From 8610bbd6183d7d9e5cac51c66871fbe58d5c3448 Mon Sep 17 00:00:00 2001 From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com> Date: Mon, 8 Jul 2024 15:11:40 +0000 Subject: [PATCH 1/3] build(deps): bump the prod group across 1 directory with 11 updates Bumps the prod group with 11 updates in the / directory: | Package | From | To | | --- | --- | --- | | [clap](https://github.com/clap-rs/clap) | `4.5.7` | `4.5.8` | | [serde](https://github.com/serde-rs/serde) | `1.0.203` | `1.0.204` | | [tinyvec](https://github.com/Lokathor/tinyvec) | `1.6.1` | `1.7.0` | | [metrics](https://github.com/metrics-rs/metrics) | `0.22.3` | `0.23.0` | | [metrics-exporter-prometheus](https://github.com/metrics-rs/metrics) | `0.14.0` | `0.15.1` | | [log](https://github.com/rust-lang/log) | `0.4.21` | `0.4.22` | | [proptest-derive](https://github.com/proptest-rs/proptest) | `0.4.0` | `0.5.0` | | [console-subscriber](https://github.com/tokio-rs/console) | `0.2.0` | `0.3.0` | | [serde_json](https://github.com/serde-rs/json) | `1.0.118` | `1.0.120` | | [serde_with](https://github.com/jonasbb/serde_with) | `3.8.1` | `3.8.3` | | [syn](https://github.com/dtolnay/syn) | `2.0.68` | `2.0.69` | Updates `clap` from 4.5.7 to 4.5.8 - [Release notes](https://github.com/clap-rs/clap/releases) - [Changelog](https://github.com/clap-rs/clap/blob/master/CHANGELOG.md) - [Commits](https://github.com/clap-rs/clap/compare/clap_complete-v4.5.7...v4.5.8) Updates `serde` from 1.0.203 to 1.0.204 - [Release notes](https://github.com/serde-rs/serde/releases) - [Commits](https://github.com/serde-rs/serde/compare/v1.0.203...v1.0.204) Updates `tinyvec` from 1.6.1 to 1.7.0 - [Changelog](https://github.com/Lokathor/tinyvec/blob/main/CHANGELOG.md) - [Commits](https://github.com/Lokathor/tinyvec/compare/v1.6.1...v1.7.0) Updates `metrics` from 0.22.3 to 0.23.0 - [Changelog](https://github.com/metrics-rs/metrics/blob/main/release.toml) - [Commits](https://github.com/metrics-rs/metrics/compare/metrics-v0.22.3...metrics-v0.23.0) Updates `metrics-exporter-prometheus` from 0.14.0 to 0.15.1 - [Changelog](https://github.com/metrics-rs/metrics/blob/main/release.toml) - [Commits](https://github.com/metrics-rs/metrics/compare/metrics-exporter-prometheus-v0.14.0...metrics-exporter-prometheus-v0.15.1) Updates `log` from 0.4.21 to 0.4.22 - [Release notes](https://github.com/rust-lang/log/releases) - [Changelog](https://github.com/rust-lang/log/blob/master/CHANGELOG.md) - [Commits](https://github.com/rust-lang/log/compare/0.4.21...0.4.22) Updates `proptest-derive` from 0.4.0 to 0.5.0 - [Release notes](https://github.com/proptest-rs/proptest/releases) - [Changelog](https://github.com/proptest-rs/proptest/blob/master/CHANGELOG.md) - [Commits](https://github.com/proptest-rs/proptest/compare/0.4.0...proptest-derive-0.5.0) Updates `console-subscriber` from 0.2.0 to 0.3.0 - [Release notes](https://github.com/tokio-rs/console/releases) - [Changelog](https://github.com/tokio-rs/console/blob/main/release-plz.toml) - [Commits](https://github.com/tokio-rs/console/compare/console-subscriber-v0.2.0...console-subscriber-v0.3.0) Updates `serde_json` from 1.0.118 to 1.0.120 - [Release notes](https://github.com/serde-rs/json/releases) - [Commits](https://github.com/serde-rs/json/compare/v1.0.118...v1.0.120) Updates `serde_with` from 3.8.1 to 3.8.3 - [Release notes](https://github.com/jonasbb/serde_with/releases) - [Commits](https://github.com/jonasbb/serde_with/compare/v3.8.1...v3.8.3) Updates `syn` from 2.0.68 to 2.0.69 - [Release notes](https://github.com/dtolnay/syn/releases) - [Commits](https://github.com/dtolnay/syn/compare/2.0.68...2.0.69) --- updated-dependencies: - dependency-name: clap dependency-type: direct:production update-type: version-update:semver-patch dependency-group: prod - dependency-name: serde dependency-type: direct:production update-type: version-update:semver-patch dependency-group: prod - dependency-name: tinyvec dependency-type: direct:production update-type: version-update:semver-minor dependency-group: prod - dependency-name: metrics dependency-type: direct:production update-type: version-update:semver-minor dependency-group: prod - dependency-name: metrics-exporter-prometheus dependency-type: direct:production update-type: version-update:semver-minor dependency-group: prod - dependency-name: log dependency-type: direct:production update-type: version-update:semver-patch dependency-group: prod - dependency-name: proptest-derive dependency-type: direct:production update-type: version-update:semver-minor dependency-group: prod - dependency-name: console-subscriber dependency-type: direct:production update-type: version-update:semver-minor dependency-group: prod - dependency-name: serde_json dependency-type: direct:production update-type: version-update:semver-patch dependency-group: prod - dependency-name: serde_with dependency-type: direct:production update-type: version-update:semver-patch dependency-group: prod - dependency-name: syn dependency-type: direct:production update-type: version-update:semver-patch dependency-group: prod ... Signed-off-by: dependabot[bot] --- Cargo.lock | 170 ++++++++++++++------------------- tower-batch-control/Cargo.toml | 2 +- zebra-chain/Cargo.toml | 12 +-- zebra-consensus/Cargo.toml | 10 +- zebra-grpc/Cargo.toml | 2 +- zebra-network/Cargo.toml | 8 +- zebra-node-services/Cargo.toml | 8 +- zebra-rpc/Cargo.toml | 4 +- zebra-scan/Cargo.toml | 6 +- zebra-state/Cargo.toml | 12 +-- zebra-test/Cargo.toml | 2 +- zebra-utils/Cargo.toml | 8 +- zebrad/Cargo.toml | 20 ++-- 13 files changed, 119 insertions(+), 145 deletions(-) diff --git a/Cargo.lock b/Cargo.lock index ea09e646716..3e636d54ebd 100644 --- a/Cargo.lock +++ b/Cargo.lock @@ -12,7 +12,7 @@ dependencies = [ "arc-swap", "backtrace", "canonical-path", - "clap 4.5.7", + "clap 4.5.8", "color-eyre", "fs-err", "once_cell", @@ -240,7 +240,7 @@ checksum = "16e62a023e7c117e27523144c5d2459f4397fcc3cab0085af8e2224f643a0193" dependencies = [ "proc-macro2", "quote", - "syn 2.0.68", + "syn 2.0.69", ] [[package]] @@ -251,7 +251,7 @@ checksum = "c6fa2087f2753a7da8cc1c0dbfcf89579dd57458e36769de5ac750b4671737ca" dependencies = [ "proc-macro2", "quote", - "syn 2.0.68", + "syn 2.0.69", ] [[package]] @@ -422,7 +422,7 @@ dependencies = [ "regex", "rustc-hash", "shlex", - "syn 2.0.68", + "syn 2.0.69", "which", ] @@ -791,9 +791,9 @@ dependencies = [ [[package]] name = "clap" -version = "4.5.7" +version = "4.5.8" source = "registry+https://github.com/rust-lang/crates.io-index" -checksum = "5db83dced34638ad474f39f250d7fea9598bdd239eaced1bdf45d597da0f433f" +checksum = "84b3edb18336f4df585bc9aa31dd99c036dfa5dc5e9a2939a722a188f3a8970d" dependencies = [ "clap_builder", "clap_derive", @@ -801,9 +801,9 @@ dependencies = [ [[package]] name = "clap_builder" -version = "4.5.7" +version = "4.5.8" source = "registry+https://github.com/rust-lang/crates.io-index" -checksum = "f7e204572485eb3fbf28f871612191521df159bc3e15a9f5064c66dba3a8c05f" +checksum = "c1c09dd5ada6c6c78075d6fd0da3f90d8080651e2d6cc8eb2f1aaa4034ced708" dependencies = [ "anstream", "anstyle", @@ -813,14 +813,14 @@ dependencies = [ [[package]] name = "clap_derive" -version = "4.5.5" +version = "4.5.8" source = "registry+https://github.com/rust-lang/crates.io-index" -checksum = "c780290ccf4fb26629baa7a1081e68ced113f1d3ec302fa5948f1c381ebf06c6" +checksum = "2bac35c6dafb060fd4d275d9a4ffae97917c13a6327903a8be2153cd964f7085" dependencies = [ "heck 0.5.0", "proc-macro2", "quote", - "syn 2.0.68", + "syn 2.0.69", ] [[package]] @@ -878,22 +878,22 @@ dependencies = [ [[package]] name = "console-api" -version = "0.6.0" +version = "0.7.0" source = "registry+https://github.com/rust-lang/crates.io-index" -checksum = "fd326812b3fd01da5bb1af7d340d0d555fd3d4b641e7f1dfcf5962a902952787" +checksum = "a257c22cd7e487dd4a13d413beabc512c5052f0bc048db0da6a84c3d8a6142fd" dependencies = [ "futures-core", "prost", "prost-types", - "tonic 0.10.2", + "tonic", "tracing-core", ] [[package]] name = "console-subscriber" -version = "0.2.0" +version = "0.3.0" source = "registry+https://github.com/rust-lang/crates.io-index" -checksum = "7481d4c57092cd1c19dd541b92bdce883de840df30aa5d03fd48a3935c01842e" +checksum = "31c4cc54bae66f7d9188996404abdf7fdfa23034ef8e43478c8810828abad758" dependencies = [ "console-api", "crossbeam-channel", @@ -901,13 +901,14 @@ dependencies = [ "futures-task", "hdrhistogram", "humantime", + "prost", "prost-types", "serde", "serde_json", "thread_local", "tokio", "tokio-stream", - "tonic 0.10.2", + "tonic", "tracing", "tracing-core", "tracing-subscriber", @@ -968,7 +969,7 @@ dependencies = [ "anes", "cast", "ciborium", - "clap 4.5.7", + "clap 4.5.8", "criterion-plot", "is-terminal", "itertools 0.10.5", @@ -1070,7 +1071,7 @@ checksum = "f46882e17999c6cc590af592290432be3bce0428cb0d5f8b6715e4dc7b383eb3" dependencies = [ "proc-macro2", "quote", - "syn 2.0.68", + "syn 2.0.69", ] [[package]] @@ -1118,7 +1119,7 @@ dependencies = [ "proc-macro2", "quote", "strsim 0.11.1", - "syn 2.0.68", + "syn 2.0.69", ] [[package]] @@ -1140,7 +1141,7 @@ checksum = "733cabb43482b1a1b53eee8583c2b9e8684d592215ea83efd305dd31bc2f0178" dependencies = [ "darling_core 0.20.9", "quote", - "syn 2.0.68", + "syn 2.0.69", ] [[package]] @@ -1507,7 +1508,7 @@ checksum = "87750cf4b7a4c0625b1529e4c543c2182106e4dedc60a2a6455e00d212c489ac" dependencies = [ "proc-macro2", "quote", - "syn 2.0.68", + "syn 2.0.69", ] [[package]] @@ -2465,9 +2466,9 @@ dependencies = [ [[package]] name = "log" -version = "0.4.21" +version = "0.4.22" source = "registry+https://github.com/rust-lang/crates.io-index" -checksum = "90ed8c1e510134f979dbc4f070f87d4313098b704861a105fe34231c70a3901c" +checksum = "a7a70ba024b9dc04c27ea2f0c0548feb474ec5c54bba33a7f72f873a39d07b24" [[package]] name = "lz4-sys" @@ -2521,9 +2522,9 @@ dependencies = [ [[package]] name = "metrics" -version = "0.22.3" +version = "0.23.0" source = "registry+https://github.com/rust-lang/crates.io-index" -checksum = "2be3cbd384d4e955b231c895ce10685e3d8260c5ccffae898c96c723b0772835" +checksum = "884adb57038347dfbaf2d5065887b6cf4312330dc8e94bc30a1a839bd79d3261" dependencies = [ "ahash", "portable-atomic", @@ -2531,9 +2532,9 @@ dependencies = [ [[package]] name = "metrics-exporter-prometheus" -version = "0.14.0" +version = "0.15.1" source = "registry+https://github.com/rust-lang/crates.io-index" -checksum = "5d58e362dc7206e9456ddbcdbd53c71ba441020e62104703075a69151e38d85f" +checksum = "bf0af7a0d7ced10c0151f870e5e3f3f8bc9ffc5992d32873566ca1f9169ae776" dependencies = [ "base64 0.22.1", "http-body-util", @@ -2551,9 +2552,9 @@ dependencies = [ [[package]] name = "metrics-util" -version = "0.16.3" +version = "0.17.0" source = "registry+https://github.com/rust-lang/crates.io-index" -checksum = "8b07a5eb561b8cbc16be2d216faf7757f9baf3bfb94dbb0fae3df8387a5bb47f" +checksum = "4259040465c955f9f2f1a4a8a16dc46726169bca0f88e8fb2dbeced487c3e828" dependencies = [ "crossbeam-epoch", "crossbeam-utils", @@ -2982,7 +2983,7 @@ dependencies = [ "pest_meta", "proc-macro2", "quote", - "syn 2.0.68", + "syn 2.0.69", ] [[package]] @@ -3023,7 +3024,7 @@ checksum = "2f38a4412a78282e09a2cf38d195ea5420d15ba0602cb375210efbc877243965" dependencies = [ "proc-macro2", "quote", - "syn 2.0.68", + "syn 2.0.69", ] [[package]] @@ -3118,7 +3119,7 @@ source = "registry+https://github.com/rust-lang/crates.io-index" checksum = "5f12335488a2f3b0a83b14edad48dca9879ce89b2edd10e80237e4e852dd645e" dependencies = [ "proc-macro2", - "syn 2.0.68", + "syn 2.0.69", ] [[package]] @@ -3205,13 +3206,13 @@ dependencies = [ [[package]] name = "proptest-derive" -version = "0.4.0" +version = "0.5.0" source = "registry+https://github.com/rust-lang/crates.io-index" -checksum = "9cf16337405ca084e9c78985114633b6827711d22b9e6ef6c6c0d665eb3f0b6e" +checksum = "6ff7ff745a347b87471d859a377a9a404361e7efc2a971d73424a6d183c0fc77" dependencies = [ "proc-macro2", "quote", - "syn 1.0.109", + "syn 2.0.69", ] [[package]] @@ -3241,7 +3242,7 @@ dependencies = [ "prost", "prost-types", "regex", - "syn 2.0.68", + "syn 2.0.69", "tempfile", ] @@ -3255,7 +3256,7 @@ dependencies = [ "itertools 0.12.1", "proc-macro2", "quote", - "syn 2.0.68", + "syn 2.0.69", ] [[package]] @@ -3971,9 +3972,9 @@ dependencies = [ [[package]] name = "serde" -version = "1.0.203" +version = "1.0.204" source = "registry+https://github.com/rust-lang/crates.io-index" -checksum = "7253ab4de971e72fb7be983802300c30b5a7f0c2e56fab8abfc6a214307c0094" +checksum = "bc76f558e0cbb2a839d37354c575f1dc3fdc6546b5be373ba43d95f231bf7c12" dependencies = [ "serde_derive", ] @@ -3989,20 +3990,20 @@ dependencies = [ [[package]] name = "serde_derive" -version = "1.0.203" +version = "1.0.204" source = "registry+https://github.com/rust-lang/crates.io-index" -checksum = "500cbc0ebeb6f46627f50f3f5811ccf6bf00643be300b4c3eabc0ef55dc5b5ba" +checksum = "e0cd7e117be63d3c3678776753929474f3b04a43a080c744d6b0ae2a8c28e222" dependencies = [ "proc-macro2", "quote", - "syn 2.0.68", + "syn 2.0.69", ] [[package]] name = "serde_json" -version = "1.0.118" +version = "1.0.120" source = "registry+https://github.com/rust-lang/crates.io-index" -checksum = "d947f6b3163d8857ea16c4fa0dd4840d52f3041039a85decd46867eb1abef2e4" +checksum = "4e0d21c9a8cae1235ad58a00c11cb40d4b1e5c784f1ef2c537876ed6ffd8b7c5" dependencies = [ "indexmap 2.2.6", "itoa", @@ -4043,9 +4044,9 @@ dependencies = [ [[package]] name = "serde_with" -version = "3.8.1" +version = "3.8.3" source = "registry+https://github.com/rust-lang/crates.io-index" -checksum = "0ad483d2ab0149d5a5ebcd9972a3852711e0153d863bf5a5d0391d28883c4a20" +checksum = "e73139bc5ec2d45e6c5fd85be5a46949c1c39a4c18e56915f5eb4c12f975e377" dependencies = [ "base64 0.22.1", "chrono", @@ -4055,7 +4056,7 @@ dependencies = [ "serde", "serde_derive", "serde_json", - "serde_with_macros 3.8.1", + "serde_with_macros 3.8.3", "time", ] @@ -4073,14 +4074,14 @@ dependencies = [ [[package]] name = "serde_with_macros" -version = "3.8.1" +version = "3.8.3" source = "registry+https://github.com/rust-lang/crates.io-index" -checksum = "65569b702f41443e8bc8bbb1c5779bd0450bbe723b56198980e80ec45780bce2" +checksum = "b80d3d6b56b64335c0180e5ffde23b3c5e08c14c585b51a15bd0e95393f46703" dependencies = [ "darling 0.20.9", "proc-macro2", "quote", - "syn 2.0.68", + "syn 2.0.69", ] [[package]] @@ -4309,9 +4310,9 @@ dependencies = [ [[package]] name = "syn" -version = "2.0.68" +version = "2.0.69" source = "registry+https://github.com/rust-lang/crates.io-index" -checksum = "901fa70d88b9d6c98022e23b4136f9f3e54e4662c3bc1bd1d84a42a9a0f0c1e9" +checksum = "201fcda3845c23e8212cd466bfebf0bd20694490fc0356ae8e428e0824a915a6" dependencies = [ "proc-macro2", "quote", @@ -4410,7 +4411,7 @@ checksum = "46c3384250002a6d5af4d114f2845d37b57521033f30d5c3f46c4d70e1197533" dependencies = [ "proc-macro2", "quote", - "syn 2.0.68", + "syn 2.0.69", ] [[package]] @@ -4482,9 +4483,9 @@ dependencies = [ [[package]] name = "tinyvec" -version = "1.6.1" +version = "1.7.0" source = "registry+https://github.com/rust-lang/crates.io-index" -checksum = "c55115c6fbe2d2bef26eb09ad74bde02d8255476fc0c7b515ef09fbb35742d82" +checksum = "ce6b6a2fb3a985e99cebfaefa9faa3024743da73304ca1c683a36429613d3d22" dependencies = [ "tinyvec_macros", ] @@ -4533,7 +4534,7 @@ checksum = "5f5ae998a069d4b5aba8ee9dad856af7d520c3699e6159b185c2acd48155d39a" dependencies = [ "proc-macro2", "quote", - "syn 2.0.68", + "syn 2.0.69", ] [[package]] @@ -4652,33 +4653,6 @@ dependencies = [ "winnow 0.6.13", ] -[[package]] -name = "tonic" -version = "0.10.2" -source = "registry+https://github.com/rust-lang/crates.io-index" -checksum = "d560933a0de61cf715926b9cac824d4c883c2c43142f787595e48280c40a1d0e" -dependencies = [ - "async-stream", - "async-trait", - "axum", - "base64 0.21.7", - "bytes", - "h2 0.3.26", - "http 0.2.12", - "http-body 0.4.6", - "hyper 0.14.29", - "hyper-timeout", - "percent-encoding", - "pin-project", - "prost", - "tokio", - "tokio-stream", - "tower", - "tower-layer", - "tower-service", - "tracing", -] - [[package]] name = "tonic" version = "0.11.0" @@ -4716,7 +4690,7 @@ dependencies = [ "proc-macro2", "prost-build", "quote", - "syn 2.0.68", + "syn 2.0.69", ] [[package]] @@ -4729,7 +4703,7 @@ dependencies = [ "proc-macro2", "prost-build", "quote", - "syn 2.0.68", + "syn 2.0.69", ] [[package]] @@ -4742,7 +4716,7 @@ dependencies = [ "prost-types", "tokio", "tokio-stream", - "tonic 0.11.0", + "tonic", ] [[package]] @@ -4859,7 +4833,7 @@ checksum = "34704c8d6ebcbc939824180af020566b01a7c01f80641264eba0999f6c2b6be7" dependencies = [ "proc-macro2", "quote", - "syn 2.0.68", + "syn 2.0.69", ] [[package]] @@ -4972,7 +4946,7 @@ source = "registry+https://github.com/rust-lang/crates.io-index" checksum = "04659ddb06c87d233c566112c1c9c5b9e98256d9af50ec3bc9c8327f873a7568" dependencies = [ "quote", - "syn 2.0.68", + "syn 2.0.69", ] [[package]] @@ -5295,7 +5269,7 @@ dependencies = [ "once_cell", "proc-macro2", "quote", - "syn 2.0.68", + "syn 2.0.69", "wasm-bindgen-shared", ] @@ -5329,7 +5303,7 @@ checksum = "e94f17b526d0a461a191c78ea52bbce64071ed5c04c9ffe424dcb38f74171bb7" dependencies = [ "proc-macro2", "quote", - "syn 2.0.68", + "syn 2.0.69", "wasm-bindgen-backend", "wasm-bindgen-shared", ] @@ -5858,7 +5832,7 @@ dependencies = [ "serde", "serde-big-array", "serde_json", - "serde_with 3.8.1", + "serde_with 3.8.3", "sha2", "spandoc", "static_assertions", @@ -5935,7 +5909,7 @@ dependencies = [ "serde", "tokio", "tokio-stream", - "tonic 0.11.0", + "tonic", "tonic-build 0.11.0", "tonic-reflection", "tower", @@ -6168,7 +6142,7 @@ dependencies = [ "serde_json", "serde_yaml", "structopt", - "syn 2.0.68", + "syn 2.0.69", "thiserror", "tinyvec", "tokio", @@ -6190,7 +6164,7 @@ dependencies = [ "abscissa_core", "atty", "chrono", - "clap 4.5.7", + "clap 4.5.8", "color-eyre", "console-subscriber", "dirs", @@ -6229,7 +6203,7 @@ dependencies = [ "tokio", "tokio-stream", "toml 0.8.14", - "tonic 0.11.0", + "tonic", "tonic-build 0.11.0", "tower", "tracing", @@ -6270,7 +6244,7 @@ checksum = "15e934569e47891f7d9411f1a451d947a60e000ab3bd24fbb970f000387d1b3b" dependencies = [ "proc-macro2", "quote", - "syn 2.0.68", + "syn 2.0.69", ] [[package]] @@ -6290,7 +6264,7 @@ checksum = "ce36e65b0d2999d2aafac989fb249189a141aee1f53c612c1f37d72631959f69" dependencies = [ "proc-macro2", "quote", - "syn 2.0.68", + "syn 2.0.69", ] [[package]] diff --git a/tower-batch-control/Cargo.toml b/tower-batch-control/Cargo.toml index 393dd0c8d5e..8ca541de65b 100644 --- a/tower-batch-control/Cargo.toml +++ b/tower-batch-control/Cargo.toml @@ -36,7 +36,7 @@ tracing-futures = "0.2.5" color-eyre = "0.6.3" # This is a transitive dependency via color-eyre. # Enable a feature that makes tinyvec compile much faster. -tinyvec = { version = "1.6.0", features = ["rustc_1_55"] } +tinyvec = { version = "1.7.0", features = ["rustc_1_55"] } ed25519-zebra = "4.0.3" rand = "0.8.5" diff --git a/zebra-chain/Cargo.toml b/zebra-chain/Cargo.toml index 9b4160b5c69..a99cb9928a6 100644 --- a/zebra-chain/Cargo.toml +++ b/zebra-chain/Cargo.toml @@ -113,8 +113,8 @@ tracing = "0.1.39" # Serialization hex = { version = "0.4.3", features = ["serde"] } -serde = { version = "1.0.203", features = ["serde_derive", "rc"] } -serde_with = "3.7.0" +serde = { version = "1.0.204", features = ["serde_derive", "rc"] } +serde_with = "3.8.3" serde-big-array = "0.5.1" # Processing @@ -128,7 +128,7 @@ redjubjub = "0.7.0" reddsa = "0.5.1" # Production feature json-conversion -serde_json = { version = "1.0.117", optional = true } +serde_json = { version = "1.0.120", optional = true } # Production feature async-error and testing feature proptest-impl tokio = { version = "1.37.0", optional = true } @@ -138,7 +138,7 @@ zcash_client_backend = { version = "0.12.1", optional = true } # Optional testing dependencies proptest = { version = "1.4.0", optional = true } -proptest-derive = { version = "0.4.0", optional = true } +proptest-derive = { version = "0.5.0", optional = true } rand = { version = "0.8.5", optional = true } rand_chacha = { version = "0.3.1", optional = true } @@ -153,13 +153,13 @@ criterion = { version = "0.5.1", features = ["html_reports"] } color-eyre = "0.6.3" # This is a transitive dependency via color-eyre. # Enable a feature that makes tinyvec compile much faster. -tinyvec = { version = "1.6.0", features = ["rustc_1_55"] } +tinyvec = { version = "1.7.0", features = ["rustc_1_55"] } spandoc = "0.2.2" tracing = "0.1.39" # Make the optional testing dependencies required proptest = "1.4.0" -proptest-derive = "0.4.0" +proptest-derive = "0.5.0" rand = "0.8.5" rand_chacha = "0.3.1" diff --git a/zebra-consensus/Cargo.toml b/zebra-consensus/Cargo.toml index 036f13e8322..e5a627184c0 100644 --- a/zebra-consensus/Cargo.toml +++ b/zebra-consensus/Cargo.toml @@ -46,11 +46,11 @@ rayon = "1.10.0" chrono = { version = "0.4.38", default-features = false, features = ["clock", "std"] } lazy_static = "1.4.0" once_cell = "1.18.0" -serde = { version = "1.0.203", features = ["serde_derive"] } +serde = { version = "1.0.204", features = ["serde_derive"] } futures = "0.3.30" futures-util = "0.3.28" -metrics = "0.22.3" +metrics = "0.23.0" thiserror = "1.0.61" tokio = { version = "1.37.0", features = ["time", "sync", "tracing", "rt-multi-thread"] } tower = { version = "0.4.13", features = ["timeout", "util", "buffer"] } @@ -76,18 +76,18 @@ howudoin = { version = "0.1.2", optional = true } # Test-only dependencies proptest = { version = "1.4.0", optional = true } -proptest-derive = { version = "0.4.0", optional = true } +proptest-derive = { version = "0.5.0", optional = true } [dev-dependencies] color-eyre = "0.6.3" # This is a transitive dependency via color-eyre. # Enable a feature that makes tinyvec compile much faster. -tinyvec = { version = "1.6.0", features = ["rustc_1_55"] } +tinyvec = { version = "1.7.0", features = ["rustc_1_55"] } hex = "0.4.3" num-integer = "0.1.46" proptest = "1.4.0" -proptest-derive = "0.4.0" +proptest-derive = "0.5.0" spandoc = "0.2.2" tokio = { version = "1.37.0", features = ["full", "tracing", "test-util"] } diff --git a/zebra-grpc/Cargo.toml b/zebra-grpc/Cargo.toml index 32eec49836f..6301122809e 100644 --- a/zebra-grpc/Cargo.toml +++ b/zebra-grpc/Cargo.toml @@ -20,7 +20,7 @@ futures-util = "0.3.28" tonic = "0.11.0" tonic-reflection = "0.11.0" prost = "0.12.6" -serde = { version = "1.0.203", features = ["serde_derive"] } +serde = { version = "1.0.204", features = ["serde_derive"] } tokio = { version = "1.37.0", features = ["macros", "rt-multi-thread"] } tokio-stream = "0.1.15" tower = { version = "0.4.13", features = ["util", "buffer"] } diff --git a/zebra-network/Cargo.toml b/zebra-network/Cargo.toml index 95b44c1ca55..1d7b4ddde98 100644 --- a/zebra-network/Cargo.toml +++ b/zebra-network/Cargo.toml @@ -56,7 +56,7 @@ pin-project = "1.1.5" rand = "0.8.5" rayon = "1.10.0" regex = "1.10.4" -serde = { version = "1.0.203", features = ["serde_derive"] } +serde = { version = "1.0.204", features = ["serde_derive"] } tempfile = "3.10.1" thiserror = "1.0.61" @@ -66,7 +66,7 @@ tokio-stream = { version = "0.1.15", features = ["sync", "time"] } tokio-util = { version = "0.7.11", features = ["codec"] } tower = { version = "0.4.13", features = ["retry", "discover", "load", "load-shed", "timeout", "util", "buffer"] } -metrics = "0.22.3" +metrics = "0.23.0" tracing-futures = "0.2.5" tracing-error = { version = "0.2.0", features = ["traced-error"] } tracing = "0.1.39" @@ -81,13 +81,13 @@ howudoin = { version = "0.1.2", optional = true } # proptest dependencies proptest = { version = "1.4.0", optional = true } -proptest-derive = { version = "0.4.0", optional = true } +proptest-derive = { version = "0.5.0", optional = true } zebra-chain = { path = "../zebra-chain", version = "1.0.0-beta.38", features = ["async-error"] } [dev-dependencies] proptest = "1.4.0" -proptest-derive = "0.4.0" +proptest-derive = "0.5.0" static_assertions = "1.1.0" tokio = { version = "1.37.0", features = ["full", "tracing", "test-util"] } diff --git a/zebra-node-services/Cargo.toml b/zebra-node-services/Cargo.toml index 8a076eeae8d..bc59c8b136c 100644 --- a/zebra-node-services/Cargo.toml +++ b/zebra-node-services/Cargo.toml @@ -46,8 +46,8 @@ color-eyre = { version = "0.6.3", optional = true } jsonrpc-core = { version = "18.0.0", optional = true } # Security: avoid default dependency on openssl reqwest = { version = "0.11.26", default-features = false, features = ["rustls-tls"], optional = true } -serde = { version = "1.0.203", optional = true } -serde_json = { version = "1.0.117", optional = true } +serde = { version = "1.0.204", optional = true } +serde_json = { version = "1.0.120", optional = true } tokio = { version = "1.37.0", features = ["time"], optional = true } [dev-dependencies] @@ -55,5 +55,5 @@ tokio = { version = "1.37.0", features = ["time"], optional = true } color-eyre = "0.6.3" jsonrpc-core = "18.0.0" reqwest = { version = "0.11.26", default-features = false, features = ["rustls-tls"] } -serde = "1.0.203" -serde_json = "1.0.117" +serde = "1.0.204" +serde_json = "1.0.120" diff --git a/zebra-rpc/Cargo.toml b/zebra-rpc/Cargo.toml index edaa1550cc6..44c5d1db782 100644 --- a/zebra-rpc/Cargo.toml +++ b/zebra-rpc/Cargo.toml @@ -53,7 +53,7 @@ jsonrpc-derive = "18.0.0" jsonrpc-http-server = "18.0.0" # zebra-rpc needs the preserve_order feature in serde_json, which is a dependency of jsonrpc-core -serde_json = { version = "1.0.117", features = ["preserve_order"] } +serde_json = { version = "1.0.120", features = ["preserve_order"] } indexmap = { version = "2.2.6", features = ["serde"] } tokio = { version = "1.37.0", features = ["time", "rt-multi-thread", "macros", "tracing"] } @@ -62,7 +62,7 @@ tower = "0.4.13" tracing = "0.1.39" hex = { version = "0.4.3", features = ["serde"] } -serde = { version = "1.0.203", features = ["serde_derive"] } +serde = { version = "1.0.204", features = ["serde_derive"] } zcash_primitives = { version = "0.15.0" } diff --git a/zebra-scan/Cargo.toml b/zebra-scan/Cargo.toml index 3ac701e678c..fad83c70b1e 100644 --- a/zebra-scan/Cargo.toml +++ b/zebra-scan/Cargo.toml @@ -45,7 +45,7 @@ color-eyre = "0.6.3" indexmap = { version = "2.2.6", features = ["serde"] } itertools = "0.13.0" semver = "1.0.23" -serde = { version = "1.0.203", features = ["serde_derive"] } +serde = { version = "1.0.204", features = ["serde_derive"] } tokio = { version = "1.37.0", features = ["time"] } tower = "0.4.13" tracing = "0.1.39" @@ -66,7 +66,7 @@ chrono = { version = "0.4.38", default-features = false, features = ["clock", "s # test feature proptest-impl proptest = { version = "1.4.0", optional = true } -proptest-derive = { version = "0.4.0", optional = true } +proptest-derive = { version = "0.5.0", optional = true } bls12_381 = { version = "0.8.0", optional = true } ff = { version = "0.13.0", optional = true } @@ -82,7 +82,7 @@ insta = { version = "1.39.0", features = ["ron", "redactions"] } tokio = { version = "1.37.0", features = ["test-util"] } proptest = "1.4.0" -proptest-derive = "0.4.0" +proptest-derive = "0.5.0" bls12_381 = "0.8.0" ff = "0.13.0" group = "0.13.0" diff --git a/zebra-state/Cargo.toml b/zebra-state/Cargo.toml index 167158d65ed..6c32b2e246e 100644 --- a/zebra-state/Cargo.toml +++ b/zebra-state/Cargo.toml @@ -57,13 +57,13 @@ human_bytes = { version = "0.4.3", default-features = false } indexmap = "2.2.6" itertools = "0.13.0" lazy_static = "1.4.0" -metrics = "0.22.3" +metrics = "0.23.0" mset = "0.1.1" regex = "1.10.4" rlimit = "0.10.1" rocksdb = { version = "0.22.0", default-features = false, features = ["lz4"] } semver = "1.0.23" -serde = { version = "1.0.203", features = ["serde_derive"] } +serde = { version = "1.0.204", features = ["serde_derive"] } tempfile = "3.10.1" thiserror = "1.0.61" @@ -75,7 +75,7 @@ tracing = "0.1.39" # elasticsearch specific dependencies. # Security: avoid default dependency on openssl elasticsearch = { version = "8.5.0-alpha.1", default-features = false, features = ["rustls-tls"], optional = true } -serde_json = { version = "1.0.117", package = "serde_json", optional = true } +serde_json = { version = "1.0.120", package = "serde_json", optional = true } zebra-chain = { path = "../zebra-chain", version = "1.0.0-beta.38", features = ["async-error"] } @@ -85,13 +85,13 @@ howudoin = { version = "0.1.2", optional = true } # test feature proptest-impl zebra-test = { path = "../zebra-test/", version = "1.0.0-beta.38", optional = true } proptest = { version = "1.4.0", optional = true } -proptest-derive = { version = "0.4.0", optional = true } +proptest-derive = { version = "0.5.0", optional = true } [dev-dependencies] color-eyre = "0.6.3" # This is a transitive dependency via color-eyre. # Enable a feature that makes tinyvec compile much faster. -tinyvec = { version = "1.6.0", features = ["rustc_1_55"] } +tinyvec = { version = "1.7.0", features = ["rustc_1_55"] } once_cell = "1.18.0" spandoc = "0.2.2" @@ -100,7 +100,7 @@ hex = { version = "0.4.3", features = ["serde"] } insta = { version = "1.39.0", features = ["ron", "redactions"] } proptest = "1.4.0" -proptest-derive = "0.4.0" +proptest-derive = "0.5.0" rand = "0.8.5" halo2 = { package = "halo2_proofs", version = "0.3.0" } diff --git a/zebra-test/Cargo.toml b/zebra-test/Cargo.toml index 8569f72e8d4..3cf419332bf 100644 --- a/zebra-test/Cargo.toml +++ b/zebra-test/Cargo.toml @@ -32,7 +32,7 @@ futures = "0.3.30" color-eyre = "0.6.3" # This is a transitive dependency via color-eyre. # Enable a feature that makes tinyvec compile much faster. -tinyvec = { version = "1.6.0", features = ["rustc_1_55"] } +tinyvec = { version = "1.7.0", features = ["rustc_1_55"] } humantime = "2.1.0" owo-colors = "4.0.0" diff --git a/zebra-utils/Cargo.toml b/zebra-utils/Cargo.toml index 52883258fd7..38bc2fc79cb 100644 --- a/zebra-utils/Cargo.toml +++ b/zebra-utils/Cargo.toml @@ -91,11 +91,11 @@ openapi-generator = [ color-eyre = "0.6.3" # This is a transitive dependency via color-eyre. # Enable a feature that makes tinyvec compile much faster. -tinyvec = { version = "1.6.0", features = ["rustc_1_55"] } +tinyvec = { version = "1.7.0", features = ["rustc_1_55"] } structopt = "0.3.26" hex = "0.4.3" -serde_json = "1.0.117" +serde_json = "1.0.120" tracing-error = "0.2.0" tracing-subscriber = "0.3.18" thiserror = "1.0.61" @@ -126,7 +126,7 @@ zcash_protocol = { version = "0.1.1" } # For the openapi generator rand = "0.8.5" -syn = { version = "2.0.66", features = ["full"], optional = true } +syn = { version = "2.0.69", features = ["full"], optional = true } quote = { version = "1.0.36", optional = true } serde_yaml = { version = "0.9.34+deprecated", optional = true } -serde = { version = "1.0.203", features = ["serde_derive"], optional = true } +serde = { version = "1.0.204", features = ["serde_derive"], optional = true } diff --git a/zebrad/Cargo.toml b/zebrad/Cargo.toml index df2a481f228..2e2df84ad77 100644 --- a/zebrad/Cargo.toml +++ b/zebrad/Cargo.toml @@ -172,13 +172,13 @@ zebra-scan = { path = "../zebra-scan", version = "0.1.0-alpha.7", optional = tru zebra-utils = { path = "../zebra-utils", version = "1.0.0-beta.38", optional = true } abscissa_core = "0.7.0" -clap = { version = "4.5.4", features = ["cargo"] } +clap = { version = "4.5.8", features = ["cargo"] } chrono = { version = "0.4.38", default-features = false, features = ["clock", "std"] } humantime-serde = "1.1.1" indexmap = "2.2.6" lazy_static = "1.4.0" semver = "1.0.23" -serde = { version = "1.0.203", features = ["serde_derive"] } +serde = { version = "1.0.204", features = ["serde_derive"] } toml = "0.8.13" futures = "0.3.30" @@ -191,7 +191,7 @@ pin-project = "1.1.5" color-eyre = { version = "0.6.3", default-features = false, features = ["issue-url"] } # This is a transitive dependency via color-eyre. # Enable a feature that makes tinyvec compile much faster. -tinyvec = { version = "1.6.0", features = ["rustc_1_55"] } +tinyvec = { version = "1.7.0", features = ["rustc_1_55"] } thiserror = "1.0.61" @@ -201,7 +201,7 @@ tracing-error = "0.2.0" tracing-futures = "0.2.5" tracing = "0.1.39" -metrics = "0.22.3" +metrics = "0.23.0" dirs = "5.0.1" atty = "0.2.14" @@ -226,13 +226,13 @@ tracing-journald = { version = "0.3.0", optional = true } hyper = { version = "0.14.28", features = ["http1", "http2", "server"], optional = true } # prod feature prometheus -metrics-exporter-prometheus = { version = "0.14.0", default-features = false, features = ["http-listener"], optional = true } +metrics-exporter-prometheus = { version = "0.15.1", default-features = false, features = ["http-listener"], optional = true } # prod feature release_max_level_info # # zebrad uses tracing for logging, # we only use `log` to set and print the static log levels in transitive dependencies -log = "0.4.21" +log = "0.4.22" # prod feature progress-bar howudoin = { version = "0.1.2", features = ["term-line"], optional = true } @@ -240,10 +240,10 @@ indicatif = { version = "0.17.8", optional = true } # test feature proptest-impl proptest = { version = "1.4.0", optional = true } -proptest-derive = { version = "0.4.0", optional = true } +proptest-derive = { version = "0.5.0", optional = true } # test feature tokio-console -console-subscriber = { version = "0.2.0", optional = true } +console-subscriber = { version = "0.3.0", optional = true } [build-dependencies] vergen = { version = "8.3.1", default-features = false, features = ["cargo", "git", "git2", "rustc"] } @@ -261,7 +261,7 @@ regex = "1.10.4" insta = { version = "1.39.0", features = ["json"] } # zebra-rpc needs the preserve_order feature, it also makes test results more stable -serde_json = { version = "1.0.117", features = ["preserve_order"] } +serde_json = { version = "1.0.120", features = ["preserve_order"] } tempfile = "3.10.1" hyper = { version = "0.14.28", features = ["http1", "http2", "server"]} @@ -275,7 +275,7 @@ prost = "0.12.6" tonic = "0.11.0" proptest = "1.4.0" -proptest-derive = "0.4.0" +proptest-derive = "0.5.0" # enable span traces and track caller in tests color-eyre = { version = "0.6.3" } From 9dd31b242e8c3a05ffbb5640eb27257e951cc89a Mon Sep 17 00:00:00 2001 From: Alfredo Garcia Date: Mon, 8 Jul 2024 13:57:33 -0300 Subject: [PATCH 2/3] remove multiple log levels to zebrad --- zebrad/Cargo.toml | 4 ---- 1 file changed, 4 deletions(-) diff --git a/zebrad/Cargo.toml b/zebrad/Cargo.toml index 2e2df84ad77..19f5685c00c 100644 --- a/zebrad/Cargo.toml +++ b/zebrad/Cargo.toml @@ -109,12 +109,8 @@ error-debug = ["color-eyre/track-caller", "color-eyre/capture-spantrace"] # # Release builds are defined as "cfg(not(debug_assertions))". # https://docs.rs/tracing/latest/tracing/level_filters/index.html#compile-time-filters -release_max_level_warn = ["tracing/release_max_level_warn", "log/release_max_level_warn"] release_max_level_info = ["tracing/release_max_level_info", "log/release_max_level_info"] -release_max_level_debug = ["tracing/release_max_level_debug", "log/release_max_level_debug"] -max_level_warn = ["tracing/max_level_warn", "log/max_level_warn"] -max_level_info = ["tracing/max_level_info", "log/max_level_info"] max_level_debug = ["tracing/max_level_debug", "log/max_level_debug"] # Testing features that activate extra dependencies From 4f1359a3d0696f8a770a0f0312e4103f82eb45d6 Mon Sep 17 00:00:00 2001 From: Alfredo Garcia Date: Tue, 9 Jul 2024 15:47:19 -0300 Subject: [PATCH 3/3] cargo vet update --- supply-chain/audits.toml | 100 ++++++++++++++++- supply-chain/config.toml | 194 ++++++++++++++++---------------- supply-chain/imports.lock | 227 +++++++++++++++++++++++++------------- 3 files changed, 343 insertions(+), 178 deletions(-) diff --git a/supply-chain/audits.toml b/supply-chain/audits.toml index 2772ccb21f3..d6b83fcf416 100644 --- a/supply-chain/audits.toml +++ b/supply-chain/audits.toml @@ -1,4 +1,102 @@ # cargo-vet audits file -[audits] +[[audits.clap_derive]] +who = "Alfredo Garcia " +criteria = "safe-to-deploy" +delta = "4.5.5 -> 4.5.8" + +[[audits.clap_derive]] +who = "Alfredo Garcia " +criteria = "safe-to-run" +delta = "4.5.5 -> 4.5.8" + +[[audits.clap_derive]] +who = "Alfredo Garcia " +criteria = "safe-to-run" +delta = "4.5.5 -> 4.5.8" + +[[audits.clap_derive]] +who = "Alfredo Garcia " +criteria = "safe-to-run" +delta = "4.5.5 -> 4.5.8" + +[[audits.clap_derive]] +who = "Alfredo Garcia " +criteria = "safe-to-run" +delta = "4.5.5 -> 4.5.8" + +[[audits.console-api]] +who = "Alfredo Garcia " +criteria = "safe-to-deploy" +delta = "0.6.0 -> 0.7.0" + +[[audits.console-subscriber]] +who = "Alfredo Garcia " +criteria = "safe-to-deploy" +delta = "0.2.0 -> 0.3.0" + +[[audits.log]] +who = "Alfredo Garcia " +criteria = "safe-to-deploy" +delta = "0.4.21 -> 0.4.22" + +[[audits.metrics]] +who = "Alfredo Garcia " +criteria = "safe-to-deploy" +delta = "0.22.3 -> 0.23.0" + +[[audits.metrics-exporter-prometheus]] +who = "Alfredo Garcia " +criteria = "safe-to-deploy" +delta = "0.14.0 -> 0.15.1" + +[[audits.metrics-util]] +who = "Alfredo Garcia " +criteria = "safe-to-deploy" +delta = "0.16.3 -> 0.17.0" + +[[audits.proptest-derive]] +who = "Alfredo Garcia " +criteria = "safe-to-deploy" +delta = "0.4.0 -> 0.5.0" + +[[audits.serde_with]] +who = "Alfredo Garcia " +criteria = "safe-to-deploy" +delta = "3.8.1 -> 3.8.3" + +[[audits.serde_with_macros]] +who = "Alfredo Garcia " +criteria = "safe-to-deploy" +delta = "3.8.1 -> 3.8.3" + +[[trusted.clap]] +criteria = "safe-to-deploy" +user-id = 6743 # Ed Page (epage) +start = "2021-12-08" +end = "2025-07-09" + +[[trusted.clap_builder]] +criteria = "safe-to-deploy" +user-id = 6743 # Ed Page (epage) +start = "2023-03-28" +end = "2025-07-09" + +[[trusted.clap_derive]] +criteria = "safe-to-deploy" +user-id = 6743 # Ed Page (epage) +start = "2021-12-08" +end = "2025-07-09" + +[[trusted.serde_json]] +criteria = "safe-to-deploy" +user-id = 3618 # David Tolnay (dtolnay) +start = "2019-02-28" +end = "2025-07-09" + +[[trusted.syn]] +criteria = "safe-to-deploy" +user-id = 3618 # David Tolnay (dtolnay) +start = "2019-03-01" +end = "2025-07-09" diff --git a/supply-chain/config.toml b/supply-chain/config.toml index ad3e7aac56a..4970c885169 100644 --- a/supply-chain/config.toml +++ b/supply-chain/config.toml @@ -119,7 +119,7 @@ version = "0.2.4" criteria = "safe-to-deploy" [[exemptions.anstyle-query]] -version = "1.0.3" +version = "1.1.0" criteria = "safe-to-deploy" [[exemptions.anstyle-wincon]] @@ -127,7 +127,7 @@ version = "3.0.3" criteria = "safe-to-deploy" [[exemptions.anyhow]] -version = "1.0.82" +version = "1.0.86" criteria = "safe-to-deploy" [[exemptions.arc-swap]] @@ -143,13 +143,17 @@ version = "0.7.4" criteria = "safe-to-deploy" [[exemptions.async-compression]] -version = "0.4.9" +version = "0.4.11" criteria = "safe-to-deploy" [[exemptions.async-trait]] version = "0.1.80" criteria = "safe-to-deploy" +[[exemptions.atomic-waker]] +version = "1.1.2" +criteria = "safe-to-deploy" + [[exemptions.atty]] version = "0.2.14" criteria = "safe-to-deploy" @@ -259,7 +263,7 @@ version = "0.1.11+1.0.8" criteria = "safe-to-deploy" [[exemptions.camino]] -version = "1.1.6" +version = "1.1.7" criteria = "safe-to-deploy" [[exemptions.canonical-path]] @@ -279,7 +283,7 @@ version = "0.1.2" criteria = "safe-to-deploy" [[exemptions.cc]] -version = "1.0.96" +version = "1.0.100" criteria = "safe-to-deploy" [[exemptions.cfg-if]] @@ -315,27 +319,15 @@ version = "0.4.4" criteria = "safe-to-deploy" [[exemptions.clang-sys]] -version = "1.7.0" +version = "1.8.1" criteria = "safe-to-deploy" [[exemptions.clap]] version = "2.34.0" criteria = "safe-to-deploy" -[[exemptions.clap]] -version = "4.5.4" -criteria = "safe-to-deploy" - -[[exemptions.clap_builder]] -version = "4.5.2" -criteria = "safe-to-deploy" - -[[exemptions.clap_derive]] -version = "4.5.4" -criteria = "safe-to-deploy" - [[exemptions.clap_lex]] -version = "0.7.0" +version = "0.7.1" criteria = "safe-to-deploy" [[exemptions.color-eyre]] @@ -379,7 +371,7 @@ version = "0.2.12" criteria = "safe-to-deploy" [[exemptions.crc32fast]] -version = "1.4.0" +version = "1.4.2" criteria = "safe-to-deploy" [[exemptions.criterion]] @@ -391,7 +383,7 @@ version = "0.5.0" criteria = "safe-to-run" [[exemptions.crossbeam-channel]] -version = "0.5.12" +version = "0.5.13" criteria = "safe-to-deploy" [[exemptions.crossbeam-deque]] @@ -403,7 +395,7 @@ version = "0.9.18" criteria = "safe-to-deploy" [[exemptions.crossbeam-utils]] -version = "0.8.19" +version = "0.8.20" criteria = "safe-to-deploy" [[exemptions.crunchy]] @@ -427,7 +419,7 @@ version = "0.13.4" criteria = "safe-to-deploy" [[exemptions.darling]] -version = "0.20.8" +version = "0.20.9" criteria = "safe-to-deploy" [[exemptions.darling_core]] @@ -435,7 +427,7 @@ version = "0.13.4" criteria = "safe-to-deploy" [[exemptions.darling_core]] -version = "0.20.8" +version = "0.20.9" criteria = "safe-to-deploy" [[exemptions.darling_macro]] @@ -443,7 +435,7 @@ version = "0.13.4" criteria = "safe-to-deploy" [[exemptions.darling_macro]] -version = "0.20.8" +version = "0.20.9" criteria = "safe-to-deploy" [[exemptions.der]] @@ -474,6 +466,10 @@ criteria = "safe-to-deploy" version = "4.0.3" criteria = "safe-to-deploy" +[[exemptions.either]] +version = "1.12.0" +criteria = "safe-to-deploy" + [[exemptions.elasticsearch]] version = "8.5.0-alpha.1" criteria = "safe-to-deploy" @@ -491,7 +487,7 @@ version = "0.2.0" criteria = "safe-to-deploy" [[exemptions.errno]] -version = "0.3.8" +version = "0.3.9" criteria = "safe-to-deploy" [[exemptions.eyre]] @@ -507,7 +503,7 @@ version = "0.13.0" criteria = "safe-to-deploy" [[exemptions.fiat-crypto]] -version = "0.2.8" +version = "0.2.9" criteria = "safe-to-deploy" [[exemptions.fixed-hash]] @@ -583,7 +579,7 @@ version = "0.1.16" criteria = "safe-to-deploy" [[exemptions.getrandom]] -version = "0.2.14" +version = "0.2.15" criteria = "safe-to-deploy" [[exemptions.gimli]] @@ -607,7 +603,7 @@ version = "0.3.26" criteria = "safe-to-deploy" [[exemptions.h2]] -version = "0.4.4" +version = "0.4.5" criteria = "safe-to-deploy" [[exemptions.half]] @@ -691,11 +687,11 @@ version = "1.0.0" criteria = "safe-to-deploy" [[exemptions.http-body-util]] -version = "0.1.1" +version = "0.1.2" criteria = "safe-to-deploy" [[exemptions.httparse]] -version = "1.8.0" +version = "1.9.4" criteria = "safe-to-deploy" [[exemptions.human_bytes]] @@ -711,7 +707,7 @@ version = "1.1.1" criteria = "safe-to-deploy" [[exemptions.hyper]] -version = "0.14.28" +version = "0.14.29" criteria = "safe-to-deploy" [[exemptions.hyper]] @@ -727,7 +723,7 @@ version = "0.4.1" criteria = "safe-to-deploy" [[exemptions.hyper-util]] -version = "0.1.3" +version = "0.1.5" criteria = "safe-to-deploy" [[exemptions.iana-time-zone]] @@ -783,7 +779,7 @@ version = "1.39.0" criteria = "safe-to-deploy" [[exemptions.instant]] -version = "0.1.12" +version = "0.1.13" criteria = "safe-to-deploy" [[exemptions.ipnet]] @@ -799,7 +795,7 @@ version = "1.70.0" criteria = "safe-to-deploy" [[exemptions.itertools]] -version = "0.10.5" +version = "0.12.1" criteria = "safe-to-deploy" [[exemptions.itertools]] @@ -843,7 +839,7 @@ version = "1.3.0" criteria = "safe-to-deploy" [[exemptions.libc]] -version = "0.2.154" +version = "0.2.155" criteria = "safe-to-deploy" [[exemptions.libgit2-sys]] @@ -851,7 +847,7 @@ version = "0.16.2+1.7.2" criteria = "safe-to-deploy" [[exemptions.libloading]] -version = "0.8.3" +version = "0.8.4" criteria = "safe-to-deploy" [[exemptions.libm]] @@ -867,11 +863,11 @@ version = "0.16.0+8.10.0" criteria = "safe-to-deploy" [[exemptions.libz-sys]] -version = "1.1.16" +version = "1.1.18" criteria = "safe-to-deploy" [[exemptions.linux-raw-sys]] -version = "0.4.13" +version = "0.4.14" criteria = "safe-to-deploy" [[exemptions.lock_api]] @@ -879,7 +875,7 @@ version = "0.4.12" criteria = "safe-to-deploy" [[exemptions.lz4-sys]] -version = "1.9.4" +version = "1.9.5" criteria = "safe-to-deploy" [[exemptions.matchers]] @@ -891,7 +887,7 @@ version = "0.7.3" criteria = "safe-to-deploy" [[exemptions.memchr]] -version = "2.7.2" +version = "2.7.4" criteria = "safe-to-deploy" [[exemptions.memuse]] @@ -919,7 +915,7 @@ version = "0.2.1" criteria = "safe-to-deploy" [[exemptions.miniz_oxide]] -version = "0.7.2" +version = "0.7.4" criteria = "safe-to-deploy" [[exemptions.mio]] @@ -951,7 +947,7 @@ version = "0.46.0" criteria = "safe-to-deploy" [[exemptions.num-bigint]] -version = "0.4.4" +version = "0.4.5" criteria = "safe-to-deploy" [[exemptions.num-format]] @@ -963,7 +959,7 @@ version = "0.1.46" criteria = "safe-to-deploy" [[exemptions.num-traits]] -version = "0.2.18" +version = "0.2.19" criteria = "safe-to-deploy" [[exemptions.num_cpus]] @@ -1023,11 +1019,11 @@ version = "0.23.0" criteria = "safe-to-deploy" [[exemptions.parity-scale-codec]] -version = "3.6.9" +version = "3.6.12" criteria = "safe-to-deploy" [[exemptions.parity-scale-codec-derive]] -version = "3.6.9" +version = "3.6.12" criteria = "safe-to-deploy" [[exemptions.parking_lot]] @@ -1035,7 +1031,7 @@ version = "0.11.2" criteria = "safe-to-deploy" [[exemptions.parking_lot]] -version = "0.12.2" +version = "0.12.3" criteria = "safe-to-deploy" [[exemptions.parking_lot_core]] @@ -1079,7 +1075,7 @@ version = "2.7.10" criteria = "safe-to-deploy" [[exemptions.petgraph]] -version = "0.6.4" +version = "0.6.5" criteria = "safe-to-deploy" [[exemptions.pin-project]] @@ -1103,15 +1099,15 @@ version = "0.3.30" criteria = "safe-to-deploy" [[exemptions.plotters]] -version = "0.3.5" +version = "0.3.6" criteria = "safe-to-run" [[exemptions.plotters-backend]] -version = "0.3.5" +version = "0.3.6" criteria = "safe-to-run" [[exemptions.plotters-svg]] -version = "0.3.5" +version = "0.3.6" criteria = "safe-to-run" [[exemptions.poly1305]] @@ -1127,7 +1123,7 @@ version = "0.2.17" criteria = "safe-to-deploy" [[exemptions.prettyplease]] -version = "0.2.19" +version = "0.2.20" criteria = "safe-to-deploy" [[exemptions.primitive-types]] @@ -1139,7 +1135,7 @@ version = "0.1.5" criteria = "safe-to-deploy" [[exemptions.proc-macro-crate]] -version = "2.0.0" +version = "3.1.0" criteria = "safe-to-deploy" [[exemptions.proc-macro-error]] @@ -1147,7 +1143,7 @@ version = "1.0.4" criteria = "safe-to-deploy" [[exemptions.proptest]] -version = "1.4.0" +version = "1.5.0" criteria = "safe-to-deploy" [[exemptions.proptest-derive]] @@ -1159,7 +1155,7 @@ version = "0.12.6" criteria = "safe-to-deploy" [[exemptions.prost-build]] -version = "0.12.4" +version = "0.12.6" criteria = "safe-to-deploy" [[exemptions.prost-derive]] @@ -1167,7 +1163,7 @@ version = "0.12.6" criteria = "safe-to-deploy" [[exemptions.prost-types]] -version = "0.12.4" +version = "0.12.6" criteria = "safe-to-deploy" [[exemptions.quanta]] @@ -1243,7 +1239,7 @@ version = "0.2.16" criteria = "safe-to-deploy" [[exemptions.redox_syscall]] -version = "0.5.1" +version = "0.5.2" criteria = "safe-to-deploy" [[exemptions.redox_users]] @@ -1251,7 +1247,7 @@ version = "0.4.5" criteria = "safe-to-deploy" [[exemptions.regex]] -version = "1.10.4" +version = "1.10.5" criteria = "safe-to-deploy" [[exemptions.regex-automata]] @@ -1259,7 +1255,7 @@ version = "0.1.10" criteria = "safe-to-deploy" [[exemptions.regex-automata]] -version = "0.4.6" +version = "0.4.7" criteria = "safe-to-deploy" [[exemptions.regex-syntax]] @@ -1267,7 +1263,7 @@ version = "0.6.29" criteria = "safe-to-deploy" [[exemptions.regex-syntax]] -version = "0.8.3" +version = "0.8.4" criteria = "safe-to-deploy" [[exemptions.reqwest]] @@ -1303,7 +1299,7 @@ version = "0.7.1" criteria = "safe-to-deploy" [[exemptions.rustc-demangle]] -version = "0.1.23" +version = "0.1.24" criteria = "safe-to-deploy" [[exemptions.rustc-hex]] @@ -1335,7 +1331,7 @@ version = "0.3.0" criteria = "safe-to-deploy" [[exemptions.ryu]] -version = "1.0.17" +version = "1.0.18" criteria = "safe-to-deploy" [[exemptions.sapling-crypto]] @@ -1402,10 +1398,6 @@ criteria = "safe-to-deploy" version = "0.5.1" criteria = "safe-to-deploy" -[[exemptions.serde_json]] -version = "1.0.117" -criteria = "safe-to-deploy" - [[exemptions.serde_spanned]] version = "0.6.6" criteria = "safe-to-deploy" @@ -1518,14 +1510,6 @@ criteria = "safe-to-deploy" version = "2.4.1" criteria = "safe-to-deploy" -[[exemptions.syn]] -version = "1.0.109" -criteria = "safe-to-deploy" - -[[exemptions.syn]] -version = "2.0.66" -criteria = "safe-to-deploy" - [[exemptions.sync_wrapper]] version = "0.1.2" criteria = "safe-to-deploy" @@ -1575,7 +1559,7 @@ version = "0.3.36" criteria = "safe-to-deploy" [[exemptions.tokio]] -version = "1.37.0" +version = "1.38.0" criteria = "safe-to-deploy" [[exemptions.tokio-io-timeout]] @@ -1583,7 +1567,7 @@ version = "1.2.0" criteria = "safe-to-deploy" [[exemptions.tokio-macros]] -version = "2.2.0" +version = "2.3.0" criteria = "safe-to-deploy" [[exemptions.tokio-rustls]] @@ -1607,7 +1591,7 @@ version = "0.5.11" criteria = "safe-to-deploy" [[exemptions.toml]] -version = "0.8.13" +version = "0.8.14" criteria = "safe-to-deploy" [[exemptions.toml_datetime]] @@ -1615,11 +1599,11 @@ version = "0.6.6" criteria = "safe-to-deploy" [[exemptions.toml_edit]] -version = "0.20.7" +version = "0.21.1" criteria = "safe-to-deploy" [[exemptions.toml_edit]] -version = "0.22.13" +version = "0.22.14" criteria = "safe-to-deploy" [[exemptions.tonic]] @@ -1639,11 +1623,11 @@ version = "0.4.13" criteria = "safe-to-deploy" [[exemptions.tower-batch-control]] -version = "0.2.41-beta.13" +version = "0.2.41-beta.14" criteria = "safe-to-deploy" [[exemptions.tower-fallback]] -version = "0.2.41-beta.13" +version = "0.2.41-beta.14" criteria = "safe-to-deploy" [[exemptions.tower-layer]] @@ -1703,11 +1687,11 @@ version = "0.3.18" criteria = "safe-to-deploy" [[exemptions.tracing-test]] -version = "0.2.4" +version = "0.2.5" criteria = "safe-to-run" [[exemptions.tracing-test-macro]] -version = "0.2.4" +version = "0.2.5" criteria = "safe-to-run" [[exemptions.try-lock]] @@ -1742,6 +1726,10 @@ criteria = "safe-to-deploy" version = "0.3.15" criteria = "safe-to-deploy" +[[exemptions.unicode-width]] +version = "0.1.13" +criteria = "safe-to-deploy" + [[exemptions.universal-hash]] version = "0.5.1" criteria = "safe-to-deploy" @@ -1762,8 +1750,16 @@ criteria = "safe-to-deploy" version = "2.9.1" criteria = "safe-to-deploy" +[[exemptions.url]] +version = "2.5.2" +criteria = "safe-to-deploy" + +[[exemptions.utf8parse]] +version = "0.2.2" +criteria = "safe-to-deploy" + [[exemptions.uuid]] -version = "1.8.0" +version = "1.9.1" criteria = "safe-to-deploy" [[exemptions.valuable]] @@ -1939,7 +1935,7 @@ version = "0.5.40" criteria = "safe-to-deploy" [[exemptions.winnow]] -version = "0.6.7" +version = "0.6.13" criteria = "safe-to-deploy" [[exemptions.winreg]] @@ -1983,7 +1979,7 @@ version = "0.4.0" criteria = "safe-to-deploy" [[exemptions.zcash_primitives]] -version = "0.15.0" +version = "0.15.1" criteria = "safe-to-deploy" [[exemptions.zcash_proofs]] @@ -2003,55 +1999,55 @@ version = "0.1.0" criteria = "safe-to-deploy" [[exemptions.zebra-chain]] -version = "1.0.0-beta.37" +version = "1.0.0-beta.38" criteria = "safe-to-deploy" [[exemptions.zebra-consensus]] -version = "1.0.0-beta.37" +version = "1.0.0-beta.38" criteria = "safe-to-deploy" [[exemptions.zebra-grpc]] -version = "0.1.0-alpha.4" +version = "0.1.0-alpha.5" criteria = "safe-to-deploy" [[exemptions.zebra-network]] -version = "1.0.0-beta.37" +version = "1.0.0-beta.38" criteria = "safe-to-deploy" [[exemptions.zebra-node-services]] -version = "1.0.0-beta.37" +version = "1.0.0-beta.38" criteria = "safe-to-deploy" [[exemptions.zebra-rpc]] -version = "1.0.0-beta.37" +version = "1.0.0-beta.38" criteria = "safe-to-deploy" [[exemptions.zebra-scan]] -version = "0.1.0-alpha.6" +version = "0.1.0-alpha.7" criteria = "safe-to-deploy" [[exemptions.zebra-script]] -version = "1.0.0-beta.37" +version = "1.0.0-beta.38" criteria = "safe-to-deploy" [[exemptions.zebra-state]] -version = "1.0.0-beta.37" +version = "1.0.0-beta.38" criteria = "safe-to-deploy" [[exemptions.zebra-test]] -version = "1.0.0-beta.37" +version = "1.0.0-beta.38" criteria = "safe-to-deploy" [[exemptions.zebra-utils]] -version = "1.0.0-beta.37" +version = "1.0.0-beta.38" criteria = "safe-to-deploy" [[exemptions.zebrad]] -version = "1.7.0" +version = "1.8.0" criteria = "safe-to-deploy" [[exemptions.zeroize]] -version = "1.7.0" +version = "1.8.1" criteria = "safe-to-deploy" [[exemptions.zeroize_derive]] diff --git a/supply-chain/imports.lock b/supply-chain/imports.lock index 72680a30464..f6f1a99c47d 100644 --- a/supply-chain/imports.lock +++ b/supply-chain/imports.lock @@ -8,6 +8,27 @@ user-id = 3788 user-login = "emilio" user-name = "Emilio Cobos Álvarez" +[[publisher.clap]] +version = "4.5.8" +when = "2024-06-28" +user-id = 6743 +user-login = "epage" +user-name = "Ed Page" + +[[publisher.clap_builder]] +version = "4.5.8" +when = "2024-06-28" +user-id = 6743 +user-login = "epage" +user-name = "Ed Page" + +[[publisher.clap_derive]] +version = "4.5.8" +when = "2024-06-28" +user-id = 6743 +user-login = "epage" +user-name = "Ed Page" + [[publisher.core-foundation]] version = "0.9.3" when = "2022-02-07" @@ -22,6 +43,27 @@ user-id = 4484 user-login = "hsivonen" user-name = "Henri Sivonen" +[[publisher.serde_json]] +version = "1.0.120" +when = "2024-07-01" +user-id = 3618 +user-login = "dtolnay" +user-name = "David Tolnay" + +[[publisher.syn]] +version = "1.0.109" +when = "2023-02-24" +user-id = 3618 +user-login = "dtolnay" +user-name = "David Tolnay" + +[[publisher.syn]] +version = "2.0.69" +when = "2024-07-06" +user-id = 3618 +user-login = "dtolnay" +user-name = "David Tolnay" + [[publisher.unicode-normalization]] version = "0.1.23" when = "2024-02-20" @@ -36,13 +78,6 @@ user-id = 1139 user-login = "Manishearth" user-name = "Manish Goregaokar" -[[publisher.unicode-width]] -version = "0.1.12" -when = "2024-04-26" -user-id = 1139 -user-login = "Manishearth" -user-name = "Manish Goregaokar" - [[audits.google.audits.async-stream]] who = "Tyler Mandry " criteria = "safe-to-deploy" @@ -127,6 +162,13 @@ criteria = "safe-to-deploy" delta = "2.4.2 -> 2.5.0" aggregated-from = "https://chromium.googlesource.com/chromium/src/+/main/third_party/rust/chromium_crates_io/supply-chain/audits.toml?format=TEXT" +[[audits.google.audits.bitflags]] +who = "Adrian Taylor " +criteria = "safe-to-deploy" +delta = "2.5.0 -> 2.6.0" +notes = "The changes from the previous version are negligible and thus it retains the same properties." +aggregated-from = "https://chromium.googlesource.com/chromium/src/+/main/third_party/rust/chromium_crates_io/supply-chain/audits.toml?format=TEXT" + [[audits.google.audits.bytemuck]] who = "Lukasz Anforowicz " criteria = "safe-to-deploy" @@ -140,6 +182,22 @@ criteria = "safe-to-deploy" delta = "1.14.3 -> 1.15.0" aggregated-from = "https://chromium.googlesource.com/chromium/src/+/main/third_party/rust/chromium_crates_io/supply-chain/audits.toml?format=TEXT" +[[audits.google.audits.bytemuck]] +who = "danakj " +criteria = "safe-to-deploy" +delta = "1.15.0 -> 1.16.0" +aggregated-from = "https://chromium.googlesource.com/chromium/src/+/main/third_party/rust/chromium_crates_io/supply-chain/audits.toml?format=TEXT" + +[[audits.google.audits.bytemuck]] +who = "Lukasz Anforowicz " +criteria = "safe-to-deploy" +delta = "1.16.0 -> 1.16.1" +notes = """ +The delta only adds `f16` and `f128` support (with some other minor changes) +and has no impact on the audit criteria. +""" +aggregated-from = "https://chromium.googlesource.com/chromium/src/+/main/third_party/rust/chromium_crates_io/supply-chain/audits.toml?format=TEXT" + [[audits.google.audits.cast]] who = "George Burgess IV " criteria = "safe-to-run" @@ -180,6 +238,12 @@ criteria = "safe-to-deploy" version = "1.0.3" aggregated-from = "https://chromium.googlesource.com/chromiumos/third_party/rust_crates/+/refs/heads/main/cargo-vet/audits.toml?format=TEXT" +[[audits.google.audits.itertools]] +who = "ChromeOS" +criteria = "safe-to-run" +version = "0.10.5" +aggregated-from = "https://chromium.googlesource.com/chromiumos/third_party/rust_crates/+/refs/heads/main/cargo-vet/audits.toml?format=TEXT" + [[audits.google.audits.itoa]] who = "Lukasz Anforowicz " criteria = "safe-to-deploy" @@ -223,6 +287,13 @@ This crate has been added to Chromium in https://crrev.com/c/3321895. ''' aggregated-from = "https://chromium.googlesource.com/chromium/src/+/main/third_party/rust/chromium_crates_io/supply-chain/audits.toml?format=TEXT" +[[audits.google.audits.lazy_static]] +who = "Lukasz Anforowicz " +criteria = "safe-to-deploy" +delta = "1.4.0 -> 1.5.0" +notes = "Unsafe review notes: https://crrev.com/c/5650836" +aggregated-from = "https://chromium.googlesource.com/chromium/src/+/main/third_party/rust/chromium_crates_io/supply-chain/audits.toml?format=TEXT" + [[audits.google.audits.nom]] who = "danakj@chromium.org" criteria = "safe-to-deploy" @@ -309,6 +380,25 @@ delta = "1.0.83 -> 1.0.84" notes = "Only doc comment changes in `src/lib.rs`." aggregated-from = "https://chromium.googlesource.com/chromium/src/+/main/third_party/rust/chromium_crates_io/supply-chain/audits.toml?format=TEXT" +[[audits.google.audits.proc-macro2]] +who = "danakj@chromium.org" +criteria = "safe-to-deploy" +delta = "1.0.84 -> 1.0.85" +notes = "Test-only changes." +aggregated-from = "https://chromium.googlesource.com/chromium/src/+/main/third_party/rust/chromium_crates_io/supply-chain/audits.toml?format=TEXT" + +[[audits.google.audits.proc-macro2]] +who = "Lukasz Anforowicz " +criteria = "safe-to-deploy" +delta = "1.0.85 -> 1.0.86" +notes = """ +Comment-only changes in `build.rs`. +Reordering of `Cargo.toml` entries. +Just bumping