From 33efacb6d8f17be76107a8ca5ce03e89b75bc59a Mon Sep 17 00:00:00 2001 From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com> Date: Sun, 28 Sep 2025 15:55:08 +0000 Subject: [PATCH 1/2] Bump regex from 1.11.2 to 1.11.3 Bumps [regex](https://github.com/rust-lang/regex) from 1.11.2 to 1.11.3. - [Release notes](https://github.com/rust-lang/regex/releases) - [Changelog](https://github.com/rust-lang/regex/blob/master/CHANGELOG.md) - [Commits](https://github.com/rust-lang/regex/compare/1.11.2...1.11.3) --- updated-dependencies: - dependency-name: regex dependency-version: 1.11.3 dependency-type: direct:production update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] --- Cargo.lock | 8 ++++---- 1 file changed, 4 insertions(+), 4 deletions(-) diff --git a/Cargo.lock b/Cargo.lock index bbf4a19..c14b6ae 100644 --- a/Cargo.lock +++ b/Cargo.lock @@ -459,9 +459,9 @@ dependencies = [ [[package]] name = "regex" -version = "1.11.2" +version = "1.11.3" source = "registry+https://github.com/rust-lang/crates.io-index" -checksum = "23d7fd106d8c02486a8d64e778353d1cffe08ce79ac2e82f540c86d0facf6912" +checksum = "8b5288124840bee7b386bc413c487869b360b2b4ec421ea56425128692f2a82c" dependencies = [ "aho-corasick", "memchr", @@ -471,9 +471,9 @@ dependencies = [ [[package]] name = "regex-automata" -version = "0.4.9" +version = "0.4.11" source = "registry+https://github.com/rust-lang/crates.io-index" -checksum = "809e8dc61f6de73b46c85f4c96486310fe304c434cfa43669d7b40f711150908" +checksum = "833eb9ce86d40ef33cb1306d8accf7bc8ec2bfea4355cbdebb3df68b40925cad" dependencies = [ "aho-corasick", "memchr", From 966bf75a299230e2207599afb6d25d3661dc1d46 Mon Sep 17 00:00:00 2001 From: Oliver Hamlet Date: Fri, 3 Oct 2025 18:33:58 +0100 Subject: [PATCH 2/2] Add audits for regex v1.11.2 to v1.11.3 update --- supply-chain/audits.toml | 12 ++++++++++++ 1 file changed, 12 insertions(+) diff --git a/supply-chain/audits.toml b/supply-chain/audits.toml index f342fe4..d269cf2 100644 --- a/supply-chain/audits.toml +++ b/supply-chain/audits.toml @@ -7,6 +7,18 @@ criteria = "safe-to-deploy" version = "6.1.4" notes = "This is my own crate published using Trusted Publishing, but I can't mark it as trusted by cargo-vet because it doesn't support Trusted Publishing and just sees that the publisher is unknown." +[[audits.regex]] +who = "Oliver Hamlet " +criteria = "safe-to-deploy" +delta = "1.11.2 -> 1.11.3" +notes = "It just increments the minimum version of regex-automata." + +[[audits.regex-automata]] +who = "Oliver Hamlet " +criteria = "safe-to-deploy" +delta = "0.4.9 -> 0.4.11" +notes = "It's a combination of format!() syntax tweaks and added calls to .shrink_to_fit()." + [[trusted.esplugin]] criteria = "safe-to-deploy" user-id = 9999 # Oliver Hamlet (Ortham)