diff --git a/Cargo.lock b/Cargo.lock index be7b52d2..78aa9402 100644 --- a/Cargo.lock +++ b/Cargo.lock @@ -118,9 +118,9 @@ dependencies = [ [[package]] name = "anyhow" -version = "1.0.103" +version = "1.0.104" source = "registry+https://github.com/rust-lang/crates.io-index" -checksum = "2a4385e2e34eb35d6b3efe798b9eb88096925d87726c0798709bf56d9ed84af3" +checksum = "330a5ed07fa54e4702c9d6c4174f74427fc0ef6e214bbd677ae50a5099946470" [[package]] name = "ar_archive_writer" @@ -494,7 +494,7 @@ version = "0.3.0" source = "registry+https://github.com/rust-lang/crates.io-index" checksum = "0fa961b519f0b462e3a3b4a34b64d119eeaca1d59af726fe450bbba07a9fc0a1" dependencies = [ - "thiserror 2.0.18", + "thiserror 2.0.19", ] [[package]] @@ -510,7 +510,7 @@ source = "registry+https://github.com/rust-lang/crates.io-index" checksum = "1b60b5124979fccd9addd89d8b97a1d6eebb4950694520c75ddd722535ea443f" dependencies = [ "nix 0.31.3", - "thiserror 2.0.18", + "thiserror 2.0.19", ] [[package]] @@ -760,7 +760,7 @@ version = "1.0.0" source = "registry+https://github.com/rust-lang/crates.io-index" checksum = "10d60334b3b2e7c9d91ef8150abfb6fa4c1c39ebbcf4a81c2e346aad939fee3e" dependencies = [ - "thiserror 2.0.18", + "thiserror 2.0.19", ] [[package]] @@ -1490,7 +1490,7 @@ dependencies = [ "log", "netlink-packet-core", "netlink-sys", - "thiserror 2.0.18", + "thiserror 2.0.19", ] [[package]] @@ -1947,7 +1947,7 @@ dependencies = [ "static_assertions", "tempfile", "test_bin", - "thiserror 2.0.18", + "thiserror 2.0.19", "toml", "uds", "zerocopy", @@ -1962,7 +1962,7 @@ dependencies = [ "rosenpass-oqs", "rosenpass-secret-memory", "rosenpass-to", - "thiserror 2.0.18", + "thiserror 2.0.19", ] [[package]] @@ -1982,7 +1982,7 @@ dependencies = [ "rosenpass-util", "shake", "static_assertions", - "thiserror 2.0.18", + "thiserror 2.0.19", "zeroize", ] @@ -2094,7 +2094,7 @@ dependencies = [ "rustix", "static_assertions", "tempfile", - "thiserror 2.0.18", + "thiserror 2.0.19", "tokio", "typenum", "uds", @@ -2119,7 +2119,7 @@ dependencies = [ "rosenpass-to", "rosenpass-util", "rustix", - "thiserror 2.0.18", + "thiserror 2.0.19", "tokio", "wireguard-uapi", "zerocopy", @@ -2447,6 +2447,17 @@ dependencies = [ "unicode-ident", ] +[[package]] +name = "syn" +version = "3.0.0" +source = "registry+https://github.com/rust-lang/crates.io-index" +checksum = "f2fac314a64dc9a36e61a9eb4261a5e9bbfbc922b27e518af97bc32b926cf967" +dependencies = [ + "proc-macro2", + "quote", + "unicode-ident", +] + [[package]] name = "take-until" version = "0.1.0" @@ -2483,11 +2494,11 @@ dependencies = [ [[package]] name = "thiserror" -version = "2.0.18" +version = "2.0.19" source = "registry+https://github.com/rust-lang/crates.io-index" -checksum = "4288b5bcbc7920c07a1149a35cf9590a2aa808e0bc1eafaade0b80947865fbc4" +checksum = "09a43598840e33d5b0331f38c5e30d13bb11c11210a4b58f0d9b18a5a5eefcd9" dependencies = [ - "thiserror-impl 2.0.18", + "thiserror-impl 2.0.19", ] [[package]] @@ -2503,13 +2514,13 @@ dependencies = [ [[package]] name = "thiserror-impl" -version = "2.0.18" +version = "2.0.19" source = "registry+https://github.com/rust-lang/crates.io-index" -checksum = "ebc4ee7f67670e9b64d05fa4253e753e016c6c95ff35b89b7941d6b856dec1d5" +checksum = "43cbfe0cf76104d42a574802844187e84a305e531ed54455f11fbde0f10541cd" dependencies = [ "proc-macro2", "quote", - "syn 2.0.119", + "syn 3.0.0", ] [[package]] diff --git a/supply-chain/config.toml b/supply-chain/config.toml index 7342dcc6..9367665a 100644 --- a/supply-chain/config.toml +++ b/supply-chain/config.toml @@ -73,6 +73,10 @@ criteria = "safe-to-deploy" version = "3.0.11" criteria = "safe-to-deploy" +[[exemptions.anyhow]] +version = "1.0.104" +criteria = "safe-to-deploy" + [[exemptions.ar_archive_writer]] version = "0.5.2" criteria = "safe-to-deploy" @@ -725,6 +729,10 @@ criteria = "safe-to-deploy" version = "2.0.119" criteria = "safe-to-deploy" +[[exemptions.syn]] +version = "3.0.0" +criteria = "safe-to-deploy" + [[exemptions.take-until]] version = "0.1.0" criteria = "safe-to-deploy" @@ -738,11 +746,11 @@ version = "0.6.1" criteria = "safe-to-run" [[exemptions.thiserror]] -version = "2.0.17" +version = "2.0.19" criteria = "safe-to-deploy" [[exemptions.thiserror-impl]] -version = "2.0.17" +version = "2.0.19" criteria = "safe-to-deploy" [[exemptions.tokio]] diff --git a/supply-chain/imports.lock b/supply-chain/imports.lock index f0a07c14..f37aac48 100644 --- a/supply-chain/imports.lock +++ b/supply-chain/imports.lock @@ -101,11 +101,6 @@ criteria = "safe-to-deploy" version = "0.1.6" notes = "Contains no unsafe code, no IO, no build.rs." -[[audits.bytecode-alliance.audits.anyhow]] -who = "Pat Hickey " -criteria = "safe-to-deploy" -delta = "1.0.69 -> 1.0.71" - [[audits.bytecode-alliance.audits.base64]] who = "Pat Hickey " criteria = "safe-to-deploy" @@ -341,11 +336,6 @@ criteria = "safe-to-deploy" delta = "3.5.0 -> 3.6.0" notes = "Dependency updates and new optimized trait implementations, but otherwise everything looks normal." -[[audits.embark-studios.audits.anyhow]] -who = "Johan Andersson " -criteria = "safe-to-deploy" -version = "1.0.58" - [[audits.embark-studios.audits.cfg_aliases]] who = "Johan Andersson " criteria = "safe-to-deploy" @@ -1272,21 +1262,11 @@ who = "Brandon Pitman " criteria = "safe-to-deploy" delta = "1.0.40 -> 1.0.43" -[[audits.isrg.audits.thiserror]] -who = "J.C. Jones " -criteria = "safe-to-deploy" -delta = "2.0.17 -> 2.0.18" - [[audits.isrg.audits.thiserror-impl]] who = "Brandon Pitman " criteria = "safe-to-deploy" delta = "1.0.40 -> 1.0.43" -[[audits.isrg.audits.thiserror-impl]] -who = "J.C. Jones " -criteria = "safe-to-deploy" -delta = "2.0.17 -> 2.0.18" - [[audits.isrg.audits.universal-hash]] who = "David Cook " criteria = "safe-to-deploy" @@ -1312,49 +1292,6 @@ criteria = "safe-to-deploy" delta = "2.0.0 -> 2.0.1" aggregated-from = "https://hg.mozilla.org/mozilla-central/raw-file/tip/supply-chain/audits.toml" -[[audits.mozilla.audits.anyhow]] -who = "Mike Hommey " -criteria = "safe-to-deploy" -delta = "1.0.57 -> 1.0.61" -aggregated-from = "https://hg.mozilla.org/mozilla-central/raw-file/tip/supply-chain/audits.toml" - -[[audits.mozilla.audits.anyhow]] -who = "Bobby Holley " -criteria = "safe-to-deploy" -delta = "1.0.58 -> 1.0.57" -notes = "No functional differences, just CI config and docs." -aggregated-from = "https://hg.mozilla.org/mozilla-central/raw-file/tip/supply-chain/audits.toml" - -[[audits.mozilla.audits.anyhow]] -who = "Mike Hommey " -criteria = "safe-to-deploy" -delta = "1.0.61 -> 1.0.62" -aggregated-from = "https://hg.mozilla.org/mozilla-central/raw-file/tip/supply-chain/audits.toml" - -[[audits.mozilla.audits.anyhow]] -who = "Mike Hommey " -criteria = "safe-to-deploy" -delta = "1.0.62 -> 1.0.68" -aggregated-from = "https://hg.mozilla.org/mozilla-central/raw-file/tip/supply-chain/audits.toml" - -[[audits.mozilla.audits.anyhow]] -who = "Mike Hommey " -criteria = "safe-to-deploy" -delta = "1.0.68 -> 1.0.69" -aggregated-from = "https://hg.mozilla.org/mozilla-central/raw-file/tip/supply-chain/audits.toml" - -[[audits.mozilla.audits.anyhow]] -who = "Jan-Erik Rediger " -criteria = "safe-to-deploy" -delta = "1.0.71 -> 1.0.95" -aggregated-from = "https://raw.githubusercontent.com/mozilla/glean/main/supply-chain/audits.toml" - -[[audits.mozilla.audits.anyhow]] -who = "Jan-Erik Rediger " -criteria = "safe-to-deploy" -delta = "1.0.95 -> 1.0.103" -aggregated-from = "https://hg.mozilla.org/mozilla-central/raw-file/tip/supply-chain/audits.toml" - [[audits.mozilla.audits.block-buffer]] who = "Mike Hommey " criteria = "safe-to-deploy"