From a8d43af678acd3c6e574f920939b9fcded7070c5 Mon Sep 17 00:00:00 2001 From: Oliver Hamlet Date: Fri, 10 Oct 2025 19:25:47 +0100 Subject: [PATCH] Pull in new audits for log crate --- supply-chain/config.toml | 4 ---- supply-chain/imports.lock | 24 ++++++++++++++++++++++++ 2 files changed, 24 insertions(+), 4 deletions(-) diff --git a/supply-chain/config.toml b/supply-chain/config.toml index 528c463f..cf0e77d9 100644 --- a/supply-chain/config.toml +++ b/supply-chain/config.toml @@ -174,10 +174,6 @@ criteria = "safe-to-run" suggest = false notes = "At time of review this was only built if targeting WASI, which is not an intended target." -[[exemptions.log]] -version = "0.4.28" -criteria = "safe-to-deploy" - [[exemptions.memchr]] version = "2.7.4" criteria = "safe-to-deploy" diff --git a/supply-chain/imports.lock b/supply-chain/imports.lock index 59076791..32fa5631 100644 --- a/supply-chain/imports.lock +++ b/supply-chain/imports.lock @@ -171,6 +171,18 @@ criteria = "safe-to-deploy" delta = "0.4.1 -> 0.5.0" notes = "Minor changes for a `no_std` upgrade but otherwise everything looks as expected." +[[audits.bytecode-alliance.audits.log]] +who = "Alex Crichton " +criteria = "safe-to-deploy" +delta = "0.4.22 -> 0.4.27" +notes = "Lots of minor updates to macros and such, nothing touching `unsafe`" + +[[audits.bytecode-alliance.audits.log]] +who = "Alex Crichton " +criteria = "safe-to-deploy" +delta = "0.4.27 -> 0.4.28" +notes = "Minor doc updates and lots new tests, nothing out of the ordinary." + [[audits.bytecode-alliance.audits.shlex]] who = "Alex Crichton " criteria = "safe-to-deploy" @@ -407,6 +419,18 @@ No `unsafe` introduced or affected in: """ aggregated-from = "https://chromium.googlesource.com/chromium/src/+/main/third_party/rust/chromium_crates_io/supply-chain/audits.toml?format=TEXT" +[[audits.google.audits.log]] +who = "danakj " +criteria = "safe-to-deploy" +version = "0.4.22" +notes = """ +Unsafe review in https://docs.google.com/document/d/1IXQbD1GhTRqNHIGxq6yy7qHqxeO4CwN5noMFXnqyDIM/edit?usp=sharing + +Unsafety is generally very well-documented, with one exception, which we +describe in the review doc. +""" +aggregated-from = "https://chromium.googlesource.com/chromium/src/+/main/third_party/rust/chromium_crates_io/supply-chain/audits.toml?format=TEXT" + [[audits.google.audits.num-traits]] who = "Manish Goregaokar " criteria = "safe-to-deploy"