build(deps): Bump aes from 0.8.3 to 0.8.4 (#950)

* build(deps): Bump aes from 0.8.3 to 0.8.4

Bumps [aes](https://github.com/RustCrypto/block-ciphers) from 0.8.3 to 0.8.4.
- [Commits](RustCrypto/block-ciphers@aes-v0.8.3...aes-v0.8.4)

---
updated-dependencies:
- dependency-name: aes
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>

* import cargo vet audits from main

---------

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: Tim Geoghegan <timg@divviup.org>

Cargo.toml

@@ -11,7 +11,7 @@ rust-version = "1.71"
 resolver = "2"
 
 [dependencies]
-aes = { version = "0.8.3", optional = true }
+aes = { version = "0.8.4", optional = true }
 bitvec = { version = "1.0.1", optional = true }
 byteorder = "1.5.0"
 ctr = { version = "0.9.2", optional = true }

supply-chain/imports.lock

@@ -440,6 +440,16 @@ criteria = "safe-to-run"
 version = "2.3.2"
 aggregated-from = "https://chromium.googlesource.com/chromiumos/third_party/rust_crates/+/refs/heads/main/cargo-vet/audits.toml?format=TEXT"
 
+[[audits.isrg.audits.aes]]
+who = "Tim Geoghegan <timg@divviup.org>"
+criteria = "safe-to-deploy"
+delta = "0.8.3 -> 0.8.4"
+notes = """
+Change affects some unsafe code. The only functional change is to add an
+assertion checking alignment and to change an `as *mut u32` cast to a
+call to `std::pointer::cast`.
+"""
+
 [[audits.isrg.audits.base64]]
 who = "Brandon Pitman <bran@bran.land>"
 criteria = "safe-to-run"