diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml index 0ba8c44..f347b7d 100644 --- a/.github/workflows/ci.yml +++ b/.github/workflows/ci.yml @@ -13,7 +13,7 @@ jobs: # fmt · clippy · test · MSRV · cargo-deny · cargo-vet · secret scan · # fuzz build-check · rustdoc · coverage · path-dep gate. ci: - uses: SecurityRonin/fleet-ci/.github/workflows/rust-ci.yml@619094ad54edc586f5c2733358e00326b30790bd + uses: SecurityRonin/fleet-ci/.github/workflows/rust-ci.yml@9234e1fa9f85b14a8d6fddc7a8f7378f7e30b183 with: # CARRIED ACROSS. The replaced test job ran on [ubuntu-latest, macos-latest] # — not windows, and not ubuntu alone. Until `test-os` existed this repo diff --git a/Cargo.lock b/Cargo.lock index cc27ea1..46817be 100644 --- a/Cargo.lock +++ b/Cargo.lock @@ -2,6 +2,15 @@ # It is not intended for manual editing. version = 3 +[[package]] +name = "addr2line" +version = "0.25.1" +source = "registry+https://github.com/rust-lang/crates.io-index" +checksum = "1b5d307320b3181d6d7954e663bd7c774a838b8220fe0593c86d9fb09f498b4b" +dependencies = [ + "gimli 0.32.3", +] + [[package]] name = "adler2" version = "2.0.1" @@ -26,7 +35,18 @@ checksum = "b169f7a6d4742236a0a00c541b845991d0ac43e546831af1249753ab4c3aa3a0" dependencies = [ "cfg-if", "cipher 0.4.4", - "cpufeatures", + "cpufeatures 0.2.17", +] + +[[package]] +name = "aes" +version = "0.9.2" +source = "registry+https://github.com/rust-lang/crates.io-index" +checksum = "f8eb277bec05f56a0e0591f155a484cbd0f4f07ff2905051a48c72f004f7ed58" +dependencies = [ + "cipher 0.5.2", + "cpubits", + "cpufeatures 0.3.0", ] [[package]] @@ -36,7 +56,7 @@ source = "registry+https://github.com/rust-lang/crates.io-index" checksum = "831010a0f742e1209b3bcea8fab6a8e149051ba6099432c8cb2cc117dec3ead1" dependencies = [ "aead", - "aes", + "aes 0.8.4", "cipher 0.4.4", "ctr", "ghash", @@ -57,9 +77,9 @@ dependencies = [ [[package]] name = "aho-corasick" -version = "1.1.4" +version = "1.1.5" source = "registry+https://github.com/rust-lang/crates.io-index" -checksum = "ddd31a130427c27518df266943a5308ed92d4b226cc639f5a8f1002816174301" +checksum = "c982642fa9e8606056828ee9a8505737230110bb1099153c79efe865c59d12ba" dependencies = [ "log", "memchr", @@ -73,20 +93,21 @@ checksum = "683d7910e743518b0e34f1186f92494becacb047c7b6bf616c96772180fef923" [[package]] name = "android_system_properties" -version = "0.1.5" +version = "0.1.6" source = "registry+https://github.com/rust-lang/crates.io-index" -checksum = "819e7219dbd41043ac279b19830f2efc897156490d7fd6ea916720117ee66311" +checksum = "ae221649c9976a6f6c56ae1facf410f3ddb33cc661c4b7b61020a912d4237fbc" dependencies = [ "libc", ] [[package]] name = "annotate-snippets" -version = "0.11.5" +version = "0.12.16" source = "registry+https://github.com/rust-lang/crates.io-index" -checksum = "710e8eae58854cdc1790fcb56cca04d712a17be849eeb81da2a724bf4bae2bc4" +checksum = "f211a51805bc641f3ad5b7664c77d2547af685cc33b4cd8d31964027a46f13f1" dependencies = [ "anstyle", + "memchr", "unicode-width 0.2.2", ] @@ -146,15 +167,6 @@ version = "1.0.104" source = "registry+https://github.com/rust-lang/crates.io-index" checksum = "330a5ed07fa54e4702c9d6c4174f74427fc0ef6e214bbd677ae50a5099946470" -[[package]] -name = "ar_archive_writer" -version = "0.5.2" -source = "registry+https://github.com/rust-lang/crates.io-index" -checksum = "4087686b4b0a3427190bae57a1d9a478dbb2d40c5dc1bd6e2b6d797913bdd348" -dependencies = [ - "object 0.37.3", -] - [[package]] name = "arbitrary" version = "1.4.2" @@ -166,9 +178,13 @@ dependencies = [ [[package]] name = "array-bytes" -version = "7.1.0" +version = "9.3.0" source = "registry+https://github.com/rust-lang/crates.io-index" -checksum = "ede2733fdd21c8fde19f3d16cebc409666f2fc2b623a22c5078a6775708db5de" +checksum = "27d55334c98d756b32dcceb60248647ab34f027690f87f9a362fd292676ee927" +dependencies = [ + "smallvec", + "thiserror 2.0.20", +] [[package]] name = "array-init" @@ -184,25 +200,25 @@ checksum = "ca6c635b3aa665c649ad1415f1573c85957dfa47690ec27aebe7ec17efe3c643" [[package]] name = "asn1-rs" -version = "0.6.2" +version = "0.7.2" source = "registry+https://github.com/rust-lang/crates.io-index" -checksum = "5493c3bedbacf7fd7382c6346bbd66687d12bbaad3a89a2d2c303ee6cf20b048" +checksum = "b7f43a50ac4fdca5df8e885c21b835997f0a1cdee65494a6847694a98652d9d8" dependencies = [ "asn1-rs-derive", "asn1-rs-impl", "displaydoc", - "nom", + "nom 7.1.3", "num-traits", "rusticata-macros", - "thiserror 1.0.69", + "thiserror 2.0.20", "time", ] [[package]] name = "asn1-rs-derive" -version = "0.5.1" +version = "0.6.0" source = "registry+https://github.com/rust-lang/crates.io-index" -checksum = "965c2d33e53cb6b267e148a4cb0760bc01f4904c1cd4bb4002a085bb016d1490" +checksum = "3109e49b1e4909e9db6515a30c633684d68cdeaa252f215214cb4fa1a5bfee2c" dependencies = [ "proc-macro2", "quote", @@ -254,6 +270,12 @@ version = "0.22.1" source = "registry+https://github.com/rust-lang/crates.io-index" checksum = "72b3254f16251a8381aa12e40e3c4d2f0199f8c6508fbecb9d91f575e0fbb8c6" +[[package]] +name = "base64" +version = "0.23.1" +source = "registry+https://github.com/rust-lang/crates.io-index" +checksum = "ac07cdecf99051d9a5238b80f35af32cdeba5b336e55d957b318b50137e18da5" + [[package]] name = "base64ct" version = "1.8.3" @@ -268,11 +290,22 @@ checksum = "3a8241f3ebb85c056b509d4327ad0358fbbba6ffb340bf388f26350aeda225b1" [[package]] name = "bincode" -version = "1.3.3" +version = "2.0.1" source = "registry+https://github.com/rust-lang/crates.io-index" -checksum = "b1f45e9417d87227c7a56d22e471c6206462cba514c7590c09aff4cf6d1ddcad" +checksum = "36eaf5d7b090263e8150820482d5d93cd964a81e4019913c972f4edcc6edb740" dependencies = [ + "bincode_derive", "serde", + "unty", +] + +[[package]] +name = "bincode_derive" +version = "2.0.1" +source = "registry+https://github.com/rust-lang/crates.io-index" +checksum = "bf95709a440f45e986983918d0e8a1f30a9b1df04918fc828670606804ac3c09" +dependencies = [ + "virtue", ] [[package]] @@ -296,21 +329,6 @@ dependencies = [ "syn 1.0.109", ] -[[package]] -name = "bit-set" -version = "0.6.0" -source = "registry+https://github.com/rust-lang/crates.io-index" -checksum = "f0481a0e032742109b1133a095184ee93d88f3dc9e0d28a5d033dc77a073f44f" -dependencies = [ - "bit-vec", -] - -[[package]] -name = "bit-vec" -version = "0.7.0" -source = "registry+https://github.com/rust-lang/crates.io-index" -checksum = "d2c54ff287cfc0a34f38a6b832ea1bd8e448a330b3e40a50859e6488bee07f22" - [[package]] name = "bitflags" version = "1.3.2" @@ -322,12 +340,9 @@ name = "bitflags" version = "2.13.1" source = "registry+https://github.com/rust-lang/crates.io-index" checksum = "b588b76d00fde79687d7646a9b5bdf3cc0f655e0bbd080335a95d7e96f3587da" - -[[package]] -name = "bitmask" -version = "0.5.0" -source = "registry+https://github.com/rust-lang/crates.io-index" -checksum = "5da9b3d9f6f585199287a473f4f8dfab6566cf827d15c00c219f53c645687ead" +dependencies = [ + "serde_core", +] [[package]] name = "bitvec" @@ -368,11 +383,20 @@ dependencies = [ "generic-array", ] +[[package]] +name = "block-padding" +version = "0.4.2" +source = "registry+https://github.com/rust-lang/crates.io-index" +checksum = "710f1dd022ef4e93f8a438b4ba958de7f64308434fa6a87104481645cc30068b" +dependencies = [ + "hybrid-array", +] + [[package]] name = "bstr" -version = "1.13.0" +version = "1.13.1" source = "registry+https://github.com/rust-lang/crates.io-index" -checksum = "1f7dc094d718f2e1c1559ad110e27eeaae14a5465d3d56dd6dbd793079fbd530" +checksum = "6bb31b46c14244e20ee9984b11bf5c992b91fb6939fea616e3512c8baecdbe5f" dependencies = [ "memchr", "regex-automata", @@ -384,6 +408,9 @@ name = "bumpalo" version = "3.20.3" source = "registry+https://github.com/rust-lang/crates.io-index" checksum = "72f5acc6cb2ba439de613abc23857ec3d78374d8ed5ac84e9d11336e87da8649" +dependencies = [ + "allocator-api2", +] [[package]] name = "bytemuck" @@ -396,13 +423,13 @@ dependencies = [ [[package]] name = "bytemuck_derive" -version = "1.11.0" +version = "1.12.0" source = "registry+https://github.com/rust-lang/crates.io-index" -checksum = "f65693059b6b9c588b9f62fed1cedbf0a8b805631457ea162d68f0de186f3de5" +checksum = "fc0e56a716f1e132ff6bf4bdac1c944a3fcdc1cae65f70a4a2a1ac3b401d2d1f" dependencies = [ "proc-macro2", "quote", - "syn 2.0.119", + "syn 3.0.3", ] [[package]] @@ -445,13 +472,24 @@ dependencies = [ "cipher 0.4.4", ] +[[package]] +name = "cbc" +version = "0.2.1" +source = "registry+https://github.com/rust-lang/crates.io-index" +checksum = "ce2dc9ee5f88d11e0beb842c88b33c8a5cf0d1329c4b19494af42b07dbfe8896" +dependencies = [ + "cipher 0.5.2", +] + [[package]] name = "cc" -version = "1.3.0" +version = "1.4.2" source = "registry+https://github.com/rust-lang/crates.io-index" -checksum = "c89588d05638b5b4594a3348a2d6c20277e43a7f5c5202b05cc56888475a47b8" +checksum = "5d262e149917187838d5b42777c8253bcb64500067342904e7d429499a6f277e" dependencies = [ "find-msvc-tools", + "jobserver", + "libc", "shlex", ] @@ -498,9 +536,9 @@ dependencies = [ [[package]] name = "clap" -version = "4.6.4" +version = "4.6.6" source = "registry+https://github.com/rust-lang/crates.io-index" -checksum = "d91e0c145792ef73a6ad36d27c75ac09f1832222a3c209689d90f534685ee5b7" +checksum = "473c7e07f409a8d772161724aa8db6a765a2532a70f9667eeb7b49d3d02fbdca" dependencies = [ "clap_builder", "clap_derive", @@ -508,9 +546,9 @@ dependencies = [ [[package]] name = "clap_builder" -version = "4.6.2" +version = "4.6.6" source = "registry+https://github.com/rust-lang/crates.io-index" -checksum = "f09628afdcc538b57f3c6341e9c8e9970f18e4a481690a64974d7023bd33548b" +checksum = "7b48fea5a88e9ae728a2dcbedbfc0e730f7d60da42e1cb049a83c9fb8b789889" dependencies = [ "anstream", "anstyle", @@ -542,7 +580,7 @@ version = "0.3.0" source = "registry+https://github.com/rust-lang/crates.io-index" checksum = "0fa961b519f0b462e3a3b4a34b64d119eeaca1d59af726fe450bbba07a9fc0a1" dependencies = [ - "thiserror 2.0.19", + "thiserror 2.0.20", ] [[package]] @@ -564,15 +602,14 @@ dependencies = [ [[package]] name = "console" -version = "0.15.11" +version = "0.16.4" source = "registry+https://github.com/rust-lang/crates.io-index" -checksum = "054ccb5b10f9f2cbf51eb355ca1d05c2d279ce1804688d0db74b4733a5aeafd8" +checksum = "4fe5f465a4f6fee88fad41b85d990f84c835335e85b5d9e6e63e0d06d28cba7c" dependencies = [ "encode_unicode", "libc", - "once_cell", "unicode-width 0.2.2", - "windows-sys 0.59.0", + "windows-sys 0.61.2", ] [[package]] @@ -581,6 +618,12 @@ version = "0.9.6" source = "registry+https://github.com/rust-lang/crates.io-index" checksum = "c2459377285ad874054d797f3ccebf984978aa39129f6eafde5cdc8315b612f8" +[[package]] +name = "const-oid" +version = "0.10.2" +source = "registry+https://github.com/rust-lang/crates.io-index" +checksum = "a6ef517f0926dd24a1582492c791b6a4818a4d94e789a334894aa15b0d12f55c" + [[package]] name = "constant_time_eq" version = "0.3.1" @@ -599,6 +642,12 @@ version = "3.0.1" source = "registry+https://github.com/rust-lang/crates.io-index" checksum = "7704b5fdd17b18ae31c4c1da5a2e0305a2bf17b5249300a9ee9ed7b72114c636" +[[package]] +name = "cpubits" +version = "0.1.1" +source = "registry+https://github.com/rust-lang/crates.io-index" +checksum = "15b85f9c39137c3a891689859392b1bd49812121d0d61c9caf00d46ed5ce06ae" + [[package]] name = "cpufeatures" version = "0.2.17" @@ -608,20 +657,47 @@ dependencies = [ "libc", ] +[[package]] +name = "cpufeatures" +version = "0.3.0" +source = "registry+https://github.com/rust-lang/crates.io-index" +checksum = "8b2a41393f66f16b0823bb79094d54ac5fbd34ab292ddafb9a0456ac9f87d201" +dependencies = [ + "libc", +] + +[[package]] +name = "cranelift-assembler-x64" +version = "0.123.13" +source = "registry+https://github.com/rust-lang/crates.io-index" +checksum = "5f8e1303ae2128891cb59691a74de4547dd208bc8511a2f287cca2b93bb3c728" +dependencies = [ + "cranelift-assembler-x64-meta", +] + +[[package]] +name = "cranelift-assembler-x64-meta" +version = "0.123.13" +source = "registry+https://github.com/rust-lang/crates.io-index" +checksum = "58b2740a5936332028d9a1e8f29a199de2fd386e426d44da5fea70cf8e3f8e75" +dependencies = [ + "cranelift-srcgen", +] + [[package]] name = "cranelift-bforest" -version = "0.113.1" +version = "0.123.13" source = "registry+https://github.com/rust-lang/crates.io-index" -checksum = "540b193ff98b825a1f250a75b3118911af918a734154c69d80bcfcf91e7e9522" +checksum = "37fd128d3629fb105e433bda09744c5a2959cd1da04617a455c4cc17dff1ebef" dependencies = [ "cranelift-entity", ] [[package]] name = "cranelift-bitset" -version = "0.113.1" +version = "0.123.13" source = "registry+https://github.com/rust-lang/crates.io-index" -checksum = "c7cb269598b9557ab942d687d3c1086d77c4b50dcf35813f3a65ba306fd42279" +checksum = "24a88f6d5a6cf6fcbc6386415d48948094721dfa4585d6615938b11ca938f20a" dependencies = [ "serde", "serde_derive", @@ -629,11 +705,12 @@ dependencies = [ [[package]] name = "cranelift-codegen" -version = "0.113.1" +version = "0.123.13" source = "registry+https://github.com/rust-lang/crates.io-index" -checksum = "46566d7c83a8bff4150748d66020f4c7224091952aa4b4df1ec4959c39d937a1" +checksum = "daa4a357d030bdd586d8fe3da56b394f7f6b6ded506e59f945e7b32b1e126b71" dependencies = [ "bumpalo", + "cranelift-assembler-x64", "cranelift-bforest", "cranelift-bitset", "cranelift-codegen-meta", @@ -641,44 +718,51 @@ dependencies = [ "cranelift-control", "cranelift-entity", "cranelift-isle", - "gimli 0.31.1", - "hashbrown 0.14.5", + "gimli 0.32.3", + "hashbrown 0.15.5", "log", + "pulley-interpreter", "regalloc2", "rustc-hash 2.1.3", + "serde", "smallvec", "target-lexicon", + "wasmtime-internal-math", ] [[package]] name = "cranelift-codegen-meta" -version = "0.113.1" +version = "0.123.13" source = "registry+https://github.com/rust-lang/crates.io-index" -checksum = "2df8a86a34236cc75a8a6a271973da779c2aeb36c43b6e14da474cf931317082" +checksum = "4121e36a8757dea6fb237435ee5095eba25bc13ecc2eaee57eb9bffd4b27784f" dependencies = [ + "cranelift-assembler-x64-meta", "cranelift-codegen-shared", + "cranelift-srcgen", + "heck", + "pulley-interpreter", ] [[package]] name = "cranelift-codegen-shared" -version = "0.113.1" +version = "0.123.13" source = "registry+https://github.com/rust-lang/crates.io-index" -checksum = "cf75340b6a57b7c7c1b74f10d3d90883ee6d43a554be8131a4046c2ebcf5eb65" +checksum = "5173265fc30b9e42205cf06dfca9a272ee949667ce4115d975ed2c08d466e2f8" [[package]] name = "cranelift-control" -version = "0.113.1" +version = "0.123.13" source = "registry+https://github.com/rust-lang/crates.io-index" -checksum = "2e84495bc5d23d86aad8c86f8ade4af765b94882af60d60e271d3153942f1978" +checksum = "9b6ca8a393e66dc13f915c6f456bdcf496d78fac4995792f7022b7806352d7a4" dependencies = [ "arbitrary", ] [[package]] name = "cranelift-entity" -version = "0.113.1" +version = "0.123.13" source = "registry+https://github.com/rust-lang/crates.io-index" -checksum = "963c17147b80df351965e57c04d20dbedc85bcaf44c3436780a59a3f1ff1b1c2" +checksum = "e609d9ba416bc26d774f343295a1d411515248a6a6d83d5f7492a0dd919569fa" dependencies = [ "cranelift-bitset", "serde", @@ -687,9 +771,9 @@ dependencies = [ [[package]] name = "cranelift-frontend" -version = "0.113.1" +version = "0.123.13" source = "registry+https://github.com/rust-lang/crates.io-index" -checksum = "727f02acbc4b4cb2ba38a6637101d579db50190df1dd05168c68e762851a3dd5" +checksum = "90a3a277b1a0aff1123f6bae61c080a4bcb6df964829ed427f98e18dff14257f" dependencies = [ "cranelift-codegen", "log", @@ -699,21 +783,27 @@ dependencies = [ [[package]] name = "cranelift-isle" -version = "0.113.1" +version = "0.123.13" source = "registry+https://github.com/rust-lang/crates.io-index" -checksum = "32b00cc2e03c748f2531eea01c871f502b909d30295fdcad43aec7bf5c5b4667" +checksum = "be53dd9b3a4cbeb9ced45c4a543ea8417ccfb334c3ba1cbb2233f4b25fb2531f" [[package]] name = "cranelift-native" -version = "0.113.1" +version = "0.123.13" source = "registry+https://github.com/rust-lang/crates.io-index" -checksum = "bbeaf978dc7c1a2de8bbb9162510ed218eb156697bc45590b8fbdd69bb08e8de" +checksum = "ca62ab1d9f48cad97da5843b913ccf96c3dfde935af5d750cb5a6d367ccfb262" dependencies = [ "cranelift-codegen", "libc", "target-lexicon", ] +[[package]] +name = "cranelift-srcgen" +version = "0.123.13" +source = "registry+https://github.com/rust-lang/crates.io-index" +checksum = "a13b72860f54a2a19d3756bd47575fd8bddeafd6e5bbbf16372cdfebc482628a" + [[package]] name = "crc" version = "3.4.0" @@ -864,9 +954,9 @@ dependencies = [ [[package]] name = "data-encoding" -version = "2.11.0" +version = "2.11.1" source = "registry+https://github.com/rust-lang/crates.io-index" -checksum = "a4ae5f15dda3c708c0ade84bfee31ccab44a3da4f88015ed22f63732abe300c8" +checksum = "4583a4551df46e2792f82ceeac45e850d2e2d5debba0b91f102385cda5b11f06" [[package]] name = "deflate64" @@ -880,20 +970,20 @@ version = "0.7.10" source = "registry+https://github.com/rust-lang/crates.io-index" checksum = "e7c1832837b905bbfb5101e07cc24c8deddf52f93225eee6ead5f4d63d53ddcb" dependencies = [ - "const-oid", + "const-oid 0.9.6", "pem-rfc7468", "zeroize", ] [[package]] name = "der-parser" -version = "9.0.0" +version = "10.0.0" source = "registry+https://github.com/rust-lang/crates.io-index" -checksum = "5cd0a5c643689626bec213c4d8bd4d96acc8ffdb4ad4bb6bc16abf27d5f4b553" +checksum = "07da5016415d5a3c4dd39b11ed26f915f52fc4e0dc197d87908bc916e51bc1a6" dependencies = [ "asn1-rs", "displaydoc", - "nom", + "nom 7.1.3", "num-bigint", "num-traits", "rusticata-macros", @@ -938,20 +1028,31 @@ source = "registry+https://github.com/rust-lang/crates.io-index" checksum = "9ed9a281f7bc9b7576e61468ba615a66a5c8cfdff42420a70aa82701a3b1e292" dependencies = [ "block-buffer 0.10.4", - "const-oid", + "const-oid 0.9.6", "crypto-common 0.1.7", "subtle", ] +[[package]] +name = "digest" +version = "0.11.3" +source = "registry+https://github.com/rust-lang/crates.io-index" +checksum = "f1dd6dbb5841937940781866fa1281a1ff7bd3bf827091440879f9994983d5c2" +dependencies = [ + "block-buffer 0.12.1", + "const-oid 0.10.2", + "crypto-common 0.2.2", +] + [[package]] name = "displaydoc" -version = "0.2.6" +version = "0.2.7" source = "registry+https://github.com/rust-lang/crates.io-index" -checksum = "1ac70aa55017e108007fbaf5aa0f54b021c98f92ff8af59d42eda9da96e3dd4f" +checksum = "c6232dd377dcc64799954cbd3a9bb882e9cdc1308ccd87b1c098f1fb2eaf82a8" dependencies = [ "proc-macro2", "quote", - "syn 2.0.119", + "syn 3.0.3", ] [[package]] @@ -969,12 +1070,12 @@ version = "0.6.3" source = "registry+https://github.com/rust-lang/crates.io-index" checksum = "48bc224a9084ad760195584ce5abb3c2c34a225fa312a128ad245a6b412b7689" dependencies = [ - "digest", + "digest 0.10.7", "num-bigint-dig", "num-traits", "pkcs8", "rfc6979", - "sha2", + "sha2 0.10.9", "signature", "zeroize", ] @@ -986,7 +1087,7 @@ source = "registry+https://github.com/rust-lang/crates.io-index" checksum = "ee27f32b5c5292967d2d4a9d7f1e0b0aed2c15daded5a60300e4abb9d8020bca" dependencies = [ "der", - "digest", + "digest 0.10.7", "elliptic-curve", "rfc6979", "signature", @@ -995,9 +1096,9 @@ dependencies = [ [[package]] name = "either" -version = "1.16.0" +version = "1.17.0" source = "registry+https://github.com/rust-lang/crates.io-index" -checksum = "91622ff5e7162018101f2fea40d6ebf4a78bbe5a49736a2020649edf9693679e" +checksum = "9e5e8f6c15a24b9a3ee5efec809ccd006d3b30e8b3bb63c39af737c7f87daa1d" [[package]] name = "elliptic-curve" @@ -1007,7 +1108,7 @@ checksum = "b5e6043086bf7973472e0c7dff2142ea0b680d30e18d9cc40f267efbf222bd47" dependencies = [ "base16ct", "crypto-bigint", - "digest", + "digest 0.10.7", "ff", "generic-array", "group", @@ -1038,18 +1139,6 @@ version = "1.0.0" source = "registry+https://github.com/rust-lang/crates.io-index" checksum = "34aa73646ffb006b8f5147f3dc182bd4bcb190227ce861fc4a4844bf8e3cb2c0" -[[package]] -name = "enum_dispatch" -version = "0.3.13" -source = "registry+https://github.com/rust-lang/crates.io-index" -checksum = "aa18ce2bc66555b3218614519ac839ddb759a7d6720732f979ef8d13be147ecd" -dependencies = [ - "once_cell", - "proc-macro2", - "quote", - "syn 2.0.119", -] - [[package]] name = "equivalent" version = "1.0.2" @@ -1113,22 +1202,11 @@ dependencies = [ "libc", ] -[[package]] -name = "filetime_creation" -version = "0.2.0" -source = "registry+https://github.com/rust-lang/crates.io-index" -checksum = "c25b5d475550e559de5b0c0084761c65325444e3b6c9e298af9cefe7a9ef3a5f" -dependencies = [ - "cfg-if", - "filetime", - "windows-sys 0.52.0", -] - [[package]] name = "find-msvc-tools" -version = "0.1.9" +version = "0.1.10" source = "registry+https://github.com/rust-lang/crates.io-index" -checksum = "5baebc0774151f905a1a2cc41989300b1e6fbb29aff0ceffa1064fdd3088d582" +checksum = "26b73573e6edcd2af0cdf47bd6cb58f0b3839491263c314eaad1ccf24430e1de" [[package]] name = "flate2" @@ -1138,6 +1216,7 @@ checksum = "843fba2746e448b37e26a819579957415c8cef339bf08564fe8b7ddbd959573c" dependencies = [ "crc32fast", "miniz_oxide", + "zlib-rs", ] [[package]] @@ -1149,20 +1228,6 @@ dependencies = [ "num-traits", ] -[[package]] -name = "fmmap" -version = "0.3.3" -source = "registry+https://github.com/rust-lang/crates.io-index" -checksum = "6099ab52d5329340a3014f60ca91bc892181ae32e752360d07be9295924dcb0b" -dependencies = [ - "byteorder", - "bytes", - "enum_dispatch", - "fs4", - "memmapix", - "parse-display", -] - [[package]] name = "fnv" version = "1.0.7" @@ -1193,9 +1258,9 @@ dependencies = [ [[package]] name = "forensicnomicon" -version = "1.8.1" +version = "1.11.1" source = "registry+https://github.com/rust-lang/crates.io-index" -checksum = "feb4755bb43fc9c85fbf91bf37399f2f3ca958f35a7e90ca6a4f6f25a6664604" +checksum = "634cce7a9f7bec3b4e40ee9014a1a633ad17dd08694b291066818c18c013fab1" dependencies = [ "forensicnomicon-core", "forensicnomicon-data", @@ -1204,33 +1269,23 @@ dependencies = [ [[package]] name = "forensicnomicon-core" -version = "1.4.0" +version = "1.5.1" source = "registry+https://github.com/rust-lang/crates.io-index" -checksum = "d65a733200c34a6595461a80c6a3ca95816c63b55104ef72630c5324a74a6680" +checksum = "7eb783b79792587a65eb4fb0aeff41b471b44659fbacfe15f61d3685c122a889" dependencies = [ "serde", ] [[package]] name = "forensicnomicon-data" -version = "1.3.2" +version = "1.4.0" source = "registry+https://github.com/rust-lang/crates.io-index" -checksum = "826351faee29aabf7561d741e4fabb56b2b237be6c8d483c4df181e93b5f8b67" +checksum = "78a2c24ccad1150609546fbe85ad466e2cf24443fdac13e32297acb4ef913c28" dependencies = [ "forensicnomicon-core", "serde", ] -[[package]] -name = "fs4" -version = "0.6.6" -source = "registry+https://github.com/rust-lang/crates.io-index" -checksum = "2eeb4ed9e12f43b7fa0baae3f9cdda28352770132ef2e09a23760c29cae8bd47" -dependencies = [ - "rustix 0.38.44", - "windows-sys 0.48.0", -] - [[package]] name = "funty" version = "2.0.0" @@ -1239,21 +1294,21 @@ checksum = "e6d5a32815ae3f33302d95fdcb2ce17862f8c65363dcfd29360480ba1001fc9c" [[package]] name = "futures-core" -version = "0.3.33" +version = "0.3.34" source = "registry+https://github.com/rust-lang/crates.io-index" -checksum = "2cd50c473c80f6d7c3670a752354b8e569b1a7cbfdc0419ec88e5edad85e0dc7" +checksum = "92d699e522242e69e3003b94ecc1f960f3a5e015aa7c5d7486e65ad01dd94f5e" [[package]] name = "futures-task" -version = "0.3.33" +version = "0.3.34" source = "registry+https://github.com/rust-lang/crates.io-index" -checksum = "b231ed28831efb4a61a08580c4bc233ec56bc009f4cd8f52da2c3cb97df0c109" +checksum = "cd417de3d1d015fc3bfd2b1ea46dfc7bab72ef86f1cc7cc9c78e728b34a6d1fd" [[package]] name = "futures-util" -version = "0.3.33" +version = "0.3.34" source = "registry+https://github.com/rust-lang/crates.io-index" -checksum = "a77a90a256fce34da66415271e30f94ee91c57b04b8a2c042d9cf3220179deaa" +checksum = "0d50a92467f8ba5dd6e3ee5d4bd04d73ab2e4e1c44474a0674821dfce14b79bc" dependencies = [ "futures-core", "futures-task", @@ -1283,6 +1338,18 @@ dependencies = [ "wasi", ] +[[package]] +name = "getrandom" +version = "0.3.4" +source = "registry+https://github.com/rust-lang/crates.io-index" +checksum = "899def5c37c4fd7b2664648c28120ecec138e4d395b459e5ca34f9cce2dd77fd" +dependencies = [ + "cfg-if", + "libc", + "r-efi 5.3.0", + "wasip2", +] + [[package]] name = "getrandom" version = "0.4.3" @@ -1291,7 +1358,7 @@ checksum = "300e883d756b2e4ec94e02791f39b04b522276138852cfc41d9fb7e904106099" dependencies = [ "cfg-if", "libc", - "r-efi", + "r-efi 6.0.0", ] [[package]] @@ -1317,9 +1384,9 @@ dependencies = [ [[package]] name = "gimli" -version = "0.31.1" +version = "0.32.3" source = "registry+https://github.com/rust-lang/crates.io-index" -checksum = "07e28edb80900c19c28f1072f2e8aeca7fa06b23cd4169cefe1af5aa3260783f" +checksum = "e629b9b98ef3dd8afe6ca2bd0f89306cec16d43d907889945bc5d6687f2f13c7" dependencies = [ "fallible-iterator 0.3.0", "indexmap 2.14.0", @@ -1328,15 +1395,15 @@ dependencies = [ [[package]] name = "globset" -version = "0.4.19" +version = "0.4.20" source = "registry+https://github.com/rust-lang/crates.io-index" -checksum = "e47d37d2ae4464254884b60ab7071be2b876a9c35b696bd018ddcc76847309cd" +checksum = "07c34a9410465b45bd9787443bc7370f37735bad04b0f0cd57ff1a3186c98988" dependencies = [ "aho-corasick", "bstr", "log", "regex-automata", - "regex-syntax 0.8.11", + "regex-syntax", ] [[package]] @@ -1395,25 +1462,20 @@ source = "registry+https://github.com/rust-lang/crates.io-index" checksum = "9229cfe53dfd69f0609a49f65461bd93001ea1ef889cd5529dd176593f5338a1" dependencies = [ "foldhash 0.1.5", + "serde", ] [[package]] name = "hashbrown" -version = "0.16.1" +version = "0.17.1" source = "registry+https://github.com/rust-lang/crates.io-index" -checksum = "841d1cc9bed7f9236f321df977030373f4a4163ae1a7dbfe1a51a2c1a51d9100" +checksum = "ed5909b6e89a2db4456e54cd5f673791d7eca6732202bbf2a9cc504fe2f9b84a" dependencies = [ "allocator-api2", "equivalent", "foldhash 0.2.0", ] -[[package]] -name = "hashbrown" -version = "0.17.1" -source = "registry+https://github.com/rust-lang/crates.io-index" -checksum = "ed5909b6e89a2db4456e54cd5f673791d7eca6732202bbf2a9cc504fe2f9b84a" - [[package]] name = "heck" version = "0.5.0" @@ -1435,7 +1497,7 @@ version = "0.12.1" source = "registry+https://github.com/rust-lang/crates.io-index" checksum = "6c49c37c09c17a53d937dfbb742eb3a961d65a994e6bcdcf37e7399d0cc8ab5e" dependencies = [ - "digest", + "digest 0.10.7", ] [[package]] @@ -1449,9 +1511,9 @@ dependencies = [ [[package]] name = "http" -version = "1.4.2" +version = "1.5.0" source = "registry+https://github.com/rust-lang/crates.io-index" -checksum = "6970f50e31d6fc17d3fa27329444bfa74e196cf62e95052a3f6fee181dba6425" +checksum = "918d3568bebf352712bc2ef3d46a8bcf1a75b373be6539de198e9105cbbf9ce0" dependencies = [ "bytes", "itoa", @@ -1465,9 +1527,9 @@ checksum = "6dbf3de79e51f3d586ab4cb9d5c3e2c14aa28ed23d180cf89b4df0454a69cc87" [[package]] name = "hybrid-array" -version = "0.4.13" +version = "0.4.14" source = "registry+https://github.com/rust-lang/crates.io-index" -checksum = "818356c5132c1fede50f837ca96afbe78ff42413047f4abb886217845e1b6c8c" +checksum = "707114b52a152fa7bdb290cd7cd5912d9467273b6d74e21b8d81aca1f8533f6b" dependencies = [ "typenum", ] @@ -1510,9 +1572,9 @@ checksum = "b9e0384b61958566e926dc50660321d12159025e767c18e043daf26b70104c39" [[package]] name = "ignore" -version = "0.4.31" +version = "0.4.33" source = "registry+https://github.com/rust-lang/crates.io-index" -checksum = "7f8a7b8211e695a1d0cd91cace480d4d0bd57667ab10277cc412c5f7f4884f83" +checksum = "00b69833ed729dc5aa7d19541d96d6cf8e9137194207a04916d658e43168402f" dependencies = [ "crossbeam-deque", "globset", @@ -1548,14 +1610,14 @@ dependencies = [ [[package]] name = "indicatif" -version = "0.17.11" +version = "0.18.6" source = "registry+https://github.com/rust-lang/crates.io-index" -checksum = "183b3088984b400f4cfac3620d5e076c84da5364016b4f49473de574b2586235" +checksum = "9433806cd6b4ec1aba79c021c7e4c58fb4c3b9977c085062e611ac929998fb0c" dependencies = [ "console", - "number_prefix", "portable-atomic", "unicode-width 0.2.2", + "unit-prefix", "web-time", ] @@ -1565,7 +1627,7 @@ version = "0.1.4" source = "registry+https://github.com/rust-lang/crates.io-index" checksum = "879f10e63c20629ecabbb64a8010319738c66a5cd0c29b02d63d272b03751d01" dependencies = [ - "block-padding", + "block-padding 0.3.3", "generic-array", ] @@ -1575,6 +1637,7 @@ version = "0.2.2" source = "registry+https://github.com/rust-lang/crates.io-index" checksum = "4250ce6452e92010fdf7268ccc5d14faa80bb12fc741938534c58f16804e03c7" dependencies = [ + "block-padding 0.4.2", "hybrid-array", ] @@ -1594,25 +1657,22 @@ dependencies = [ ] [[package]] -name = "is_terminal_polyfill" -version = "1.70.2" +name = "ipnet" +version = "2.12.1" source = "registry+https://github.com/rust-lang/crates.io-index" -checksum = "a6cb138bb79a146c1bd460005623e142ef0181e3d0219cb493e02f7d08a35695" +checksum = "6a756c3fac73139e83f14c2d742155dd2b78d3ee56597b419a0579b7bdd6dd78" [[package]] -name = "itertools" -version = "0.12.1" +name = "is_terminal_polyfill" +version = "1.70.2" source = "registry+https://github.com/rust-lang/crates.io-index" -checksum = "ba291022dbbd398a455acf126c1e341954079855bc60dfdda641363bd6922569" -dependencies = [ - "either", -] +checksum = "a6cb138bb79a146c1bd460005623e142ef0181e3d0219cb493e02f7d08a35695" [[package]] name = "itertools" -version = "0.13.0" +version = "0.14.0" source = "registry+https://github.com/rust-lang/crates.io-index" -checksum = "413ee7dfc52ee1a4949ceeb7dbc8a33f2d6c088194d9f922fb8318faf1f01186" +checksum = "2b192c782037fadd9cfa75548310488aabdbf3d2da73885b31bd0abd03351285" dependencies = [ "either", ] @@ -1623,11 +1683,21 @@ version = "1.0.18" source = "registry+https://github.com/rust-lang/crates.io-index" checksum = "8f42a60cbdf9a97f5d2305f08a87dc4e09308d1276d28c869c684d7777685682" +[[package]] +name = "jobserver" +version = "0.1.35" +source = "registry+https://github.com/rust-lang/crates.io-index" +checksum = "1c00acbd29eabad4a2392fa0e921c874934dbbf4194312ad20f04a0ed67a3cb3" +dependencies = [ + "getrandom 0.4.3", + "libc", +] + [[package]] name = "js-sys" -version = "0.3.103" +version = "0.3.104" source = "registry+https://github.com/rust-lang/crates.io-index" -checksum = "53b44bfcdb3f8d5837a46dae1ca9660a837176eee74a28b229bc626816589102" +checksum = "0e0c1080212aad755ea003d18543e8768dd432c48819efd73a7bf1e39b7a5a3a" dependencies = [ "cfg-if", "futures-util", @@ -1636,9 +1706,9 @@ dependencies = [ [[package]] name = "jsonguard" -version = "0.2.3" +version = "0.2.7" source = "registry+https://github.com/rust-lang/crates.io-index" -checksum = "bca1ea292f95a3c50973d0f4034d110744e781864784b3a37b3072426f0719ec" +checksum = "6bc359af2ca55e44f6ed8ff20574259b7c2f54c24099e215a60de77ef21d87a7" dependencies = [ "serde", ] @@ -1658,6 +1728,12 @@ version = "0.2.7" source = "registry+https://github.com/rust-lang/crates.io-index" checksum = "c83bff1d572d6b9aeef67ddfc8448e4a3737909cb28e81f97c791b9018703e52" +[[package]] +name = "leb128fmt" +version = "0.1.0" +source = "registry+https://github.com/rust-lang/crates.io-index" +checksum = "09edd9e8b54e49e587e4f6295a7d29c3ea94d469cb40ab8ca70b288248a81db2" + [[package]] name = "libbz2-rs-sys" version = "0.2.5" @@ -1749,7 +1825,7 @@ dependencies = [ "lazy_static", "proc-macro2", "quote", - "regex-syntax 0.8.11", + "regex-syntax", "rustc_version", "syn 2.0.119", ] @@ -1765,11 +1841,11 @@ dependencies = [ [[package]] name = "lru" -version = "0.16.4" +version = "0.18.2" source = "registry+https://github.com/rust-lang/crates.io-index" -checksum = "7f66e8d5d03f609abc3a39e6f08e4164ebf1447a732906d39eb9b99b7919ef39" +checksum = "5d2f2f9b4ba7e6b24d95e7e899329d35be83bcded72c8540cdd5368932d1d90a" dependencies = [ - "hashbrown 0.16.1", + "hashbrown 0.17.1", ] [[package]] @@ -1783,19 +1859,26 @@ dependencies = [ ] [[package]] -name = "lzma-rust" -version = "0.1.7" +name = "lzma-rust2" +version = "0.13.0" source = "registry+https://github.com/rust-lang/crates.io-index" -checksum = "5baab2bbbd7d75a144d671e9ff79270e903957d92fb7386fd39034c709bd2661" +checksum = "c60a23ffb90d527e23192f1246b14746e2f7f071cb84476dd879071696c18a4a" dependencies = [ - "byteorder", + "crc", + "sha2 0.10.9", ] +[[package]] +name = "lzma-rust2" +version = "0.18.1" +source = "registry+https://github.com/rust-lang/crates.io-index" +checksum = "243cb2271683c2855cad62142cbf38199db439b1b1e1ccdd5a011342894dd7cc" + [[package]] name = "lzo" -version = "0.1.1" +version = "0.1.3" source = "registry+https://github.com/rust-lang/crates.io-index" -checksum = "987ae180dd550693b0e370c73131f32910c12469562ec2d5c4a1a92e59ac4128" +checksum = "3f0f2b6cc4315b56c9feb218f1a26675e64c60b9a2d46c1cca40479ee6bdb3d6" [[package]] name = "lzo1x" @@ -1831,7 +1914,7 @@ source = "registry+https://github.com/rust-lang/crates.io-index" checksum = "d89e7ee0cfbedfc4da3340218492196241d89eefb6dab27de5df917a6d2e78cf" dependencies = [ "cfg-if", - "digest", + "digest 0.10.7", ] [[package]] @@ -1840,7 +1923,7 @@ version = "0.10.2" source = "registry+https://github.com/rust-lang/crates.io-index" checksum = "1f4f0f3ed25ff4f8d8d102288d92f900efc202661c884cf67dfe4f0d07c43d1f" dependencies = [ - "digest", + "digest 0.10.7", ] [[package]] @@ -1867,14 +1950,14 @@ dependencies = [ "predicates", "serde", "serde_json", - "sevenz-rust", + "sevenz-rust2", "tar", "tempfile", "tracing", "tracing-subscriber", "ureq", "yara-x", - "zip", + "zip 2.4.2", "zip-forensic-core", ] @@ -1911,7 +1994,7 @@ dependencies = [ "serde", "serde_json", "tempfile", - "thiserror 2.0.19", + "thiserror 2.0.20", ] [[package]] @@ -1922,7 +2005,7 @@ dependencies = [ "forensicnomicon", "serde", "serde_json", - "thiserror 2.0.19", + "thiserror 2.0.20", ] [[package]] @@ -1937,7 +2020,7 @@ dependencies = [ "rust-lzxpress", "ruzstd", "snap", - "thiserror 2.0.19", + "thiserror 2.0.20", ] [[package]] @@ -1953,7 +2036,7 @@ dependencies = [ "memf-symbols", "serde", "serde_json", - "thiserror 2.0.19", + "thiserror 2.0.20", ] [[package]] @@ -1974,7 +2057,7 @@ dependencies = [ "inventory", "memf-format", "regex", - "thiserror 2.0.19", + "thiserror 2.0.20", "yara-x", ] @@ -1988,7 +2071,7 @@ dependencies = [ "serde", "serde_json", "tempfile", - "thiserror 2.0.19", + "thiserror 2.0.20", "ureq", ] @@ -1996,12 +2079,12 @@ dependencies = [ name = "memf-windows" version = "0.4.4" dependencies = [ - "aes", + "aes 0.8.4", "aes-gcm", - "cbc", + "cbc 0.1.2", "cipher 0.4.4", "des", - "digest", + "digest 0.10.7", "forensicnomicon", "goblin", "hmac", @@ -2018,9 +2101,9 @@ dependencies = [ "serde", "serde_json", "sha1", - "sha2", + "sha2 0.10.9", "shellitem", - "thiserror 2.0.19", + "thiserror 2.0.20", "winevt-core", "winreg-core", "winreg-format", @@ -2045,22 +2128,13 @@ dependencies = [ "libc", ] -[[package]] -name = "memmapix" -version = "0.7.6" -source = "registry+https://github.com/rust-lang/crates.io-index" -checksum = "f517ab414225d5f1755bd284d9545bd08a72a3958b3c6384d72e95de9cc1a1d3" -dependencies = [ - "rustix 0.38.44", -] - [[package]] name = "memx" version = "0.1.32" source = "registry+https://github.com/rust-lang/crates.io-index" checksum = "93022fcc0eab2dc9dd134e362592e06f0b3c0aa549ae91d8b3e539e56c2a0687" dependencies = [ - "cpufeatures", + "cpufeatures 0.2.17", ] [[package]] @@ -2112,20 +2186,19 @@ dependencies = [ ] [[package]] -name = "normalize-line-endings" -version = "0.3.0" +name = "nom" +version = "8.0.0" source = "registry+https://github.com/rust-lang/crates.io-index" -checksum = "61807f77802ff30975e01f4f071c8ba10c022052f98b3294119f3e615d13e5be" +checksum = "df9761775871bdef83bee530e60050f7e54b1105350d6884eb0fb4f46c2f9405" +dependencies = [ + "memchr", +] [[package]] -name = "nt-time" -version = "0.8.1" +name = "normalize-line-endings" +version = "0.3.0" source = "registry+https://github.com/rust-lang/crates.io-index" -checksum = "2de419e64947cd8830e66beb584acc3fb42ed411d103e3c794dda355d1b374b5" -dependencies = [ - "chrono", - "time", -] +checksum = "61807f77802ff30975e01f4f071c8ba10c022052f98b3294119f3e615d13e5be" [[package]] name = "nu-ansi-term" @@ -2181,9 +2254,9 @@ dependencies = [ [[package]] name = "num-integer" -version = "0.1.46" +version = "0.1.47" source = "registry+https://github.com/rust-lang/crates.io-index" -checksum = "7969661fd2958a5cb096e56c8e1ad0444ac2bbcd0061bd28660485a44879858f" +checksum = "7ce2d95d4b3734dc35aa2f45e1aa22cd416814592a4f9d9205e11affd5b8e10b" dependencies = [ "num-traits", ] @@ -2208,17 +2281,11 @@ dependencies = [ "libm", ] -[[package]] -name = "number_prefix" -version = "0.4.0" -source = "registry+https://github.com/rust-lang/crates.io-index" -checksum = "830b246a0e5f20af87141b25c173cd1b609bd7779a4617d6ec582abaf90870f3" - [[package]] name = "object" -version = "0.36.7" +version = "0.37.3" source = "registry+https://github.com/rust-lang/crates.io-index" -checksum = "62948e14d923ea95ea2c7c86c71013138b66525b86bdc08d2dcc262bdb497b87" +checksum = "ff76201f031d8863c38aa7f905eca4f53abbfa15f609db4277d44cd8938f33fe" dependencies = [ "crc32fast", "hashbrown 0.15.5", @@ -2226,20 +2293,11 @@ dependencies = [ "memchr", ] -[[package]] -name = "object" -version = "0.37.3" -source = "registry+https://github.com/rust-lang/crates.io-index" -checksum = "ff76201f031d8863c38aa7f905eca4f53abbfa15f609db4277d44cd8938f33fe" -dependencies = [ - "memchr", -] - [[package]] name = "oid-registry" -version = "0.7.1" +version = "0.8.1" source = "registry+https://github.com/rust-lang/crates.io-index" -checksum = "a8d8034d9489cdaf79228eb9f6a3b8d7bb32ba00d6645ebd48eef4077ceb5bd9" +checksum = "12f40cff3dde1b6087cc5d5f5d4d65712f34016a03ed60e9c08dcc392736b5b7" dependencies = [ "asn1-rs", ] @@ -2271,7 +2329,7 @@ dependencies = [ "ecdsa", "elliptic-curve", "primeorder", - "sha2", + "sha2 0.10.9", ] [[package]] @@ -2283,7 +2341,7 @@ dependencies = [ "ecdsa", "elliptic-curve", "primeorder", - "sha2", + "sha2 0.10.9", ] [[package]] @@ -2309,45 +2367,13 @@ dependencies = [ "windows-link", ] -[[package]] -name = "parse-display" -version = "0.8.2" -source = "registry+https://github.com/rust-lang/crates.io-index" -checksum = "c6509d08722b53e8dafe97f2027b22ccbe3a5db83cb352931e9716b0aa44bc5c" -dependencies = [ - "once_cell", - "parse-display-derive", - "regex", -] - -[[package]] -name = "parse-display-derive" -version = "0.8.2" -source = "registry+https://github.com/rust-lang/crates.io-index" -checksum = "68517892c8daf78da08c0db777fcc17e07f2f63ef70041718f8a7630ad84f341" -dependencies = [ - "once_cell", - "proc-macro2", - "quote", - "regex", - "regex-syntax 0.7.5", - "structmeta", - "syn 2.0.119", -] - -[[package]] -name = "paste" -version = "1.0.15" -source = "registry+https://github.com/rust-lang/crates.io-index" -checksum = "57c0d7b74b563b49d38dae00a0c37d4d6de9b432382b2892f0574ddcae73fd0a" - [[package]] name = "pbkdf2" version = "0.12.2" source = "registry+https://github.com/rust-lang/crates.io-index" checksum = "f8ed6a7761f76e3b9f92dfb0a60a6a6477c61024b775147ff0973a02653abaf2" dependencies = [ - "digest", + "digest 0.10.7", "hmac", ] @@ -2404,6 +2430,12 @@ dependencies = [ "spki", ] +[[package]] +name = "pkg-config" +version = "0.3.34" +source = "registry+https://github.com/rust-lang/crates.io-index" +checksum = "f6b464fbc74e149a392436b17d523f769e057cb6877f6a5c4618bc6f11800548" + [[package]] name = "plain" version = "0.2.3" @@ -2430,16 +2462,16 @@ source = "registry+https://github.com/rust-lang/crates.io-index" checksum = "9d1fe60d06143b2430aa532c94cfe9e29783047f06c0d7fd359a9a51b729fa25" dependencies = [ "cfg-if", - "cpufeatures", + "cpufeatures 0.2.17", "opaque-debug", "universal-hash", ] [[package]] name = "portable-atomic" -version = "1.14.0" +version = "1.15.0" source = "registry+https://github.com/rust-lang/crates.io-index" -checksum = "3d20d5497ef88037a52ff98267d066e7f11fcc5e99bbfbd58a42336193aacec3" +checksum = "05c8b63e8d9609db387f0324918f81d68fe27748f084ef092fb35954d0539a85" [[package]] name = "postcard" @@ -2459,6 +2491,12 @@ version = "0.2.0" source = "registry+https://github.com/rust-lang/crates.io-index" checksum = "439ee305def115ba05938db6eb1644ff94165c5ab5e9420d1c1bcedbba909391" +[[package]] +name = "ppmd-rust" +version = "1.4.0" +source = "registry+https://github.com/rust-lang/crates.io-index" +checksum = "efca4c95a19a79d1c98f791f10aebd5c1363b473244630bb7dbde1dc98455a24" + [[package]] name = "ppv-lite86" version = "0.2.21" @@ -2500,9 +2538,9 @@ dependencies = [ [[package]] name = "prefetch-core" -version = "0.1.0" +version = "0.1.1" source = "registry+https://github.com/rust-lang/crates.io-index" -checksum = "ce0e0c1336e28565047c7b519ed4ae8d6b97d2f075995dc541e0ff12b3e8d63c" +checksum = "171bd6107a130a2198dc0435e698a67fd8baa2b98147458e5053a02c362dd30a" dependencies = [ "xpress-huffman", ] @@ -2577,24 +2615,41 @@ dependencies = [ ] [[package]] -name = "psm" -version = "0.1.31" +name = "psl" +version = "2.1.223" source = "registry+https://github.com/rust-lang/crates.io-index" -checksum = "645dbe486e346d9b5de3ef16ede18c26e6c70ad97418f4874b8b1889d6e761ea" +checksum = "c0dedad316e05de220cbf3fd8bfb69f3df8755dde2d7d479211827b595168a93" dependencies = [ - "ar_archive_writer", - "cc", + "psl-types", ] +[[package]] +name = "psl-types" +version = "2.0.11" +source = "registry+https://github.com/rust-lang/crates.io-index" +checksum = "33cb294fe86a74cbcf50d4445b37da762029549ebeea341421c7c70370f86cac" + [[package]] name = "pulley-interpreter" -version = "26.0.1" +version = "36.0.13" source = "registry+https://github.com/rust-lang/crates.io-index" -checksum = "df33e7f8a43ccc7f93b330fef4baf271764674926f3f4d40f4a196d54de8af26" +checksum = "2662666315cb90dfb4d99a652ee053d4d8598f71c474209e84da031ca56ae5a4" dependencies = [ "cranelift-bitset", "log", - "sptr", + "pulley-macros", + "wasmtime-internal-math", +] + +[[package]] +name = "pulley-macros" +version = "36.0.13" +source = "registry+https://github.com/rust-lang/crates.io-index" +checksum = "bb9a7d9ed2618f94b6d054aba3eb2768c9b489fe16b4ef8847fbc6ed41b707bb" +dependencies = [ + "proc-macro2", + "quote", + "syn 2.0.119", ] [[package]] @@ -2606,6 +2661,12 @@ dependencies = [ "proc-macro2", ] +[[package]] +name = "r-efi" +version = "5.3.0" +source = "registry+https://github.com/rust-lang/crates.io-index" +checksum = "69cdb34c158ceb288df11e18b4bd39de994f6657d83847bdffdbd7f346754b0f" + [[package]] name = "r-efi" version = "6.0.0" @@ -2667,14 +2728,15 @@ dependencies = [ [[package]] name = "regalloc2" -version = "0.10.2" +version = "0.12.2" source = "registry+https://github.com/rust-lang/crates.io-index" -checksum = "12908dbeb234370af84d0579b9f68258a0f67e201412dd9a2814e6f45b2fc0f0" +checksum = "5216b1837de2149f8bc8e6d5f88a9326b63b8c836ed58ce4a0a29ec736a59734" dependencies = [ - "hashbrown 0.14.5", + "allocator-api2", + "bumpalo", + "hashbrown 0.15.5", "log", "rustc-hash 2.1.3", - "slice-group-by", "smallvec", ] @@ -2687,26 +2749,20 @@ dependencies = [ "aho-corasick", "memchr", "regex-automata", - "regex-syntax 0.8.11", + "regex-syntax", ] [[package]] name = "regex-automata" -version = "0.4.16" +version = "0.4.18" source = "registry+https://github.com/rust-lang/crates.io-index" -checksum = "8fcfdb36bda0c880c5931cdc7a2bcdc8ba4556847b9d912bca70bc94708711ad" +checksum = "ad8553b9b26413251cbf30e620595c7a41b3887f03da04579c0e6b0d6a06b4b2" dependencies = [ "aho-corasick", "memchr", - "regex-syntax 0.8.11", + "regex-syntax", ] -[[package]] -name = "regex-syntax" -version = "0.7.5" -source = "registry+https://github.com/rust-lang/crates.io-index" -checksum = "dbb5fb1acd8a1a18b3dd5be62d25485eb770e05afb408a9627d14d451bae12da" - [[package]] name = "regex-syntax" version = "0.8.11" @@ -2761,8 +2817,8 @@ version = "0.9.10" source = "registry+https://github.com/rust-lang/crates.io-index" checksum = "b8573f03f5883dcaebdfcf4725caa1ecb9c15b2ef50c43a07b816e06799bb12d" dependencies = [ - "const-oid", - "digest", + "const-oid 0.9.6", + "digest 0.10.7", "num-bigint-dig", "num-integer", "num-traits", @@ -2808,7 +2864,7 @@ version = "4.1.0" source = "registry+https://github.com/rust-lang/crates.io-index" checksum = "faf0c4a6ece9950b9abdb62b1cfcf2a68b3b67a10ba445b3bb85be2a293d0632" dependencies = [ - "nom", + "nom 7.1.3", ] [[package]] @@ -2839,9 +2895,9 @@ dependencies = [ [[package]] name = "rustls" -version = "0.23.42" +version = "0.23.43" source = "registry+https://github.com/rust-lang/crates.io-index" -checksum = "3c54fcab019b409d04215d3a17cb438fd7fbf192ee61461f20f4fe18704bc138" +checksum = "0283386ce02abc0151e1761d08802dfe86c173b0b494af5cbc086574e453da06" dependencies = [ "log", "once_cell", @@ -2854,18 +2910,18 @@ dependencies = [ [[package]] name = "rustls-pki-types" -version = "1.15.0" +version = "1.15.1" source = "registry+https://github.com/rust-lang/crates.io-index" -checksum = "764899a24af3980067ee14bc143654f297b22eaebfe3c7b6b211920a5a59b046" +checksum = "2f4925028c7eb5d1fcdaf196971378ed9d2c1c4efc7dc5d011256f76c99c0a96" dependencies = [ "zeroize", ] [[package]] name = "rustls-webpki" -version = "0.103.13" +version = "0.103.14" source = "registry+https://github.com/rust-lang/crates.io-index" -checksum = "61c429a8649f110dddef65e2a5ad240f747e85f7758a6bccc7e5777bd33f756e" +checksum = "0527518605e68109d875e248ea259b6758801cf165e4b2c2733ae3b51f12535a" dependencies = [ "ring", "rustls-pki-types", @@ -2993,19 +3049,20 @@ dependencies = [ ] [[package]] -name = "sevenz-rust" -version = "0.6.1" +name = "sevenz-rust2" +version = "0.21.4" source = "registry+https://github.com/rust-lang/crates.io-index" -checksum = "26482cf1ecce4540dc782fc70019eba89ffc4d87b3717eb5ec524b5db6fdefef" +checksum = "20acd38118edb830eb5a0bfacaf83c687b9995f48d6983cdac3cb18ce1d571cc" dependencies = [ - "bit-set", - "byteorder", - "crc", - "filetime_creation", + "aes 0.9.2", + "bzip2", + "cbc 0.2.1", + "crc32fast", + "getrandom 0.4.3", "js-sys", - "lzma-rust", - "nt-time", - "sha2", + "lzma-rust2 0.18.1", + "ppmd-rust", + "sha2 0.11.0", "wasm-bindgen", ] @@ -3016,8 +3073,8 @@ source = "registry+https://github.com/rust-lang/crates.io-index" checksum = "a978451301f4db1d02937a4ab3ccce137717b81826e79b7d49ffe3244a13c3b8" dependencies = [ "cfg-if", - "cpufeatures", - "digest", + "cpufeatures 0.2.17", + "digest 0.10.7", ] [[package]] @@ -3027,8 +3084,19 @@ source = "registry+https://github.com/rust-lang/crates.io-index" checksum = "a7507d819769d01a365ab707794a4084392c824f54a7a6a7862f8c3d0892b283" dependencies = [ "cfg-if", - "cpufeatures", - "digest", + "cpufeatures 0.2.17", + "digest 0.10.7", +] + +[[package]] +name = "sha2" +version = "0.11.0" +source = "registry+https://github.com/rust-lang/crates.io-index" +checksum = "446ba717509524cb3f22f17ecc096f10f4822d76ab5c0b9822c5f9c284e825f4" +dependencies = [ + "cfg-if", + "cpufeatures 0.3.0", + "digest 0.11.3", ] [[package]] @@ -3042,9 +3110,9 @@ dependencies = [ [[package]] name = "shellitem" -version = "0.2.0" +version = "0.2.2" source = "registry+https://github.com/rust-lang/crates.io-index" -checksum = "aacc05cb220ac9c618b6d6026e29dc4776e0dc0b874d5c5dffc44fa30078a233" +checksum = "a27e21983cc42e2444a97cd22ddc3b0158025759d68cf3db85efb30fb9a13224" dependencies = [ "forensicnomicon", ] @@ -3061,7 +3129,7 @@ version = "2.2.0" source = "registry+https://github.com/rust-lang/crates.io-index" checksum = "77549399552de45a898a580c1b41d445bf730df867cc44e6c0233bbc4b8329de" dependencies = [ - "digest", + "digest 0.10.7", "rand_core", ] @@ -3077,12 +3145,6 @@ version = "0.4.12" source = "registry+https://github.com/rust-lang/crates.io-index" checksum = "0c790de23124f9ab44544d7ac05d60440adc586479ce501c1d6d7da3cd8c9cf5" -[[package]] -name = "slice-group-by" -version = "0.3.1" -source = "registry+https://github.com/rust-lang/crates.io-index" -checksum = "826167069c09b99d56f31e9ae5c99049e932a98c9dc2dac47645b08dbbf76ba7" - [[package]] name = "smallvec" version = "1.15.2" @@ -3114,12 +3176,6 @@ dependencies = [ "der", ] -[[package]] -name = "sptr" -version = "0.3.2" -source = "registry+https://github.com/rust-lang/crates.io-index" -checksum = "3b9b39299b249ad65f3b7e96443bad61c02ca5cd3589f46cb6d610a0fd6c0d6a" - [[package]] name = "stable_deref_trait" version = "1.2.1" @@ -3133,23 +3189,12 @@ source = "registry+https://github.com/rust-lang/crates.io-index" checksum = "7da8b5736845d9f2fcb837ea5d9e2628564b3b043a70948a3f0b778838c5fb4f" [[package]] -name = "structmeta" -version = "0.2.0" -source = "registry+https://github.com/rust-lang/crates.io-index" -checksum = "78ad9e09554f0456d67a69c1584c9798ba733a5b50349a6c0d0948710523922d" -dependencies = [ - "proc-macro2", - "quote", - "structmeta-derive", - "syn 2.0.119", -] - -[[package]] -name = "structmeta-derive" -version = "0.2.0" +name = "strum_macros" +version = "0.27.2" source = "registry+https://github.com/rust-lang/crates.io-index" -checksum = "a60bcaff7397072dca0017d1db428e30d5002e00b6847703e2e42005c95fbe00" +checksum = "7695ce3845ea4b33927c055a39dc438a45b059f7c1b3d91d38d10355fb8cbca7" dependencies = [ + "heck", "proc-macro2", "quote", "syn 2.0.119", @@ -3224,9 +3269,9 @@ dependencies = [ [[package]] name = "target-lexicon" -version = "0.12.16" +version = "0.13.5" source = "registry+https://github.com/rust-lang/crates.io-index" -checksum = "61c41af27dd6d1e27b1b16b489db798443478cef1f06a660c96db617ba5de3b1" +checksum = "adb6935a6f5c20170eeceb1a3835a49e12e19d792f6dd344ccc76a985ca5a6ca" [[package]] name = "tempfile" @@ -3273,11 +3318,11 @@ dependencies = [ [[package]] name = "thiserror" -version = "2.0.19" +version = "2.0.20" source = "registry+https://github.com/rust-lang/crates.io-index" -checksum = "09a43598840e33d5b0331f38c5e30d13bb11c11210a4b58f0d9b18a5a5eefcd9" +checksum = "ec86235f5fcc2a73650310756d2ac5b138a5780bbbdfae3eeccec992c435ba4f" dependencies = [ - "thiserror-impl 2.0.19", + "thiserror-impl 2.0.20", ] [[package]] @@ -3293,9 +3338,9 @@ dependencies = [ [[package]] name = "thiserror-impl" -version = "2.0.19" +version = "2.0.20" source = "registry+https://github.com/rust-lang/crates.io-index" -checksum = "43cbfe0cf76104d42a574802844187e84a305e531ed54455f11fbde0f10541cd" +checksum = "bc04cd3e1236dd4a98afca4569f2deb3f120e5422a4023be2cb683f8486292af" dependencies = [ "proc-macro2", "quote", @@ -3313,9 +3358,9 @@ dependencies = [ [[package]] name = "time" -version = "0.3.54" +version = "0.3.55" source = "registry+https://github.com/rust-lang/crates.io-index" -checksum = "3e1d5e639ff6bab73cb6885cc7e7b1de96c3f32c68ec55f3952614bec1092244" +checksum = "cdb87b95ec50ddfa440816d227a17b2ccbdda963a316a727fda0fc4334f7d134" dependencies = [ "deranged", "num-conv", @@ -3451,10 +3496,10 @@ source = "registry+https://github.com/rust-lang/crates.io-index" checksum = "b4ac048d71ede7ee76d585517add45da530660ef4390e49b098733c6e897f254" [[package]] -name = "unicode-xid" -version = "0.2.6" +name = "unit-prefix" +version = "0.5.2" source = "registry+https://github.com/rust-lang/crates.io-index" -checksum = "ebc1c04c71510c7f702b52b7c350734c9ff1295c464a03335b00bb84fc54f853" +checksum = "81e544489bf3d8ef66c953931f56617f423cd4b5494be343d9b9d3dda037b9a3" [[package]] name = "universal-hash" @@ -3472,13 +3517,19 @@ version = "0.9.0" source = "registry+https://github.com/rust-lang/crates.io-index" checksum = "8ecb6da28b8a351d773b68d5825ac39017e680750f980f3a1a85cd8dd28a47c1" +[[package]] +name = "unty" +version = "0.0.4" +source = "registry+https://github.com/rust-lang/crates.io-index" +checksum = "6d49784317cd0d1ee7ec5c716dd598ec5b4483ea832a2dced265471cc0f690ae" + [[package]] name = "ureq" -version = "3.3.0" +version = "3.4.0" source = "registry+https://github.com/rust-lang/crates.io-index" -checksum = "dea7109cdcd5864d4eeb1b58a1648dc9bf520360d7af16ec26d0a9354bafcfc0" +checksum = "972d7902c8735f2695410b8aed7df6ed12a47394aa1c8d7af49f0497b731a94d" dependencies = [ - "base64", + "base64 0.23.1", "flate2", "log", "percent-encoding", @@ -3491,11 +3542,11 @@ dependencies = [ [[package]] name = "ureq-proto" -version = "0.6.0" +version = "0.6.1" source = "registry+https://github.com/rust-lang/crates.io-index" -checksum = "e994ba84b0bd1b1b0cf92878b7ef898a5c1760108fe7b6010327e274917a808c" +checksum = "da5f78b09e6941e1a0f2e30e695e4b120377b54d5e0aec11b594bb57b3971613" dependencies = [ - "base64", + "base64 0.23.1", "http", "httparse", "log", @@ -3536,6 +3587,12 @@ version = "0.9.5" source = "registry+https://github.com/rust-lang/crates.io-index" checksum = "0b928f33d975fc6ad9f86c8f283853ad26bdd5b10b7f1542aa2fa15e2289105a" +[[package]] +name = "virtue" +version = "0.0.18" +source = "registry+https://github.com/rust-lang/crates.io-index" +checksum = "051eb1abcf10076295e815102942cc58f9d5e3b4560e46e53c21e8ff6f3af7b1" + [[package]] name = "wait-timeout" version = "0.2.1" @@ -3589,11 +3646,20 @@ version = "0.11.1+wasi-snapshot-preview1" source = "registry+https://github.com/rust-lang/crates.io-index" checksum = "ccf3ec651a847eb01de73ccad15eb7d99f80485de043efb2f370cd654f4ea44b" +[[package]] +name = "wasip2" +version = "1.0.4+wasi-0.2.12" +source = "registry+https://github.com/rust-lang/crates.io-index" +checksum = "b67efb37e106e55ce722a510d6b5f9c17f083e5fc79afc2badeb12cc313d9487" +dependencies = [ + "wit-bindgen", +] + [[package]] name = "wasm-bindgen" -version = "0.2.126" +version = "0.2.127" source = "registry+https://github.com/rust-lang/crates.io-index" -checksum = "4b067c0c11094aef6b7a801c1e34a26affafdf3d051dba08456b868789aaf9a4" +checksum = "1b70935747edd64d89de3efa29d73789b806c15798f8e7dca4d8ac356b50ce70" dependencies = [ "cfg-if", "once_cell", @@ -3604,9 +3670,9 @@ dependencies = [ [[package]] name = "wasm-bindgen-macro" -version = "0.2.126" +version = "0.2.127" source = "registry+https://github.com/rust-lang/crates.io-index" -checksum = "167ce5e579f6bcf889c4f7175a8a5a585de84e8ff93976ce393efa5f2837aab1" +checksum = "77775f8f3f7217702089053b94958f8f54061a3f663417df76e19cbdcca29bc1" dependencies = [ "quote", "wasm-bindgen-macro-support", @@ -3614,9 +3680,9 @@ dependencies = [ [[package]] name = "wasm-bindgen-macro-support" -version = "0.2.126" +version = "0.2.127" source = "registry+https://github.com/rust-lang/crates.io-index" -checksum = "f3997c7839262f4ef12cf90b818d6340c18e80f263f1a94bf157d0ec4420380e" +checksum = "e11d33f857dc2fb11b8bc75aee111aa9cbeb12cd9f25efd3d4c2a3dd4e235284" dependencies = [ "bumpalo", "proc-macro2", @@ -3627,9 +3693,9 @@ dependencies = [ [[package]] name = "wasm-bindgen-shared" -version = "0.2.126" +version = "0.2.127" source = "registry+https://github.com/rust-lang/crates.io-index" -checksum = "dc1b4cb0cc549fcf58d7dfc081778139b3d283a081644e833e84682ad71cea24" +checksum = "7ef64dbcc55df09c7e5a46182d181c2cfa3e925f3da937ea764728b4bbb9dcbf" dependencies = [ "unicode-ident", ] @@ -3645,11 +3711,12 @@ dependencies = [ [[package]] name = "wasm-encoder" -version = "0.218.1" +version = "0.236.1" source = "registry+https://github.com/rust-lang/crates.io-index" -checksum = "491f7e48672d0a1efdeadf897d98ac1f45942c26c3829cb44a6b828f6f26155f" +checksum = "724fccfd4f3c24b7e589d333fc0429c68042897a7e8a5f8694f31792471841e7" dependencies = [ - "leb128", + "leb128fmt", + "wasmparser 0.236.1", ] [[package]] @@ -3668,13 +3735,12 @@ dependencies = [ [[package]] name = "wasmparser" -version = "0.218.1" +version = "0.236.1" source = "registry+https://github.com/rust-lang/crates.io-index" -checksum = "059739c2eac26eea736389a7d6d30b41a8201490bea204d0facde19183359849" +checksum = "a9b1e81f3eb254cf7404a82cee6926a4a3ccc5aad80cc3d43608a070c67aa1d7" dependencies = [ - "ahash", "bitflags 2.13.1", - "hashbrown 0.14.5", + "hashbrown 0.15.5", "indexmap 2.14.0", "semver", "serde", @@ -3682,91 +3748,93 @@ dependencies = [ [[package]] name = "wasmprinter" -version = "0.218.1" +version = "0.236.1" source = "registry+https://github.com/rust-lang/crates.io-index" -checksum = "38b30ceafa77646f56747369b0f2a0296016a40b447d32e6907439f2e4bb7695" +checksum = "2df225df06a6df15b46e3f73ca066ff92c2e023670969f7d50ce7d5e695abbb1" dependencies = [ "anyhow", "termcolor", - "wasmparser 0.218.1", + "wasmparser 0.236.1", ] [[package]] name = "wasmtime" -version = "26.0.1" +version = "36.0.13" source = "registry+https://github.com/rust-lang/crates.io-index" -checksum = "51e762e163fd305770c6c341df3290f0cabb3c264e7952943018e9a1ced8d917" +checksum = "93d881c5dcff5f230368d84fcf110ca25fe47badc694e7d559c3891492159916" dependencies = [ + "addr2line", "anyhow", "bitflags 2.13.1", "bumpalo", "cc", "cfg-if", - "hashbrown 0.14.5", + "hashbrown 0.15.5", "indexmap 2.14.0", "libc", - "libm", "log", "mach2", "memfd", - "object 0.36.7", + "object", "once_cell", - "paste", "postcard", - "psm", "pulley-interpreter", - "rustix 0.38.44", + "rustix 1.1.4", "serde", "serde_derive", "smallvec", - "sptr", "target-lexicon", - "wasmparser 0.218.1", - "wasmtime-asm-macros", - "wasmtime-component-macro", - "wasmtime-cranelift", + "wasmparser 0.236.1", "wasmtime-environ", - "wasmtime-jit-icache-coherence", - "wasmtime-slab", - "wasmtime-versioned-export-macros", - "windows-sys 0.59.0", + "wasmtime-internal-asm-macros", + "wasmtime-internal-cranelift", + "wasmtime-internal-fiber", + "wasmtime-internal-jit-debug", + "wasmtime-internal-jit-icache-coherence", + "wasmtime-internal-math", + "wasmtime-internal-slab", + "wasmtime-internal-unwinder", + "wasmtime-internal-versioned-export-macros", + "windows-sys 0.60.2", ] [[package]] -name = "wasmtime-asm-macros" -version = "26.0.1" +name = "wasmtime-environ" +version = "36.0.13" source = "registry+https://github.com/rust-lang/crates.io-index" -checksum = "63caa7aebb546374e26257a1900fb93579171e7c02514cde26805b9ece3ef812" +checksum = "a4b25534a3ff9dd844701c2bc997f76cb1f97bf2af0546a7066ae96f49c2e068" dependencies = [ - "cfg-if", + "anyhow", + "cranelift-bitset", + "cranelift-entity", + "gimli 0.32.3", + "indexmap 2.14.0", + "log", + "object", + "postcard", + "serde", + "serde_derive", + "smallvec", + "target-lexicon", + "wasm-encoder 0.236.1", + "wasmparser 0.236.1", + "wasmprinter", ] [[package]] -name = "wasmtime-component-macro" -version = "26.0.1" +name = "wasmtime-internal-asm-macros" +version = "36.0.13" source = "registry+https://github.com/rust-lang/crates.io-index" -checksum = "d61a4b5ce2ad9c15655e830f0eac0c38b8def30c74ecac71f452d3901e491b68" +checksum = "1d02832d760351fb3a1aa99eb8f7b95596c0f4e4e52df1547fcdb295ea5c780c" dependencies = [ - "anyhow", - "proc-macro2", - "quote", - "syn 2.0.119", - "wasmtime-component-util", - "wasmtime-wit-bindgen", - "wit-parser", + "cfg-if", ] [[package]] -name = "wasmtime-component-util" -version = "26.0.1" +name = "wasmtime-internal-cranelift" +version = "36.0.13" source = "registry+https://github.com/rust-lang/crates.io-index" -checksum = "35e87a1212270dbb84a49af13d82594e00a92769d6952b0ea7fc4366c949f6ad" - -[[package]] -name = "wasmtime-cranelift" -version = "26.0.1" -source = "registry+https://github.com/rust-lang/crates.io-index" -checksum = "7cb40dddf38c6a5eefd5ce7c1baf43b00fe44eada11a319fab22e993a960262f" +checksum = "65821bab751956cddfc6ee957beb13a0e2a6cf682050d75dfb7a0228db2ed499" dependencies = [ "anyhow", "cfg-if", @@ -3775,80 +3843,95 @@ dependencies = [ "cranelift-entity", "cranelift-frontend", "cranelift-native", - "gimli 0.31.1", - "itertools 0.12.1", + "gimli 0.32.3", + "itertools", "log", - "object 0.36.7", + "object", + "pulley-interpreter", "smallvec", "target-lexicon", - "thiserror 1.0.69", - "wasmparser 0.218.1", + "thiserror 2.0.20", + "wasmparser 0.236.1", "wasmtime-environ", - "wasmtime-versioned-export-macros", + "wasmtime-internal-math", + "wasmtime-internal-versioned-export-macros", ] [[package]] -name = "wasmtime-environ" -version = "26.0.1" +name = "wasmtime-internal-fiber" +version = "36.0.13" source = "registry+https://github.com/rust-lang/crates.io-index" -checksum = "8613075e89e94a48c05862243c2b718eef1b9c337f51493ebf951e149a10fa19" +checksum = "18cf73e5e8d28a2b30d86454430c7dea3b593598dcbbc0ebb927ca2716222d41" dependencies = [ "anyhow", - "cranelift-bitset", - "cranelift-entity", - "gimli 0.31.1", - "indexmap 2.14.0", - "log", - "object 0.36.7", - "postcard", - "serde", - "serde_derive", - "smallvec", - "target-lexicon", - "wasm-encoder 0.218.1", - "wasmparser 0.218.1", - "wasmprinter", + "cc", + "cfg-if", + "libc", + "rustix 1.1.4", + "wasmtime-internal-asm-macros", + "wasmtime-internal-versioned-export-macros", + "windows-sys 0.60.2", +] + +[[package]] +name = "wasmtime-internal-jit-debug" +version = "36.0.13" +source = "registry+https://github.com/rust-lang/crates.io-index" +checksum = "4279dc3147ddaa21e5b3d2c0eaff117881c4f937747bdd2379eb361665843bd3" +dependencies = [ + "cc", + "wasmtime-internal-versioned-export-macros", ] [[package]] -name = "wasmtime-jit-icache-coherence" -version = "26.0.1" +name = "wasmtime-internal-jit-icache-coherence" +version = "36.0.13" source = "registry+https://github.com/rust-lang/crates.io-index" -checksum = "da47fba49af72581bc0dc67c8faaf5ee550e6f106e285122a184a675193701a5" +checksum = "a8eb677944201839c0be19b39b0f19dcd663efbcbc05a09c73f26fec7bdf0331" dependencies = [ "anyhow", "cfg-if", "libc", - "windows-sys 0.59.0", + "windows-sys 0.60.2", +] + +[[package]] +name = "wasmtime-internal-math" +version = "36.0.13" +source = "registry+https://github.com/rust-lang/crates.io-index" +checksum = "db9a153e184878df396a11f8912444531c2e4d0c7a1d9e9a52b30d9853d89cb9" +dependencies = [ + "libm", ] [[package]] -name = "wasmtime-slab" -version = "26.0.1" +name = "wasmtime-internal-slab" +version = "36.0.13" source = "registry+https://github.com/rust-lang/crates.io-index" -checksum = "770e10cdefb15f2b6304152978e115bd062753c1ebe7221c0b6b104fa0419ff6" +checksum = "b771494bead25e1f0c4c89a9476dd0b65eacca314ed82125f1e197fbc3f0396b" [[package]] -name = "wasmtime-versioned-export-macros" -version = "26.0.1" +name = "wasmtime-internal-unwinder" +version = "36.0.13" source = "registry+https://github.com/rust-lang/crates.io-index" -checksum = "db8efb877c9e5e67239d4553bb44dd2a34ae5cfb728f3cf2c5e64439c6ca6ee7" +checksum = "90199caed6925420434a923861d8ad813689ca8533d2c679f805d12e35b40a4b" dependencies = [ - "proc-macro2", - "quote", - "syn 2.0.119", + "anyhow", + "cfg-if", + "cranelift-codegen", + "log", + "object", ] [[package]] -name = "wasmtime-wit-bindgen" -version = "26.0.1" +name = "wasmtime-internal-versioned-export-macros" +version = "36.0.13" source = "registry+https://github.com/rust-lang/crates.io-index" -checksum = "4bef2a726fd8d1ee9b0144655e16c492dc32eb4c7c9f7e3309fcffe637870933" +checksum = "ae71687aa834f9cc9eb5b0f97c85184d7dc70b84d32fd8927af0887998a1ba35" dependencies = [ - "anyhow", - "heck", - "indexmap 2.14.0", - "wit-parser", + "proc-macro2", + "quote", + "syn 2.0.119", ] [[package]] @@ -3972,15 +4055,6 @@ dependencies = [ "windows-link", ] -[[package]] -name = "windows-sys" -version = "0.48.0" -source = "registry+https://github.com/rust-lang/crates.io-index" -checksum = "677d2418bec65e3338edb076e806bc1ec15693c5d0104683f2efe857f61056a9" -dependencies = [ - "windows-targets 0.48.5", -] - [[package]] name = "windows-sys" version = "0.52.0" @@ -4001,26 +4075,20 @@ dependencies = [ [[package]] name = "windows-sys" -version = "0.61.2" +version = "0.60.2" source = "registry+https://github.com/rust-lang/crates.io-index" -checksum = "ae137229bcbd6cdf0f7b80a31df61766145077ddf49416a728b02cb3921ff3fc" +checksum = "f2f500e4d28234f72040990ec9d39e3a6b950f9f22d3dba18416c35882612bcb" dependencies = [ - "windows-link", + "windows-targets 0.53.5", ] [[package]] -name = "windows-targets" -version = "0.48.5" +name = "windows-sys" +version = "0.61.2" source = "registry+https://github.com/rust-lang/crates.io-index" -checksum = "9a2fa6e2155d7247be68c096456083145c183cbbbc2764150dda45a87197940c" +checksum = "ae137229bcbd6cdf0f7b80a31df61766145077ddf49416a728b02cb3921ff3fc" dependencies = [ - "windows_aarch64_gnullvm 0.48.5", - "windows_aarch64_msvc 0.48.5", - "windows_i686_gnu 0.48.5", - "windows_i686_msvc 0.48.5", - "windows_x86_64_gnu 0.48.5", - "windows_x86_64_gnullvm 0.48.5", - "windows_x86_64_msvc 0.48.5", + "windows-link", ] [[package]] @@ -4032,7 +4100,7 @@ dependencies = [ "windows_aarch64_gnullvm 0.52.6", "windows_aarch64_msvc 0.52.6", "windows_i686_gnu 0.52.6", - "windows_i686_gnullvm", + "windows_i686_gnullvm 0.52.6", "windows_i686_msvc 0.52.6", "windows_x86_64_gnu 0.52.6", "windows_x86_64_gnullvm 0.52.6", @@ -4040,10 +4108,21 @@ dependencies = [ ] [[package]] -name = "windows_aarch64_gnullvm" -version = "0.48.5" +name = "windows-targets" +version = "0.53.5" source = "registry+https://github.com/rust-lang/crates.io-index" -checksum = "2b38e32f0abccf9987a4e3079dfb67dcd799fb61361e53e2882c3cbaf0d905d8" +checksum = "4945f9f551b88e0d65f3db0bc25c33b8acea4d9e41163edf90dcd0b19f9069f3" +dependencies = [ + "windows-link", + "windows_aarch64_gnullvm 0.53.1", + "windows_aarch64_msvc 0.53.1", + "windows_i686_gnu 0.53.1", + "windows_i686_gnullvm 0.53.1", + "windows_i686_msvc 0.53.1", + "windows_x86_64_gnu 0.53.1", + "windows_x86_64_gnullvm 0.53.1", + "windows_x86_64_msvc 0.53.1", +] [[package]] name = "windows_aarch64_gnullvm" @@ -4052,10 +4131,10 @@ source = "registry+https://github.com/rust-lang/crates.io-index" checksum = "32a4622180e7a0ec044bb555404c800bc9fd9ec262ec147edd5989ccd0c02cd3" [[package]] -name = "windows_aarch64_msvc" -version = "0.48.5" +name = "windows_aarch64_gnullvm" +version = "0.53.1" source = "registry+https://github.com/rust-lang/crates.io-index" -checksum = "dc35310971f3b2dbbf3f0690a219f40e2d9afcf64f9ab7cc1be722937c26b4bc" +checksum = "a9d8416fa8b42f5c947f8482c43e7d89e73a173cead56d044f6a56104a6d1b53" [[package]] name = "windows_aarch64_msvc" @@ -4064,10 +4143,10 @@ source = "registry+https://github.com/rust-lang/crates.io-index" checksum = "09ec2a7bb152e2252b53fa7803150007879548bc709c039df7627cabbd05d469" [[package]] -name = "windows_i686_gnu" -version = "0.48.5" +name = "windows_aarch64_msvc" +version = "0.53.1" source = "registry+https://github.com/rust-lang/crates.io-index" -checksum = "a75915e7def60c94dcef72200b9a8e58e5091744960da64ec734a6c6e9b3743e" +checksum = "b9d782e804c2f632e395708e99a94275910eb9100b2114651e04744e9b125006" [[package]] name = "windows_i686_gnu" @@ -4075,6 +4154,12 @@ version = "0.52.6" source = "registry+https://github.com/rust-lang/crates.io-index" checksum = "8e9b5ad5ab802e97eb8e295ac6720e509ee4c243f69d781394014ebfe8bbfa0b" +[[package]] +name = "windows_i686_gnu" +version = "0.53.1" +source = "registry+https://github.com/rust-lang/crates.io-index" +checksum = "960e6da069d81e09becb0ca57a65220ddff016ff2d6af6a223cf372a506593a3" + [[package]] name = "windows_i686_gnullvm" version = "0.52.6" @@ -4082,10 +4167,10 @@ source = "registry+https://github.com/rust-lang/crates.io-index" checksum = "0eee52d38c090b3caa76c563b86c3a4bd71ef1a819287c19d586d7334ae8ed66" [[package]] -name = "windows_i686_msvc" -version = "0.48.5" +name = "windows_i686_gnullvm" +version = "0.53.1" source = "registry+https://github.com/rust-lang/crates.io-index" -checksum = "8f55c233f70c4b27f66c523580f78f1004e8b5a8b659e05a4eb49d4166cca406" +checksum = "fa7359d10048f68ab8b09fa71c3daccfb0e9b559aed648a8f95469c27057180c" [[package]] name = "windows_i686_msvc" @@ -4094,10 +4179,10 @@ source = "registry+https://github.com/rust-lang/crates.io-index" checksum = "240948bc05c5e7c6dabba28bf89d89ffce3e303022809e73deaefe4f6ec56c66" [[package]] -name = "windows_x86_64_gnu" -version = "0.48.5" +name = "windows_i686_msvc" +version = "0.53.1" source = "registry+https://github.com/rust-lang/crates.io-index" -checksum = "53d40abd2583d23e4718fddf1ebec84dbff8381c07cae67ff7768bbf19c6718e" +checksum = "1e7ac75179f18232fe9c285163565a57ef8d3c89254a30685b57d83a38d326c2" [[package]] name = "windows_x86_64_gnu" @@ -4106,10 +4191,10 @@ source = "registry+https://github.com/rust-lang/crates.io-index" checksum = "147a5c80aabfbf0c7d901cb5895d1de30ef2907eb21fbbab29ca94c5b08b1a78" [[package]] -name = "windows_x86_64_gnullvm" -version = "0.48.5" +name = "windows_x86_64_gnu" +version = "0.53.1" source = "registry+https://github.com/rust-lang/crates.io-index" -checksum = "0b7b52767868a23d5bab768e390dc5f5c55825b6d30b86c844ff2dc7414044cc" +checksum = "9c3842cdd74a865a8066ab39c8a7a473c0778a3f29370b5fd6b4b9aa7df4a499" [[package]] name = "windows_x86_64_gnullvm" @@ -4118,10 +4203,10 @@ source = "registry+https://github.com/rust-lang/crates.io-index" checksum = "24d5b23dc417412679681396f2b49f3de8c1473deb516bd34410872eff51ed0d" [[package]] -name = "windows_x86_64_msvc" -version = "0.48.5" +name = "windows_x86_64_gnullvm" +version = "0.53.1" source = "registry+https://github.com/rust-lang/crates.io-index" -checksum = "ed94fce61571a4006852b7389a063ab983c02eb1bb37b47f8272ce92d06d9538" +checksum = "0ffa179e2d07eee8ad8f57493436566c7cc30ac536a3379fdf008f47f6bb7ae1" [[package]] name = "windows_x86_64_msvc" @@ -4129,6 +4214,12 @@ version = "0.52.6" source = "registry+https://github.com/rust-lang/crates.io-index" checksum = "589f6da84c646204747d1270a2a5661ea66ed1cced2631d546fdfb155959f9ec" +[[package]] +name = "windows_x86_64_msvc" +version = "0.53.1" +source = "registry+https://github.com/rust-lang/crates.io-index" +checksum = "d6bbff5f0aada427a1e5a6da5f1f98158182f26556f345ac9e04d36d0ebed650" + [[package]] name = "winevt-core" version = "0.3.0" @@ -4151,37 +4242,25 @@ dependencies = [ "memmap2", "miette", "serde", - "thiserror 2.0.19", + "thiserror 2.0.20", "winreg-format", ] [[package]] name = "winreg-format" -version = "0.1.0" +version = "0.1.1" source = "registry+https://github.com/rust-lang/crates.io-index" -checksum = "af272475b34a42d387930688120019e7ec99bbf79ecaa8c036d853cb2442a10e" +checksum = "47d820311b24b77fc3e1d899b0f9fdab395259b154cc4cdbcc45cd771b00c03d" dependencies = [ "binrw", "bitflags 2.13.1", ] [[package]] -name = "wit-parser" -version = "0.218.1" +name = "wit-bindgen" +version = "0.57.1" source = "registry+https://github.com/rust-lang/crates.io-index" -checksum = "f104473e8546f8096f1fa483d337101a98dc9525d67f4275816bcd177fe3e2be" -dependencies = [ - "anyhow", - "id-arena", - "indexmap 2.14.0", - "log", - "semver", - "serde", - "serde_derive", - "serde_json", - "unicode-xid", - "wasmparser 0.218.1", -] +checksum = "1ebf944e87a7c253233ad6766e082e3cd714b5d03812acc24c318f549614536e" [[package]] name = "wyz" @@ -4194,18 +4273,18 @@ dependencies = [ [[package]] name = "x509-parser" -version = "0.16.0" +version = "0.18.1" source = "registry+https://github.com/rust-lang/crates.io-index" -checksum = "fcbc162f30700d6f3f82a24bf7cc62ffe7caea42c0b2cba8bf7f3ae50cf51f69" +checksum = "d43b0f71ce057da06bc0851b23ee24f3f86190b07203dd8f567d0b706a185202" dependencies = [ "asn1-rs", "data-encoding", "der-parser", "lazy_static", - "nom", + "nom 7.1.3", "oid-registry", "rusticata-macros", - "thiserror 1.0.69", + "thiserror 2.0.20", "time", ] @@ -4221,50 +4300,43 @@ dependencies = [ [[package]] name = "xpress-huffman" -version = "0.1.0" -source = "registry+https://github.com/rust-lang/crates.io-index" -checksum = "7db36564308ced066dfa8972d844e85647f9c3588c57a1cecda89f76e8700907" - -[[package]] -name = "yansi" -version = "1.0.1" +version = "0.1.2" source = "registry+https://github.com/rust-lang/crates.io-index" -checksum = "cfe53a6657fd280eaa890a3bc59152892ffa3e30101319d168b781ed6529b049" +checksum = "3524c98a825aa6c40dea897e6008b533db6a18c8829c6cdc87ba9250dd0e9488" [[package]] name = "yara-x" -version = "0.12.0" +version = "1.7.1" source = "registry+https://github.com/rust-lang/crates.io-index" -checksum = "ddbcfdcbf65b96e662b720ad924e4bc6bf168239b13a6e3570970835d20a5d30" +checksum = "457a9192e5a45347f4a8e33d4827f06ae9c546201f9c9f19a2558f6e2f3a4345" dependencies = [ "aho-corasick", "annotate-snippets", "anyhow", "array-bytes", - "ascii_tree", - "base64", + "base64 0.22.1", "bincode", - "bitmask", + "bitflags 2.13.1", "bitvec", "bstr", - "const-oid", + "const-oid 0.9.6", "crc32fast", "der-parser", - "digest", + "digest 0.10.7", "dsa", "ecdsa", - "fmmap", "globwalk", "indexmap 2.14.0", "intaglio", - "itertools 0.13.0", - "lazy_static", + "ipnet", + "itertools", "linkme", "md-5", "md2", "memchr", + "memmap2", "memx", - "nom", + "nom 8.0.0", "num-derive", "num-traits", "p256", @@ -4272,33 +4344,36 @@ dependencies = [ "protobuf", "protobuf-codegen", "protobuf-parse", + "psl", + "regex", "regex-automata", - "regex-syntax 0.8.11", + "regex-syntax", "roxmltree", "rsa", "rustc-hash 2.1.3", "serde", "serde_json", "sha1", - "sha2", + "sha2 0.10.9", "smallvec", - "thiserror 2.0.19", + "strum_macros", + "thiserror 2.0.20", "tlsh-fixed", "uuid", "walrus", "wasmtime", "x509-parser", - "yansi", "yara-x-macros", "yara-x-parser", "yara-x-proto", + "zip 5.1.1", ] [[package]] name = "yara-x-macros" -version = "0.12.0" +version = "1.7.1" source = "registry+https://github.com/rust-lang/crates.io-index" -checksum = "98e32c78321a4a3eedb9a5c285616cf44359855e77d6bdb343b8d853a49e1857" +checksum = "1f53514966552a7a0ffe89fd70ea5b27d97793567f2099cee9c980c824cdd069" dependencies = [ "darling", "proc-macro2", @@ -4308,48 +4383,46 @@ dependencies = [ [[package]] name = "yara-x-parser" -version = "0.12.0" +version = "1.7.1" source = "registry+https://github.com/rust-lang/crates.io-index" -checksum = "c8dfa30d8d039faf44707b81992edadf31fb8b9b0cff10ccbead099929939d2a" +checksum = "eea3855a5e32277c45c0c74ada98edd83520416fcbcebbb8f2e384e0b73b2812" dependencies = [ "ascii_tree", - "bitmask", + "bitflags 2.13.1", "bstr", "indexmap 2.14.0", - "itertools 0.13.0", + "itertools", "logos", "num-traits", "rowan", "rustc-hash 2.1.3", "serde", - "yansi", ] [[package]] name = "yara-x-proto" -version = "0.12.0" +version = "1.7.1" source = "registry+https://github.com/rust-lang/crates.io-index" -checksum = "dd9db4c7916b5e6303a6271386f51af7d07f1ce866950cbfc55c0556f24e823c" +checksum = "ff9daafc62df6323146596a5bdc7c48194b73f8426a009d0382d064dfa916e08" dependencies = [ "protobuf", "protobuf-codegen", - "protobuf-parse", ] [[package]] name = "zerocopy" -version = "0.8.55" +version = "0.8.56" source = "registry+https://github.com/rust-lang/crates.io-index" -checksum = "b5a105cd7b140f6eeec8acff2ea38135d3cab283ada58540f629fe51e46696eb" +checksum = "556764e583adb45a9f8d413c2a147fa7e8d821e48e12b14fd560b607998b75eb" dependencies = [ "zerocopy-derive", ] [[package]] name = "zerocopy-derive" -version = "0.8.55" +version = "0.8.56" source = "registry+https://github.com/rust-lang/crates.io-index" -checksum = "0fe976fb70c78cd64cccfe3a6fc142244e8a77b70959b30faf9d0ac37ee228eb" +checksum = "f2ab42fc20575779bd240faa45f94a74256f755c0fa9e89f0ede20d91d0cdfc1" dependencies = [ "proc-macro2", "quote", @@ -4361,6 +4434,20 @@ name = "zeroize" version = "1.9.0" source = "registry+https://github.com/rust-lang/crates.io-index" checksum = "e13c156562582aa81c60cb29407084cdb54c4164760106ab78e6c5b0858cf64e" +dependencies = [ + "zeroize_derive", +] + +[[package]] +name = "zeroize_derive" +version = "1.5.0" +source = "registry+https://github.com/rust-lang/crates.io-index" +checksum = "3c50655cbb0fe3fc43170059e702f1ce5e19b84cec58dc87b037a09935c2f328" +dependencies = [ + "proc-macro2", + "quote", + "syn 2.0.119", +] [[package]] name = "zip" @@ -4375,17 +4462,44 @@ dependencies = [ "flate2", "indexmap 2.14.0", "memchr", - "thiserror 2.0.19", + "thiserror 2.0.20", "zopfli", ] +[[package]] +name = "zip" +version = "5.1.1" +source = "registry+https://github.com/rust-lang/crates.io-index" +checksum = "2f852905151ac8d4d06fdca66520a661c09730a74c6d4e2b0f27b436b382e532" +dependencies = [ + "aes 0.8.4", + "arbitrary", + "bzip2", + "constant_time_eq", + "crc32fast", + "deflate64", + "flate2", + "getrandom 0.3.4", + "hmac", + "indexmap 2.14.0", + "lzma-rust2 0.13.0", + "memchr", + "pbkdf2", + "ppmd-rust", + "sha1", + "time", + "zeroize", + "zopfli", + "zstd", +] + [[package]] name = "zip-forensic-core" version = "0.1.0" source = "registry+https://github.com/rust-lang/crates.io-index" checksum = "cd66ca0be2a86f374ac27bf8e9872246bed322d7ea894d617e2e4f6d4660151b" dependencies = [ - "aes", + "aes 0.8.4", "bzip2-rs", "constant_time_eq", "crc32fast", @@ -4397,9 +4511,15 @@ dependencies = [ "pbkdf2", "ruzstd", "sha1", - "thiserror 2.0.19", + "thiserror 2.0.20", ] +[[package]] +name = "zlib-rs" +version = "0.6.7" +source = "registry+https://github.com/rust-lang/crates.io-index" +checksum = "34b31d188d9d685a4f9c7b46d6e36631b07058d2cfe190267adce54dc230bf12" + [[package]] name = "zmij" version = "1.0.23" @@ -4417,3 +4537,31 @@ dependencies = [ "log", "simd-adler32", ] + +[[package]] +name = "zstd" +version = "0.13.3" +source = "registry+https://github.com/rust-lang/crates.io-index" +checksum = "e91ee311a569c327171651566e07972200e76fcfe2242a4fa446149a3881c08a" +dependencies = [ + "zstd-safe", +] + +[[package]] +name = "zstd-safe" +version = "7.2.4" +source = "registry+https://github.com/rust-lang/crates.io-index" +checksum = "8f49c4d5f0abb602a93fb8736af2a4f4dd9512e36f7f570d66e65ff867ed3b9d" +dependencies = [ + "zstd-sys", +] + +[[package]] +name = "zstd-sys" +version = "2.0.16+zstd.1.5.7" +source = "registry+https://github.com/rust-lang/crates.io-index" +checksum = "91e19ebc2adc8f83e43039e79776e3fda8ca919132d68a1fed6a5faca2683748" +dependencies = [ + "cc", + "pkg-config", +] diff --git a/Cargo.toml b/Cargo.toml index 845429b..4506885 100644 --- a/Cargo.toml +++ b/Cargo.toml @@ -59,9 +59,9 @@ digest = "0.10" flate2 = { version = "1", default-features = false, features = ["miniz_oxide"] } goblin = "0.9" hmac = "0.12" -indicatif = "0.17" +indicatif = "0.18" inventory = "0.3" -lru = "0.16" +lru = "0.18" # Production decode path: our own decode-only LZO1X crate (Apache-2.0). lzo = "0.1" # lzo1x is GPL-2.0 — kept ONLY as a memf-core dev-dependency (round-trip oracle). @@ -77,7 +77,7 @@ rust-lzxpress = "0.7" ruzstd = "0.8" serde = { version = "1", features = ["derive"] } serde_json = "1" -sevenz-rust = "0.6" +sevenz-rust2 = "0.21" sha1 = { version = "0.10", features = ["oid"] } sha2 = "0.10" snap = "1" @@ -88,7 +88,13 @@ tracing = "0.1" tracing-subscriber = { version = "0.3", features = ["env-filter"] } lzma-rs = "0.3" ureq = "3" -yara-x = "0.12" +# Tilde, not caret, and deliberately: yara-x 1.8+ moves to wasmtime 43.x, and +# NO 43.x release is patched for GHSA-hgjw-h833-99q9 and five sibling +# advisories (fixed ranges are 24.0.12, 36.0.13, 46.0.2+, 47.0.3+). The 1.7 +# line resolves wasmtime ^36.0.2 -> 36.0.13, which is patched. A caret here +# lets any `cargo update` silently reintroduce all six -- as one already did. +# Remove this pin once yara-x depends on a patched wasmtime range. +yara-x = "~1.7" # Pure-Rust ZIP reader (decodes deflate/deflate64/bzip2/zstd/lzma without C FFI). zip-forensic-core = "0.1" # zip-rs kept only for the test-fixture WRITER (zip-forensic-core is read-only), @@ -158,7 +164,7 @@ serde.workspace = true serde_json.workspace = true zip-forensic-core.workspace = true zip.workspace = true -sevenz-rust.workspace = true +sevenz-rust2.workspace = true indicatif.workspace = true tar.workspace = true flate2.workspace = true diff --git a/deny.toml b/deny.toml index 42f192f..dd2056a 100644 --- a/deny.toml +++ b/deny.toml @@ -1,6 +1,28 @@ [advisories] version = 2 -ignore = [] +ignore = [ + # Both of these reach us ONLY through yara-x, and both advisories carry + # `patched = []` — there is no version to upgrade to, so the first four + # remediation options (patched release, maintained replacement, code fix, + # restructure) are all unavailable. They are listed individually, with a + # removal condition each, rather than inherited wholesale: this repo keeps + # its own deny.toml precisely so a suppression has to be argued for. + # + # rsa 0.9.10 — Marvin Attack, key recovery through a timing sidechannel in + # private-key DECRYPTION. Not reachable here, and that was checked rather + # than assumed: yara-x's only rsa use is + # src/modules/utils/crypto.rs, which imports `DecodePublicKey`, + # `RsaPublicKey` and `Pkcs1v15Sign`, and calls `.verify(...)` for PE + # authenticode signatures. `RsaPrivateKey`, `.decrypt(` and Oaep appear + # nowhere in the crate's source. Unpatched upstream since 2023-11. + # REMOVE WHEN: rsa ships a constant-time fix, or yara-x drops the dependency. + # RE-CHECK the reachability claim above whenever yara-x is upgraded. + "RUSTSEC-2023-0071", + # bincode 2.0.1 — unmaintained. A maintenance-status advisory, not a + # vulnerability: no known defect, and yara-x pins it for rule serialisation. + # REMOVE WHEN: yara-x moves to a maintained serialiser. + "RUSTSEC-2025-0141", +] [licenses] version = 2 @@ -22,6 +44,11 @@ allow = [ # webpki-roots ships Mozilla's CA bundle under CDLA-Permissive-2.0 — a # permissive data licence with no copyleft or attribution burden. "CDLA-Permissive-2.0", + # ppmd-rust (PPMd decode, reached via sevenz-rust2 and via zip inside + # yara-x) is "CC0-1.0 OR MIT-0". MIT-0 is OSI-approved and permissive with + # no attribution burden, and satisfies the OR on its own — so CC0-1.0, + # whose patent position some organisations avoid, stays off this list. + "MIT-0", ] # array-bytes declares `Apache-2.0/GPL-3.0`. The `/` is the deprecated spelling diff --git a/src/archive.rs b/src/archive.rs index 076b3ca..663d533 100644 --- a/src/archive.rs +++ b/src/archive.rs @@ -122,7 +122,7 @@ fn extract_from_zip(path: &Path) -> Result { } fn extract_from_7z(path: &Path) -> Result { - let mut reader = sevenz_rust::SevenZReader::open(path, sevenz_rust::Password::empty()) + let mut reader = sevenz_rust2::ArchiveReader::open(path, sevenz_rust2::Password::empty()) .map_err(|e| anyhow::anyhow!