ea27ab5" dependencies = [ "bitflags", "hashbrown 0.15.2", - "indexmap 2.2.6", + "indexmap 2.7.0", "semver 1.0.23", "serde", ] @@ -3501,13 +3502,13 @@ dependencies = [ [[package]] name = "wasmprinter" -version = "0.221.2" +version = "0.222.0" source = "registry+https://github.com/rust-lang/crates.io-index" -checksum = "a80742ff1b9e6d8c231ac7c7247782c6fc5bce503af760bca071811e5fc9ee56" +checksum = "1ba6d67c6ccf1c6771f167c682510fd1cb8e1f252d2641ec4143e6d9ddda4ec8" dependencies = [ "anyhow", "termcolor", - "wasmparser 0.221.2", + "wasmparser 0.222.0", ] [[package]] @@ -3527,7 +3528,7 @@ dependencies = [ "fxprof-processed-profile", "gimli 0.28.1", "hashbrown 0.14.5", - "indexmap 2.2.6", + "indexmap 2.7.0", "ittapi", "libc", "libm", @@ -3604,7 +3605,7 @@ dependencies = [ "anyhow", "proc-macro2", "quote", - "syn 2.0.90", + "syn 2.0.95", "wasmtime-component-util", "wasmtime-wit-bindgen", "wit-parser", @@ -3651,7 +3652,7 @@ dependencies = [ "cranelift-bitset", "cranelift-entity", "gimli 0.28.1", - "indexmap 2.2.6", + "indexmap 2.7.0", "log", "object", "postcard", @@ -3734,7 +3735,7 @@ checksum = "a2bde986038b819bc43a21fef0610aeb47aabfe3ea09ca3533a7b81023b84ec6" dependencies = [ "proc-macro2", "quote", - "syn 2.0.90", + "syn 2.0.95", ] [[package]] @@ -3793,7 +3794,7 @@ checksum = "8f88e49a9b81746ec0cede5505e40a4012c92cb5054cd7ef4300dc57c36f26b1" dependencies = [ "anyhow", "heck 0.4.1", - "indexmap 2.2.6", + "indexmap 2.7.0", "wit-parser", ] @@ -3876,7 +3877,7 @@ dependencies = [ "proc-macro2", "quote", "shellexpand", - "syn 2.0.90", + "syn 2.0.95", "witx", ] @@ -3888,7 +3889,7 @@ checksum = "f8f8feabe94ce6f07d62669d1acf469e0d3249f786562b4263dff3537a4e77ae" dependencies = [ "proc-macro2", "quote", - "syn 2.0.90", + "syn 2.0.95", "wiggle-generate", ] @@ -4133,7 +4134,7 @@ checksum = "ceeb0424aa8679f3fcf2d6e3cfa381f3d6fa6179976a2c05a6249dd2bb426716" dependencies = [ "anyhow", "id-arena", - "indexmap 2.2.6", + "indexmap 2.7.0", "log", "semver 1.0.23", "serde", @@ -4197,7 +4198,7 @@ checksum = "fa4f8080344d4671fb4e831a13ad1e68092748387dfc4f55e356242fae12ce3e" dependencies = [ "proc-macro2", "quote", - "syn 2.0.90", + "syn 2.0.95", ] [[package]] diff --git a/Cargo.toml b/Cargo.toml index ec53d788..600b8548 100644 --- a/Cargo.toml +++ b/Cargo.toml @@ -24,7 +24,7 @@ wasmtime-wasi = "23" wasi-common = "23" anyhow = "1.0" javy = { path = "crates/javy", version = "3.1.1-alpha.1" } -tempfile = "3.14.0" +tempfile = "3.15.0" uuid = { version = "1.11", features = ["v4"] } serde = { version = "1.0", default-features = false } serde_json = "1.0" diff --git a/crates/cli/Cargo.toml b/crates/cli/Cargo.toml index 5c92c22b..8c0c2e46 100644 --- a/crates/cli/Cargo.toml +++ b/crates/cli/Cargo.toml @@ -17,11 +17,11 @@ dump_wat = ["dep:wasmprinter"] wizer = { workspace = true } anyhow = { workspace = true } brotli = "7.0.0" -wasmprinter = { version = "0.221.2", optional = true } +wasmprinter = { version = "0.222.0", optional = true } wasmtime = { workspace = true } wasmtime-wasi = { workspace = true } wasi-common = { workspace = true } -walrus = "0.23.2" +walrus = "0.23.3" swc_core = { version = "8.0.1", features = [ "common_sourcemap", "ecma_ast", @@ -39,13 +39,13 @@ serde_json = { workspace = true } lazy_static = "1.5" criterion = "0.5" num-format = "0.4.4" -wasmparser = "0.221.2" +wasmparser = "0.222.0" javy-runner = { path = "../runner/" } uuid = { workspace = true } javy-test-macros = { path = "../test-macros/" } [build-dependencies] -anyhow = "1.0.94" +anyhow = "1.0.95" wizer = { workspace = true } [[bench]] diff --git a/crates/javy/Cargo.toml b/crates/javy/Cargo.toml index d27d11d6..5ead4681 100644 --- a/crates/javy/Cargo.toml +++ b/crates/javy/Cargo.toml @@ -22,7 +22,7 @@ rmp-serde = { version = "^1.3", optional = true } # tests. quickcheck = "1" bitflags = "2.6.0" -fastrand = "2.2.0" +fastrand = "2.3.0" simd-json = { version = "0.14.3", optional = true, default-features = false, features = [ "big-int-as-float", "serde_impl", diff --git a/crates/runner/Cargo.toml b/crates/runner/Cargo.toml index 502e1cce..6b15ece6 100644 --- a/crates/runner/Cargo.toml +++ b/crates/runner/Cargo.toml @@ -13,4 +13,4 @@ wasi-common = { workspace = true } anyhow = { workspace = true } tempfile = { workspace = true } uuid = { workspace = true } -wasmparser = "0.221.2" +wasmparser = "0.222.0" diff --git a/crates/test-macros/Cargo.toml b/crates/test-macros/Cargo.toml index 589d89b4..7d5d301c 100644 --- a/crates/test-macros/Cargo.toml +++ b/crates/test-macros/Cargo.toml @@ -13,5 +13,5 @@ doctest = false [dependencies] anyhow = { workspace = true } proc-macro2 = "1.0.92" -quote = "1.0.37" -syn = { version = "2.0.90", features = ["full"] } +quote = "1.0.38" +syn = { version = "2.0.95", features = ["full"] } diff --git a/supply-chain/audits.toml b/supply-chain/audits.toml index e7b4b2d6..36069fc8 100644 --- a/supply-chain/audits.toml +++ b/supply-chain/audits.toml @@ -276,6 +276,12 @@ user-id = 359 # Sean McArthur (seanmonstar) start = "2022-01-15" end = "2024-12-01" +[[trusted.indexmap]] +criteria = "safe-to-deploy" +user-id = 539 # Josh Stone (cuviper) +start = "2020-01-15" +end = "2026-01-07" + [[trusted.io-extras]] criteria = "safe-to-deploy" user-id = 6825 # Dan Gohman (sunfishcode) @@ -472,7 +478,7 @@ end = "2025-02-05" criteria = "safe-to-deploy" user-id = 3618 # David Tolnay (dtolnay) start = "2019-03-01" -end = "2024-07-12" +end = "2026-01-07" [[trusted.serde_bytes]] criteria = "safe-to-deploy" @@ -484,7 +490,7 @@ end = "2024-07-12" criteria = "safe-to-deploy" user-id = 3618 # David Tolnay (dtolnay) start = "2019-03-01" -end = "2024-07-12" +end = "2026-01-07" [[trusted.serde_json]] criteria = "safe-to-deploy" diff --git a/supply-chain/config.toml b/supply-chain/config.toml index de94d078..9085fa71 100644 --- a/supply-chain/config.toml +++ b/supply-chain/config.toml @@ -220,7 +220,7 @@ version = "0.2.0" criteria = "safe-to-deploy" [[exemptions.fastrand]] -version = "2.2.0" +version = "2.3.0" criteria = "safe-to-deploy" [[exemptions.float-cmp]] @@ -315,14 +315,6 @@ criteria = "safe-to-deploy" version = "1.0.2" criteria = "safe-to-deploy" -[[exemptions.indexmap]] -version = "1.9.3" -criteria = "safe-to-deploy" - -[[exemptions.indexmap]] -version = "2.2.6" -criteria = "safe-to-deploy" - [[exemptions.ipnet]] version = "2.9.0" criteria = "safe-to-deploy" @@ -531,10 +523,6 @@ criteria = "safe-to-deploy" version = "2.1.2" criteria = "safe-to-deploy" -[[exemptions.shlex]] -version = "1.3.0" -criteria = "safe-to-deploy" - [[exemptions.simd-abstraction]] version = "0.7.1" criteria = "safe-to-deploy" @@ -628,7 +616,7 @@ version = "2.0.0" criteria = "safe-to-deploy" [[exemptions.tempfile]] -version = "3.14.0" +version = "3.15.0" criteria = "safe-to-deploy" [[exemptions.tinyvec_macros]] @@ -696,7 +684,7 @@ version = "0.1.3" criteria = "safe-to-deploy" [[exemptions.walrus]] -version = "0.23.2" +version = "0.23.3" criteria = "safe-to-deploy" [[exemptions.walrus-macro]] diff --git a/supply-chain/imports.lock b/supply-chain/imports.lock index e3752e2c..5ee0bea5 100644 --- a/supply-chain/imports.lock +++ b/supply-chain/imports.lock @@ -44,8 +44,8 @@ user-login = "epage" user-name = "Ed Page" [[publisher.anyhow]] -version = "1.0.94" -when = "2024-12-03" +version = "1.0.95" +when = "2024-12-22" user-id = 3618 user-login = "dtolnay" user-name = "David Tolnay" @@ -305,6 +305,20 @@ user-id = 2915 user-login = "Amanieu" user-name = "Amanieu d'Antras" +[[publisher.indexmap]] +version = "1.9.3" +when = "2023-03-24" +user-id = 539 +user-login = "cuviper" +user-name = "Josh Stone" + +[[publisher.indexmap]] +version = "2.7.0" +when = "2024-12-01" +user-id = 539 +user-login = "cuviper" +user-name = "Josh Stone" + [[publisher.io-extras]] version = "0.18.2" when = "2024-03-29" @@ -411,8 +425,8 @@ user-login = "BurntSushi" user-name = "Andrew Gallant" [[publisher.quote]] -version = "1.0.37" -when = "2024-08-22" +version = "1.0.38" +when = "2024-12-26" user-id = 3618 user-login = "dtolnay" user-name = "David Tolnay" @@ -502,22 +516,22 @@ user-login = "dtolnay" user-name = "David Tolnay" [[publisher.serde]] -version = "1.0.204" -when = "2024-07-06" +version = "1.0.217" +when = "2024-12-27" user-id = 3618 user-login = "dtolnay" user-name = "David Tolnay" [[publisher.serde_derive]] -version = "1.0.204" -when = "2024-07-06" +version = "1.0.217" +when = "2024-12-27" user-id = 3618 user-login = "dtolnay" user-name = "David Tolnay" [[publisher.serde_json]] -version = "1.0.133" -when = "2024-11-17" +version = "1.0.135" +when = "2025-01-07" user-id = 3618 user-login = "dtolnay" user-name = "David Tolnay" @@ -544,8 +558,8 @@ user-login = "dtolnay" user-name = "David Tolnay" [[publisher.syn]] -version = "2.0.90" -when = "2024-11-29" +version = "2.0.95" +when = "2025-01-05" user-id = 3618 user-login = "dtolnay" user-name = "David Tolnay" @@ -727,8 +741,8 @@ user-id = 73222 user-login = "wasmtime-publish" [[publisher.wasmparser]] -version = "0.221.2" -when = "2024-12-02" +version = "0.222.0" +when = "2024-12-18" user-id = 73222 user-login = "wasmtime-publish" @@ -739,8 +753,8 @@ user-id = 73222 user-login = "wasmtime-publish" [[publisher.wasmprinter]] -version = "0.221.2" -when = "2024-12-02" +version = "0.222.0" +when = "2024-12-18" user-id = 73222 user-login = "wasmtime-publish" @@ -1641,6 +1655,12 @@ who = "Alex Crichton " criteria = "safe-to-deploy" delta = "0.1.21 -> 0.1.24" +[[audits.bytecode-alliance.audits.shlex]] +who = "Alex Crichton " +criteria = "safe-to-deploy" +version = "1.1.0" +notes = "Only minor `unsafe` code blocks which look valid and otherwise does what it says on the tin." + [[audits.bytecode-alliance.audits.slice-group-by]] who = "Alex Crichton " criteria = "safe-to-deploy" @@ -1922,98 +1942,6 @@ type/value always. """ aggregated-from = "https://chromium.googlesource.com/chromium/src/+/main/third_party/rust/chromium_crates_io/supply-chain/audits.toml?format=TEXT" -[[audits.google.audits.serde]] -who = "Lukasz Anforowicz " -criteria = "safe-to-deploy" -delta = "1.0.204 -> 1.0.207" -notes = "The small change in `src/private/ser.rs` should have no impact on `ub-risk-2`." -aggregated-from = "https://chromium.googlesource.com/chromium/src/+/main/third_party/rust/chromium_crates_io/supply-chain/audits.toml?format=TEXT" - -[[audits.google.audits.serde]] -who = "Lukasz Anforowicz " -criteria = "safe-to-deploy" -delta = "1.0.207 -> 1.0.209" -notes = """ -The delta carries fairly small changes in `src/private/de.rs` and -`src/private/ser.rs` (see https://crrev.com/c/5812194/2..5). AFAICT the -delta has no impact on the `unsafe`, `from_utf8_unchecked`-related parts -of the crate (in `src/de/format.rs` and `src/ser/impls.rs`). -""" -aggregated-from = "https://chromium.googlesource.com/chromium/src/+/main/third_party/rust/chromium_crates_io/supply-chain/audits.toml?format=TEXT" - -[[audits.google.audits.serde]] -who = "Adrian Taylor " -criteria = "safe-to-deploy" -delta = "1.0.209 -> 1.0.210" -notes = "Almost no new code - just feature rearrangement" -aggregated-from = "https://chromium.googlesource.com/chromium/src/+/main/third_party/rust/chromium_crates_io/supply-chain/audits.toml?format=TEXT" - -[[audits.google.audits.serde]] -who = "Liza Burakova " -criteria = "safe-to-deploy" -delta = "1.0.210 -> 1.0.213" -aggregated-from = "https://chromium.googlesource.com/chromium/src/+/main/third_party/rust/chromium_crates_io/supply-chain/audits.toml?format=TEXT" - -[[audits.google.audits.serde]] -who = "Dustin J. Mitchell " -criteria = "safe-to-deploy" -delta = "1.0.213 -> 1.0.214" -notes = "No unsafe, no crypto" -aggregated-from = "https://chromium.googlesource.com/chromium/src/+/main/third_party/rust/chromium_crates_io/supply-chain/audits.toml?format=TEXT" - -[[audits.google.audits.serde]] -who = "Adrian Taylor " -criteria = "safe-to-deploy" -delta = "1.0.214 -> 1.0.215" -aggregated-from = "https://chromium.googlesource.com/chromium/src/+/main/third_party/rust/chromium_crates_io/supply-chain/audits.toml?format=TEXT" - -[[audits.google.audits.serde_derive]] -who = "Lukasz Anforowicz " -criteria = "safe-to-deploy" -delta = "1.0.204 -> 1.0.207" -notes = 'Grepped for \"unsafe\", \"crypt\", \"cipher\", \"fs\", \"net\" - there were no hits' -aggregated-from = "https://chromium.googlesource.com/chromium/src/+/main/third_party/rust/chromium_crates_io/supply-chain/audits.toml?format=TEXT" - -[[audits.google.audits.serde_derive]] -who = "Lukasz Anforowicz " -criteria = "safe-to-deploy" -delta = "1.0.207 -> 1.0.209" -notes = ''' -There are no code changes in this delta - see https://crrev.com/c/5812194/2..5 - -I've neverthless also grepped for `-i cipher`, `-i crypto`, `\bfs\b`, -`\bnet\b`, and `\bunsafe\b`. There were no hits. -''' -aggregated-from = "https://chromium.googlesource.com/chromium/src/+/main/third_party/rust/chromium_crates_io/supply-chain/audits.toml?format=TEXT" - -[[audits.google.audits.serde_derive]] -who = "Adrian Taylor " -criteria = "safe-to-deploy" -delta = "1.0.209 -> 1.0.210" -notes = "Almost no new code - just feature rearrangement" -aggregated-from = "https://chromium.googlesource.com/chromium/src/+/main/third_party/rust/chromium_crates_io/supply-chain/audits.toml?format=TEXT" - -[[audits.google.audits.serde_derive]] -who = "Liza Burakova " -criteria = "safe-to-deploy" -delta = "1.0.210 -> 1.0.213" -notes = "Grepped for 'unsafe', 'crypt', 'cipher', 'fs', 'net' - there were no hits" -aggregated-from = "https://chromium.googlesource.com/chromium/src/+/main/third_party/rust/chromium_crates_io/supply-chain/audits.toml?format=TEXT" - -[[audits.google.audits.serde_derive]] -who = "Dustin J. Mitchell " -criteria = "safe-to-deploy" -delta = "1.0.213 -> 1.0.214" -notes = "No changes to unsafe, no crypto" -aggregated-from = "https://chromium.googlesource.com/chromium/src/+/main/third_party/rust/chromium_crates_io/supply-chain/audits.toml?format=TEXT" - -[[audits.google.audits.serde_derive]] -who = "Adrian Taylor " -criteria = "safe-to-deploy" -delta = "1.0.214 -> 1.0.215" -notes = "Minor changes should not impact UB risk" -aggregated-from = "https://chromium.googlesource.com/chromium/src/+/main/third_party/rust/chromium_crates_io/supply-chain/audits.toml?format=TEXT" - [[audits.google.audits.socket2]] who = "David Koloski " criteria = "safe-to-deploy" @@ -2522,6 +2450,12 @@ which suggests no one else has found anything either. """ aggregated-from = "https://hg.mozilla.org/mozilla-central/raw-file/tip/supply-chain/audits.toml" +[[audits.mozilla.audits.shlex]] +who = "Max Inden " +criteria = "safe-to-deploy" +delta = "1.1.0 -> 1.3.0" +aggregated-from = "https://hg.mozilla.org/mozilla-central/raw-file/tip/supply-chain/audits.toml" + [[audits.mozilla.audits.socket2]] who = "Kershaw Chang " criteria = "safe-to-deploy"