From 2a32eace557136096f1a68be85af654102bcb008 Mon Sep 17 00:00:00 2001 From: Oliver Hamlet Date: Mon, 23 Feb 2026 18:05:30 +0000 Subject: [PATCH] Use my aggregated audits --- supply-chain/config.toml | 10 ++-- supply-chain/imports.lock | 114 +++++++++++++++++++++----------------- 2 files changed, 68 insertions(+), 56 deletions(-) diff --git a/supply-chain/config.toml b/supply-chain/config.toml index 2b1d76b8..25253238 100644 --- a/supply-chain/config.toml +++ b/supply-chain/config.toml @@ -7,21 +7,21 @@ version = "0.10" [imports.bytecode-alliance] url = "https://raw.githubusercontent.com/bytecodealliance/wasmtime/main/supply-chain/audits.toml" -[imports.esplugin] -url = "https://raw.githubusercontent.com/Ortham/esplugin/refs/heads/master/supply-chain/audits.toml" - [imports.google] url = "https://raw.githubusercontent.com/google/supply-chain/main/audits.toml" [imports.isrg] url = "https://raw.githubusercontent.com/divviup/libprio-rs/main/supply-chain/audits.toml" -[imports.libloadorder] -url = "https://raw.githubusercontent.com/Ortham/libloadorder/refs/heads/master/supply-chain/audits.toml" +[imports.loot] +url = "https://raw.githubusercontent.com/loot/supply-chain/refs/heads/main/audits.toml" [imports.mozilla] url = "https://raw.githubusercontent.com/mozilla/supply-chain/main/audits.toml" +[imports.ortham] +url = "https://raw.githubusercontent.com/Ortham/supply-chain/refs/heads/main/audits.toml" + [policy.array-parameterized-test] audit-as-crates-io = false diff --git a/supply-chain/imports.lock b/supply-chain/imports.lock index 294a7421..7ea481fb 100644 --- a/supply-chain/imports.lock +++ b/supply-chain/imports.lock @@ -248,48 +248,6 @@ This crate contains no `unsafe` code and no unnecessary use of the standard library. """ -[[audits.esplugin.audits.proc-macro2]] -who = "Oliver Hamlet " -criteria = "safe-to-deploy" -delta = "1.0.101 -> 1.0.105" - -[[audits.esplugin.audits.quote]] -who = "Oliver Hamlet " -criteria = "safe-to-deploy" -delta = "1.0.40 -> 1.0.43" - -[[audits.esplugin.audits.syn]] -who = "Oliver Hamlet " -criteria = "safe-to-deploy" -delta = "2.0.106 -> 2.0.112" - -[[audits.esplugin.audits.syn]] -who = "Oliver Hamlet " -criteria = "safe-to-deploy" -delta = "2.0.112 -> 2.0.113" - -[[audits.esplugin.audits.syn]] -who = "Oliver Hamlet " -criteria = "safe-to-deploy" -delta = "2.0.113 -> 2.0.114" - -[[audits.esplugin.audits.tempfile]] -who = "Oliver Hamlet " -criteria = "safe-to-deploy" -delta = "3.21.0 -> 3.22.0" -notes = "The only significant change is updating its maximum accepted version of the windows-sys dependency to allow v0.61.x." - -[[audits.esplugin.audits.unicase]] -who = "Oliver Hamlet " -criteria = "safe-to-deploy" -delta = "2.8.1 -> 2.9.0" - -[[audits.esplugin.audits.winapi-util]] -who = "Oliver Hamlet " -criteria = "safe-to-deploy" -delta = "0.1.9 -> 0.1.11" -notes = "The only change is to the allowed range of windows-sys dependency versions." - [[audits.google.audits.autocfg]] who = "Manish Goregaokar " criteria = "safe-to-deploy" @@ -905,15 +863,7 @@ who = "David Cook " criteria = "safe-to-deploy" delta = "1.12.1 -> 