Oliver Hamlet and GitHub
dcbee2ed9b
Merge pull request #100 from loot/dependabot/github_actions/actions/cache-5
...
Bump actions/cache from 4 to 5
2025-12-15 09:07:03 +00:00
dependabot[bot] and GitHub
3b253cdbfc
Bump actions/cache from 4 to 5
...
Bumps [actions/cache](https://github.com/actions/cache ) from 4 to 5.
- [Release notes](https://github.com/actions/cache/releases )
- [Changelog](https://github.com/actions/cache/blob/main/RELEASES.md )
- [Commits](https://github.com/actions/cache/compare/v4...v5 )
---
updated-dependencies:
- dependency-name: actions/cache
dependency-version: '5'
dependency-type: direct:production
update-type: version-update:semver-major
...
Signed-off-by: dependabot[bot] <support@github.com >
2025-12-15 03:21:43 +00:00
Oliver Hamlet
84a8ef55d1
Remove libc FFI dependency
...
It was only used for a single type alias that's currently usize on all platforms, so using it was overkill. This removes libc from the dependency tree on Windows, but not on Linux, though there it's only needed for dev dependencies.
2025-12-06 12:47:47 +00:00
Oliver Hamlet
5aa61abc10
Remove pelite dependency
...
The advantages of using the built-in implementation instead of pelite are:
- It's much faster on average: for Starfield.exe (~ 100 MB) it is 2.8x
faster and 4% slower reading file and product versions respectively,
and for sfse_1_15_222.dll it is 3.35x faster and < 1% slower
respectively.
- It reduces the transitive dependency count by 8
- It uses ~ 700 lines of first-party code that only depends on the
standard library, instead of 240715 lines of unaudited third-party code
- pelite hasn't had a release in 3 years, and my PR for replacing winapi
hasn't had any response in the month and a half it's been open, so the
built-in implementation is probably less of a maintenance risk.
2025-12-03 18:39:27 +00:00
Oliver Hamlet
daf229c1e9
Implement PE executable version parsing
...
Using only the standard library (i.e. without pelite).
This commit keeps the pelite dependency and uses it to check that the
new parser gives the same result. The next commit will remove pelite.
I've verified that both parsers give the same result for the following
files that are referenced in the masterlists' version conditions:
Starfield.exe
sfse_1_15_222.dll
SkyrimSE.exe
skse64_loader.exe
skseVR_loader.exe
ENBHelperSE.dll
d3d11.dll
EngineFixes.dll
QuickLootEE.dll
FalloutNV.exe
nvse_1_4.dll
nvse_1_4ng.dll
nvse_1_1.dll
Fallout3.exe
fose_1_7.dll
fose_1_7ng.dll
nvac.dll
Fallout4.exe
f4se_loader.exe
f4sevr_loader.exe
place.dll
obse_1_2_416.dll
TESV.exe
skse_loader.exe
The only referenced files that I couldn't test against were SkyrimVR.exe
and Fallout4VR.exe, because I don't own those games.
2025-12-03 18:39:27 +00:00
Oliver Hamlet
99f03bbade
Update cargo-vet config
2025-12-03 18:11:53 +00:00
Oliver Hamlet and GitHub
e451822309
Merge pull request #87 from loot/dependabot/cargo/regex-1.12.2
...
Bump regex from 1.11.3 to 1.12.2
2025-11-24 22:38:47 +00:00
Oliver Hamlet
c8625a0851
Add audits for regex 1.11.3 -> 1.12.2 delta
2025-11-24 22:26:02 +00:00
Oliver Hamlet
2047429754
Replace use of taiki-e/install-action
...
The action updates very frequently with irrelevant changes (for other things it can install), making it more of a review burden than it's worth.
2025-11-24 20:32:21 +00:00
Oliver Hamlet and GitHub
732fab0573
Merge pull request #96 from loot/dependabot/github_actions/coverallsapp/github-action-2.3.7
...
Bump coverallsapp/github-action from 2.3.6 to 2.3.7
2025-11-24 09:13:33 +00:00
Oliver Hamlet and GitHub
04d9fe7fa5
Merge pull request #95 from loot/dependabot/github_actions/actions/checkout-6
...
Bump actions/checkout from 5 to 6
2025-11-24 08:55:56 +00:00
dependabot[bot] and GitHub
42082b1c2d
Bump coverallsapp/github-action from 2.3.6 to 2.3.7
...
Bumps [coverallsapp/github-action](https://github.com/coverallsapp/github-action ) from 2.3.6 to 2.3.7.
