Use my aggregated audits

This commit is contained in:
Oliver Hamlet
2026-02-23 18:05:30 +00:00
parent 2bad3d02e1
commit 2a32eace55
2 changed files with 68 additions and 56 deletions
+5 -5
View File
@@ -7,21 +7,21 @@ version = "0.10"
[imports.bytecode-alliance]
url = "https://raw.githubusercontent.com/bytecodealliance/wasmtime/main/supply-chain/audits.toml"
[imports.esplugin]
url = "https://raw.githubusercontent.com/Ortham/esplugin/refs/heads/master/supply-chain/audits.toml"
[imports.google]
url = "https://raw.githubusercontent.com/google/supply-chain/main/audits.toml"
[imports.isrg]
url = "https://raw.githubusercontent.com/divviup/libprio-rs/main/supply-chain/audits.toml"
[imports.libloadorder]
url = "https://raw.githubusercontent.com/Ortham/libloadorder/refs/heads/master/supply-chain/audits.toml"
[imports.loot]
url = "https://raw.githubusercontent.com/loot/supply-chain/refs/heads/main/audits.toml"
[imports.mozilla]
url = "https://raw.githubusercontent.com/mozilla/supply-chain/main/audits.toml"
[imports.ortham]
url = "https://raw.githubusercontent.com/Ortham/supply-chain/refs/heads/main/audits.toml"
[policy.array-parameterized-test]
audit-as-crates-io = false
+63 -51
View File
@@ -248,48 +248,6 @@ This crate contains no `unsafe` code and no unnecessary use of the standard
library.
"""
[[audits.esplugin.audits.proc-macro2]]
who = "Oliver Hamlet <git@ortham.net>"
criteria = "safe-to-deploy"
delta = "1.0.101 -> 1.0.105"
[[audits.esplugin.audits.quote]]
who = "Oliver Hamlet <git@ortham.net>"
criteria = "safe-to-deploy"
delta = "1.0.40 -> 1.0.43"
[[audits.esplugin.audits.syn]]
who = "Oliver Hamlet <git@ortham.net>"
criteria = "safe-to-deploy"
delta = "2.0.106 -> 2.0.112"
[[audits.esplugin.audits.syn]]
who = "Oliver Hamlet <git@ortham.net>"
criteria = "safe-to-deploy"
delta = "2.0.112 -> 2.0.113"
[[audits.esplugin.audits.syn]]
who = "Oliver Hamlet <git@ortham.net>"
criteria = "safe-to-deploy"
delta = "2.0.113 -> 2.0.114"
[[audits.esplugin.audits.tempfile]]
who = "Oliver Hamlet <git@ortham.net>"
criteria = "safe-to-deploy"
delta = "3.21.0 -> 3.22.0"
notes = "The only significant change is updating its maximum accepted version of the windows-sys dependency to allow v0.61.x."
[[audits.esplugin.audits.unicase]]
who = "Oliver Hamlet <git@ortham.net>"
criteria = "safe-to-deploy"
delta = "2.8.1 -> 2.9.0"
[[audits.esplugin.audits.winapi-util]]
who = "Oliver Hamlet <git@ortham.net>"
criteria = "safe-to-deploy"
delta = "0.1.9 -> 0.1.11"
notes = "The only change is to the allowed range of windows-sys dependency versions."