1.13.0" -[[audits.libloadorder.audits.keyvalues-parser]] -who = "Oliver Hamlet " -criteria = "safe-to-deploy" -delta = "0.2.0 -> 0.2.1" - -[[audits.libloadorder.audits.rust-ini]] -who = "Oliver Hamlet " -criteria = "safe-to-deploy" -delta = "0.21.1 -> 0.21.3" +[audits.loot.audits] [[audits.mozilla.wildcard-audits.encoding_rs]] who = "Henri Sivonen " @@ -1119,3 +1069,65 @@ criteria = "safe-to-deploy" delta = "2.6.0 -> 2.8.1" notes = "Update to Unicode 15.0.0" aggregated-from = "https://raw.githubusercontent.com/mozilla/glean/main/supply-chain/audits.toml" + +[[audits.ortham.audits.keyvalues-parser]] +who = "Oliver Hamlet " +criteria = "safe-to-deploy" +delta = "0.2.0 -> 0.2.1" +aggregated-from = "https://raw.githubusercontent.com/Ortham/libloadorder/refs/heads/master/supply-chain/audits.toml" + +[[audits.ortham.audits.proc-macro2]] +who = "Oliver Hamlet " +criteria = "safe-to-deploy" +delta = "1.0.101 -> 1.0.105" +aggregated-from = "https://raw.githubusercontent.com/Ortham/esplugin/refs/heads/master/supply-chain/audits.toml" + +[[audits.ortham.audits.quote]] +who = "Oliver Hamlet " +criteria = "safe-to-deploy" +delta = "1.0.40 -> 1.0.43" +aggregated-from = "https://raw.githubusercontent.com/Ortham/esplugin/refs/heads/master/supply-chain/audits.toml" + +[[audits.ortham.audits.rust-ini]] +who = "Oliver Hamlet " +criteria = "safe-to-deploy" +delta = "0.21.1 -> 0.21.3" +aggregated-from = "https://raw.githubusercontent.com/Ortham/libloadorder/refs/heads/master/supply-chain/audits.toml" + +[[audits.ortham.audits.syn]] +who = "Oliver Hamlet " +criteria = "safe-to-deploy" +delta = "2.0.106 -> 2.0.112" +aggregated-from = "https://raw.githubusercontent.com/Ortham/esplugin/refs/heads/master/supply-chain/audits.toml" + +[[audits.ortham.audits.syn]] +who = "Oliver Hamlet " +criteria = "safe-to-deploy" +delta = "2.0.112 -> 2.0.113" +aggregated-from = "https://raw.githubusercontent.com/Ortham/esplugin/refs/heads/master/supply-chain/audits.toml" + +[[audits.ortham.audits.syn]] +who = "Oliver Hamlet " +criteria = "safe-to-deploy" +delta = "2.0.113 -> 2.0.114" +aggregated-from = "https://raw.githubusercontent.com/Ortham/esplugin/refs/heads/master/supply-chain/audits.toml" + +[[audits.ortham.audits.tempfile]] +who = "Oliver Hamlet " +criteria = "safe-to-deploy" +delta = "3.21.0 -> 3.22.0" +notes = "The only significant change is updating its maximum accepted version of the windows-sys dependency to allow v0.61.x." +aggregated-from = "https://raw.githubusercontent.com/Ortham/esplugin/refs/heads/master/supply-chain/audits.toml" + +[[audits.ortham.audits.unicase]] +who = "Oliver Hamlet " +criteria = "safe-to-deploy" +delta = "2.8.1 -> 2.9.0" +aggregated-from = "https://raw.githubusercontent.com/Ortham/esplugin/refs/heads/master/supply-chain/audits.toml" + +[[audits.ortham.audits.winapi-util]] +who = "Oliver Hamlet " +criteria = "safe-to-deploy" +delta = "0.1.9 -> 0.1.11" +notes = "The only change is to the allowed range of windows-sys dependency versions." +aggregated-from = "https://raw.githubusercontent.com/Ortham/esplugin/refs/heads/master/supply-chain/audits.toml"