loot/loot-condition-interpreter
0
0
Fork 0
mirror of https://github.com/loot/loot-condition-interpreter.git synced 2026-07-27 14:16:09 -07:00
Code Issues Packages Projects Releases Wiki Activity

Use my aggregated audits

Browse Source
This commit is contained in:
Oliver Hamlet
2026-02-23 17:55:02 +00:00
parent 41a4b44e3b
commit 454f395ae4
2 changed files with 68 additions and 54 deletions
Download Patch File Download Diff File Expand all files Collapse all files
supply-chain/config.toml
+6 -3
View File
@@ -7,18 +7,21 @@ version = "0.10"
[imports.bytecode-alliance]
url = "https://raw.githubusercontent.com/bytecodealliance/wasmtime/main/supply-chain/audits.toml"
[imports.esplugin]
url = "https://raw.githubusercontent.com/Ortham/esplugin/refs/heads/master/supply-chain/audits.toml"
[imports.google]
url = "https://raw.githubusercontent.com/google/supply-chain/main/audits.toml"
[imports.isrg]
url = "https://raw.githubusercontent.com/divviup/libprio-rs/main/supply-chain/audits.toml"
[imports.loot]
url = "https://raw.githubusercontent.com/loot/supply-chain/refs/heads/main/audits.toml"
[imports.mozilla]
url = "https://raw.githubusercontent.com/mozilla/supply-chain/main/audits.toml"
[imports.ortham]
url = "https://raw.githubusercontent.com/Ortham/supply-chain/refs/heads/main/audits.toml"
[policy.loot-condition-interpreter]
audit-as-crates-io = false
supply-chain/imports.lock
+62 -51
View File
@@ -183,57 +183,6 @@ criteria = "safe-to-deploy"
delta = "2.3.2 -> 2.3.3"
notes = "No significant changes: minor refactoring and removes the need to use `winapi`."
[[audits.esplugin.audits.clap]]
who = "Oliver Hamlet <git@ortham.net>"
criteria = "safe-to-deploy"
delta = "4.5.32 -> 4.5.37"
notes = "This just incremented the version of the clap_builder dependency."
[[audits.esplugin.audits.clap_builder]]
who = "Oliver Hamlet <git@ortham.net>"
criteria = "safe-to-deploy"
delta = "4.5.32 -> 4.5.37"
[[audits.esplugin.audits.crossbeam-utils]]
who = "Oliver Hamlet <git@ortham.net>"
criteria = "safe-to-deploy"
delta = "0.8.15 -> 0.8.14"
notes = "This is an audit of a downgrade to fill a gap between third-party audits. The only behavioural difference in the newer version is better handling of integer overflow when providing a timeout for parking a thread."
[[audits.esplugin.audits.half]]
who = "Oliver Hamlet <git@ortham.net>"
criteria = "safe-to-deploy"
delta = "2.5.0 -> 2.6.0"
notes = "The only changes are to derive additional zerocopy traits and to fix some dependency minimum versions."
[[audits.esplugin.audits.proc-macro2]]
who = "Oliver Hamlet <git@ortham.net>"
criteria = "safe-to-deploy"
delta = "1.0.94 -> 1.0.95"
notes = "The only changes were to reflect changes in semver-exempt APIs to support nightly Rust changes."
[[audits.esplugin.audits.syn]]
who = "Oliver Hamlet <git@ortham.net>"
criteria = "safe-to-deploy"
delta = "2.0.98 -> 2.0.100"
[[audits.esplugin.audits.tempfile]]
who = "Oliver Hamlet <git@ortham.net>"
criteria = "safe-to-deploy"
delta = "3.21.0 -> 3.22.0"
notes = "The only significant change is updating its maximum accepted version of the windows-sys dependency to allow v0.61.x."
[[audits.esplugin.audits.unicase]]
who = "Oliver Hamlet <git@ortham.net>"
criteria = "safe-to-deploy"
delta = "2.8.1 -> 2.9.0"
[[audits.esplugin.audits.winapi-util]]
who = "Oliver Hamlet <git@ortham.net>"
criteria = "safe-to-deploy"
delta = "0.1.9 -> 0.1.11"
notes = "The only change is to the allowed range of windows-sys dependency versions."