("failed to open 7z archive: {e}"))?; let entries: Vec<(String, u64)> = reader @@ -144,7 +144,7 @@ fn extract_from_7z(path: &Path) -> Result { .for_each_entries(|entry, rd| { if entry.name == best { copy_with_progress(rd, &mut tmp, &best, best_size) - .map_err(sevenz_rust::Error::io)?; + .map_err(|e| sevenz_rust2::Error::Io(e, "".into()))?; found = true; return Ok(false); // stop iteration } @@ -635,9 +635,9 @@ mod tests { fn create_test_7z(files: &[(&str, &[u8])]) -> NamedTempFile { let tmp = tempfile::Builder::new().suffix(".7z").tempfile().unwrap(); - let mut writer = sevenz_rust::SevenZWriter::create(tmp.path()).unwrap(); + let mut writer = sevenz_rust2::ArchiveWriter::create(tmp.path()).unwrap(); for (name, data) in files { - let mut entry = sevenz_rust::SevenZArchiveEntry::new(); + let mut entry = sevenz_rust2::ArchiveEntry::new(); entry.name = (*name).to_string(); entry.has_stream = true; writer diff --git a/supply-chain/audits.toml b/supply-chain/audits.toml index 9d053b0..8f2795d 100644 --- a/supply-chain/audits.toml +++ b/supply-chain/audits.toml @@ -3,6 +3,96 @@ [audits] +[[trusted.addr2line]] +criteria = "safe-to-deploy" +user-id = 4415 # Philip Craig (philipc) +start = "2019-05-01" +end = "2027-08-14" + +[[trusted.aho-corasick]] +criteria = "safe-to-deploy" +user-id = 189 # Andrew Gallant (BurntSushi) +start = "2019-03-28" +end = "2027-08-14" + +[[trusted.anstream]] +criteria = "safe-to-deploy" +user-id = 6743 # Ed Page (epage) +start = "2023-03-16" +end = "2027-08-14" + +[[trusted.anstyle]] +criteria = "safe-to-deploy" +user-id = 6743 # Ed Page (epage) +start = "2022-05-18" +end = "2027-08-14" + +[[trusted.anstyle-parse]] +criteria = "safe-to-deploy" +user-id = 6743 # Ed Page (epage) +start = "2023-03-08" +end = "2027-08-14" + +[[trusted.anstyle-query]] +criteria = "safe-to-deploy" +user-id = 6743 # Ed Page (epage) +start = "2023-04-13" +end = "2027-08-14" + +[[trusted.anstyle-wincon]] +criteria = "safe-to-deploy" +user-id = 6743 # Ed Page (epage) +start = "2023-03-08" +end = "2027-08-14" + +[[trusted.anyhow]] +criteria = "safe-to-deploy" +user-id = 3618 # David Tolnay (dtolnay) +start = "2019-10-05" +end = "2027-08-14" + +[[trusted.assert_cmd]] +criteria = "safe-to-deploy" +user-id = 6743 # Ed Page (epage) +start = "2019-03-23" +end = "2027-08-14" + +[[trusted.autocfg]] +criteria = "safe-to-deploy" +user-id = 539 # Josh Stone (cuviper) +start = "2019-05-22" +end = "2027-08-14" + +[[trusted.bstr]] +criteria = "safe-to-deploy" +user-id = 189 # Andrew Gallant (BurntSushi) +start = "2019-04-02" +end = "2027-08-14" + +[[trusted.clap_builder]] +criteria = "safe-to-deploy" +user-id = 6743 # Ed Page (epage) +start = "2023-03-28" +end = "2027-08-14" + +[[trusted.clap_lex]] +criteria = "safe-to-deploy" +user-id = 6743 # Ed Page (epage) +start = "2022-04-15" +end = "2027-08-14" + +[[trusted.colorchoice]] +criteria = "safe-to-deploy" +user-id = 6743 # Ed Page (epage) +start = "2023-04-13" +end = "2027-08-14" + +[[trusted.filetime]] +criteria = "safe-to-deploy" +user-id = 1 # Alex Crichton (alexcrichton) +start = "2019-04-23" +end = "2027-08-14" + [[trusted.forensic-carve]] criteria = "safe-to-deploy" user-id = 347968 # Albert Hui (h4x0r) @@ -27,30 +117,324 @@ user-id = 347968 # Albert Hui (h4x0r) start = "2026-06-28" end = "2027-08-01" +[[trusted.gimli]] +criteria = "safe-to-deploy" +user-id = 4415 # Philip Craig (philipc) +start = "2019-04-25" +end = "2027-08-14" + +[[trusted.globset]] +criteria = "safe-to-deploy" +user-id = 189 # Andrew Gallant (BurntSushi) +start = "2019-04-15" +end = "2027-08-14" + +[[trusted.http]] +criteria = "safe-to-deploy" +user-id = 359 # Sean McArthur (seanmonstar) +start = "2019-04-05" +end = "2027-08-14" + +[[trusted.httparse]] +criteria = "safe-to-deploy" +user-id = 359 # Sean McArthur (seanmonstar) +start = "2019-07-03" +end = "2027-08-14" + +[[trusted.id-arena]] +criteria = "safe-to-deploy" +user-id = 696 # Nick Fitzgerald (fitzgen) +start = "2026-01-14" +end = "2027-08-14" + +[[trusted.ignore]] +criteria = "safe-to-deploy" +user-id = 189 # Andrew Gallant (BurntSushi) +start = "2019-04-15" +end = "2027-08-14" + +[[trusted.inventory]] +criteria = "safe-to-deploy" +user-id = 3618 # David Tolnay (dtolnay) +start = "2019-08-15" +end = "2027-08-14" + +[[trusted.is_terminal_polyfill]] +criteria = "safe-to-deploy" +user-id = 6743 # Ed Page (epage) +start = "2024-05-02" +end = "2027-08-14" + +[[trusted.itoa]] +criteria = "safe-to-deploy" +user-id = 3618 # David Tolnay (dtolnay) +start = "2019-05-02" +end = "2027-08-14" + [[trusted.jsonguard]] criteria = "safe-to-deploy" user-id = 347968 # Albert Hui (h4x0r) start = "2026-05-21" end = "2027-08-01" +[[trusted.leb128]] +criteria = "safe-to-deploy" +user-id = 696 # Nick Fitzgerald (fitzgen) +start = "2019-05-20" +end = "2027-08-14" + +[[trusted.linkme]] +criteria = "safe-to-deploy" +user-id = 3618 # David Tolnay (dtolnay) +start = "2019-08-18" +end = "2027-08-14" + +[[trusted.linkme-impl]] +criteria = "safe-to-deploy" +user-id = 3618 # David Tolnay (dtolnay) +start = "2019-08-18" +end = "2027-08-14" + +[[trusted.linux-raw-sys]] +criteria = "safe-to-deploy" +user-id = 6825 # Dan Gohman (sunfishcode) +start = "2021-06-12" +end = "2027-08-14" + [[trusted.lzo]] criteria = "safe-to-deploy" user-id = 347968 # Albert Hui (h4x0r) start = "2026-06-07" end = "2027-08-01" +[[trusted.memchr]] +criteria = "safe-to-deploy" +user-id = 189 # Andrew Gallant (BurntSushi) +start = "2019-07-07" +end = "2027-08-14" + +[[trusted.num-bigint]] +criteria = "safe-to-deploy" +user-id = 539 # Josh Stone (cuviper) +start = "2019-09-04" +end = "2027-08-14" + +[[trusted.num-integer]] +criteria = "safe-to-deploy" +user-id = 539 # Josh Stone (cuviper) +start = "2019-05-20" +end = "2027-08-14" + +[[trusted.num-iter]] +criteria = "safe-to-deploy" +user-id = 539 # Josh Stone (cuviper) +start = "2019-05-20" +end = "2027-08-14" + +[[trusted.object]] +criteria = "safe-to-deploy" +user-id = 4415 # Philip Craig (philipc) +start = "2019-04-26" +end = "2027-08-14" + +[[trusted.once_cell_polyfill]] +criteria = "safe-to-deploy" +user-id = 6743 # Ed Page (epage) +start = "2025-05-22" +end = "2027-08-14" + [[trusted.prefetch-core]] criteria = "safe-to-deploy" user-id = 347968 # Albert Hui (h4x0r) start = "2026-06-12" end = "2027-08-01" +[[trusted.proc-macro2]] +criteria = "safe-to-deploy" +user-id = 3618 # David Tolnay (dtolnay) +start = "2019-04-23" +end = "2027-08-14" + +[[trusted.regex]] +criteria = "safe-to-deploy" +user-id = 189 # Andrew Gallant (BurntSushi) +start = "2019-02-27" +end = "2027-08-14" + +[[trusted.regex-automata]] +criteria = "safe-to-deploy" +user-id = 189 # Andrew Gallant (BurntSushi) +start = "2019-02-25" +end = "2027-08-14" + +[[trusted.regex-syntax]] +criteria = "safe-to-deploy" +user-id = 189 # Andrew Gallant (BurntSushi) +start = "2019-03-30" +end = "2027-08-14" + +[[trusted.rustix]] +criteria = "safe-to-deploy" +user-id = 6825 # Dan Gohman (sunfishcode) +start = "2021-10-29" +end = "2027-08-14" + +[[trusted.rustversion]] +criteria = "safe-to-deploy" +user-id = 3618 # David Tolnay (dtolnay) +start = "2019-07-08" +end = "2027-08-14" + +[[trusted.same-file]] +criteria = "safe-to-deploy" +user-id = 189 # Andrew Gallant (BurntSushi) +start = "2019-07-16" +end = "2027-08-14" + +[[trusted.scopeguard]] +criteria = "safe-to-deploy" +user-id = 2915 # Amanieu d'Antras (Amanieu) +start = "2020-02-16" +end = "2027-08-14" + +[[trusted.serde]] +criteria = "safe-to-deploy" +user-id = 3618 # David Tolnay (dtolnay) +start = "2019-03-01" +end = "2027-08-14" + +[[trusted.serde_core]] +criteria = "safe-to-deploy" +user-id = 3618 # David Tolnay (dtolnay) +start = "2025-09-13" +end = "2027-08-14" + +[[trusted.serde_derive]] +criteria = "safe-to-deploy" +user-id = 3618 # David Tolnay (dtolnay) +start = "2019-03-01" +end = "2027-08-14" + +[[trusted.serde_json]] +criteria = "safe-to-deploy" +user-id = 3618 # David Tolnay (dtolnay) +start = "2019-02-28" +end = "2027-08-14" + [[trusted.shellitem]] criteria = "safe-to-deploy" user-id = 347968 # Albert Hui (h4x0r) start = "2026-06-13" end = "2027-08-01" +[[trusted.snap]] +criteria = "safe-to-deploy" +user-id = 189 # Andrew Gallant (BurntSushi) +start = "2020-02-14" +end = "2027-08-14" + +[[trusted.syn]] +criteria = "safe-to-deploy" +user-id = 3618 # David Tolnay (dtolnay) +start = "2019-03-01" +end = "2027-08-14" + +[[trusted.termcolor]] +criteria = "safe-to-deploy" +user-id = 189 # Andrew Gallant (BurntSushi) +start = "2019-06-04" +end = "2027-08-14" + +[[trusted.thiserror]] +criteria = "safe-to-deploy" +user-id = 3618 # David Tolnay (dtolnay) +start = "2019-10-09" +end = "2027-08-14" + +[[trusted.thiserror-impl]] +criteria = "safe-to-deploy" +user-id = 3618 # David Tolnay (dtolnay) +start = "2019-10-09" +end = "2027-08-14" + +[[trusted.thread_local]] +criteria = "safe-to-deploy" +user-id = 2915 # Amanieu d'Antras (Amanieu) +start = "2019-09-07" +end = "2027-08-14" + +[[trusted.unicode-ident]] +criteria = "safe-to-deploy" +user-id = 3618 # David Tolnay (dtolnay) +start = "2021-10-02" +end = "2027-08-14" + +[[trusted.walkdir]] +criteria = "safe-to-deploy" +user-id = 189 # Andrew Gallant (BurntSushi) +start = "2019-06-09" +end = "2027-08-14" + +[[trusted.winapi-util]] +criteria = "safe-to-deploy" +user-id = 189 # Andrew Gallant (BurntSushi) +start = "2020-01-11" +end = "2027-08-14" + +[[trusted.windows-core]] +criteria = "safe-to-deploy" +user-id = 64539 # Kenny Kerr (kennykerr) +start = "2021-11-15" +end = "2027-08-14" + +[[trusted.windows-interface]] +criteria = "safe-to-deploy" +user-id = 64539 # Kenny Kerr (kennykerr) +start = "2022-02-18" +end = "2027-08-14" + +[[trusted.windows-link]] +criteria = "safe-to-deploy" +user-id = 64539 # Kenny Kerr (kennykerr) +start = "2024-07-17" +end = "2027-08-14" + +[[trusted.windows-result]] +criteria = "safe-to-deploy" +user-id = 64539 # Kenny Kerr (kennykerr) +start = "2024-02-02" +end = "2027-08-14" + +[[trusted.windows-strings]] +criteria = "safe-to-deploy" +user-id = 64539 # Kenny Kerr (kennykerr) +start = "2024-02-02" +end = "2027-08-14" + +[[trusted.windows-targets]] +criteria = "safe-to-deploy" +user-id = 64539 # Kenny Kerr (kennykerr) +start = "2022-09-09" +end = "2027-08-14" + +[[trusted.windows_aarch64_gnullvm]] +criteria = "safe-to-deploy" +user-id = 64539 # Kenny Kerr (kennykerr) +start = "2022-09-01" +end = "2027-08-14" + +[[trusted.windows_i686_gnullvm]] +criteria = "safe-to-deploy" +user-id = 64539 # Kenny Kerr (kennykerr) +start = "2024-04-02" +end = "2027-08-14" + +[[trusted.windows_x86_64_gnullvm]] +criteria = "safe-to-deploy" +user-id = 64539 # Kenny Kerr (kennykerr) +start = "2022-09-01" +end = "2027-08-14" + [[trusted.winevt-core]] criteria = "safe-to-deploy" user-id = 347968 # Albert Hui (h4x0r) @@ -80,3 +464,9 @@ criteria = "safe-to-deploy" user-id = 347968 # Albert Hui (h4x0r) start = "2026-06-29" end = "2027-08-01" + +[[trusted.zmij]] +criteria = "safe-to-deploy" +user-id = 3618 # David Tolnay (dtolnay) +start = "2025-12-18" +end = "2027-08-14" diff --git a/supply-chain/config.toml b/supply-chain/config.toml index 75cfe6e..53c4cce 100644 --- a/supply-chain/config.toml +++ b/supply-chain/config.toml @@ -54,6 +54,10 @@ criteria = "safe-to-deploy" version = "0.8.4" criteria = "safe-to-deploy" +[[exemptions.aes]] +version = "0.9.2" +criteria = "safe-to-deploy" + [[exemptions.aes-gcm]] version = "0.10.3" criteria = "safe-to-deploy" @@ -62,44 +66,16 @@ criteria = "safe-to-deploy" version = "0.8.12" criteria = "safe-to-deploy" -[[exemptions.aho-corasick]] -version = "1.1.4" +[[exemptions.android_system_properties]] +version = "0.1.6" criteria = "safe-to-deploy" [[exemptions.annotate-snippets]] -version = "0.11.5" -criteria = "safe-to-deploy" - -[[exemptions.anstream]] -version = "1.0.0" -criteria = "safe-to-deploy" - -[[exemptions.anstyle]] -version = "1.0.14" -criteria = "safe-to-deploy" - -[[exemptions.anstyle-parse]] -version = "1.0.0" -criteria = "safe-to-deploy" - -[[exemptions.anstyle-query]] -version = "1.1.5" -criteria = "safe-to-deploy" - -[[exemptions.anstyle-wincon]] -version = "3.0.11" -criteria = "safe-to-deploy" - -[[exemptions.anyhow]] -version = "1.0.104" -criteria = "safe-to-deploy" - -[[exemptions.ar_archive_writer]] -version = "0.5.2" +version = "0.12.16" criteria = "safe-to-deploy" [[exemptions.array-bytes]] -version = "7.1.0" +version = "9.3.0" criteria = "safe-to-deploy" [[exemptions.ascii_tree]] @@ -107,35 +83,35 @@ version = "0.1.1" criteria = "safe-to-deploy" [[exemptions.asn1-rs]] -version = "0.6.2" +version = "0.7.2" criteria = "safe-to-deploy" [[exemptions.asn1-rs-derive]] -version = "0.5.1" +version = "0.6.0" criteria = "safe-to-deploy" [[exemptions.asn1-rs-impl]] version = "0.2.0" criteria = "safe-to-deploy" -[[exemptions.assert_cmd]] -version = "2.2.2" -criteria = "safe-to-run" - -[[exemptions.autocfg]] -version = "1.5.1" -criteria = "safe-to-deploy" - [[exemptions.base16ct]] version = "0.2.0" criteria = "safe-to-deploy" +[[exemptions.base64]] +version = "0.23.1" +criteria = "safe-to-deploy" + [[exemptions.base64ct]] version = "1.8.3" criteria = "safe-to-deploy" [[exemptions.bincode]] -version = "1.3.3" +version = "2.0.1" +criteria = "safe-to-deploy" + +[[exemptions.bincode_derive]] +version = "2.0.1" criteria = "safe-to-deploy" [[exemptions.binrw]] @@ -150,10 +126,6 @@ criteria = "safe-to-deploy" version = "2.13.1" criteria = "safe-to-deploy" -[[exemptions.bitmask]] -version = "0.5.0" -criteria = "safe-to-deploy" - [[exemptions.bitvec]] version = "1.1.1" criteria = "safe-to-deploy" @@ -170,8 +142,8 @@ criteria = "safe-to-deploy" version = "0.3.3" criteria = "safe-to-deploy" -[[exemptions.bstr]] -version = "1.13.0" +[[exemptions.block-padding]] +version = "0.4.2" criteria = "safe-to-deploy" [[exemptions.bytemuck]] @@ -179,7 +151,7 @@ version = "1.25.2" criteria = "safe-to-deploy" [[exemptions.bytemuck_derive]] -version = "1.11.0" +version = "1.12.0" criteria = "safe-to-deploy" [[exemptions.bytes]] @@ -198,8 +170,12 @@ criteria = "safe-to-deploy" version = "0.1.2" criteria = "safe-to-deploy" +[[exemptions.cbc]] +version = "0.2.1" +criteria = "safe-to-deploy" + [[exemptions.cc]] -version = "1.3.0" +version = "1.4.2" criteria = "safe-to-deploy" [[exemptions.cfg-if]] @@ -215,37 +191,29 @@ version = "0.5.2" criteria = "safe-to-deploy" [[exemptions.clap]] -version = "4.6.4" -criteria = "safe-to-deploy" - -[[exemptions.clap_builder]] -version = "4.6.2" +version = "4.6.6" criteria = "safe-to-deploy" [[exemptions.clap_derive]] version = "4.6.4" criteria = "safe-to-deploy" -[[exemptions.clap_lex]] -version = "1.1.0" -criteria = "safe-to-deploy" - -[[exemptions.colorchoice]] -version = "1.0.5" -criteria = "safe-to-deploy" - [[exemptions.comfy-table]] version = "7.2.2" criteria = "safe-to-deploy" [[exemptions.console]] -version = "0.15.11" +version = "0.16.4" criteria = "safe-to-deploy" [[exemptions.const-oid]] version = "0.9.6" criteria = "safe-to-deploy" +[[exemptions.const-oid]] +version = "0.10.2" +criteria = "safe-to-deploy" + [[exemptions.constant_time_eq]] version = "0.3.1" criteria = "safe-to-deploy" @@ -254,12 +222,16 @@ criteria = "safe-to-deploy" version = "3.0.1" criteria = "safe-to-deploy" +[[exemptions.cpubits]] +version = "0.1.1" +criteria = "safe-to-deploy" + [[exemptions.cpufeatures]] version = "0.2.17" criteria = "safe-to-deploy" -[[exemptions.cranelift-bitset]] -version = "0.113.1" +[[exemptions.cpufeatures]] +version = "0.3.0" criteria = "safe-to-deploy" [[exemptions.crc]] @@ -323,7 +295,7 @@ version = "0.20.11" criteria = "safe-to-deploy" [[exemptions.data-encoding]] -version = "2.11.0" +version = "2.11.1" criteria = "safe-to-deploy" [[exemptions.deflate64]] @@ -331,7 +303,7 @@ version = "0.1.12" criteria = "safe-to-deploy" [[exemptions.der-parser]] -version = "9.0.0" +version = "10.0.0" criteria = "safe-to-deploy" [[exemptions.des]] @@ -342,8 +314,12 @@ criteria = "safe-to-deploy" version = "0.10.7" criteria = "safe-to-deploy" +[[exemptions.digest]] +version = "0.11.3" +criteria = "safe-to-deploy" + [[exemptions.displaydoc]] -version = "0.2.6" +version = "0.2.7" criteria = "safe-to-deploy" [[exemptions.document-features]] @@ -358,6 +334,10 @@ criteria = "safe-to-deploy" version = "0.16.9" criteria = "safe-to-deploy" +[[exemptions.either]] +version = "1.17.0" +criteria = "safe-to-deploy" + [[exemptions.elliptic-curve]] version = "0.13.8" criteria = "safe-to-deploy" @@ -366,10 +346,6 @@ criteria = "safe-to-deploy" version = "1.0.0" criteria = "safe-to-deploy" -[[exemptions.enum_dispatch]] -version = "0.3.13" -criteria = "safe-to-deploy" - [[exemptions.errno]] version = "0.3.14" criteria = "safe-to-deploy" @@ -382,16 +358,8 @@ criteria = "safe-to-deploy" version = "0.13.1" criteria = "safe-to-deploy" -[[exemptions.filetime]] -version = "0.2.29" -criteria = "safe-to-deploy" - -[[exemptions.filetime_creation]] -version = "0.2.0" -criteria = "safe-to-deploy" - [[exemptions.find-msvc-tools]] -version = "0.1.9" +version = "0.1.10" criteria = "safe-to-deploy" [[exemptions.flate2]] @@ -402,28 +370,20 @@ criteria = "safe-to-deploy" version = "0.10.0" criteria = "safe-to-run" -[[exemptions.fmmap]] -version = "0.3.3" -criteria = "safe-to-deploy" - -[[exemptions.fs4]] -version = "0.6.6" -criteria = "safe-to-deploy" - [[exemptions.funty]] version = "2.0.0" criteria = "safe-to-deploy" [[exemptions.futures-core]] -version = "0.3.33" +version = "0.3.34" criteria = "safe-to-deploy" [[exemptions.futures-task]] -version = "0.3.33" +version = "0.3.34" criteria = "safe-to-deploy" [[exemptions.futures-util]] -version = "0.3.33" +version = "0.3.34" criteria = "safe-to-deploy" [[exemptions.generic-array]] @@ -434,6 +394,10 @@ criteria = "safe-to-deploy" version = "0.2.17" criteria = "safe-to-deploy" +[[exemptions.getrandom]] +version = "0.3.4" +criteria = "safe-to-deploy" + [[exemptions.getrandom]] version = "0.4.3" criteria = "safe-to-deploy" @@ -442,14 +406,6 @@ criteria = "safe-to-deploy" version = "0.5.1" criteria = "safe-to-deploy" -[[exemptions.gimli]] -version = "0.26.2" -criteria = "safe-to-deploy" - -[[exemptions.globset]] -version = "0.4.19" -criteria = "safe-to-deploy" - [[exemptions.globwalk]] version = "0.9.1" criteria = "safe-to-deploy" @@ -478,40 +434,20 @@ criteria = "safe-to-deploy" version = "0.5.12" criteria = "safe-to-deploy" -[[exemptions.http]] -version = "1.4.2" -criteria = "safe-to-deploy" - -[[exemptions.httparse]] -version = "1.10.1" -criteria = "safe-to-deploy" - [[exemptions.hybrid-array]] -version = "0.4.13" +version = "0.4.14" criteria = "safe-to-deploy" [[exemptions.iana-time-zone]] version = "0.1.65" criteria = "safe-to-deploy" -[[exemptions.id-arena]] -version = "2.3.0" -criteria = "safe-to-deploy" - -[[exemptions.ignore]] -version = "0.4.31" -criteria = "safe-to-deploy" - [[exemptions.indexmap]] version = "1.9.3" criteria = "safe-to-deploy" -[[exemptions.indexmap]] -version = "2.14.0" -criteria = "safe-to-deploy" - [[exemptions.indicatif]] -version = "0.17.11" +version = "0.18.6" criteria = "safe-to-deploy" [[exemptions.inout]] @@ -526,32 +462,20 @@ criteria = "safe-to-deploy" version = "1.15.1" criteria = "safe-to-deploy" -[[exemptions.inventory]] -version = "0.3.24" -criteria = "safe-to-deploy" - -[[exemptions.is_terminal_polyfill]] -version = "1.70.2" +[[exemptions.ipnet]] +version = "2.12.1" criteria = "safe-to-deploy" [[exemptions.itertools]] version = "0.12.1" criteria = "safe-to-deploy" -[[exemptions.itertools]] -version = "0.13.0" -criteria = "safe-to-deploy" - -[[exemptions.itoa]] -version = "1.0.18" +[[exemptions.jobserver]] +version = "0.1.35" criteria = "safe-to-deploy" [[exemptions.js-sys]] -version = "0.3.103" -criteria = "safe-to-deploy" - -[[exemptions.leb128]] -version = "0.2.7" +version = "0.3.104" criteria = "safe-to-deploy" [[exemptions.libbz2-rs-sys]] @@ -566,22 +490,6 @@ criteria = "safe-to-deploy" version = "0.2.16" criteria = "safe-to-deploy" -[[exemptions.linkme]] -version = "0.3.37" -criteria = "safe-to-deploy" - -[[exemptions.linkme-impl]] -version = "0.3.37" -criteria = "safe-to-deploy" - -[[exemptions.linux-raw-sys]] -version = "0.4.15" -criteria = "safe-to-deploy" - -[[exemptions.linux-raw-sys]] -version = "0.12.1" -criteria = "safe-to-deploy" - [[exemptions.litrs]] version = "1.0.0" criteria = "safe-to-deploy" @@ -607,15 +515,19 @@ version = "0.15.1" criteria = "safe-to-deploy" [[exemptions.lru]] -version = "0.16.4" +version = "0.18.2" criteria = "safe-to-deploy" [[exemptions.lzma-rs]] version = "0.3.0" criteria = "safe-to-deploy" -[[exemptions.lzma-rust]] -version = "0.1.7" +[[exemptions.lzma-rust2]] +version = "0.13.0" +criteria = "safe-to-deploy" + +[[exemptions.lzma-rust2]] +version = "0.18.1" criteria = "safe-to-deploy" [[exemptions.lzo1x]] @@ -634,18 +546,10 @@ criteria = "safe-to-deploy" version = "0.10.2" criteria = "safe-to-deploy" -[[exemptions.memchr]] -version = "2.8.3" -criteria = "safe-to-deploy" - [[exemptions.memmap2]] version = "0.9.11" criteria = "safe-to-deploy" -[[exemptions.memmapix]] -version = "0.7.6" -criteria = "safe-to-deploy" - [[exemptions.memx]] version = "0.1.32" criteria = "safe-to-deploy" @@ -662,12 +566,8 @@ criteria = "safe-to-deploy" version = "0.2.1" criteria = "safe-to-deploy" -[[exemptions.nt-time]] -version = "0.8.1" -criteria = "safe-to-deploy" - -[[exemptions.num-bigint]] -version = "0.4.8" +[[exemptions.nom]] +version = "8.0.0" criteria = "safe-to-deploy" [[exemptions.num-bigint-dig]] @@ -678,30 +578,14 @@ criteria = "safe-to-deploy" version = "0.2.2" criteria = "safe-to-deploy" -[[exemptions.num-iter]] -version = "0.1.46" -criteria = "safe-to-deploy" - -[[exemptions.object]] -version = "0.36.7" -criteria = "safe-to-deploy" - -[[exemptions.object]] -version = "0.37.3" -criteria = "safe-to-deploy" - [[exemptions.oid-registry]] -version = "0.7.1" +version = "0.8.1" criteria = "safe-to-deploy" [[exemptions.once_cell]] version = "1.21.4" criteria = "safe-to-deploy" -[[exemptions.once_cell_polyfill]] -version = "1.70.2" -criteria = "safe-to-deploy" - [[exemptions.opaque-debug]] version = "0.3.1" criteria = "safe-to-deploy" @@ -722,18 +606,6 @@ criteria = "safe-to-deploy" version = "0.9.12" criteria = "safe-to-deploy" -[[exemptions.parse-display]] -version = "0.8.2" -criteria = "safe-to-deploy" - -[[exemptions.parse-display-derive]] -version = "0.8.2" -criteria = "safe-to-deploy" - -[[exemptions.paste]] -version = "1.0.15" -criteria = "safe-to-deploy" - [[exemptions.pbkdf2]] version = "0.12.2" criteria = "safe-to-deploy" @@ -754,6 +626,10 @@ criteria = "safe-to-deploy" version = "0.10.2" criteria = "safe-to-deploy" +[[exemptions.pkg-config]] +version = "0.3.34" +criteria = "safe-to-deploy" + [[exemptions.plain]] version = "0.2.3" criteria = "safe-to-deploy" @@ -763,7 +639,11 @@ version = "0.6.2" criteria = "safe-to-deploy" [[exemptions.portable-atomic]] -version = "1.14.0" +version = "1.15.0" +criteria = "safe-to-deploy" + +[[exemptions.ppmd-rust]] +version = "1.4.0" criteria = "safe-to-deploy" [[exemptions.ppv-lite86]] @@ -774,10 +654,6 @@ criteria = "safe-to-deploy" version = "0.13.6" criteria = "safe-to-deploy" -[[exemptions.proc-macro2]] -version = "1.0.107" -criteria = "safe-to-deploy" - [[exemptions.protobuf]] version = "3.7.2" criteria = "safe-to-deploy" @@ -794,12 +670,16 @@ criteria = "safe-to-deploy" version = "3.7.2" criteria = "safe-to-deploy" -[[exemptions.psm]] -version = "0.1.31" +[[exemptions.psl]] +version = "2.1.223" criteria = "safe-to-deploy" -[[exemptions.quote]] -version = "1.0.47" +[[exemptions.psl-types]] +version = "2.0.11" +criteria = "safe-to-deploy" + +[[exemptions.r-efi]] +version = "5.3.0" criteria = "safe-to-deploy" [[exemptions.r-efi]] @@ -822,22 +702,6 @@ criteria = "safe-to-deploy" version = "0.5.18" criteria = "safe-to-deploy" -[[exemptions.regex]] -version = "1.13.1" -criteria = "safe-to-deploy" - -[[exemptions.regex-automata]] -version = "0.4.16" -criteria = "safe-to-deploy" - -[[exemptions.regex-syntax]] -version = "0.7.5" -criteria = "safe-to-deploy" - -[[exemptions.regex-syntax]] -version = "0.8.11" -criteria = "safe-to-deploy" - [[exemptions.rfc6979]] version = "0.4.0" criteria = "safe-to-deploy" @@ -874,42 +738,22 @@ criteria = "safe-to-deploy" version = "4.1.0" criteria = "safe-to-deploy" -[[exemptions.rustix]] -version = "0.38.44" -criteria = "safe-to-deploy" - -[[exemptions.rustix]] -version = "1.1.4" -criteria = "safe-to-deploy" - [[exemptions.rustls]] -version = "0.23.42" +version = "0.23.43" criteria = "safe-to-deploy" [[exemptions.rustls-pki-types]] -version = "1.15.0" +version = "1.15.1" criteria = "safe-to-deploy" [[exemptions.rustls-webpki]] -version = "0.103.13" -criteria = "safe-to-deploy" - -[[exemptions.rustversion]] -version = "1.0.23" +version = "0.103.14" criteria = "safe-to-deploy" [[exemptions.ruzstd]] version = "0.8.3" criteria = "safe-to-deploy" -[[exemptions.same-file]] -version = "1.0.6" -criteria = "safe-to-deploy" - -[[exemptions.scopeguard]] -version = "1.2.0" -criteria = "safe-to-deploy" - [[exemptions.scroll]] version = "0.11.0" criteria = "safe-to-deploy" @@ -922,28 +766,8 @@ criteria = "safe-to-deploy" version = "0.7.3" criteria = "safe-to-deploy" -[[exemptions.semver]] -version = "1.0.28" -criteria = "safe-to-deploy" - -[[exemptions.serde]] -version = "1.0.229" -criteria = "safe-to-deploy" - -[[exemptions.serde_core]] -version = "1.0.229" -criteria = "safe-to-deploy" - -[[exemptions.serde_derive]] -version = "1.0.229" -criteria = "safe-to-deploy" - -[[exemptions.serde_json]] -version = "1.0.151" -criteria = "safe-to-deploy" - -[[exemptions.sevenz-rust]] -version = "0.6.1" +[[exemptions.sevenz-rust2]] +version = "0.21.4" criteria = "safe-to-deploy" [[exemptions.sha1]] @@ -954,6 +778,10 @@ criteria = "safe-to-deploy" version = "0.10.9" criteria = "safe-to-deploy" +[[exemptions.sha2]] +version = "0.11.0" +criteria = "safe-to-deploy" + [[exemptions.shlex]] version = "2.0.1" criteria = "safe-to-deploy" @@ -970,14 +798,6 @@ criteria = "safe-to-deploy" version = "0.4.12" criteria = "safe-to-deploy" -[[exemptions.slice-group-by]] -version = "0.3.1" -criteria = "safe-to-deploy" - -[[exemptions.snap]] -version = "1.1.2" -criteria = "safe-to-deploy" - [[exemptions.spin]] version = "0.9.9" criteria = "safe-to-deploy" @@ -990,72 +810,32 @@ criteria = "safe-to-deploy" version = "1.2.1" criteria = "safe-to-deploy" -[[exemptions.structmeta]] -version = "0.2.0" -criteria = "safe-to-deploy" - -[[exemptions.structmeta-derive]] -version = "0.2.0" +[[exemptions.strum_macros]] +version = "0.27.2" criteria = "safe-to-deploy" [[exemptions.subtle]] version = "2.6.1" criteria = "safe-to-deploy" -[[exemptions.syn]] -version = "1.0.109" -criteria = "safe-to-deploy" - -[[exemptions.syn]] -version = "2.0.119" -criteria = "safe-to-deploy" - -[[exemptions.syn]] -version = "3.0.3" -criteria = "safe-to-deploy" - [[exemptions.tar]] version = "0.4.46" criteria = "safe-to-deploy" [[exemptions.target-lexicon]] -version = "0.12.16" +version = "0.13.5" criteria = "safe-to-deploy" [[exemptions.tempfile]] version = "3.27.0" criteria = "safe-to-deploy" -[[exemptions.termcolor]] -version = "1.4.1" -criteria = "safe-to-deploy" - [[exemptions.text-size]] version = "1.1.1" criteria = "safe-to-deploy" -[[exemptions.thiserror]] -version = "1.0.69" -criteria = "safe-to-deploy" - -[[exemptions.thiserror]] -version = "2.0.19" -criteria = "safe-to-deploy" - -[[exemptions.thiserror-impl]] -version = "1.0.69" -criteria = "safe-to-deploy" - -[[exemptions.thiserror-impl]] -version = "2.0.19" -criteria = "safe-to-deploy" - -[[exemptions.thread_local]] -version = "1.1.10" -criteria = "safe-to-deploy" - [[exemptions.time]] -version = "0.3.54" +version = "0.3.55" criteria = "safe-to-deploy" [[exemptions.time-core]] @@ -1098,8 +878,8 @@ criteria = "safe-to-deploy" version = "1.20.1" criteria = "safe-to-deploy" -[[exemptions.unicode-ident]] -version = "1.0.24" +[[exemptions.unit-prefix]] +version = "0.5.2" criteria = "safe-to-deploy" [[exemptions.universal-hash]] @@ -1110,12 +890,16 @@ criteria = "safe-to-deploy" version = "0.9.0" criteria = "safe-to-deploy" +[[exemptions.unty]] +version = "0.0.4" +criteria = "safe-to-deploy" + [[exemptions.ureq]] -version = "3.3.0" +version = "3.4.0" criteria = "safe-to-deploy" [[exemptions.ureq-proto]] -version = "0.6.0" +version = "0.6.1" criteria = "safe-to-deploy" [[exemptions.utf8-zero]] @@ -1134,8 +918,8 @@ criteria = "safe-to-deploy" version = "0.9.5" criteria = "safe-to-deploy" -[[exemptions.walkdir]] -version = "2.5.0" +[[exemptions.virtue]] +version = "0.0.18" criteria = "safe-to-deploy" [[exemptions.walrus]] @@ -1151,23 +935,23 @@ version = "0.11.1+wasi-snapshot-preview1" criteria = "safe-to-deploy" [[exemptions.wasm-bindgen]] -version = "0.2.126" +version = "0.2.127" criteria = "safe-to-deploy" [[exemptions.wasm-bindgen-macro]] -version = "0.2.126" +version = "0.2.127" criteria = "safe-to-deploy" [[exemptions.wasm-bindgen-macro-support]] -version = "0.2.126" +version = "0.2.127" criteria = "safe-to-deploy" [[exemptions.wasm-bindgen-shared]] -version = "0.2.126" +version = "0.2.127" criteria = "safe-to-deploy" -[[exemptions.wasmtime-versioned-export-macros]] -version = "26.0.1" +[[exemptions.wasmtime-internal-asm-macros]] +version = "36.0.13" criteria = "safe-to-deploy" [[exemptions.web-time]] @@ -1190,42 +974,14 @@ criteria = "safe-to-deploy" version = "0.4.0" criteria = "safe-to-deploy" -[[exemptions.winapi-util]] -version = "0.1.11" -criteria = "safe-to-deploy" - [[exemptions.winapi-x86_64-pc-windows-gnu]] version = "0.4.0" criteria = "safe-to-deploy" -[[exemptions.windows-core]] -version = "0.62.2" -criteria = "safe-to-deploy" - [[exemptions.windows-implement]] version = "0.60.2" criteria = "safe-to-deploy" -[[exemptions.windows-interface]] -version = "0.59.3" -criteria = "safe-to-deploy" - -[[exemptions.windows-link]] -version = "0.2.1" -criteria = "safe-to-deploy" - -[[exemptions.windows-result]] -version = "0.4.1" -criteria = "safe-to-deploy" - -[[exemptions.windows-strings]] -version = "0.5.1" -criteria = "safe-to-deploy" - -[[exemptions.windows-sys]] -version = "0.48.0" -criteria = "safe-to-deploy" - [[exemptions.windows-sys]] version = "0.52.0" criteria = "safe-to-deploy" @@ -1235,75 +991,51 @@ version = "0.59.0" criteria = "safe-to-deploy" [[exemptions.windows-sys]] -version = "0.61.2" -criteria = "safe-to-deploy" - -[[exemptions.windows-targets]] -version = "0.48.5" -criteria = "safe-to-deploy" - -[[exemptions.windows-targets]] -version = "0.52.6" -criteria = "safe-to-deploy" - -[[exemptions.windows_aarch64_gnullvm]] -version = "0.48.5" -criteria = "safe-to-deploy" - -[[exemptions.windows_aarch64_gnullvm]] -version = "0.52.6" +version = "0.60.2" criteria = "safe-to-deploy" -[[exemptions.windows_aarch64_msvc]] -version = "0.48.5" +[[exemptions.windows-sys]] +version = "0.61.2" criteria = "safe-to-deploy" [[exemptions.windows_aarch64_msvc]] version = "0.52.6" criteria = "safe-to-deploy" -[[exemptions.windows_i686_gnu]] -version = "0.48.5" +[[exemptions.windows_aarch64_msvc]] +version = "0.53.1" criteria = "safe-to-deploy" [[exemptions.windows_i686_gnu]] version = "0.52.6" criteria = "safe-to-deploy" -[[exemptions.windows_i686_gnullvm]] -version = "0.52.6" -criteria = "safe-to-deploy" - -[[exemptions.windows_i686_msvc]] -version = "0.48.5" +[[exemptions.windows_i686_gnu]] +version = "0.53.1" criteria = "safe-to-deploy" [[exemptions.windows_i686_msvc]] version = "0.52.6" criteria = "safe-to-deploy" -[[exemptions.windows_x86_64_gnu]] -version = "0.48.5" +[[exemptions.windows_i686_msvc]] +version = "0.53.1" criteria = "safe-to-deploy" [[exemptions.windows_x86_64_gnu]] version = "0.52.6" criteria = "safe-to-deploy" -[[exemptions.windows_x86_64_gnullvm]] -version = "0.48.5" -criteria = "safe-to-deploy" - -[[exemptions.windows_x86_64_gnullvm]] -version = "0.52.6" +[[exemptions.windows_x86_64_gnu]] +version = "0.53.1" criteria = "safe-to-deploy" [[exemptions.windows_x86_64_msvc]] -version = "0.48.5" +version = "0.52.6" criteria = "safe-to-deploy" [[exemptions.windows_x86_64_msvc]] -version = "0.52.6" +version = "0.53.1" criteria = "safe-to-deploy" [[exemptions.wyz]] @@ -1311,45 +1043,61 @@ version = "0.5.1" criteria = "safe-to-deploy" [[exemptions.x509-parser]] -version = "0.16.0" -criteria = "safe-to-deploy" - -[[exemptions.yansi]] -version = "1.0.1" +version = "0.18.1" criteria = "safe-to-deploy" [[exemptions.yara-x]] -version = "0.12.0" +version = "1.7.1" criteria = "safe-to-deploy" [[exemptions.yara-x-macros]] -version = "0.12.0" +version = "1.7.1" criteria = "safe-to-deploy" [[exemptions.yara-x-parser]] -version = "0.12.0" +version = "1.7.1" criteria = "safe-to-deploy" [[exemptions.yara-x-proto]] -version = "0.12.0" +version = "1.7.1" criteria = "safe-to-deploy" [[exemptions.zerocopy]] -version = "0.8.55" +version = "0.8.56" criteria = "safe-to-deploy" [[exemptions.zerocopy-derive]] -version = "0.8.55" +version = "0.8.56" criteria = "safe-to-deploy" [[exemptions.zeroize]] version = "1.9.0" criteria = "safe-to-deploy" -[[exemptions.zmij]] -version = "1.0.23" +[[exemptions.zeroize_derive]] +version = "1.5.0" +criteria = "safe-to-deploy" + +[[exemptions.zip]] +version = "5.1.1" +criteria = "safe-to-deploy" + +[[exemptions.zlib-rs]] +version = "0.6.7" criteria = "safe-to-deploy" [[exemptions.zopfli]] version = "0.8.3" criteria = "safe-to-deploy" + +[[exemptions.zstd]] +version = "0.13.3" +criteria = "safe-to-deploy" + +[[exemptions.zstd-safe]] +version = "7.2.4" +criteria = "safe-to-deploy" + +[[exemptions.zstd-sys]] +version = "2.0.16+zstd.1.5.7" +criteria = "safe-to-deploy" diff --git a/supply-chain/imports.lock b/supply-chain/imports.lock index 09712af..3a89dce 100644 --- a/supply-chain/imports.lock +++ b/supply-chain/imports.lock @@ -1,6 +1,62 @@ # cargo-vet imports lock +[[publisher.addr2line]] +version = "0.25.1" +when = "2025-09-13" +user-id = 4415 +user-login = "philipc" +user-name = "Philip Craig" + +[[publisher.aho-corasick]] +version = "1.1.5" +when = "2026-08-03" +user-id = 189 +user-login = "BurntSushi" +user-name = "Andrew Gallant" + +[[publisher.anstream]] +version = "1.0.0" +when = "2026-02-11" +user-id = 6743 +user-login = "epage" +user-name = "Ed Page" + +[[publisher.anstyle]] +version = "1.0.14" +when = "2026-03-13" +user-id = 6743 +user-login = "epage" +user-name = "Ed Page" + +[[publisher.anstyle-parse]] +version = "1.0.0" +when = "2026-02-11" +user-id = 6743 +user-login = "epage" +user-name = "Ed Page" + +[[publisher.anstyle-query]] +version = "1.1.5" +when = "2025-11-13" +user-id = 6743 +user-login = "epage" +user-name = "Ed Page" + +[[publisher.anstyle-wincon]] +version = "3.0.11" +when = "2025-11-13" +user-id = 6743 +user-login = "epage" +user-name = "Ed Page" + +[[publisher.anyhow]] +version = "1.0.104" +when = "2026-07-18" +user-id = 3618 +user-login = "dtolnay" +user-name = "David Tolnay" + [[publisher.arbitrary]] version = "1.4.2" when = "2025-08-14" @@ -8,6 +64,27 @@ user-id = 696 user-login = "fitzgen" user-name = "Nick Fitzgerald" +[[publisher.assert_cmd]] +version = "2.2.2" +when = "2026-05-11" +user-id = 6743 +user-login = "epage" +user-name = "Ed Page" + +[[publisher.autocfg]] +version = "1.5.1" +when = "2026-05-22" +user-id = 539 +user-login = "cuviper" +user-name = "Josh Stone" + +[[publisher.bstr]] +version = "1.13.1" +when = "2026-08-10" +user-id = 189 +user-login = "BurntSushi" +user-name = "Andrew Gallant" + [[publisher.bumpalo]] version = "3.20.3" when = "2026-05-22" @@ -15,59 +92,91 @@ user-id = 696 user-login = "fitzgen" user-name = "Nick Fitzgerald" +[[publisher.clap_builder]] +version = "4.6.6" +when = "2026-08-06" +user-id = 6743 +user-login = "epage" +user-name = "Ed Page" + +[[publisher.clap_lex]] +version = "1.1.0" +when = "2026-03-12" +user-id = 6743 +user-login = "epage" +user-name = "Ed Page" + +[[publisher.colorchoice]] +version = "1.0.5" +when = "2026-03-13" +user-id = 6743 +user-login = "epage" +user-name = "Ed Page" + +[[publisher.cranelift-assembler-x64]] +version = "0.123.13" +when = "2026-07-31" +trusted-publisher = "github:bytecodealliance/wasmtime" + +[[publisher.cranelift-assembler-x64-meta]] +version = "0.123.13" +when = "2026-07-31" +trusted-publisher = "github:bytecodealliance/wasmtime" + [[publisher.cranelift-bforest]] -version = "0.113.1" -when = "2024-11-05" -user-id = 73222 -user-login = "wasmtime-publish" +version = "0.123.13" +when = "2026-07-31" +trusted-publisher = "github:bytecodealliance/wasmtime" + +[[publisher.cranelift-bitset]] +version = "0.123.13" +when = "2026-07-31" +trusted-publisher = "github:bytecodealliance/wasmtime" [[publisher.cranelift-codegen]] -version = "0.113.1" -when = "2024-11-05" -user-id = 73222 -user-login = "wasmtime-publish" +version = "0.123.13" +when = "2026-07-31" +trusted-publisher = "github:bytecodealliance/wasmtime" [[publisher.cranelift-codegen-meta]] -version = "0.113.1" -when = "2024-11-05" -user-id = 73222 -user-login = "wasmtime-publish" +version = "0.123.13" +when = "2026-07-31" +trusted-publisher = "github:bytecodealliance/wasmtime" [[publisher.cranelift-codegen-shared]] -version = "0.113.1" -when = "2024-11-05" -user-id = 73222 -user-login = "wasmtime-publish" +version = "0.123.13" +when = "2026-07-31" +trusted-publisher = "github:bytecodealliance/wasmtime" [[publisher.cranelift-control]] -version = "0.113.1" -when = "2024-11-05" -user-id = 73222 -user-login = "wasmtime-publish" +version = "0.123.13" +when = "2026-07-31" +trusted-publisher = "github:bytecodealliance/wasmtime" [[publisher.cranelift-entity]] -version = "0.113.1" -when = "2024-11-05" -user-id = 73222 -user-login = "wasmtime-publish" +version = "0.123.13" +when = "2026-07-31" +trusted-publisher = "github:bytecodealliance/wasmtime" [[publisher.cranelift-frontend]] -version = "0.113.1" -when = "2024-11-05" -user-id = 73222 -user-login = "wasmtime-publish" +version = "0.123.13" +when = "2026-07-31" +trusted-publisher = "github:bytecodealliance/wasmtime" [[publisher.cranelift-isle]] -version = "0.113.1" -when = "2024-11-05" -user-id = 73222 -user-login = "wasmtime-publish" +version = "0.123.13" +when = "2026-07-31" +trusted-publisher = "github:bytecodealliance/wasmtime" [[publisher.cranelift-native]] -version = "0.113.1" -when = "2024-11-05" -user-id = 73222 -user-login = "wasmtime-publish" +version = "0.123.13" +when = "2026-07-31" +trusted-publisher = "github:bytecodealliance/wasmtime" + +[[publisher.cranelift-srcgen]] +version = "0.123.13" +when = "2026-07-31" +trusted-publisher = "github:bytecodealliance/wasmtime" [[publisher.derive_arbitrary]] version = "1.4.2" @@ -76,6 +185,13 @@ user-id = 696 user-login = "fitzgen" user-name = "Nick Fitzgerald" +[[publisher.filetime]] +version = "0.2.29" +when = "2026-05-12" +user-id = 1 +user-login = "alexcrichton" +user-name = "Alex Crichton" + [[publisher.forensic-carve]] version = "0.1.0" when = "2026-07-23" @@ -84,67 +200,379 @@ user-login = "h4x0r" user-name = "Albert Hui" [[publisher.forensicnomicon]] -version = "1.8.1" -when = "2026-07-19" +version = "1.11.1" +when = "2026-08-08" user-id = 347968 user-login = "h4x0r" user-name = "Albert Hui" [[publisher.forensicnomicon-core]] -version = "1.4.0" -when = "2026-07-19" +version = "1.5.1" +when = "2026-08-05" user-id = 347968 user-login = "h4x0r" user-name = "Albert Hui" [[publisher.forensicnomicon-data]] -version = "1.3.2" -when = "2026-07-19" +version = "1.4.0" +when = "2026-08-05" user-id = 347968 user-login = "h4x0r" user-name = "Albert Hui" +[[publisher.gimli]] +version = "0.26.2" +when = "2022-07-17" +user-id = 4415 +user-login = "philipc" +user-name = "Philip Craig" + +[[publisher.globset]] +version = "0.4.20" +when = "2026-08-04" +user-id = 189 +user-login = "BurntSushi" +user-name = "Andrew Gallant" + +[[publisher.http]] +version = "1.5.0" +when = "2026-07-29" +user-id = 359 +user-login = "seanmonstar" +user-name = "Sean McArthur" + +[[publisher.httparse]] +version = "1.10.1" +when = "2025-03-03" +user-id = 359 +user-login = "seanmonstar" +user-name = "Sean McArthur" + +[[publisher.id-arena]] +version = "2.3.0" +when = "2026-01-14" +user-id = 696 +user-login = "fitzgen" +user-name = "Nick Fitzgerald" + +[[publisher.ignore]] +version = "0.4.33" +when = "2026-08-04" +user-id = 189 +user-login = "BurntSushi" +user-name = "Andrew Gallant" + +[[publisher.inventory]] +version = "0.3.24" +when = "2026-03-30" +user-id = 3618 +user-login = "dtolnay" +user-name = "David Tolnay" + +[[publisher.is_terminal_polyfill]] +version = "1.70.2" +when = "2025-10-21" +user-id = 6743 +user-login = "epage" +user-name = "Ed Page" + +[[publisher.itoa]] +version = "1.0.18" +when = "2026-03-20" +user-id = 3618 +user-login = "dtolnay" +user-name = "David Tolnay" + [[publisher.jsonguard]] -version = "0.2.3" -when = "2026-06-14" +version = "0.2.7" +when = "2026-08-08" user-id = 347968 user-login = "h4x0r" user-name = "Albert Hui" +[[publisher.leb128]] +version = "0.2.7" +when = "2026-06-15" +user-id = 696 +user-login = "fitzgen" +user-name = "Nick Fitzgerald" + +[[publisher.linkme]] +version = "0.3.37" +when = "2026-07-18" +user-id = 3618 +user-login = "dtolnay" +user-name = "David Tolnay" + +[[publisher.linkme-impl]] +version = "0.3.37" +when = "2026-07-18" +user-id = 3618 +user-login = "dtolnay" +user-name = "David Tolnay" + +[[publisher.linux-raw-sys]] +version = "0.4.15" +when = "2025-01-08" +user-id = 6825 +user-login = "sunfishcode" +user-name = "Dan Gohman" + +[[publisher.linux-raw-sys]] +version = "0.12.1" +when = "2025-12-23" +user-id = 6825 +user-login = "sunfishcode" +user-name = "Dan Gohman" + [[publisher.lzo]] -version = "0.1.1" -when = "2026-06-07" +version = "0.1.3" +when = "2026-08-06" user-id = 347968 user-login = "h4x0r" user-name = "Albert Hui" +[[publisher.memchr]] +version = "2.8.3" +when = "2026-07-08" +user-id = 189 +user-login = "BurntSushi" +user-name = "Andrew Gallant" + +[[publisher.num-bigint]] +version = "0.4.8" +when = "2026-07-05" +user-id = 539 +user-login = "cuviper" +user-name = "Josh Stone" + +[[publisher.num-integer]] +version = "0.1.47" +when = "2026-08-12" +user-id = 539 +user-login = "cuviper" +user-name = "Josh Stone" + +[[publisher.num-iter]] +version = "0.1.46" +when = "2026-07-07" +user-id = 539 +user-login = "cuviper" +user-name = "Josh Stone" + +[[publisher.object]] +version = "0.37.3" +when = "2025-08-13" +user-id = 4415 +user-login = "philipc" +user-name = "Philip Craig" + +[[publisher.once_cell_polyfill]] +version = "1.70.2" +when = "2025-10-21" +user-id = 6743 +user-login = "epage" +user-name = "Ed Page" + [[publisher.prefetch-core]] -version = "0.1.0" -when = "2026-06-12" +version = "0.1.1" +when = "2026-07-25" user-id = 347968 user-login = "h4x0r" user-name = "Albert Hui" +[[publisher.proc-macro2]] +version = "1.0.107" +when = "2026-07-19" +user-id = 3618 +user-login = "dtolnay" +user-name = "David Tolnay" + [[publisher.pulley-interpreter]] -version = "26.0.1" -when = "2024-11-05" -user-id = 73222 -user-login = "wasmtime-publish" +version = "36.0.13" +when = "2026-07-31" +trusted-publisher = "github:bytecodealliance/wasmtime" + +[[publisher.pulley-macros]] +version = "36.0.13" +when = "2026-07-31" +trusted-publisher = "github:bytecodealliance/wasmtime" [[publisher.regalloc2]] -version = "0.10.2" -when = "2024-09-11" -user-id = 187138 -user-login = "elliottt" -user-name = "Trevor Elliott" +version = "0.12.2" +when = "2025-05-07" +user-id = 3726 +user-login = "cfallin" +user-name = "Chris Fallin" + +[[publisher.regex]] +version = "1.13.1" +when = "2026-07-15" +user-id = 189 +user-login = "BurntSushi" +user-name = "Andrew Gallant" + +[[publisher.regex-automata]] +version = "0.4.18" +when = "2026-08-04" +user-id = 189 +user-login = "BurntSushi" +user-name = "Andrew Gallant" + +[[publisher.regex-syntax]] +version = "0.8.11" +when = "2026-06-09" +user-id = 189 +user-login = "BurntSushi" +user-name = "Andrew Gallant" + +[[publisher.rustix]] +version = "0.38.44" +when = "2025-01-21" +user-id = 6825 +user-login = "sunfishcode" +user-name = "Dan Gohman" + +[[publisher.rustix]] +version = "1.1.4" +when = "2026-02-22" +user-id = 6825 +user-login = "sunfishcode" +user-name = "Dan Gohman" + +[[publisher.rustversion]] +version = "1.0.23" +when = "2026-07-07" +user-id = 3618 +user-login = "dtolnay" +user-name = "David Tolnay" + +[[publisher.same-file]] +version = "1.0.6" +when = "2020-01-11" +user-id = 189 +user-login = "BurntSushi" +user-name = "Andrew Gallant" + +[[publisher.scopeguard]] +version = "1.2.0" +when = "2023-07-17" +user-id = 2915 +user-login = "Amanieu" +user-name = "Amanieu d'Antras" + +[[publisher.serde]] +version = "1.0.229" +when = "2026-07-18" +user-id = 3618 +user-login = "dtolnay" +user-name = "David Tolnay" + +[[publisher.serde_core]] +version = "1.0.229" +when = "2026-07-18" +user-id = 3618 +user-login = "dtolnay" +user-name = "David Tolnay" + +[[publisher.serde_derive]] +version = "1.0.229" +when = "2026-07-18" +user-id = 3618 +user-login = "dtolnay" +user-name = "David Tolnay" + +[[publisher.serde_json]] +version = "1.0.151" +when = "2026-07-20" +user-id = 3618 +user-login = "dtolnay" +user-name = "David Tolnay" [[publisher.shellitem]] -version = "0.2.0" -when = "2026-06-28" +version = "0.2.2" +when = "2026-08-06" user-id = 347968 user-login = "h4x0r" user-name = "Albert Hui" +[[publisher.snap]] +version = "1.1.2" +when = "2026-07-15" +user-id = 189 +user-login = "BurntSushi" +user-name = "Andrew Gallant" + +[[publisher.syn]] +version = "1.0.109" +when = "2023-02-24" +user-id = 3618 +user-login = "dtolnay" +user-name = "David Tolnay" + +[[publisher.syn]] +version = "2.0.119" +when = "2026-07-15" +user-id = 3618 +user-login = "dtolnay" +user-name = "David Tolnay" + +[[publisher.syn]] +version = "3.0.3" +when = "2026-07-22" +user-id = 3618 +user-login = "dtolnay" +user-name = "David Tolnay" + +[[publisher.termcolor]] +version = "1.4.1" +when = "2024-01-10" +user-id = 189 +user-login = "BurntSushi" +user-name = "Andrew Gallant" + +[[publisher.thiserror]] +version = "1.0.69" +when = "2024-11-10" +user-id = 3618 +user-login = "dtolnay" +user-name = "David Tolnay" + +[[publisher.thiserror]] +version = "2.0.20" +when = "2026-08-08" +user-id = 3618 +user-login = "dtolnay" +user-name = "David Tolnay" + +[[publisher.thiserror-impl]] +version = "1.0.69" +when = "2024-11-10" +user-id = 3618 +user-login = "dtolnay" +user-name = "David Tolnay" + +[[publisher.thiserror-impl]] +version = "2.0.20" +when = "2026-08-08" +user-id = 3618 +user-login = "dtolnay" +user-name = "David Tolnay" + +[[publisher.thread_local]] +version = "1.1.10" +when = "2026-07-10" +user-id = 2915 +user-login = "Amanieu" +user-name = "Amanieu d'Antras" + +[[publisher.unicode-ident]] +version = "1.0.24" +when = "2026-02-16" +user-id = 3618 +user-login = "dtolnay" +user-name = "David Tolnay" + [[publisher.unicode-segmentation]] version = "1.13.3" when = "2026-06-01" @@ -166,12 +594,19 @@ user-id = 1139 user-login = "Manishearth" user-name = "Manish Goregaokar" -[[publisher.unicode-xid]] -version = "0.2.6" -when = "2024-09-19" -user-id = 1139 -user-login = "Manishearth" -user-name = "Manish Goregaokar" +[[publisher.walkdir]] +version = "2.5.0" +when = "2024-03-01" +user-id = 189 +user-login = "BurntSushi" +user-name = "Andrew Gallant" + +[[publisher.wasip2]] +version = "1.0.4+wasi-0.2.12" +when = "2026-06-12" +user-id = 1 +user-login = "alexcrichton" +user-name = "Alex Crichton" [[publisher.wasm-encoder]] version = "0.214.0" @@ -180,10 +615,9 @@ user-id = 73222 user-login = "wasmtime-publish" [[publisher.wasm-encoder]] -version = "0.218.1" -when = "2025-02-05" -user-id = 73222 -user-login = "wasmtime-publish" +version = "0.236.1" +when = "2025-08-14" +trusted-publisher = "github:bytecodealliance/wasm-tools" [[publisher.wasmparser]] version = "0.214.0" @@ -192,70 +626,162 @@ user-id = 73222 user-login = "wasmtime-publish" [[publisher.wasmparser]] -version = "0.218.1" -when = "2025-02-05" -user-id = 73222 -user-login = "wasmtime-publish" +version = "0.236.1" +when = "2025-08-14" +trusted-publisher = "github:bytecodealliance/wasm-tools" [[publisher.wasmprinter]] -version = "0.218.1" -when = "2025-02-05" -user-id = 73222 -user-login = "wasmtime-publish" +version = "0.236.1" +when = "2025-08-14" +trusted-publisher = "github:bytecodealliance/wasm-tools" [[publisher.wasmtime]] -version = "26.0.1" -when = "2024-11-05" -user-id = 73222 -user-login = "wasmtime-publish" - -[[publisher.wasmtime-asm-macros]] -version = "26.0.1" -when = "2024-11-05" -user-id = 73222 -user-login = "wasmtime-publish" - -[[publisher.wasmtime-component-macro]] -version = "26.0.1" -when = "2024-11-05" -user-id = 73222 -user-login = "wasmtime-publish" - -[[publisher.wasmtime-component-util]] -version = "26.0.1" -when = "2024-11-05" -user-id = 73222 -user-login = "wasmtime-publish" - -[[publisher.wasmtime-cranelift]] -version = "26.0.1" -when = "2024-11-05" -user-id = 73222 -user-login = "wasmtime-publish" +version = "36.0.13" +when = "2026-07-31" +trusted-publisher = "github:bytecodealliance/wasmtime" [[publisher.wasmtime-environ]] -version = "26.0.1" -when = "2024-11-05" -user-id = 73222 -user-login = "wasmtime-publish" +version = "36.0.13" +when = "2026-07-31" +trusted-publisher = "github:bytecodealliance/wasmtime" + +[[publisher.wasmtime-internal-cranelift]] +version = "36.0.13" +when = "2026-07-31" +trusted-publisher = "github:bytecodealliance/wasmtime" + +[[publisher.wasmtime-internal-fiber]] +version = "36.0.13" +when = "2026-07-31" +trusted-publisher = "github:bytecodealliance/wasmtime" + +[[publisher.wasmtime-internal-jit-debug]] +version = "36.0.13" +when = "2026-07-31" +trusted-publisher = "github:bytecodealliance/wasmtime" + +[[publisher.wasmtime-internal-jit-icache-coherence]] +version = "36.0.13" +when = "2026-07-31" +trusted-publisher = "github:bytecodealliance/wasmtime" + +[[publisher.wasmtime-internal-math]] +version = "36.0.13" +when = "2026-07-31" +trusted-publisher = "github:bytecodealliance/wasmtime" + +[[publisher.wasmtime-internal-slab]] +version = "36.0.13" +when = "2026-07-31" +trusted-publisher = "github:bytecodealliance/wasmtime" + +[[publisher.wasmtime-internal-unwinder]] +version = "36.0.13" +when = "2026-07-31" +trusted-publisher = "github:bytecodealliance/wasmtime" + +[[publisher.wasmtime-internal-versioned-export-macros]] +version = "36.0.13" +when = "2026-07-31" +trusted-publisher = "github:bytecodealliance/wasmtime" + +[[publisher.winapi-util]] +version = "0.1.11" +when = "2025-09-07" +user-id = 189 +user-login = "BurntSushi" +user-name = "Andrew Gallant" + +[[publisher.windows-core]] +version = "0.62.2" +when = "2025-10-06" +user-id = 64539 +user-login = "kennykerr" +user-name = "Kenny Kerr" -[[publisher.wasmtime-jit-icache-coherence]] -version = "26.0.1" -when = "2024-11-05" -user-id = 73222 -user-login = "wasmtime-publish" +[[publisher.windows-interface]] +version = "0.59.3" +when = "2025-10-06" +user-id = 64539 +user-login = "kennykerr" +user-name = "Kenny Kerr" -[[publisher.wasmtime-slab]] -version = "26.0.1" -when = "2024-11-05" -user-id = 73222 -user-login = "wasmtime-publish" +[[publisher.windows-link]] +version = "0.2.1" +when = "2025-10-06" +user-id = 64539 +user-login = "kennykerr" +user-name = "Kenny Kerr" -[[publisher.wasmtime-wit-bindgen]] -version = "26.0.1" -when = "2024-11-05" -user-id = 73222 -user-login = "wasmtime-publish" +[[publisher.windows-result]] +version = "0.4.1" +when = "2025-10-06" +user-id = 64539 +user-login = "kennykerr" +user-name = "Kenny Kerr" + +[[publisher.windows-strings]] +version = "0.5.1" +when = "2025-10-06" +user-id = 64539 +user-login = "kennykerr" +user-name = "Kenny Kerr" + +[[publisher.windows-targets]] +version = "0.52.6" +when = "2024-07-03" +user-id = 64539 +user-login = "kennykerr" +user-name = "Kenny Kerr" + +[[publisher.windows-targets]] +version = "0.53.5" +when = "2025-10-06" +user-id = 64539 +user-login = "kennykerr" +user-name = "Kenny Kerr" + +[[publisher.windows_aarch64_gnullvm]] +version = "0.52.6" +when = "2024-07-03" +user-id = 64539 +user-login = "kennykerr" +user-name = "Kenny Kerr" + +[[publisher.windows_aarch64_gnullvm]] +version = "0.53.1" +when = "2025-10-06" +user-id = 64539 +user-login = "kennykerr" +user-name = "Kenny Kerr" + +[[publisher.windows_i686_gnullvm]] +version = "0.52.6" +when = "2024-07-03" +user-id = 64539 +user-login = "kennykerr" +user-name = "Kenny Kerr" + +[[publisher.windows_i686_gnullvm]] +version = "0.53.1" +when = "2025-10-06" +user-id = 64539 +user-login = "kennykerr" +user-name = "Kenny Kerr" + +[[publisher.windows_x86_64_gnullvm]] +version = "0.52.6" +when = "2024-07-03" +user-id = 64539 +user-login = "kennykerr" +user-name = "Kenny Kerr" + +[[publisher.windows_x86_64_gnullvm]] +version = "0.53.1" +when = "2025-10-06" +user-id = 64539 +user-login = "kennykerr" +user-name = "Kenny Kerr" [[publisher.winevt-core]] version = "0.3.0" @@ -272,21 +798,20 @@ user-login = "h4x0r" user-name = "Albert Hui" [[publisher.winreg-format]] -version = "0.1.0" -when = "2026-06-13" +version = "0.1.1" +when = "2026-07-25" user-id = 347968 user-login = "h4x0r" user-name = "Albert Hui" -[[publisher.wit-parser]] -version = "0.218.1" -when = "2025-02-05" -user-id = 73222 -user-login = "wasmtime-publish" +[[publisher.wit-bindgen]] +version = "0.57.1" +when = "2026-04-17" +trusted-publisher = "github:bytecodealliance/wit-bindgen" [[publisher.xpress-huffman]] -version = "0.1.0" -when = "2026-06-12" +version = "0.1.2" +when = "2026-07-25" user-id = 347968 user-login = "h4x0r" user-name = "Albert Hui" @@ -298,6 +823,13 @@ user-id = 347968 user-login = "h4x0r" user-name = "Albert Hui" +[[publisher.zmij]] +version = "1.0.23" +when = "2026-07-13" +user-id = 3618 +user-login = "dtolnay" +user-name = "David Tolnay" + [[audits.bytecode-alliance.wildcard-audits.arbitrary]] who = "Nick Fitzgerald " criteria = "safe-to-deploy" @@ -313,77 +845,109 @@ user-id = 696 # Nick Fitzgerald (fitzgen) start = "2019-03-16" end = "2026-08-21" +[[audits.bytecode-alliance.wildcard-audits.cranelift-assembler-x64]] +who = "Alex Crichton " +criteria = "safe-to-deploy" +trusted-publisher = "github:bytecodealliance/wasmtime" +start = "2026-01-07" +end = "2027-01-08" +notes = "The Bytecode Alliance is the author of this crate" + +[[audits.bytecode-alliance.wildcard-audits.cranelift-assembler-x64-meta]] +who = "Alex Crichton " +criteria = "safe-to-deploy" +trusted-publisher = "github:bytecodealliance/wasmtime" +start = "2026-01-07" +end = "2027-01-08" +notes = "The Bytecode Alliance is the author of this crate" + [[audits.bytecode-alliance.wildcard-audits.cranelift-bforest]] -who = "Bobby Holley " +who = "Alex Crichton " criteria = "safe-to-deploy" -user-id = 73222 # wasmtime-publish -start = "2021-10-29" -end = "2026-08-21" -notes = "The Bytecode Alliance is the author of this crate." +trusted-publisher = "github:bytecodealliance/wasmtime" +start = "2026-01-07" +end = "2027-01-08" +notes = "The Bytecode Alliance is the author of this crate" + +[[audits.bytecode-alliance.wildcard-audits.cranelift-bitset]] +who = "Alex Crichton " +criteria = "safe-to-deploy" +trusted-publisher = "github:bytecodealliance/wasmtime" +start = "2026-01-07" +end = "2027-01-08" +notes = "The Bytecode Alliance is the author of this crate" [[audits.bytecode-alliance.wildcard-audits.cranelift-codegen]] -who = "Bobby Holley " +who = "Alex Crichton " criteria = "safe-to-deploy" -user-id = 73222 # wasmtime-publish -start = "2021-10-29" -end = "2026-08-21" -notes = "The Bytecode Alliance is the author of this crate." +trusted-publisher = "github:bytecodealliance/wasmtime" +start = "2026-01-07" +end = "2027-01-08" +notes = "The Bytecode Alliance is the author of this crate" [[audits.bytecode-alliance.wildcard-audits.cranelift-codegen-meta]] -who = "Bobby Holley " +who = "Alex Crichton " criteria = "safe-to-deploy" -user-id = 73222 # wasmtime-publish -start = "2021-10-29" -end = "2026-08-21" -notes = "The Bytecode Alliance is the author of this crate." +trusted-publisher = "github:bytecodealliance/wasmtime" +start = "2026-01-07" +end = "2027-01-08" +notes = "The Bytecode Alliance is the author of this crate" [[audits.bytecode-alliance.wildcard-audits.cranelift-codegen-shared]] -who = "Bobby Holley " +who = "Alex Crichton " criteria = "safe-to-deploy" -user-id = 73222 # wasmtime-publish -start = "2021-10-29" -end = "2026-08-21" -notes = "The Bytecode Alliance is the author of this crate." +trusted-publisher = "github:bytecodealliance/wasmtime" +start = "2026-01-07" +end = "2027-01-08" +notes = "The Bytecode Alliance is the author of this crate" [[audits.bytecode-alliance.wildcard-audits.cranelift-control]] -who = "Bobby Holley " +who = "Alex Crichton " criteria = "safe-to-deploy" -user-id = 73222 # wasmtime-publish -start = "2023-05-22" -end = "2026-08-21" -notes = "The Bytecode Alliance is the author of this crate." +trusted-publisher = "github:bytecodealliance/wasmtime" +start = "2026-01-07" +end = "2027-01-08" +notes = "The Bytecode Alliance is the author of this crate" [[audits.bytecode-alliance.wildcard-audits.cranelift-entity]] -who = "Bobby Holley " +who = "Alex Crichton " criteria = "safe-to-deploy" -user-id = 73222 # wasmtime-publish -start = "2021-10-29" -end = "2026-08-21" -notes = "The Bytecode Alliance is the author of this crate." +trusted-publisher = "github:bytecodealliance/wasmtime" +start = "2026-01-07" +end = "2027-01-08" +notes = "The Bytecode Alliance is the author of this crate" [[audits.bytecode-alliance.wildcard-audits.cranelift-frontend]] -who = "Bobby Holley " +who = "Alex Crichton " criteria = "safe-to-deploy" -user-id = 73222 # wasmtime-publish -start = "2021-10-29" -end = "2026-08-21" -notes = "The Bytecode Alliance is the author of this crate." +trusted-publisher = "github:bytecodealliance/wasmtime" +start = "2026-01-07" +end = "2027-01-08" +notes = "The Bytecode Alliance is the author of this crate" [[audits.bytecode-alliance.wildcard-audits.cranelift-isle]] -who = "Bobby Holley " +who = "Alex Crichton " criteria = "safe-to-deploy" -user-id = 73222 # wasmtime-publish -start = "2021-12-13" -end = "2026-08-21" -notes = "The Bytecode Alliance is the author of this crate." +trusted-publisher = "github:bytecodealliance/wasmtime" +start = "2026-01-07" +end = "2027-01-08" +notes = "The Bytecode Alliance is the author of this crate" [[audits.bytecode-alliance.wildcard-audits.cranelift-native]] -who = "Bobby Holley " +who = "Alex Crichton " criteria = "safe-to-deploy" -user-id = 73222 # wasmtime-publish -start = "2021-10-29" -end = "2026-08-21" -notes = "The Bytecode Alliance is the author of this crate." +trusted-publisher = "github:bytecodealliance/wasmtime" +start = "2026-01-07" +end = "2027-01-08" +notes = "The Bytecode Alliance is the author of this crate" + +[[audits.bytecode-alliance.wildcard-audits.cranelift-srcgen]] +who = "Alex Crichton " +criteria = "safe-to-deploy" +trusted-publisher = "github:bytecodealliance/wasmtime" +start = "2026-01-07" +end = "2027-01-08" +notes = "The Bytecode Alliance is the author of this crate" [[audits.bytecode-alliance.wildcard-audits.derive_arbitrary]] who = "Nick Fitzgerald " @@ -396,22 +960,35 @@ notes = "I am an author of this crate" [[audits.bytecode-alliance.wildcard-audits.pulley-interpreter]] who = "Alex Crichton " criteria = "safe-to-deploy" -user-id = 73222 # wasmtime-publish -start = "2024-09-20" -end = "2026-08-21" -notes = "The Bytecode Alliance is the author of this crate." +trusted-publisher = "github:bytecodealliance/wasmtime" +start = "2026-01-07" +end = "2027-01-08" +notes = "The Bytecode Alliance is the author of this crate" + +[[audits.bytecode-alliance.wildcard-audits.pulley-macros]] +who = "Alex Crichton " +criteria = "safe-to-deploy" +trusted-publisher = "github:bytecodealliance/wasmtime" +start = "2026-01-07" +end = "2027-01-08" +notes = "The Bytecode Alliance is the author of this crate" [[audits.bytecode-alliance.wildcard-audits.regalloc2]] -who = "Trevor Elliott " +who = "Chris Fallin " criteria = "safe-to-deploy" -user-id = 187138 # Trevor Elliott (elliottt) -start = "2022-11-29" +user-id = 3726 # Chris Fallin (cfallin) +start = "2021-12-03" +end = "2026-08-21" +notes = "We (Bytecode Alliance) are the primary authors of regalloc2 and co-develop it with Cranelift/Wasmtime, with the same code-review, testing/fuzzing, and security standards." + +[[audits.bytecode-alliance.wildcard-audits.wasip2]] +who = "Alex Crichton " +criteria = "safe-to-deploy" +user-id = 1 # Alex Crichton (alexcrichton) +start = "2025-08-10" end = "2026-08-21" notes = """ -This is a Bytecode Alliance authored crate maintained in the `regalloc2` -repository of which I'm one of the maintainers and publishers for. I am employed -by a member of the Bytecode Alliance and plan to continue doing so and will -actively maintain this crate over time. +This is a Bytecode Alliance authored crate. """ [[audits.bytecode-alliance.wildcard-audits.wasm-encoder]] @@ -426,6 +1003,14 @@ publication of this crate from CI. This repository requires all PRs are reviewed by a Bytecode Alliance maintainer and it owned by the Bytecode Alliance itself. """ +[[audits.bytecode-alliance.wildcard-audits.wasm-encoder]] +who = "Alex Crichton " +criteria = "safe-to-deploy" +trusted-publisher = "github:bytecodealliance/wasm-tools" +start = "2025-08-14" +end = "2027-01-08" +notes = "The Bytecode Alliance is the author of this crate" + [[audits.bytecode-alliance.wildcard-audits.wasmparser]] who = "Alex Crichton " criteria = "safe-to-deploy" @@ -438,105 +1023,109 @@ publication of this crate from CI. This repository requires all PRs are reviewed by a Bytecode Alliance maintainer and it owned by the Bytecode Alliance itself. """ +[[audits.bytecode-alliance.wildcard-audits.wasmparser]] +who = "Alex Crichton " +criteria = "safe-to-deploy" +trusted-publisher = "github:bytecodealliance/wasm-tools" +start = "2025-08-14" +end = "2027-01-08" +notes = "The Bytecode Alliance is the author of this crate" + [[audits.bytecode-alliance.wildcard-audits.wasmprinter]] who = "Alex Crichton " criteria = "safe-to-deploy" -user-id = 73222 # wasmtime-publish -start = "2023-01-01" -end = "2026-06-03" -notes = """ -The Bytecode Alliance uses the `wasmtime-publish` crates.io account to automate -publication of this crate from CI. This repository requires all PRs are reviewed -by a Bytecode