[[audits.google.audits.autocfg]]
who = "Manish Goregaokar <manishearth@google.com>"
criteria = "safe-to-deploy"
@@ -905,15 +863,7 @@ who = "David Cook <dcook@divviup.org>"
criteria = "safe-to-deploy"
delta = "1.12.1 -> 1.13.0"
[[audits.libloadorder.audits.keyvalues-parser]]
who = "Oliver Hamlet <git@ortham.net>"
criteria = "safe-to-deploy"
delta = "0.2.0 -> 0.2.1"
[[audits.libloadorder.audits.rust-ini]]
who = "Oliver Hamlet <git@ortham.net>"
criteria = "safe-to-deploy"
delta = "0.21.1 -> 0.21.3"
[audits.loot.audits]
[[audits.mozilla.wildcard-audits.encoding_rs]]
who = "Henri Sivonen <hsivonen@hsivonen.fi>"
@@ -1119,3 +1069,65 @@ criteria = "safe-to-deploy"
delta = "2.6.0 -> 2.8.1"
notes = "Update to Unicode 15.0.0"
aggregated-from = "https://raw.githubusercontent.com/mozilla/glean/main/supply-chain/audits.toml"
[[audits.ortham.audits.keyvalues-parser]]
who = "Oliver Hamlet <git@ortham.net>"
criteria = "safe-to-deploy"
delta = "0.2.0 -> 0.2.1"
aggregated-from = "https://raw.githubusercontent.com/Ortham/libloadorder/refs/heads/master/supply-chain/audits.toml"
[[audits.ortham.audits.proc-macro2]]
who = "Oliver Hamlet <git@ortham.net>"
criteria = "safe-to-deploy"
delta = "1.0.101 -> 1.0.105"
aggregated-from = "https://raw.githubusercontent.com/Ortham/esplugin/refs/heads/master/supply-chain/audits.toml"
[[audits.ortham.audits.quote]]
who = "Oliver Hamlet <git@ortham.net>"
criteria = "safe-to-deploy"
delta = "1.0.40 -> 1.0.43"
aggregated-from = "https://raw.githubusercontent.com/Ortham/esplugin/refs/heads/master/supply-chain/audits.toml"
[[audits.ortham.audits.rust-ini]]
who = "Oliver Hamlet <git@ortham.net>"
criteria = "safe-to-deploy"
delta = "0.21.1 -> 0.21.3"
aggregated-from = "https://raw.githubusercontent.com/Ortham/libloadorder/refs/heads/master/supply-chain/audits.toml"
[[audits.ortham.audits.syn]]
who = "Oliver Hamlet <git@ortham.net>"
criteria = "safe-to-deploy"
delta = "2.0.106 -> 2.0.112"
aggregated-from = "https://raw.githubusercontent.com/Ortham/esplugin/refs/heads/master/supply-chain/audits.toml"
[[audits.ortham.audits.syn]]
who = "Oliver Hamlet <git@ortham.net>"
criteria = "safe-to-deploy"
delta = "2.0.112 -> 2.0.113"
aggregated-from = "https://raw.githubusercontent.com/Ortham/esplugin/refs/heads/master/supply-chain/audits.toml"
[[audits.ortham.audits.syn]]
who = "Oliver Hamlet <git@ortham.net>"
criteria = "safe-to-deploy"
delta = "2.0.113 -> 2.0.114"
aggregated-from = "https://raw.githubusercontent.com/Ortham/esplugin/refs/heads/master/supply-chain/audits.toml"
[[audits.ortham.audits.tempfile]]
who = "Oliver Hamlet <git@ortham.net>"
criteria = "safe-to-deploy"
delta = "3.21.0 -> 3.22.0"
notes = "The only significant change is updating its maximum accepted version of the windows-sys dependency to allow v0.61.x."
aggregated-from = "https://raw.githubusercontent.com/Ortham/esplugin/refs/heads/master/supply-chain/audits.toml"
[[audits.ortham.audits.unicase]]
who = "Oliver Hamlet <git@ortham.net>"
criteria = "safe-to-deploy"
delta = "2.8.1 -> 2.9.0"
aggregated-from = "https://raw.githubusercontent.com/Ortham/esplugin/refs/heads/master/supply-chain/audits.toml"
[[audits.ortham.audits.winapi-util]]
who = "Oliver Hamlet <git@ortham.net>"
criteria = "safe-to-deploy"
delta = "0.1.9 -> 0.1.11"
notes = "The only change is to the allowed range of windows-sys dependency versions."
aggregated-from = "https://raw.githubusercontent.com/Ortham/esplugin/refs/heads/master/supply-chain/audits.toml"