From f7ad36a515e62c7af9de611732a8136bb58d3a92 Mon Sep 17 00:00:00 2001 From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com> Date: Sun, 19 Jul 2026 12:30:03 +0000 Subject: [PATCH 1/2] chore(deps): bump the weekly-cargo-patches group with 2 updates Bumps the weekly-cargo-patches group with 2 updates: [thiserror](https://github.com/dtolnay/thiserror) and [anyhow](https://github.com/dtolnay/anyhow). Updates `thiserror` from 2.0.18 to 2.0.19 - [Release notes](https://github.com/dtolnay/thiserror/releases) - [Commits](https://github.com/dtolnay/thiserror/compare/2.0.18...2.0.19) Updates `anyhow` from 1.0.103 to 1.0.104 - [Release notes](https://github.com/dtolnay/anyhow/releases) - [Commits](https://github.com/dtolnay/anyhow/compare/1.0.103...1.0.104) --- updated-dependencies: - dependency-name: thiserror dependency-version: 2.0.19 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: weekly-cargo-patches - dependency-name: anyhow dependency-version: 1.0.104 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: weekly-cargo-patches ... Signed-off-by: dependabot[bot] --- Cargo.lock | 45 ++++++++++++++++++++++++++++----------------- 1 file changed, 28 insertions(+), 17 deletions(-) diff --git a/Cargo.lock b/Cargo.lock index 7188b4f5..d5fa861f 100644 --- a/Cargo.lock +++ b/Cargo.lock @@ -118,9 +118,9 @@ dependencies = [ [[package]] name = "anyhow" -version = "1.0.103" +version = "1.0.104" source = "registry+https://github.com/rust-lang/crates.io-index" -checksum = "2a4385e2e34eb35d6b3efe798b9eb88096925d87726c0798709bf56d9ed84af3" +checksum = "330a5ed07fa54e4702c9d6c4174f74427fc0ef6e214bbd677ae50a5099946470" [[package]] name = "ar_archive_writer" @@ -494,7 +494,7 @@ version = "0.3.0" source = "registry+https://github.com/rust-lang/crates.io-index" checksum = "0fa961b519f0b462e3a3b4a34b64d119eeaca1d59af726fe450bbba07a9fc0a1" dependencies = [ - "thiserror 2.0.18", + "thiserror 2.0.19", ] [[package]] @@ -510,7 +510,7 @@ source = "registry+https://github.com/rust-lang/crates.io-index" checksum = "1b60b5124979fccd9addd89d8b97a1d6eebb4950694520c75ddd722535ea443f" dependencies = [ "nix 0.31.3", - "thiserror 2.0.18", + "thiserror 2.0.19", ] [[package]] @@ -760,7 +760,7 @@ version = "1.0.0" source = "registry+https://github.com/rust-lang/crates.io-index" checksum = "10d60334b3b2e7c9d91ef8150abfb6fa4c1c39ebbcf4a81c2e346aad939fee3e" dependencies = [ - "thiserror 2.0.18", + "thiserror 2.0.19", ] [[package]] @@ -1490,7 +1490,7 @@ dependencies = [ "log", "netlink-packet-core", "netlink-sys", - "thiserror 2.0.18", + "thiserror 2.0.19", ] [[package]] @@ -1947,7 +1947,7 @@ dependencies = [ "static_assertions", "tempfile", "test_bin", - "thiserror 2.0.18", + "thiserror 2.0.19", "toml", "uds", "zerocopy", @@ -1962,7 +1962,7 @@ dependencies = [ "rosenpass-oqs", "rosenpass-secret-memory", "rosenpass-to", - "thiserror 2.0.18", + "thiserror 2.0.19", ] [[package]] @@ -1982,7 +1982,7 @@ dependencies = [ "rosenpass-util", "shake", "static_assertions", - "thiserror 2.0.18", + "thiserror 2.0.19", "zeroize", ] @@ -2094,7 +2094,7 @@ dependencies = [ "rustix", "static_assertions", "tempfile", - "thiserror 2.0.18", + "thiserror 2.0.19", "tokio", "typenum", "uds", @@ -2119,7 +2119,7 @@ dependencies = [ "rosenpass-to", "rosenpass-util", "rustix", - "thiserror 2.0.18", + "thiserror 2.0.19", "tokio", "wireguard-uapi", "zerocopy", @@ -2447,6 +2447,17 @@ dependencies = [ "unicode-ident", ] +[[package]] +name = "syn" +version = "3.0.0" +source = "registry+https://github.com/rust-lang/crates.io-index" +checksum = "f2fac314a64dc9a36e61a9eb4261a5e9bbfbc922b27e518af97bc32b926cf967" +dependencies = [ + "proc-macro2", + "quote", + "unicode-ident", +] + [[package]] name = "take-until" version = "0.1.0" @@ -2483,11 +2494,11 @@ dependencies = [ [[package]] name = "thiserror" -version = "2.0.18" +version = "2.0.19" source = "registry+https://github.com/rust-lang/crates.io-index" -checksum = "4288b5bcbc7920c07a1149a35cf9590a2aa808e0bc1eafaade0b80947865fbc4" +checksum = "09a43598840e33d5b0331f38c5e30d13bb11c11210a4b58f0d9b18a5a5eefcd9" dependencies = [ - "thiserror-impl 2.0.18", + "thiserror-impl 2.0.19", ] [[package]] @@ -2503,13 +2514,13 @@ dependencies = [ [[package]] name = "thiserror-impl" -version = "2.0.18" +version = "2.0.19" source = "registry+https://github.com/rust-lang/crates.io-index" -checksum = "ebc4ee7f67670e9b64d05fa4253e753e016c6c95ff35b89b7941d6b856dec1d5" +checksum = "43cbfe0cf76104d42a574802844187e84a305e531ed54455f11fbde0f10541cd" dependencies = [ "proc-macro2", "quote", - "syn 2.0.119", + "syn 3.0.0", ] [[package]] From 488ee9ed36deb82ca318e68eafb6fc403bcec612 Mon Sep 17 00:00:00 2001 From: Rosenpass CI Bot Date: Sun, 19 Jul 2026 12:30:53 +0000 Subject: [PATCH 2/2] Regenerate cargo vet exemptions --- supply-chain/config.toml | 12 ++++++-- supply-chain/imports.lock | 63 --------------------------------------- 2 files changed, 10 insertions(+), 65 deletions(-) diff --git a/supply-chain/config.toml b/supply-chain/config.toml index 343d9a8a..ab70abb8 100644 --- a/supply-chain/config.toml +++ b/supply-chain/config.toml @@ -73,6 +73,10 @@ criteria = "safe-to-deploy" version = "3.0.11" criteria = "safe-to-deploy" +[[exemptions.anyhow]] +version = "1.0.104" +criteria = "safe-to-deploy" + [[exemptions.ar_archive_writer]] version = "0.5.2" criteria = "safe-to-deploy" @@ -725,6 +729,10 @@ criteria = "safe-to-deploy" version = "2.0.119" criteria = "safe-to-deploy" +[[exemptions.syn]] +version = "3.0.0" +criteria = "safe-to-deploy" + [[exemptions.take-until]] version = "0.1.0" criteria = "safe-to-deploy" @@ -738,11 +746,11 @@ version = "0.6.1" criteria = "safe-to-run" [[exemptions.thiserror]] -version = "2.0.17" +version = "2.0.19" criteria = "safe-to-deploy" [[exemptions.thiserror-impl]] -version = "2.0.17" +version = "2.0.19" criteria = "safe-to-deploy" [[exemptions.tokio]] diff --git a/supply-chain/imports.lock b/supply-chain/imports.lock index f0a07c14..f37aac48 100644 --- a/supply-chain/imports.lock +++ b/supply-chain/imports.lock @@ -101,11 +101,6 @@ criteria = "safe-to-deploy" version = "0.1.6" notes = "Contains no unsafe code, no IO, no build.rs." -[[audits.bytecode-alliance.audits.anyhow]] -who = "Pat Hickey " -criteria = "safe-to-deploy" -delta = "1.0.69 -> 1.0.71" - [[audits.bytecode-alliance.audits.base64]] who = "Pat Hickey " criteria = "safe-to-deploy" @@ -341,11 +336,6 @@ criteria = "safe-to-deploy" delta = "3.5.0 -> 3.6.0" notes = "Dependency updates and new optimized trait implementations, but otherwise everything looks normal." -[[audits.embark-studios.audits.anyhow]] -who = "Johan Andersson " -criteria = "safe-to-deploy" -version = "1.0.58" - [[audits.embark-studios.audits.cfg_aliases]] who = "Johan Andersson " criteria = "safe-to-deploy" @@ -1272,21 +1262,11 @@ who = "Brandon Pitman " criteria = "safe-to-deploy" delta = "1.0.40 -> 1.0.43" -[[audits.isrg.audits.thiserror]] -who = "J.C. Jones " -criteria = "safe-to-deploy" -delta = "2.0.17 -> 2.0.18" - [[audits.isrg.audits.thiserror-impl]] who = "Brandon Pitman " criteria = "safe-to-deploy" delta = "1.0.40 -> 1.0.43" -[[audits.isrg.audits.thiserror-impl]] -who = "J.C. Jones " -criteria = "safe-to-deploy" -delta = "2.0.17 -> 2.0.18" - [[audits.isrg.audits.universal-hash]] who = "David Cook " criteria = "safe-to-deploy" @@ -1312,49 +1292,6 @@ criteria = "safe-to-deploy" delta = "2.0.0 -> 2.0.1" aggregated-from = "https://hg.mozilla.org/mozilla-central/raw-file/tip/supply-chain/audits.toml" -[[audits.mozilla.audits.anyhow]] -who = "Mike Hommey " -criteria = "safe-to-deploy" -delta = "1.0.57 -> 1.0.61" -aggregated-from = "https://hg.mozilla.org/mozilla-central/raw-file/tip/supply-chain/audits.toml" - -[[audits.mozilla.audits.anyhow]] -who = "Bobby Holley " -criteria = "safe-to-deploy" -delta = "1.0.58 -> 1.0.57" -notes = "No functional differences, just CI config and docs." -aggregated-from = "https://hg.mozilla.org/mozilla-central/raw-file/tip/supply-chain/audits.toml" - -[[audits.mozilla.audits.anyhow]] -who = "Mike Hommey " -criteria = "safe-to-deploy" -delta = "1.0.61 -> 1.0.62" -aggregated-from = "https://hg.mozilla.org/mozilla-central/raw-file/tip/supply-chain/audits.toml" - -[[audits.mozilla.audits.anyhow]] -who = "Mike Hommey " -criteria = "safe-to-deploy" -delta = "1.0.62 -> 1.0.68" -aggregated-from = "https://hg.mozilla.org/mozilla-central/raw-file/tip/supply-chain/audits.toml" - -[[audits.mozilla.audits.anyhow]] -who = "Mike Hommey " -criteria = "safe-to-deploy" -delta = "1.0.68 -> 1.0.69" -aggregated-from = "https://hg.mozilla.org/mozilla-central/raw-file/tip/supply-chain/audits.toml" - -[[audits.mozilla.audits.anyhow]] -who = "Jan-Erik Rediger " -criteria = "safe-to-deploy" -delta = "1.0.71 -> 1.0.95" -aggregated-from = "https://raw.githubusercontent.com/mozilla/glean/main/supply-chain/audits.toml" - -[[audits.mozilla.audits.anyhow]] -who = "Jan-Erik Rediger " -criteria = "safe-to-deploy" -delta = "1.0.95 -> 1.0.103" -aggregated-from = "https://hg.mozilla.org/mozilla-central/raw-file/tip/supply-chain/audits.toml" - [[audits.mozilla.audits.block-buffer]] who = "Mike Hommey " criteria = "safe-to-deploy"