loot/loot-condition-interpreter
0
0
Fork 0
mirror of https://github.com/loot/loot-condition-interpreter.git synced 2026-07-27 14:16:09 -07:00
Code Issues Packages Projects Releases Wiki Activity

Update criterion to v0.8.1

Browse Source 
The new transitive dependency on cc is intentionally set to v1.2.5 in the lockfile because that's the newest version that already has an audit.
This commit is contained in:
Oliver Hamlet
2026-01-01 02:26:02 +00:00
parent dcbee2ed9b
commit 176c4184ba
4 changed files with 152 additions and 9 deletions
Download Patch File Download Diff File Expand all files Collapse all files
supply-chain/config.toml
+12 -4
View File
@@ -34,10 +34,6 @@ criteria = "safe-to-deploy"
version = "0.7.0"
criteria = "safe-to-run"
[[exemptions.criterion-plot]]
version = "0.6.0"
criteria = "safe-to-run"
[[exemptions.errno]]
version = "0.3.14"
criteria = "safe-to-run"
@@ -137,3 +133,15 @@ version = "0.3.77"
criteria = "safe-to-run"
suggest = false
notes = "At time of review this was only built if targeting WASM, which is not an intended target."
[[exemptions.winapi-i686-pc-windows-gnu]]
version = "0.4.0"
criteria = "safe-to-run"
suggest = false
notes = "It's a collection of static library binaries and a build script that configures Cargo to use them, so it's not really reviewable."
[[exemptions.winapi-x86_64-pc-windows-gnu]]
version = "0.4.0"
criteria = "safe-to-run"
suggest = false
notes = "It's a collection of static library binaries and a build script that configures Cargo to use them, so it's not really reviewable."
supply-chain/imports.lock
+77
View File
@@ -66,6 +66,23 @@ criteria = "safe-to-deploy"
version = "0.1.6"
notes = "Contains no unsafe code, no IO, no build.rs."
[[audits.bytecode-alliance.audits.cc]]
who = "Alex Crichton <alex@alexcrichton.com>"
criteria = "safe-to-deploy"
version = "1.0.73"
notes = "I am the author of this crate."
[[audits.bytecode-alliance.audits.cc]]
who = "Alex Crichton <alex@alexcrichton.com>"
criteria = "safe-to-deploy"
delta = "1.0.83 -> 1.1.6"
[[audits.bytecode-alliance.audits.cc]]
who = "Alex Crichton <alex@alexcrichton.com>"
criteria = "safe-to-deploy"
delta = "1.1.6 -> 1.2.5"
notes = "Lots of minor updates here and there along with refactorings and such. Everything in line with what `cc` is expected to do."
[[audits.bytecode-alliance.audits.cfg-if]]
who = "Alex Crichton <alex@alexcrichton.com>"
criteria = "safe-to-deploy"
@@ -128,6 +145,12 @@ criteria = "safe-to-deploy"
version = "0.2.19"
notes = "As advertised: a numeric library. The only `unsafe` is from some float-to-int conversions, which seems expected."
[[audits.bytecode-alliance.audits.shlex]]
who = "Alex Crichton <alex@alexcrichton.com>"
criteria = "safe-to-deploy"
version = "1.1.0"
notes = "Only minor `unsafe` code blocks which look valid and otherwise does what it says on the tin."
[[audits.bytecode-alliance.audits.tempfile]]
who = "Alex Crichton <alex@alexcrichton.com>"
criteria = "safe-to-deploy"
@@ -1152,6 +1175,12 @@ delta = "1.0.138 -> 1.0.140"
notes = "Only minor fixes for clippy and documentation updates."