Alliance maintainer and it owned by the Bytecode Alliance itself. -""" +trusted-publisher = "github:bytecodealliance/wasm-tools" +start = "2025-08-14" +end = "2027-01-08" +notes = "The Bytecode Alliance is the author of this crate" [[audits.bytecode-alliance.wildcard-audits.wasmtime]] -who = "Bobby Holley " +who = "Alex Crichton " criteria = "safe-to-deploy" -user-id = 73222 # wasmtime-publish -start = "2021-10-29" -end = "2026-08-21" -notes = "The Bytecode Alliance is the author of this crate." +trusted-publisher = "github:bytecodealliance/wasmtime" +start = "2026-01-07" +end = "2027-01-08" +notes = "The Bytecode Alliance is the author of this crate" -[[audits.bytecode-alliance.wildcard-audits.wasmtime-asm-macros]] -who = "Bobby Holley " +[[audits.bytecode-alliance.wildcard-audits.wasmtime-environ]] +who = "Alex Crichton " criteria = "safe-to-deploy" -user-id = 73222 # wasmtime-publish -start = "2022-08-22" -end = "2026-08-21" -notes = "The Bytecode Alliance is the author of this crate." +trusted-publisher = "github:bytecodealliance/wasmtime" +start = "2026-01-07" +end = "2027-01-08" +notes = "The Bytecode Alliance is the author of this crate" -[[audits.bytecode-alliance.wildcard-audits.wasmtime-component-macro]] -who = "Bobby Holley " +[[audits.bytecode-alliance.wildcard-audits.wasmtime-internal-cranelift]] +who = "Alex Crichton " criteria = "safe-to-deploy" -user-id = 73222 # wasmtime-publish -start = "2022-07-20" -end = "2026-08-21" -notes = "The Bytecode Alliance is the author of this crate." +trusted-publisher = "github:bytecodealliance/wasmtime" +start = "2026-01-07" +end = "2027-01-08" +notes = "The Bytecode Alliance is the author of this crate" -[[audits.bytecode-alliance.wildcard-audits.wasmtime-component-util]] -who = "Bobby Holley " +[[audits.bytecode-alliance.wildcard-audits.wasmtime-internal-fiber]] +who = "Alex Crichton " criteria = "safe-to-deploy" -user-id = 73222 # wasmtime-publish -start = "2022-08-22" -end = "2026-08-21" -notes = "The Bytecode Alliance is the author of this crate." +trusted-publisher = "github:bytecodealliance/wasmtime" +start = "2026-01-07" +end = "2027-01-08" +notes = "The Bytecode Alliance is the author of this crate" -[[audits.bytecode-alliance.wildcard-audits.wasmtime-cranelift]] -who = "Bobby Holley " +[[audits.bytecode-alliance.wildcard-audits.wasmtime-internal-jit-debug]] +who = "Alex Crichton " criteria = "safe-to-deploy" -user-id = 73222 # wasmtime-publish -start = "2021-10-29" -end = "2026-08-21" -notes = "The Bytecode Alliance is the author of this crate." +trusted-publisher = "github:bytecodealliance/wasmtime" +start = "2026-01-07" +end = "2027-01-08" +notes = "The Bytecode Alliance is the author of this crate" -[[audits.bytecode-alliance.wildcard-audits.wasmtime-environ]] -who = "Bobby Holley " +[[audits.bytecode-alliance.wildcard-audits.wasmtime-internal-jit-icache-coherence]] +who = "Alex Crichton " criteria = "safe-to-deploy" -user-id = 73222 # wasmtime-publish -start = "2021-10-29" -end = "2026-08-21" -notes = "The Bytecode Alliance is the author of this crate." +trusted-publisher = "github:bytecodealliance/wasmtime" +start = "2026-01-07" +end = "2027-01-08" +notes = "The Bytecode Alliance is the author of this crate" -[[audits.bytecode-alliance.wildcard-audits.wasmtime-jit-icache-coherence]] -who = "Bobby Holley " +[[audits.bytecode-alliance.wildcard-audits.wasmtime-internal-math]] +who = "Alex Crichton " criteria = "safe-to-deploy" -user-id = 73222 # wasmtime-publish -start = "2022-11-21" -end = "2026-08-21" -notes = "The Bytecode Alliance is the author of this crate." +trusted-publisher = "github:bytecodealliance/wasmtime" +start = "2026-01-07" +end = "2027-01-08" +notes = "The Bytecode Alliance is the author of this crate" -[[audits.bytecode-alliance.wildcard-audits.wasmtime-slab]] +[[audits.bytecode-alliance.wildcard-audits.wasmtime-internal-slab]] who = "Alex Crichton " criteria = "safe-to-deploy" -user-id = 73222 # wasmtime-publish -start = "2023-01-01" -end = "2026-06-03" -notes = """ -The Bytecode Alliance uses the `wasmtime-publish` crates.io account to automate -publication of this crate from CI. This repository requires all PRs are reviewed -by a Bytecode Alliance maintainer and it owned by the Bytecode Alliance itself. -""" +trusted-publisher = "github:bytecodealliance/wasmtime" +start = "2026-01-07" +end = "2027-01-08" +notes = "The Bytecode Alliance is the author of this crate" -[[audits.bytecode-alliance.wildcard-audits.wasmtime-wit-bindgen]] -who = "Bobby Holley " +[[audits.bytecode-alliance.wildcard-audits.wasmtime-internal-unwinder]] +who = "Alex Crichton " criteria = "safe-to-deploy" -user-id = 73222 # wasmtime-publish -start = "2023-01-20" -end = "2026-08-21" -notes = "The Bytecode Alliance is the author of this crate." +trusted-publisher = "github:bytecodealliance/wasmtime" +start = "2026-01-07" +end = "2027-01-08" +notes = "The Bytecode Alliance is the author of this crate" -[[audits.bytecode-alliance.wildcard-audits.wit-parser]] +[[audits.bytecode-alliance.wildcard-audits.wasmtime-internal-versioned-export-macros]] who = "Alex Crichton " criteria = "safe-to-deploy" -user-id = 73222 # wasmtime-publish -start = "2023-01-01" -end = "2026-06-03" -notes = """ -The Bytecode Alliance uses the `wasmtime-publish` crates.io account to automate -publication of this crate from CI. This repository requires all PRs are reviewed -by a Bytecode Alliance maintainer and it owned by the Bytecode Alliance itself. -""" +trusted-publisher = "github:bytecodealliance/wasmtime" +start = "2026-01-07" +end = "2027-01-08" +notes = "The Bytecode Alliance is the author of this crate" + +[[audits.bytecode-alliance.wildcard-audits.wit-bindgen]] +who = "Alex Crichton " +criteria = "safe-to-deploy" +trusted-publisher = "github:bytecodealliance/wit-bindgen" +start = "2025-08-13" +end = "2027-01-08" +notes = "The Bytecode Alliance is the author of this crate" [[audits.bytecode-alliance.audits.adler2]] who = "Alex Crichton " @@ -626,6 +1215,18 @@ criteria = "safe-to-deploy" delta = "0.31.0 -> 0.31.1" notes = "No fundmanetally new `unsafe` code, some small refactoring of existing code. Lots of changes in tests, not as many changes in the rest of the crate. More dwarf!" +[[audits.bytecode-alliance.audits.gimli]] +who = "Alex Crichton " +criteria = "safe-to-deploy" +delta = "0.31.1 -> 0.32.0" +notes = "Ever more DWARF to parse, but also no new `unsafe` and everything looks like gimli." + +[[audits.bytecode-alliance.audits.gimli]] +who = "Alex Crichton " +criteria = "safe-to-deploy" +delta = "0.32.0 -> 0.32.3" +notes = "Ever more dwarf, it never ends! (nothing out of the ordinary)" + [[audits.bytecode-alliance.audits.hashbrown]] who = "Chris Fallin " criteria = "safe-to-deploy" @@ -642,6 +1243,21 @@ who = "Dan Gohman " criteria = "safe-to-deploy" version = "0.1.2" +[[audits.bytecode-alliance.audits.itertools]] +who = "Alex Crichton " +criteria = "safe-to-deploy" +delta = "0.12.1 -> 0.14.0" +notes = """ +Lots of new iterators and shuffling some things around. Some new unsafe code but +it's well-documented and well-tested. Nothing suspicious. +""" + +[[audits.bytecode-alliance.audits.leb128fmt]] +who = "Alex Crichton " +criteria = "safe-to-deploy" +version = "0.1.0" +notes = "Well-scoped crate do doing LEB encoding with no `unsafe` code and does what it says on the tin." + [[audits.bytecode-alliance.audits.matchers]] who = "Pat Hickey " criteria = "safe-to-deploy" @@ -771,6 +1387,12 @@ criteria = "safe-to-deploy" delta = "1.0.8 -> 1.1.3" notes = "Substantial updates, but nothing out of the ordinary one would expect from a serialization crate. Minor `unsafe` updates, but nothing major from what was already there." +[[audits.bytecode-alliance.audits.semver]] +who = "Pat Hickey " +criteria = "safe-to-deploy" +version = "1.0.17" +notes = "plenty of unsafe pointer and vec tricks, but in well-structured and commented code that appears to be correct" + [[audits.bytecode-alliance.audits.sharded-slab]] who = "Pat Hickey " criteria = "safe-to-deploy" @@ -783,16 +1405,6 @@ criteria = "safe-to-deploy" delta = "1.13.2 -> 1.14.0" notes = "Minor new feature, nothing out of the ordinary." -[[audits.bytecode-alliance.audits.sptr]] -who = "Alex Crichton " -criteria = "safe-to-deploy" -version = "0.3.2" -notes = """ -This crate is 90% documentation and does contain a good deal of `unsafe` code, -but it's all doing what it says on the tin: being a stable polyfill for strict -provenance APIs in the standard library while they're on Nightly. -""" - [[audits.bytecode-alliance.audits.tracing-log]] who = "Alex Crichton " criteria = "safe-to-deploy" @@ -850,13 +1462,6 @@ criteria = "safe-to-deploy" version = "0.2.1" notes = "Single unsafe usage that looks sound, no ambient capabilities" -[[audits.google.audits.android_system_properties]] -who = "Manish Goregaokar " -criteria = "safe-to-deploy" -version = "0.1.5" -notes = "Android system API FFI" -aggregated-from = "https://chromium.googlesource.com/chromium/src/+/main/third_party/rust/chromium_crates_io/supply-chain/audits.toml?format=TEXT" - [[audits.google.audits.base64]] who = "amarjotgill " criteria = "safe-to-deploy" @@ -899,34 +1504,6 @@ criteria = "safe-to-run" version = "0.4.0" aggregated-from = "https://chromium.googlesource.com/chromiumos/third_party/rust_crates/+/refs/heads/main/cargo-vet/audits.toml?format=TEXT" -[[audits.google.audits.either]] -who = "Manish Goregaokar " -criteria = "safe-to-deploy" -version = "1.13.0" -notes = "Unsafe code pertaining to wrapping Pin APIs. Mostly passes invariants down." -aggregated-from = "https://chromium.googlesource.com/chromium/src/+/main/third_party/rust/chromium_crates_io/supply-chain/audits.toml?format=TEXT" - -[[audits.google.audits.either]] -who = "Daniel Cheng " -criteria = "safe-to-deploy" -delta = "1.13.0 -> 1.14.0" -notes = """ -Inheriting ub-risk-1 from the baseline review of 1.13.0. While the delta has some diffs in unsafe code, they are either: -- migrating code to use helper macros -- migrating match patterns to take advantage of default bindings mode from RFC 2005 -Either way, the result is code that does exactly the same thing and does not change the risk of UB. - -See https://crrev.com/c/6323164 for more audit details. -""" -aggregated-from = "https://chromium.googlesource.com/chromium/src/+/main/third_party/rust/chromium_crates_io/supply-chain/audits.toml?format=TEXT" - -[[audits.google.audits.either]] -who = "Lukasz Anforowicz " -criteria = "safe-to-deploy" -delta = "1.14.0 -> 1.15.0" -notes = 'The delta in `lib.rs` only tweaks doc comments and `#[cfg(feature = "std")]`.' -aggregated-from = "https://chromium.googlesource.com/chromium/src/+/main/third_party/rust/chromium_crates_io/supply-chain/audits.toml?format=TEXT" - [[audits.google.audits.equivalent]] who = "George Burgess IV " criteria = "safe-to-deploy" @@ -999,6 +1576,31 @@ https://source.chromium.org/chromium/chromium/src/+/28841c33c77833cc30b286f9ae24 """ aggregated-from = "https://chromium.googlesource.com/chromium/src/+/main/third_party/rust/chromium_crates_io/supply-chain/audits.toml?format=TEXT" +[[audits.google.audits.indexmap]] +who = "Lukasz Anforowicz " +criteria = "safe-to-deploy" +version = "2.7.1" +notes = ''' +Grepped for `-i cipher`, `-i crypto`, `'\bfs\b'`, `'\bnet\b'` +and there were no hits. + +There is a little bit of `unsafe` Rust code - the audit can be found at +https://chromium-review.googlesource.com/c/chromium/src/+/6187726/2 +''' +aggregated-from = "https://chromium.googlesource.com/chromium/src/+/main/third_party/rust/chromium_crates_io/supply-chain/audits.toml?format=TEXT" + +[[audits.google.audits.indexmap]] +who = "Lukasz Anforowicz " +criteria = "safe-to-deploy" +delta = "2.7.1 -> 2.8.0" +notes = """ +No `unsafe` introduced or affected in: +* `indexmap_with_default!` and `indexset_with_default!` macros +* New `PartialEq` implementations +* `fn slice_eq` in `util.rs` +""" +aggregated-from = "https://chromium.googlesource.com/chromium/src/+/main/third_party/rust/chromium_crates_io/supply-chain/audits.toml?format=TEXT" + [[audits.google.audits.lazy_static]] who = "Lukasz Anforowicz " criteria = "safe-to-deploy" @@ -1035,19 +1637,6 @@ criteria = "safe-to-run" version = "0.3.0" aggregated-from = "https://chromium.googlesource.com/chromiumos/third_party/rust_crates/+/refs/heads/main/cargo-vet/audits.toml?format=TEXT" -[[audits.google.audits.num-integer]] -who = "Manish Goregaokar " -criteria = "safe-to-deploy" -version = "0.1.46" -notes = "Contains no unsafe" -aggregated-from = "https://chromium.googlesource.com/chromium/src/+/main/third_party/rust/chromium_crates_io/supply-chain/audits.toml?format=TEXT" - -[[audits.google.audits.number_prefix]] -who = "George Burgess IV " -criteria = "safe-to-deploy" -version = "0.4.0" -aggregated-from = "https://chromium.googlesource.com/chromiumos/third_party/rust_crates/+/refs/heads/main/cargo-vet/audits.toml?format=TEXT" - [[audits.google.audits.png]] who = "Lukasz Anforowicz " criteria = "safe-to-deploy" @@ -1105,6 +1694,56 @@ criteria = "safe-to-run" version = "1.0.9" aggregated-from = "https://chromium.googlesource.com/chromiumos/third_party/rust_crates/+/refs/heads/main/cargo-vet/audits.toml?format=TEXT" +[[audits.google.audits.quote]] +who = "Lukasz Anforowicz " +criteria = "safe-to-deploy" +version = "1.0.35" +notes = """ +Grepped for "unsafe", "crypt", "cipher", "fs", "net" - there were no hits +(except for benign "net" hit in tests and "fs" hit in README.md) +""" +aggregated-from = "https://chromium.googlesource.com/chromium/src/+/main/third_party/rust/chromium_crates_io/supply-chain/audits.toml?format=TEXT" + +[[audits.google.audits.quote]] +who = "Adrian Taylor " +criteria = "safe-to-deploy" +delta = "1.0.35 -> 1.0.36" +aggregated-from = "https://chromium.googlesource.com/chromium/src/+/main/third_party/rust/chromium_crates_io/supply-chain/audits.toml?format=TEXT" + +[[audits.google.audits.quote]] +who = "Lukasz Anforowicz " +criteria = "safe-to-deploy" +delta = "1.0.36 -> 1.0.37" +notes = """ +The delta just 1) inlines/expands `impl ToTokens` that used to be handled via +`primitive!` macro and 2) adds `impl ToTokens` for `CStr` and `CString`. +""" +aggregated-from = "https://chromium.googlesource.com/chromium/src/+/main/third_party/rust/chromium_crates_io/supply-chain/audits.toml?format=TEXT" + +[[audits.google.audits.quote]] +who = "Dustin J. Mitchell " +criteria = "safe-to-deploy" +delta = "1.0.37 -> 1.0.38" +notes = "Still no unsafe" +aggregated-from = "https://chromium.googlesource.com/chromium/src/+/main/third_party/rust/chromium_crates_io/supply-chain/audits.toml?format=TEXT" + +[[audits.google.audits.quote]] +who = "Daniel Cheng " +criteria = "safe-to-deploy" +delta = "1.0.38 -> 1.0.39" +notes = "Only minor changes for clippy lints and documentation." +aggregated-from = "https://chromium.googlesource.com/chromium/src/+/main/third_party/rust/chromium_crates_io/supply-chain/audits.toml?format=TEXT" + +[[audits.google.audits.quote]] +who = "Lukasz Anforowicz " +criteria = "safe-to-deploy" +delta = "1.0.39 -> 1.0.40" +notes = """ +The delta is just a simplification of how `tokens.extend(...)` call is made. +Still no `unsafe` anywhere. +""" +aggregated-from = "https://chromium.googlesource.com/chromium/src/+/main/third_party/rust/chromium_crates_io/supply-chain/audits.toml?format=TEXT" + [[audits.google.audits.rand_chacha]] who = "Lukasz Anforowicz " criteria = "safe-to-deploy" @@ -1177,15 +1816,6 @@ end = "2026-02-01" notes = "All code written or reviewed by Manish" aggregated-from = "https://hg.mozilla.org/mozilla-central/raw-file/tip/supply-chain/audits.toml" -[[audits.mozilla.wildcard-audits.unicode-xid]] -who = "Manish Goregaokar " -criteria = "safe-to-deploy" -user-id = 1139 # Manish Goregaokar (Manishearth) -start = "2019-07-25" -end = "2027-04-23" -notes = "All code written or reviewed by Manish" -aggregated-from = "https://hg.mozilla.org/mozilla-central/raw-file/tip/supply-chain/audits.toml" - [[audits.mozilla.audits.adler2]] who = "Erich Gubler " criteria = "safe-to-deploy" @@ -1204,38 +1834,6 @@ criteria = "safe-to-deploy" delta = "0.2.20 -> 0.2.21" aggregated-from = "https://hg.mozilla.org/mozilla-central/raw-file/tip/supply-chain/audits.toml" -[[audits.mozilla.audits.bit-set]] -who = "Aria Beingessner " -criteria = "safe-to-deploy" -version = "0.5.2" -notes = "Another crate I own via contain-rs that is ancient and maintenance mode, no known issues." -aggregated-from = "https://hg.mozilla.org/mozilla-central/raw-file/tip/supply-chain/audits.toml" - -[[audits.mozilla.audits.bit-set]] -who = "Mike Hommey " -criteria = "safe-to-deploy" -delta = "0.5.2 -> 0.5.3" -aggregated-from = "https://hg.mozilla.org/mozilla-central/raw-file/tip/supply-chain/audits.toml" - -[[audits.mozilla.audits.bit-set]] -who = "Teodor Tanasoaia " -criteria = "safe-to-deploy" -delta = "0.5.3 -> 0.6.0" -aggregated-from = "https://hg.mozilla.org/mozilla-central/raw-file/tip/supply-chain/audits.toml" - -[[audits.mozilla.audits.bit-vec]] -who = "Aria Beingessner " -criteria = "safe-to-deploy" -version = "0.6.3" -notes = "Another crate I own via contain-rs that is ancient and in maintenance mode but otherwise perfectly fine." -aggregated-from = "https://hg.mozilla.org/mozilla-central/raw-file/tip/supply-chain/audits.toml" - -[[audits.mozilla.audits.bit-vec]] -who = "Teodor Tanasoaia " -criteria = "safe-to-deploy" -delta = "0.6.3 -> 0.7.0" -aggregated-from = "https://hg.mozilla.org/mozilla-central/raw-file/tip/supply-chain/audits.toml" - [[audits.mozilla.audits.deranged]] who = "Alex Franchuk " criteria = "safe-to-deploy" @@ -1260,12 +1858,6 @@ delta = "0.4.0 -> 0.5.8" notes = "New unsafe code is properly guarded" aggregated-from = "https://hg.mozilla.org/mozilla-central/raw-file/tip/supply-chain/audits.toml" -[[audits.mozilla.audits.either]] -who = "Erich Gubler " -criteria = "safe-to-deploy" -delta = "1.15.0 -> 1.16.0" -aggregated-from = "https://hg.mozilla.org/mozilla-central/raw-file/tip/supply-chain/audits.toml" - [[audits.mozilla.audits.fallible-iterator]] who = "Jan-Erik Rediger " criteria = "safe-to-deploy" @@ -1339,6 +1931,19 @@ criteria = "safe-to-deploy" delta = "0.17.0 -> 0.17.1" aggregated-from = "https://hg.mozilla.org/mozilla-central/raw-file/tip/supply-chain/audits.toml" +[[audits.mozilla.audits.indexmap]] +who = "Erich Gubler " +criteria = "safe-to-deploy" +delta = "2.8.0 -> 2.11.4" +aggregated-from = "https://hg.mozilla.org/mozilla-central/raw-file/tip/supply-chain/audits.toml" + +[[audits.mozilla.audits.indexmap]] +who = "Ben Dean-Kawamura " +criteria = "safe-to-deploy" +delta = "2.11.4 -> 2.14.0" +notes = "Mostly internal refactorings. No new unsafe code." +aggregated-from = "https://hg.mozilla.org/mozilla-central/raw-file/tip/supply-chain/audits.toml" + [[audits.mozilla.audits.num-derive]] who = "Josh Stone " criteria = "safe-to-deploy" @@ -1404,6 +2009,18 @@ criteria = "safe-to-run" delta = "1.0.9 -> 1.0.13" aggregated-from = "https://raw.githubusercontent.com/mozilla/glean/main/supply-chain/audits.toml" +[[audits.mozilla.audits.quote]] +who = "Jan-Erik Rediger " +criteria = "safe-to-deploy" +delta = "1.0.40 -> 1.0.45" +aggregated-from = "https://raw.githubusercontent.com/mozilla/glean/main/supply-chain/audits.toml" + +[[audits.mozilla.audits.quote]] +who = "Jan-Erik Rediger " +criteria = "safe-to-deploy" +delta = "1.0.45 -> 1.0.47" +aggregated-from = "https://raw.githubusercontent.com/mozilla/glean/main/supply-chain/audits.toml" + [[audits.mozilla.audits.rustc-hash]] who = "Bobby Holley " criteria = "safe-to-deploy" @@ -1417,6 +2034,19 @@ criteria = "safe-to-deploy" delta = "0.11.0 -> 0.12.0" aggregated-from = "https://raw.githubusercontent.com/mozilla/glean/main/supply-chain/audits.toml" +[[audits.mozilla.audits.semver]] +who = "Ben Dean-Kawamura " +criteria = "safe-to-deploy" +delta = "1.0.16 -> 1.0.28" +notes = "Very few changes, mostly removes support for older Rust versions. Some unsafe code refactored, but it seemed to be functionally equivalent to me." +aggregated-from = "https://hg.mozilla.org/mozilla-central/raw-file/tip/supply-chain/audits.toml" + +[[audits.mozilla.audits.semver]] +who = "Bobby Holley " +criteria = "safe-to-deploy" +delta = "1.0.17 -> 1.0.16" +aggregated-from = "https://hg.mozilla.org/mozilla-central/raw-file/tip/supply-chain/audits.toml" + [[audits.mozilla.audits.sharded-slab]] who = "Mark Hammond " criteria = "safe-to-deploy"