diff --git a/Cargo.lock b/Cargo.lock index 4bc31ca..7a7a131 100644 --- a/Cargo.lock +++ b/Cargo.lock @@ -211,9 +211,9 @@ dependencies = [ [[package]] name = "errno" -version = "0.3.11" +version = "0.3.14" source = "registry+https://github.com/rust-lang/crates.io-index" -checksum = "976dd42dc7e85965fe702eb8164f21f450704bdde31faefd6471dba214cb594e" +checksum = "39cab71617ae0d63f51a36d69f866391735b51691dbda63cf6f96d042b63efeb" dependencies = [ "libc", "windows-sys", @@ -292,9 +292,9 @@ checksum = "6a82ae493e598baaea5209805c49bbf2ea7de956d50d7da0da1164f9c6d28543" [[package]] name = "linux-raw-sys" -version = "0.9.4" +version = "0.11.0" source = "registry+https://github.com/rust-lang/crates.io-index" -checksum = "cd945864f07fe9f5371a27ad7b52a172b4b499999f1d97574c9fa68373937e12" +checksum = "df1d3c3b53da64cf5760482273a98e575c651a67eec7f77df96b5b642de8f039" [[package]] name = "log" @@ -488,9 +488,9 @@ checksum = "2b15c43186be67a4fd63bee50d0303afffcef381492ebe2c5d87f324e1b8815c" [[package]] name = "rustix" -version = "1.0.5" +version = "1.1.2" source = "registry+https://github.com/rust-lang/crates.io-index" -checksum = "d97817398dd4bb2e6da002002db259209759911da105da92bec29ccb12cf58bf" +checksum = "cd15f8a2c5551a84d56efdc1cd049089e409ac19a3072d5037a17fd70719ff3e" dependencies = [ "bitflags", "errno", @@ -703,9 +703,9 @@ checksum = "ac3b87c63620426dd9b991e5ce0329eff545bccbbb34f3be09ff6fb6ab51b7b6" [[package]] name = "winapi-util" -version = "0.1.9" +version = "0.1.11" source = "registry+https://github.com/rust-lang/crates.io-index" -checksum = "cf221c93e13a30d793f7645a0e7762c55d169dbb0a49671918a2319d289b10bb" +checksum = "c2a7b1c03c876122aa43f3020e6c3c3ee5c05081c9a00739faf7503aeba10d22" dependencies = [ "windows-sys", ] @@ -716,79 +716,21 @@ version = "0.4.0" source = "registry+https://github.com/rust-lang/crates.io-index" checksum = "712e227841d057c1ee1cd2fb22fa7e5a5461ae8e48fa2ca79ec42cfc1931183f" +[[package]] +name = "windows-link" +version = "0.2.0" +source = "registry+https://github.com/rust-lang/crates.io-index" +checksum = "45e46c0661abb7180e7b9c281db115305d49ca1709ab8242adf09666d2173c65" + [[package]] name = "windows-sys" -version = "0.59.0" +version = "0.61.0" source = "registry+https://github.com/rust-lang/crates.io-index" -checksum = "1e38bc4d79ed67fd075bcc251a1c39b32a1776bbe92e5bef1f0bf1f8c531853b" +checksum = "e201184e40b2ede64bc2ea34968b28e33622acdbbf37104f0e4a33f7abe657aa" dependencies = [ - "windows-targets", + "windows-link", ] -[[package]] -name = "windows-targets" -version = "0.52.6" -source = "registry+https://github.com/rust-lang/crates.io-index" -checksum = "9b724f72796e036ab90c1021d4780d4d3d648aca59e491e6b98e725b84e99973" -dependencies = [ - "windows_aarch64_gnullvm", - "windows_aarch64_msvc", - "windows_i686_gnu", - "windows_i686_gnullvm", - "windows_i686_msvc", - "windows_x86_64_gnu", - "windows_x86_64_gnullvm", - "windows_x86_64_msvc", -] - -[[package]] -name = "windows_aarch64_gnullvm" -version = "0.52.6" -source = "registry+https://github.com/rust-lang/crates.io-index" -checksum = "32a4622180e7a0ec044bb555404c800bc9fd9ec262ec147edd5989ccd0c02cd3" - -[[package]] -name = "windows_aarch64_msvc" -version = "0.52.6" -source = "registry+https://github.com/rust-lang/crates.io-index" -checksum = "09ec2a7bb152e2252b53fa7803150007879548bc709c039df7627cabbd05d469" - -[[package]] -name = "windows_i686_gnu" -version = "0.52.6" -source = "registry+https://github.com/rust-lang/crates.io-index" -checksum = "8e9b5ad5ab802e97eb8e295ac6720e509ee4c243f69d781394014ebfe8bbfa0b" - -[[package]] -name = "windows_i686_gnullvm" -version = "0.52.6" -source = "registry+https://github.com/rust-lang/crates.io-index" -checksum = "0eee52d38c090b3caa76c563b86c3a4bd71ef1a819287c19d586d7334ae8ed66" - -[[package]] -name = "windows_i686_msvc" -version = "0.52.6" -source = "registry+https://github.com/rust-lang/crates.io-index" -checksum = "240948bc05c5e7c6dabba28bf89d89ffce3e303022809e73deaefe4f6ec56c66" - -[[package]] -name = "windows_x86_64_gnu" -version = "0.52.6" -source = "registry+https://github.com/rust-lang/crates.io-index" -checksum = "147a5c80aabfbf0c7d901cb5895d1de30ef2907eb21fbbab29ca94c5b08b1a78" - -[[package]] -name = "windows_x86_64_gnullvm" -version = "0.52.6" -source = "registry+https://github.com/rust-lang/crates.io-index" -checksum = "24d5b23dc417412679681396f2b49f3de8c1473deb516bd34410872eff51ed0d" - -[[package]] -name = "windows_x86_64_msvc" -version = "0.52.6" -source = "registry+https://github.com/rust-lang/crates.io-index" -checksum = "589f6da84c646204747d1270a2a5661ea66ed1cced2631d546fdfb155959f9ec" - [[package]] name = "wit-bindgen-rt" version = "0.39.0" diff --git a/supply-chain/audits.toml b/supply-chain/audits.toml index 3f85002..89d9115 100644 --- a/supply-chain/audits.toml +++ b/supply-chain/audits.toml @@ -17,6 +17,13 @@ start = "2024-08-15" end = "2026-09-16" notes = "rust-lang-owner is a bot run by the Rust Infrastructure Team, so libc is hopefully as trustworthy as the Rust toolchain." +[[trusted.windows-link]] +criteria = "safe-to-deploy" +user-id = 64539 # Kenny Kerr (kennykerr) +start = "2022-09-01" +end = "2026-09-17" +notes = "kennykerr is on the Windows team at Microsoft." + [[trusted.windows-sys]] criteria = "safe-to-deploy" user-id = 64539 # Kenny Kerr (kennykerr) @@ -30,59 +37,3 @@ user-id = 64539 # Kenny Kerr (kennykerr) start = "2022-09-09" end = "2026-09-17" notes = "kennykerr is on the Windows team at Microsoft." - -[[trusted.windows_aarch64_gnullvm]] -criteria = "safe-to-deploy" -user-id = 64539 # Kenny Kerr (kennykerr) -start = "2022-09-01" -end = "2026-09-17" -notes = "kennykerr is on the Windows team at Microsoft." - -[[trusted.windows_aarch64_msvc]] -criteria = "safe-to-deploy" -user-id = 64539 # Kenny Kerr (kennykerr) -start = "2021-11-05" -end = "2026-09-17" -notes = "kennykerr is on the Windows team at Microsoft." - -[[trusted.windows_i686_gnu]] -criteria = "safe-to-deploy" -user-id = 64539 # Kenny Kerr (kennykerr) -start = "2021-10-28" -end = "2026-09-17" -notes = "kennykerr is on the Windows team at Microsoft." - -[[trusted.windows_i686_gnullvm]] -criteria = "safe-to-deploy" -user-id = 64539 # Kenny Kerr (kennykerr) -start = "2024-04-02" -end = "2026-09-17" -notes = "kennykerr is on the Windows team at Microsoft." - -[[trusted.windows_i686_msvc]] -criteria = "safe-to-deploy" -user-id = 64539 # Kenny Kerr (kennykerr) -start = "2021-10-27" -end = "2026-09-17" -notes = "kennykerr is on the Windows team at Microsoft." - -[[trusted.windows_x86_64_gnu]] -criteria = "safe-to-deploy" -user-id = 64539 # Kenny Kerr (kennykerr) -start = "2021-10-28" -end = "2026-09-17" -notes = "kennykerr is on the Windows team at Microsoft." - -[[trusted.windows_x86_64_gnullvm]] -criteria = "safe-to-deploy" -user-id = 64539 # Kenny Kerr (kennykerr) -start = "2022-09-01" -end = "2026-09-17" -notes = "kennykerr is on the Windows team at Microsoft." - -[[trusted.windows_x86_64_msvc]] -criteria = "safe-to-deploy" -user-id = 64539 # Kenny Kerr (kennykerr) -start = "2021-10-27" -end = "2026-09-17" -notes = "kennykerr is on the Windows team at Microsoft." diff --git a/supply-chain/config.toml b/supply-chain/config.toml index cf8b8d4..b74135d 100644 --- a/supply-chain/config.toml +++ b/supply-chain/config.toml @@ -47,7 +47,7 @@ version = "0.1.2" criteria = "safe-to-deploy" [[exemptions.errno]] -version = "0.3.11" +version = "0.3.14" criteria = "safe-to-run" suggest = false notes = "At time of review this was only built if targeting WASM, which is not an intended target." @@ -59,7 +59,7 @@ suggest = false notes = "At time of review this was only built if targeting WASM, which is not an intended target." [[exemptions.linux-raw-sys]] -version = "0.9.4" +version = "0.11.0" criteria = "safe-to-run" suggest = false notes = "At time of review this was only built if targeting WASM, which is not an intended target." @@ -115,7 +115,7 @@ version = "0.4.9" criteria = "safe-to-deploy" [[exemptions.rustix]] -version = "1.0.5" +version = "1.1.2" criteria = "safe-to-run" suggest = false notes = "At time of review this was only built if targeting WASM, which is not an intended target." diff --git a/supply-chain/imports.lock b/supply-chain/imports.lock index 8d5a7b7..3cd0536 100644 --- a/supply-chain/imports.lock +++ b/supply-chain/imports.lock @@ -28,72 +28,16 @@ when = "2025-08-11" user-id = 55123 user-login = "rust-lang-owner" +[[publisher.windows-link]] +version = "0.2.0" +when = "2025-09-04" +user-id = 64539 +user-login = "kennykerr" +user-name = "Kenny Kerr" + [[publisher.windows-sys]] -version = "0.59.0" -when = "2024-07-30" -user-id = 64539 -user-login = "kennykerr" -user-name = "Kenny Kerr" - -[[publisher.windows-targets]] -version = "0.52.6" -when = "2024-07-03" -user-id = 64539 -user-login = "kennykerr" -user-name = "Kenny Kerr" - -[[publisher.windows_aarch64_gnullvm]] -version = "0.52.6" -when = "2024-07-03" -user-id = 64539 -user-login = "kennykerr" -user-name = "Kenny Kerr" - -[[publisher.windows_aarch64_msvc]] -version = "0.52.6" -when = "2024-07-03" -user-id = 64539 -user-login = "kennykerr" -user-name = "Kenny Kerr" - -[[publisher.windows_i686_gnu]] -version = "0.52.6" -when = "2024-07-03" -user-id = 64539 -user-login = "kennykerr" -user-name = "Kenny Kerr" - -[[publisher.windows_i686_gnullvm]] -version = "0.52.6" -when = "2024-07-03" -user-id = 64539 -user-login = "kennykerr" -user-name = "Kenny Kerr" - -[[publisher.windows_i686_msvc]] -version = "0.52.6" -when = "2024-07-03" -user-id = 64539 -user-login = "kennykerr" -user-name = "Kenny Kerr" - -[[publisher.windows_x86_64_gnu]] -version = "0.52.6" -when = "2024-07-03" -user-id = 64539 -user-login = "kennykerr" -user-name = "Kenny Kerr" - -[[publisher.windows_x86_64_gnullvm]] -version = "0.52.6" -when = "2024-07-03" -user-id = 64539 -user-login = "kennykerr" -user-name = "Kenny Kerr" - -[[publisher.windows_x86_64_msvc]] -version = "0.52.6" -when = "2024-07-03" +version = "0.61.0" +when = "2025-09-04" user-id = 64539 user-login = "kennykerr" user-name = "Kenny Kerr" @@ -258,6 +202,12 @@ criteria = "safe-to-deploy" delta = "3.21.0 -> 3.22.0" notes = "The only significant change is updating its maximum accepted version of the windows-sys dependency to allow v0.61.x." +[[audits.esplugin.audits.winapi-util]] +who = "Oliver Hamlet " +criteria = "safe-to-deploy" +delta = "0.1.9 -> 0.1.11" +notes = "The only change is to the allowed range of windows-sys dependency versions." + [[audits.google.audits.anstyle]] who = "Yu-An Wang " criteria = "safe-to-run"