[[audits.google.audits.anstyle]]
who = "Yu-An Wang <wyuang@google.com>"
criteria = "safe-to-run"
@@ -1389,6 +1338,8 @@ who = "Ameer Ghani <inahga@divviup.org>"
criteria = "safe-to-deploy"
version = "1.12.1"
[audits.loot.audits]
[[audits.mozilla.wildcard-audits.encoding_rs]]
who = "Henri Sivonen <hsivonen@hsivonen.fi>"
criteria = "safe-to-deploy"
@@ -1559,3 +1510,63 @@ criteria = "safe-to-deploy"
delta = "2.6.0 -> 2.8.1"
notes = "Update to Unicode 15.0.0"
aggregated-from = "https://raw.githubusercontent.com/mozilla/glean/main/supply-chain/audits.toml"
[[audits.ortham.audits.clap]]
who = "Oliver Hamlet <git@ortham.net>"
criteria = "safe-to-deploy"
delta = "4.5.32 -> 4.5.37"
notes = "This just incremented the version of the clap_builder dependency."
aggregated-from = "https://raw.githubusercontent.com/Ortham/esplugin/refs/heads/master/supply-chain/audits.toml"
[[audits.ortham.audits.clap_builder]]
who = "Oliver Hamlet <git@ortham.net>"
criteria = "safe-to-deploy"
delta = "4.5.32 -> 4.5.37"
aggregated-from = "https://raw.githubusercontent.com/Ortham/esplugin/refs/heads/master/supply-chain/audits.toml"
[[audits.ortham.audits.crossbeam-utils]]
who = "Oliver Hamlet <git@ortham.net>"
criteria = "safe-to-deploy"
delta = "0.8.15 -> 0.8.14"
notes = "This is an audit of a downgrade to fill a gap between third-party audits. The only behavioural difference in the newer version is better handling of integer overflow when providing a timeout for parking a thread."
aggregated-from = "https://raw.githubusercontent.com/Ortham/esplugin/refs/heads/master/supply-chain/audits.toml"
[[audits.ortham.audits.half]]
who = "Oliver Hamlet <git@ortham.net>"
criteria = "safe-to-deploy"
delta = "2.5.0 -> 2.6.0"
notes = "The only changes are to derive additional zerocopy traits and to fix some dependency minimum versions."
aggregated-from = "https://raw.githubusercontent.com/Ortham/esplugin/refs/heads/master/supply-chain/audits.toml"
[[audits.ortham.audits.proc-macro2]]
who = "Oliver Hamlet <git@ortham.net>"
criteria = "safe-to-deploy"
delta = "1.0.94 -> 1.0.95"
notes = "The only changes were to reflect changes in semver-exempt APIs to support nightly Rust changes."
aggregated-from = "https://raw.githubusercontent.com/Ortham/esplugin/refs/heads/master/supply-chain/audits.toml"
[[audits.ortham.audits.syn]]
who = "Oliver Hamlet <git@ortham.net>"
criteria = "safe-to-deploy"
delta = "2.0.98 -> 2.0.100"
aggregated-from = "https://raw.githubusercontent.com/Ortham/esplugin/refs/heads/master/supply-chain/audits.toml"
[[audits.ortham.audits.tempfile]]
who = "Oliver Hamlet <git@ortham.net>"
criteria = "safe-to-deploy"
delta = "3.21.0 -> 3.22.0"
notes = "The only significant change is updating its maximum accepted version of the windows-sys dependency to allow v0.61.x."
aggregated-from = "https://raw.githubusercontent.com/Ortham/esplugin/refs/heads/master/supply-chain/audits.toml"
[[audits.ortham.audits.unicase]]
who = "Oliver Hamlet <git@ortham.net>"
criteria = "safe-to-deploy"
delta = "2.8.1 -> 2.9.0"
aggregated-from = "https://raw.githubusercontent.com/Ortham/esplugin/refs/heads/master/supply-chain/audits.toml"
[[audits.ortham.audits.winapi-util]]
who = "Oliver Hamlet <git@ortham.net>"
criteria = "safe-to-deploy"
delta = "0.1.9 -> 0.1.11"
notes = "The only change is to the allowed range of windows-sys dependency versions."
aggregated-from = "https://raw.githubusercontent.com/Ortham/esplugin/refs/heads/master/supply-chain/audits.toml"