From 36fc177e764a5f86600228afedf4d2d5d29aedf9 Mon Sep 17 00:00:00 2001 From: Oliver Hamlet Date: Mon, 29 Sep 2025 20:42:21 +0100 Subject: [PATCH] Update errno, rustix, tempfile, winapi-util To remove second version of windows-sys from dependency tree. --- Cargo.lock | 43 ++++++++++++++++----------------------- supply-chain/config.toml | 6 +++--- supply-chain/imports.lock | 19 +++++++++-------- 3 files changed, 31 insertions(+), 37 deletions(-) diff --git a/Cargo.lock b/Cargo.lock index b12ce03a..54f98c2c 100644 --- a/Cargo.lock +++ b/Cargo.lock @@ -299,7 +299,7 @@ dependencies = [ "libc", "option-ext", "redox_users", - "windows-sys 0.61.1", + "windows-sys", ] [[package]] @@ -349,12 +349,12 @@ checksum = "877a4ace8713b0bcf2a4e7eec82529c029f1d0619886d18145fea96c3ffe5c0f" [[package]] name = "errno" -version = "0.3.11" +version = "0.3.14" source = "registry+https://github.com/rust-lang/crates.io-index" -checksum = "976dd42dc7e85965fe702eb8164f21f450704bdde31faefd6471dba214cb594e" +checksum = "39cab71617ae0d63f51a36d69f866391735b51691dbda63cf6f96d042b63efeb" dependencies = [ "libc", - "windows-sys 0.59.0", + "windows-sys", ] [[package]] @@ -497,7 +497,7 @@ dependencies = [ "rust-ini", "unicase", "windows-result", - "windows-sys 0.61.1", + "windows-sys", ] [[package]] @@ -517,7 +517,7 @@ dependencies = [ "saphyr", "tempfile", "unicase", - "windows-sys 0.61.1", + "windows-sys", ] [[package]] @@ -577,9 +577,9 @@ dependencies = [ [[package]] name = "linux-raw-sys" -version = "0.9.3" +version = "0.11.0" source = "registry+https://github.com/rust-lang/crates.io-index" -checksum = "fe7db12097d22ec582439daf8618b8fdd1a7bef6270e9af3b1ebcd30893cf413" +checksum = "df1d3c3b53da64cf5760482273a98e575c651a67eec7f77df96b5b642de8f039" [[package]] name = "log" @@ -968,15 +968,15 @@ checksum = "357703d41365b4b27c590e3ed91eabb1b663f07c4c084095e60cbed4362dff0d" [[package]] name = "rustix" -version = "1.0.5" +version = "1.1.2" source = "registry+https://github.com/rust-lang/crates.io-index" -checksum = "d97817398dd4bb2e6da002002db259209759911da105da92bec29ccb12cf58bf" +checksum = "cd15f8a2c5551a84d56efdc1cd049089e409ac19a3072d5037a17fd70719ff3e" dependencies = [ "bitflags", "errno", "libc", "linux-raw-sys", - "windows-sys 0.59.0", + "windows-sys", ] [[package]] @@ -1071,15 +1071,15 @@ checksum = "e502f78cdbb8ba4718f566c418c52bc729126ffd16baee5baa718cf25dd5a69a" [[package]] name = "tempfile" -version = "3.21.0" +version = "3.22.0" source = "registry+https://github.com/rust-lang/crates.io-index" -checksum = "15b61f8f20e3a6f7e0649d825294eaf317edce30f82cf6026e7e4cb9222a7d1e" +checksum = "84fa4d11fadde498443cca10fd3ac23c951f0dc59e080e9f4b93d4df4e4eea53" dependencies = [ "fastrand", "getrandom 0.3.2", "once_cell", "rustix", - "windows-sys 0.59.0", + "windows-sys", ] [[package]] @@ -1195,11 +1195,11 @@ checksum = "ac3b87c63620426dd9b991e5ce0329eff545bccbbb34f3be09ff6fb6ab51b7b6" [[package]] name = "winapi-util" -version = "0.1.9" +version = "0.1.11" source = "registry+https://github.com/rust-lang/crates.io-index" -checksum = "cf221c93e13a30d793f7645a0e7762c55d169dbb0a49671918a2319d289b10bb" +checksum = "c2a7b1c03c876122aa43f3020e6c3c3ee5c05081c9a00739faf7503aeba10d22" dependencies = [ - "windows-sys 0.59.0", + "windows-sys", ] [[package]] @@ -1223,15 +1223,6 @@ dependencies = [ "windows-link", ] -[[package]] -name = "windows-sys" -version = "0.59.0" -source = "registry+https://github.com/rust-lang/crates.io-index" -checksum = "1e38bc4d79ed67fd075bcc251a1c39b32a1776bbe92e5bef1f0bf1f8c531853b" -dependencies = [ - "windows-targets", -] - [[package]] name = "windows-sys" version = "0.61.1" diff --git a/supply-chain/config.toml b/supply-chain/config.toml index fde2a665..528c463f 100644 --- a/supply-chain/config.toml +++ b/supply-chain/config.toml @@ -125,7 +125,7 @@ version = "0.0.5" criteria = "safe-to-deploy" [[exemptions.errno]] -version = "0.3.11" +version = "0.3.14" criteria = "safe-to-run" suggest = false notes = "At time of review this was only built if targeting WASI, which is not an intended target." @@ -169,7 +169,7 @@ version = "1.0.10" criteria = "safe-to-deploy" [[exemptions.linux-raw-sys]] -version = "0.9.3" +version = "0.11.0" criteria = "safe-to-run" suggest = false notes = "At time of review this was only built if targeting WASI, which is not an intended target." @@ -307,7 +307,7 @@ version = "0.21.1" criteria = "safe-to-deploy" [[exemptions.rustix]] -version = "1.0.5" +version = "1.1.2" criteria = "safe-to-run" suggest = false notes = "At time of review this was only built if targeting WASI, which is not an intended target." diff --git a/supply-chain/imports.lock b/supply-chain/imports.lock index d285fa1e..59076791 100644 --- a/supply-chain/imports.lock +++ b/supply-chain/imports.lock @@ -42,13 +42,6 @@ user-id = 64539 user-login = "kennykerr" user-name = "Kenny Kerr" -[[publisher.windows-sys]] -version = "0.59.0" -when = "2024-07-30" -user-id = 64539 -user-login = "kennykerr" -user-name = "Kenny Kerr" - [[publisher.windows-sys]] version = "0.61.1" when = "2025-09-25" @@ -205,7 +198,17 @@ This crate contains no `unsafe` code and no unnecessary use of the standard library. """ -[audits.esplugin.audits] +[[audits.esplugin.audits.tempfile]] +who = "Oliver Hamlet " +criteria = "safe-to-deploy" +delta = "3.21.0 -> 3.22.0" +notes = "The only significant change is updating its maximum accepted version of the windows-sys dependency to allow v0.61.x." + +[[audits.esplugin.audits.winapi-util]] +who = "Oliver Hamlet " +criteria = "safe-to-deploy" +delta = "0.1.9 -> 0.1.11" +notes = "The only change is to the allowed range of windows-sys dependency versions." [[audits.google.audits.autocfg]] who = "Manish Goregaokar "