- [Release notes](https://github.com/coverallsapp/github-action/releases )
- [Commits](https://github.com/coverallsapp/github-action/compare/648a8eb78e6d50909eff900e4ec85cab4524a45b...5cbfd81b66ca5d10c19b062c04de0199c215fb6e )
---
updated-dependencies:
- dependency-name: coverallsapp/github-action
dependency-version: 2.3.7
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com >
2025-11-24 03:45:33 +00:00
dependabot[bot] and GitHub
db3bb0c77b
Bump actions/checkout from 5 to 6
...
Bumps [actions/checkout](https://github.com/actions/checkout ) from 5 to 6.
- [Release notes](https://github.com/actions/checkout/releases )
- [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md )
- [Commits](https://github.com/actions/checkout/compare/v5...v6 )
---
updated-dependencies:
- dependency-name: actions/checkout
dependency-version: '6'
dependency-type: direct:production
update-type: version-update:semver-major
...
Signed-off-by: dependabot[bot] <support@github.com >
2025-11-24 03:45:30 +00:00
Oliver Hamlet
c7bd60cb74
Fix new clippy warning
...
It seems to have been introduced in Rust v1.91.0.
2025-11-10 18:33:49 +00:00
Oliver Hamlet and GitHub
f951e2087c
Merge pull request #92 from loot/dependabot/github_actions/rust-lang/crates-io-auth-action-1.0.3
...
Bump rust-lang/crates-io-auth-action from 1.0.1 to 1.0.3
2025-11-10 09:07:53 +00:00
dependabot[bot] and GitHub
8b686c1ad2
Bump rust-lang/crates-io-auth-action from 1.0.1 to 1.0.3
...
Bumps [rust-lang/crates-io-auth-action](https://github.com/rust-lang/crates-io-auth-action ) from 1.0.1 to 1.0.3.
- [Release notes](https://github.com/rust-lang/crates-io-auth-action/releases )
- [Commits](https://github.com/rust-lang/crates-io-auth-action/compare/e919bc7605cde86df457cf5b93c5e103838bd879...b7e9a28eded4986ec6b1fa40eeee8f8f165559ec )
---
updated-dependencies:
- dependency-name: rust-lang/crates-io-auth-action
dependency-version: 1.0.3
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com >
2025-11-10 03:29:33 +00:00
Oliver Hamlet
67dfd78017
Explicitly limit permissions in CI jobs
2025-10-31 21:48:59 +00:00
dependabot[bot] and GitHub
d0979f0b68
Bump regex from 1.11.3 to 1.12.2
...
Bumps [regex](https://github.com/rust-lang/regex ) from 1.11.3 to 1.12.2.
- [Release notes](https://github.com/rust-lang/regex/releases )
- [Changelog](https://github.com/rust-lang/regex/blob/master/CHANGELOG.md )
- [Commits](https://github.com/rust-lang/regex/compare/1.11.3...1.12.2 )
---
updated-dependencies:
- dependency-name: regex
dependency-version: 1.12.2
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com >
2025-10-14 03:01:37 +00:00
Oliver Hamlet and GitHub
1d4e84b8d1
Merge pull request #80 from loot/dependabot/cargo/regex-1.11.3
...
Bump regex from 1.11.2 to 1.11.3
2025-10-03 18:45:22 +01:00
Oliver Hamlet
966bf75a29
Add audits for regex v1.11.2 to v1.11.3 update
2025-10-03 18:39:36 +01:00
dependabot[bot] and Oliver Hamlet
33efacb6d8
Bump regex from 1.11.2 to 1.11.3
...
Bumps [regex](https://github.com/rust-lang/regex ) from 1.11.2 to 1.11.3.
- [Release notes](https://github.com/rust-lang/regex/releases )
- [Changelog](https://github.com/rust-lang/regex/blob/master/CHANGELOG.md )
- [Commits](https://github.com/rust-lang/regex/compare/1.11.2...1.11.3 )
---
updated-dependencies:
- dependency-name: regex
dependency-version: 1.11.3
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com >
2025-10-03 18:39:21 +01:00
Oliver Hamlet and GitHub
5949e0078c
Merge pull request #81 from loot/dependabot/cargo/esplugin-6.1.4
...
Bump esplugin from 6.1.3 to 6.1.4
2025-10-03 18:25:34 +01:00
Oliver Hamlet
6a66d8fcd0
Add audit for esplugin v6.1.4 as workaround for trust
2025-10-03 18:18:52 +01:00
Oliver Hamlet and GitHub
84a78c5b52
Merge pull request #78 from loot/dependabot/cargo/libc-0.2.176
...
Bump libc from 0.2.175 to 0.2.176
2025-10-03 18:05:34 +01:00
Oliver Hamlet
a88f424219
Update libc entry in cargo-vet lockfile
2025-10-03 18:02:03 +01:00