Downgrade syn to an audited version

The differences don't seem to be significant for LCI's usage.
This commit is contained in:
Oliver Hamlet
2025-09-28 16:26:13 +01:00
parent c9e9cef47f
commit 185dd20834
3 changed files with 38 additions and 6 deletions
Generated
+2 -2
View File
@@ -553,9 +553,9 @@ dependencies = [
[[package]] [[package]]
name = "syn" name = "syn"
version = "2.0.101" version = "2.0.100"
source = "registry+https://github.com/rust-lang/crates.io-index" source = "registry+https://github.com/rust-lang/crates.io-index"
checksum = "8ce2b7fc941b3a24138a0a7cf8e858bfc6a992e7978a068a5c760deb0ed43caf" checksum = "b09a44accad81e1ba1cd74a32461ba89dee89095ba17b32f5d03683b1b1fc2a0"
dependencies = [ dependencies = [
"proc-macro2", "proc-macro2",
"quote", "quote",
-4
View File
@@ -128,10 +128,6 @@ notes = "At time of review this was only built if targeting WASM, which is not a
version = "1.0.20" version = "1.0.20"
criteria = "safe-to-run" criteria = "safe-to-run"
[[exemptions.syn]]
version = "2.0.101"
criteria = "safe-to-run"
[[exemptions.walkdir]] [[exemptions.walkdir]]
version = "2.5.0" version = "2.5.0"
criteria = "safe-to-run" criteria = "safe-to-run"
+36
View File
@@ -241,6 +241,11 @@ criteria = "safe-to-deploy"
delta = "1.0.94 -> 1.0.95" delta = "1.0.94 -> 1.0.95"
notes = "The only changes were to reflect changes in semver-exempt APIs to support nightly Rust changes." notes = "The only changes were to reflect changes in semver-exempt APIs to support nightly Rust changes."
[[audits.esplugin.audits.syn]]
who = "Oliver Hamlet <git@ortham.net>"
criteria = "safe-to-deploy"
delta = "2.0.98 -> 2.0.100"
[[audits.esplugin.audits.tempfile]] [[audits.esplugin.audits.tempfile]]
who = "Oliver Hamlet <git@ortham.net>" who = "Oliver Hamlet <git@ortham.net>"
criteria = "safe-to-deploy" criteria = "safe-to-deploy"
@@ -1186,6 +1191,24 @@ delta = "1.0.138 -> 1.0.140"
notes = "Only minor fixes for clippy and documentation updates." notes = "Only minor fixes for clippy and documentation updates."
aggregated-from = "https://chromium.googlesource.com/chromium/src/+/main/third_party/rust/chromium_crates_io/supply-chain/audits.toml?format=TEXT" aggregated-from = "https://chromium.googlesource.com/chromium/src/+/main/third_party/rust/chromium_crates_io/supply-chain/audits.toml?format=TEXT"
[[audits.google.audits.syn]]
who = "ChromeOS"
criteria = "safe-to-run"
version = "1.0.107"
aggregated-from = "https://chromium.googlesource.com/chromiumos/third_party/rust_crates/+/refs/heads/main/cargo-vet/audits.toml?format=TEXT"
[[audits.google.audits.syn]]
who = "George Burgess IV <gbiv@google.com>"
criteria = "safe-to-run"
delta = "1.0.107 -> 2.0.14"
aggregated-from = "https://chromium.googlesource.com/chromiumos/third_party/rust_crates/+/refs/heads/main/cargo-vet/audits.toml?format=TEXT"
[[audits.google.audits.syn]]
who = "George Burgess IV <gbiv@google.com>"
criteria = "safe-to-run"
delta = "2.0.14 -> 2.0.18"
aggregated-from = "https://chromium.googlesource.com/chromiumos/third_party/rust_crates/+/refs/heads/main/cargo-vet/audits.toml?format=TEXT"
[[audits.google.audits.tempfile]] [[audits.google.audits.tempfile]]
who = "Ying Hsu <yinghsu@chromium.org>" who = "Ying Hsu <yinghsu@chromium.org>"
criteria = "safe-to-run" criteria = "safe-to-run"
@@ -1443,6 +1466,19 @@ criteria = "safe-to-deploy"
delta = "1.5.3 -> 1.6.1" delta = "1.5.3 -> 1.6.1"
aggregated-from = "https://hg.mozilla.org/mozilla-central/raw-file/tip/supply-chain/audits.toml" aggregated-from = "https://hg.mozilla.org/mozilla-central/raw-file/tip/supply-chain/audits.toml"
[[audits.mozilla.audits.syn]]
who = "Jan-Erik Rediger <jrediger@mozilla.com>"
criteria = "safe-to-deploy"
delta = "2.0.18 -> 2.0.26"
notes = "Dependency update & internal refactorings"
aggregated-from = "https://raw.githubusercontent.com/mozilla/glean/main/supply-chain/audits.toml"
[[audits.mozilla.audits.syn]]
who = "Jan-Erik Rediger <jrediger@mozilla.com>"
criteria = "safe-to-deploy"
delta = "2.0.26 -> 2.0.98"
aggregated-from = "https://raw.githubusercontent.com/mozilla/glean/main/supply-chain/audits.toml"
[[audits.mozilla.audits.tempfile]] [[audits.mozilla.audits.tempfile]]
who = "Chris Martin <cmartin@mozilla.com>" who = "Chris Martin <cmartin@mozilla.com>"
criteria = "safe-to-deploy" criteria = "safe-to-deploy"