cargo update

zcash · Jan 13, 2023 · 0de7a08 · 0de7a08
1 parent e91fe01
commit 0de7a08
Show file tree

Hide file tree

Showing 2 changed files with 91 additions and 18 deletions.
diff --git a/Cargo.lock b/Cargo.lock
diff --git a/qa/supply-chain/audits.toml b/qa/supply-chain/audits.toml
@@ -376,6 +376,11 @@ who = "Jack Grigg <jack@z.cash>"
 criteria = "safe-to-deploy"
 delta = "1.14.0 -> 1.15.0"
 
+[[audits.object]]
+who = "Jack Grigg <jack@z.cash>"
+criteria = "safe-to-deploy"
+delta = "0.30.1 -> 0.30.2"
+
 [[audits.orchard]]
 who = "Jack Grigg <jack@z.cash>"
 criteria = ["crypto-reviewed", "safe-to-deploy"]
@@ -404,6 +409,11 @@ who = "Jack Grigg <jack@z.cash>"
 criteria = "safe-to-deploy"
 delta = "0.8.5 -> 0.9.3"
 
+[[audits.parking_lot_core]]
+who = "Jack Grigg <jack@z.cash>"
+criteria = "safe-to-deploy"
+delta = "0.9.5 -> 0.9.6"
+
 [[audits.pasta_curves]]
 who = "Jack Grigg <jack@z.cash>"
 criteria = "safe-to-deploy"
@@ -519,6 +529,15 @@ criteria = "safe-to-deploy"
 delta = "0.4.1 -> 0.5.0"
 notes = "I checked correctness of to_blocks which uses unsafe code in a safe function."
 
+[[audits.windows_aarch64_gnullvm]]
+who = "Jack Grigg <jack@z.cash>"
+criteria = "safe-to-deploy"
+delta = "0.42.0 -> 0.42.1"
+notes = """
+This is a Windows API bindings library maintained by Microsoft themselves.
+Changes are to a bundled binary library; it looks like these were accidentally left out of 0.42.0.
+"""
+
 [[audits.windows_aarch64_msvc]]
 who = "Jack Grigg <jack@z.cash>"
 criteria = "safe-to-run"
@@ -530,6 +549,15 @@ https://github.com/microsoft/windows-rs/pull/1217 for context. I did not
 audit the binary blob, but the build script looks fine.
 """
 
+[[audits.windows_aarch64_msvc]]
+who = "Jack Grigg <jack@z.cash>"
+criteria = "safe-to-deploy"
+delta = "0.42.0 -> 0.42.1"
+notes = """
+This is a Windows API bindings library maintained by Microsoft themselves.
+Changes are to a bundled binary library; it looks like these were accidentally left out of 0.42.0.
+"""
+
 [[audits.windows_i686_gnu]]
 who = "Jack Grigg <jack@z.cash>"
 criteria = "safe-to-run"
@@ -541,6 +569,15 @@ https://github.com/microsoft/windows-rs/pull/1217 for context. I did not
 audit the binary blob, but the build script looks fine.
 """
 
+[[audits.windows_i686_gnu]]
+who = "Jack Grigg <jack@z.cash>"
+criteria = "safe-to-deploy"
+delta = "0.42.0 -> 0.42.1"
+notes = """
+This is a Windows API bindings library maintained by Microsoft themselves.
+Changes are to a bundled binary library; it looks like these were accidentally left out of 0.42.0.
+"""
+
 [[audits.windows_i686_msvc]]
 who = "Jack Grigg <jack@z.cash>"
 criteria = "safe-to-run"
@@ -552,6 +589,15 @@ https://github.com/microsoft/windows-rs/pull/1217 for context. I did not
 audit the binary blob, but the build script looks fine.
 """
 
+[[audits.windows_i686_msvc]]
+who = "Jack Grigg <jack@z.cash>"
+criteria = "safe-to-deploy"
+delta = "0.42.0 -> 0.42.1"
+notes = """
+This is a Windows API bindings library maintained by Microsoft themselves.
+Changes are to a bundled binary library; it looks like these were accidentally left out of 0.42.0.
+"""
+
 [[audits.windows_x86_64_gnu]]
 who = "Jack Grigg <jack@z.cash>"
 criteria = "safe-to-run"
@@ -563,6 +609,24 @@ https://github.com/microsoft/windows-rs/pull/1217 for context. I did not
 audit the binary blob, but the build script looks fine.
 """
 
+[[audits.windows_x86_64_gnu]]
+who = "Jack Grigg <jack@z.cash>"
+criteria = "safe-to-deploy"
+delta = "0.42.0 -> 0.42.1"
+notes = """
+This is a Windows API bindings library maintained by Microsoft themselves.
+Changes are to a bundled binary library; it looks like these were accidentally left out of 0.42.0.
+"""
+
+[[audits.windows_x86_64_gnullvm]]
+who = "Jack Grigg <jack@z.cash>"
+criteria = "safe-to-deploy"
+delta = "0.42.0 -> 0.42.1"
+notes = """
+This is a Windows API bindings library maintained by Microsoft themselves.
+Changes are to a bundled binary library; it looks like these were accidentally left out of 0.42.0.
+"""
+
 [[audits.windows_x86_64_msvc]]
 who = "Jack Grigg <jack@z.cash>"
 criteria = "safe-to-run"
@@ -574,6 +638,15 @@ https://github.com/microsoft/windows-rs/pull/1217 for context. I did not
 audit the binary blob, but the build script looks fine.
 """
 
+[[audits.windows_x86_64_msvc]]
+who = "Jack Grigg <jack@z.cash>"
+criteria = "safe-to-deploy"
+delta = "0.42.0 -> 0.42.1"
+notes = """
+This is a Windows API bindings library maintained by Microsoft themselves.
+Changes are to a bundled binary library; it looks like these were accidentally left out of 0.42.0.
+"""
+
 [[audits.wyz]]
 who = "Jack Grigg <jack@z.cash>"
 criteria = "safe-to-deploy"