aggregated-from = "https://chromium.googlesource.com/chromium/src/+/main/third_party/rust/chromium_crates_io/supply-chain/audits.toml?format=TEXT"
[[audits.google.audits.shlex]]
who = "Daniel Verkamp <dverkamp@chromium.org>"
criteria = "safe-to-run"
delta = "1.1.0 -> 1.3.0"
aggregated-from = "https://chromium.googlesource.com/chromiumos/third_party/rust_crates/+/refs/heads/main/cargo-vet/audits.toml?format=TEXT"
[[audits.google.audits.syn]]
who = "ChromeOS"
criteria = "safe-to-run"
@@ -1238,6 +1267,17 @@ criteria = "safe-to-run"
version = "2.3.2"
aggregated-from = "https://chromium.googlesource.com/chromiumos/third_party/rust_crates/+/refs/heads/main/cargo-vet/audits.toml?format=TEXT"
[[audits.google.audits.winapi]]
who = "danakj@chromium.org"
criteria = "safe-to-run"
version = "0.3.9"
notes = """
Reviewed in https://crrev.com/c/5171063
Previously reviewed during security review and the audit is grandparented in.
"""
aggregated-from = "https://chromium.googlesource.com/chromium/src/+/main/third_party/rust/chromium_crates_io/supply-chain/audits.toml?format=TEXT"
[[audits.google.audits.winapi-util]]
who = "danakj@chromium.org"
criteria = "safe-to-run"
@@ -1262,6 +1302,26 @@ delta = "0.1.8 -> 0.1.9"
notes = "The delta only changes Cargo.toml."
aggregated-from = "https://chromium.googlesource.com/chromium/src/+/main/third_party/rust/chromium_crates_io/supply-chain/audits.toml?format=TEXT"
[[audits.isrg.audits.alloca]]
who = "David Cook <dcook@divviup.org>"
criteria = "safe-to-run"
version = "0.4.0"
[[audits.isrg.audits.criterion]]
who = "David Cook <dcook@divviup.org>"
criteria = "safe-to-run"
delta = "0.7.0 -> 0.8.0"
[[audits.isrg.audits.criterion]]
who = "J.C. Jones <jc@divviup.org>"
criteria = "safe-to-run"
delta = "0.8.0 -> 0.8.1"
[[audits.isrg.audits.criterion-plot]]
who = "J.C. Jones <jc@divviup.org>"
criteria = "safe-to-run"
version = "0.8.1"
[[audits.isrg.audits.getrandom]]
who = "David Cook <dcook@divviup.org>"
criteria = "safe-to-deploy"
@@ -1284,6 +1344,11 @@ criteria = "safe-to-deploy"
delta = "1.21.1 -> 1.21.3"
notes = "The unsafe code has moved from `compare_exchange` to a new `init` function, which makes it easier to reason about."
[[audits.isrg.audits.page_size]]
who = "David Cook <dcook@divviup.org>"
criteria = "safe-to-run"
version = "0.6.0"
[[audits.isrg.audits.rayon]]
who = "Brandon Pitman <bran@bran.land>"
criteria = "safe-to-deploy"
@@ -1323,6 +1388,18 @@ end = "2025-10-23"
notes = "I, Henri Sivonen, wrote encoding_rs for Gecko and have reviewed contributions by others. There are two caveats to the certification: 1) The crate does things that are documented to be UB but that do not appear to actually be UB due to integer types differing from the general rule; https://github.com/hsivonen/encoding_rs/issues/79 . 2) It would be prudent to re-review the code that reinterprets buffers of integers as SIMD vectors; see https://github.com/hsivonen/encoding_rs/issues/87 ."
aggregated-from = "https://hg.mozilla.org/mozilla-central/raw-file/tip/supply-chain/audits.toml"
[[audits.mozilla.audits.cc]]
who = "Mike Hommey <mh+mozilla@glandium.org>"
criteria = "safe-to-deploy"
delta = "1.0.73 -> 1.0.78"
aggregated-from = "https://hg.mozilla.org/mozilla-central/raw-file/tip/supply-chain/audits.toml"
[[audits.mozilla.audits.cc]]
who = "Jan-Erik Rediger <jrediger@mozilla.com>"
criteria = "safe-to-deploy"
delta = "1.0.78 -> 1.0.83"
aggregated-from = "https://raw.githubusercontent.com/mozilla/glean/main/supply-chain/audits.toml"
[[audits.mozilla.audits.crossbeam-utils]]
who = "Jan-Erik Rediger <jrediger@mozilla.com>"
criteria = "safe-to-deploy"