up the version number in `lib.rs`. +Config-related changes in `test_size.rs`. +""" +aggregated-from = "https://chromium.googlesource.com/chromium/src/+/main/third_party/rust/chromium_crates_io/supply-chain/audits.toml?format=TEXT" + [[audits.google.audits.quote]] who = "Lukasz Anforowicz " criteria = "safe-to-deploy" @@ -360,6 +450,19 @@ criteria = "safe-to-deploy" delta = "1.0.14 -> 1.0.15" aggregated-from = "https://chromium.googlesource.com/chromium/src/+/main/third_party/rust/chromium_crates_io/supply-chain/audits.toml?format=TEXT" +[[audits.google.audits.rustversion]] +who = "danakj " +criteria = "safe-to-deploy" +delta = "1.0.15 -> 1.0.16" +aggregated-from = "https://chromium.googlesource.com/chromium/src/+/main/third_party/rust/chromium_crates_io/supply-chain/audits.toml?format=TEXT" + +[[audits.google.audits.rustversion]] +who = "Dustin J. Mitchell " +criteria = "safe-to-deploy" +delta = "1.0.16 -> 1.0.17" +notes = "Just updates windows compat" +aggregated-from = "https://chromium.googlesource.com/chromium/src/+/main/third_party/rust/chromium_crates_io/supply-chain/audits.toml?format=TEXT" + [[audits.google.audits.same-file]] who = "Android Legacy" criteria = "safe-to-run" @@ -415,6 +518,12 @@ delta = "1.0.202 -> 1.0.203" notes = "s/doc_cfg/docsrs/ + tuple_impls/tuple_impl_body-related changes" aggregated-from = "https://chromium.googlesource.com/chromium/src/+/main/third_party/rust/chromium_crates_io/supply-chain/audits.toml?format=TEXT" +[[audits.google.audits.serde]] +who = "Adrian Taylor " +criteria = "safe-to-deploy" +delta = "1.0.203 -> 1.0.204" +aggregated-from = "https://chromium.googlesource.com/chromium/src/+/main/third_party/rust/chromium_crates_io/supply-chain/audits.toml?format=TEXT" + [[audits.google.audits.serde_derive]] who = "Lukasz Anforowicz " criteria = "safe-to-deploy" @@ -441,6 +550,12 @@ delta = "1.0.202 -> 1.0.203" notes = "Grepped for \"unsafe\", \"crypt\", \"cipher\", \"fs\", \"net\" - there were no hits" aggregated-from = "https://chromium.googlesource.com/chromium/src/+/main/third_party/rust/chromium_crates_io/supply-chain/audits.toml?format=TEXT" +[[audits.google.audits.serde_derive]] +who = "Adrian Taylor " +criteria = "safe-to-deploy" +delta = "1.0.203 -> 1.0.204" +aggregated-from = "https://chromium.googlesource.com/chromium/src/+/main/third_party/rust/chromium_crates_io/supply-chain/audits.toml?format=TEXT" + [[audits.google.audits.static_assertions]] who = "Lukasz Anforowicz " criteria = "safe-to-deploy" @@ -496,6 +611,18 @@ https://source.chromium.org/chromium/chromium/src/+/24773c33e1b7a1b5069b9399fd03 """ aggregated-from = "https://chromium.googlesource.com/chromium/src/+/main/third_party/rust/chromium_crates_io/supply-chain/audits.toml?format=TEXT" +[[audits.google.audits.tinyvec]] +who = "Adrian Taylor " +criteria = "safe-to-deploy" +delta = "1.6.0 -> 1.6.1" +aggregated-from = "https://chromium.googlesource.com/chromium/src/+/main/third_party/rust/chromium_crates_io/supply-chain/audits.toml?format=TEXT" + +[[audits.google.audits.tinyvec]] +who = "Adrian Taylor " +criteria = "safe-to-deploy" +delta = "1.6.1 -> 1.7.0" +aggregated-from = "https://chromium.googlesource.com/chromium/src/+/main/third_party/rust/chromium_crates_io/supply-chain/audits.toml?format=TEXT" + [[audits.google.audits.tinyvec_macros]] who = "George Burgess IV " criteria = "safe-to-deploy" @@ -538,13 +665,6 @@ criteria = "safe-to-deploy" version = "0.2.4" aggregated-from = "https://chromium.googlesource.com/chromiumos/third_party/rust_crates/+/refs/heads/main/cargo-vet/audits.toml?format=TEXT" -[[audits.google.audits.utf8parse]] -who = "David Koloski " -criteria = "safe-to-deploy" -version = "0.2.1" -notes = "Reviewed on https://fxrev.dev/904811" -aggregated-from = "https://fuchsia.googlesource.com/fuchsia/+/refs/heads/main/third_party/rust_crates/supply-chain/audits.toml?format=TEXT" - [[audits.google.audits.version_check]] who = "George Burgess IV " criteria = "safe-to-deploy" @@ -603,15 +723,6 @@ end = "2024-05-03" notes = "All code written or reviewed by Manish" aggregated-from = "https://hg.mozilla.org/mozilla-central/raw-file/tip/supply-chain/audits.toml" -[[audits.mozilla.wildcard-audits.unicode-width]] -who = "Manish Goregaokar " -criteria = "safe-to-deploy" -user-id = 1139 # Manish Goregaokar (Manishearth) -start = "2019-12-05" -end = "2024-05-03" -notes = "All code written or reviewed by Manish" -aggregated-from = "https://hg.mozilla.org/mozilla-central/raw-file/tip/supply-chain/audits.toml" - [[audits.mozilla.audits.android_system_properties]] who = "Nicolas Silva " criteria = "safe-to-deploy" @@ -731,34 +842,6 @@ criteria = "safe-to-deploy" version = "0.2.8" aggregated-from = "https://hg.mozilla.org/mozilla-central/raw-file/tip/supply-chain/audits.toml" -[[audits.mozilla.audits.either]] -who = "Nika Layzell " -criteria = "safe-to-deploy" -version = "1.6.1" -notes = """ -Straightforward crate providing the Either enum and trait implementations with -no unsafe code. -""" -aggregated-from = "https://raw.githubusercontent.com/mozilla/cargo-vet/main/supply-chain/audits.toml" - -[[audits.mozilla.audits.either]] -who = "Mike Hommey " -criteria = "safe-to-deploy" -delta = "1.6.1 -> 1.7.0" -aggregated-from = "https://hg.mozilla.org/mozilla-central/raw-file/tip/supply-chain/audits.toml" - -[[audits.mozilla.audits.either]] -who = "Mike Hommey " -criteria = "safe-to-deploy" -delta = "1.7.0 -> 1.8.0" -aggregated-from = "https://hg.mozilla.org/mozilla-central/raw-file/tip/supply-chain/audits.toml" - -[[audits.mozilla.audits.either]] -who = "Mike Hommey " -criteria = "safe-to-deploy" -delta = "1.8.0 -> 1.8.1" -aggregated-from = "https://hg.mozilla.org/mozilla-central/raw-file/tip/supply-chain/audits.toml" - [[audits.mozilla.audits.fastrand]] who = "Mike Hommey " criteria = "safe-to-deploy" @@ -911,24 +994,6 @@ criteria = "safe-to-deploy" delta = "0.2.10 -> 0.2.18" aggregated-from = "https://hg.mozilla.org/mozilla-central/raw-file/tip/supply-chain/audits.toml" -[[audits.mozilla.audits.url]] -who = "Valentin Gosu " -criteria = "safe-to-deploy" -version = "2.4.0" -aggregated-from = "https://hg.mozilla.org/mozilla-central/raw-file/tip/supply-chain/audits.toml" - -[[audits.mozilla.audits.url]] -who = "Valentin Gosu " -criteria = "safe-to-deploy" -delta = "2.4.0 -> 2.4.1" -aggregated-from = "https://hg.mozilla.org/mozilla-central/raw-file/tip/supply-chain/audits.toml" - -[[audits.mozilla.audits.url]] -who = "Valentin Gosu " -criteria = "safe-to-deploy" -delta = "2.4.1 -> 2.5.0" -aggregated-from = "https://hg.mozilla.org/mozilla-central/raw-file/tip/supply-chain/audits.toml" - [[audits.mozilla.audits.zerocopy]] who = "Alex Franchuk " criteria = "safe-to-deploy" @@ -949,17 +1014,11 @@ version = "0.7.32" notes = "Clean, safe macros for zerocopy." aggregated-from = "https://hg.mozilla.org/mozilla-central/raw-file/tip/supply-chain/audits.toml" -[[audits.zcash.audits.either]] -who = "Jack Grigg " -criteria = "safe-to-deploy" -delta = "1.8.1 -> 1.9.0" -aggregated-from = "https://raw.githubusercontent.com/zcash/zcash/master/qa/supply-chain/audits.toml" - -[[audits.zcash.audits.either]] +[[audits.zcash.audits.autocfg]] who = "Daira-Emma Hopwood " criteria = "safe-to-deploy" -delta = "1.9.0 -> 1.11.0" -aggregated-from = "https://raw.githubusercontent.com/zcash/zcash/master/qa/supply-chain/audits.toml" +delta = "1.2.0 -> 1.3.0" +aggregated-from = "https://raw.githubusercontent.com/zcash/librustzcash/main/supply-chain/audits.toml" [[audits.zcash.audits.fastrand]] who = "Jack Grigg " @@ -1171,4 +1230,16 @@ criteria = "safe-to-deploy" version = "0.2.92" aggregated-from = "https://raw.githubusercontent.com/zcash/zcash/master/qa/supply-chain/audits.toml" +[[audits.zcash.audits.zerocopy]] +who = "Daira-Emma Hopwood " +criteria = "safe-to-deploy" +delta = "0.7.32 -> 0.7.34" +aggregated-from = "https://raw.githubusercontent.com/zcash/librustzcash/main/supply-chain/audits.toml" + +[[audits.zcash.audits.zerocopy-derive]] +who = "Daira-Emma Hopwood " +criteria = "safe-to-deploy" +delta = "0.7.32 -> 0.7.34" +aggregated-from = "https://raw.githubusercontent.com/zcash/librustzcash/main/supply-chain/audits.toml" + [audits.zcashd.audits]