17 Commits
Author SHA1 Message Date
Oliver Hamlet 36fc177e76 Update errno, rustix, tempfile, winapi-util
To remove second version of windows-sys from dependency tree.
2025-09-29 21:25:11 +01:00
Oliver Hamlet 04ee0a431c Import audits from esplugin 2025-09-29 21:25:11 +01:00
Oliver Hamlet ebd04a39ff Update windows-result to remove duplicate windows-link dependency 2025-09-29 21:25:11 +01:00
Oliver Hamlet face608fae Update libloadorder to v18.5.1 2025-09-29 21:25:11 +01:00
Oliver Hamlet e502a37aa9 Update loot-condition-interpreter to v5.3.3 2025-09-29 21:25:11 +01:00
Oliver Hamlet 3724cc8d1f Update esplugin to v6.1.4 2025-09-29 21:25:10 +01:00
Oliver Hamlet 1519a49ce9 Suppress audit suggestions for crates not used on target platforms
I only test libloot for x86 Windows, x86-64 Windows and x86-64 Linux in CI.

Ideally there would be a way to tell cargo-vet to ignore dependencies
that aren't relevant to a given set of targets, as having them exempt
like this could hide the need to audit them if they do become relevant
to those targets in the future, but without the supression `cargo vet
suggest`'s output is just too noisy.
2025-09-29 21:25:10 +01:00
Oliver Hamlet 4312fe166d Don't audit libloot or array-parameterized-test 2025-09-29 21:25:10 +01:00
Oliver Hamlet d872f32514 Trust libc dependency
It lives under the rust-lang organisation on GitHub, so is hopefully as trustworthy as the Rust toolchain itself.
2025-09-29 21:25:10 +01:00
Oliver Hamlet 3aa18c49f4 Depend on windows-sys instead of windows
Using the latter doesn't really add any value, and while libloadorder still pulls in windows, it means less duplication due to version mismatches in the dependency tree.
2025-09-29 21:25:10 +01:00
Oliver Hamlet b5fe17e0f3 Update keyvalues-parser to v0.2.1
It removes several dependencies.
2025-09-29 21:25:10 +01:00
Oliver Hamlet 12c92ee0e6 Trust kennykerr's windows* crates
They're largely impractical to audit, being a huge number of generated API bindings, plus some prebuilt binaries, and they're the official Windows API bindings from Microsoft, so are hopefully trustworthy.
2025-09-29 21:25:10 +01:00
Oliver Hamlet f79f68e03c Import Bytecode Alliance cargo-vet audits 2025-09-28 19:07:03 +01:00
Oliver Hamlet c19b0f4b13 Import ISRG cargo-vet audits 2025-09-28 19:06:45 +01:00
Oliver Hamlet 26d03282a6 Import Mozilla cargo-vet audits 2025-09-28 19:06:30 +01:00
Oliver Hamlet 5877527fda Import Google cargo-vet audits 2025-09-28 19:06:17 +01:00
Oliver Hamlet 295ff065fd Add initial cargo-vet files 2025-09-28 19:05:57 +01:00