Commit Graph
375 Commits
Author SHA1 Message Date
Oliver Hamlet 5aa61abc10 Remove pelite dependency
The advantages of using the built-in implementation instead of pelite are:

- It's much faster on average: for Starfield.exe (~ 100 MB) it is 2.8x
  faster and 4% slower reading file and product versions respectively,
  and for sfse_1_15_222.dll it is 3.35x faster and < 1% slower
  respectively.
- It reduces the transitive dependency count by 8
- It uses ~ 700 lines of first-party code that only depends on the
  standard library, instead of 240715 lines of unaudited third-party code
- pelite hasn't had a release in 3 years, and my PR for replacing winapi
  hasn't had any response in the month and a half it's been open, so the
  built-in implementation is probably less of a maintenance risk.
2025-12-03 18:39:27 +00:00
Oliver Hamlet daf229c1e9 Implement PE executable version parsing
Using only the standard library (i.e. without pelite).

This commit keeps the pelite dependency and uses it to check that the
new parser gives the same result. The next commit will remove pelite.

I've verified that both parsers give the same result for the following
files that are referenced in the masterlists' version conditions:

Starfield.exe
sfse_1_15_222.dll
SkyrimSE.exe
skse64_loader.exe
skseVR_loader.exe
ENBHelperSE.dll
d3d11.dll
EngineFixes.dll
QuickLootEE.dll
FalloutNV.exe
nvse_1_4.dll
nvse_1_4ng.dll
nvse_1_1.dll
Fallout3.exe
fose_1_7.dll
fose_1_7ng.dll
nvac.dll
Fallout4.exe
f4se_loader.exe
f4sevr_loader.exe
place.dll
obse_1_2_416.dll
TESV.exe
skse_loader.exe

The only referenced files that I couldn't test against were SkyrimVR.exe
and Fallout4VR.exe, because I don't own those games.
2025-12-03 18:39:27 +00:00
Oliver Hamlet 99f03bbade Update cargo-vet config 2025-12-03 18:11:53 +00:00
Oliver HamletandGitHub e451822309 Merge pull request #87 from loot/dependabot/cargo/regex-1.12.2
Bump regex from 1.11.3 to 1.12.2
2025-11-24 22:38:47 +00:00
Oliver Hamlet c8625a0851 Add audits for regex 1.11.3 -> 1.12.2 delta 2025-11-24 22:26:02 +00:00
Oliver Hamlet 2047429754 Replace use of taiki-e/install-action
The action updates very frequently with irrelevant changes (for other things it can install), making it more of a review burden than it's worth.
2025-11-24 20:32:21 +00:00
Oliver HamletandGitHub 732fab0573 Merge pull request #96 from loot/dependabot/github_actions/coverallsapp/github-action-2.3.7
Bump coverallsapp/github-action from 2.3.6 to 2.3.7
2025-11-24 09:13:33 +00:00
Oliver HamletandGitHub 04d9fe7fa5 Merge pull request #95 from loot/dependabot/github_actions/actions/checkout-6
Bump actions/checkout from 5 to 6
2025-11-24 08:55:56 +00:00
dependabot[bot]andGitHub 42082b1c2d Bump coverallsapp/github-action from 2.3.6 to 2.3.7
Bumps [coverallsapp/github-action](https://github.com/coverallsapp/github-action) from 2.3.6 to 2.3.7.
- [Release notes](https://github.com/coverallsapp/github-action/releases)
- [Commits](https://github.com/coverallsapp/github-action/compare/648a8eb78e6d50909eff900e4ec85cab4524a45b...5cbfd81b66ca5d10c19b062c04de0199c215fb6e)

---
updated-dependencies:
- dependency-name: coverallsapp/github-action
  dependency-version: 2.3.7
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
2025-11-24 03:45:33 +00:00
dependabot[bot]andGitHub db3bb0c77b Bump actions/checkout from 5 to 6
Bumps [actions/checkout](https://github.com/actions/checkout) from 5 to 6.
- [Release notes](https://github.com/actions/checkout/releases)
- [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md)
- [Commits](https://github.com/actions/checkout/compare/v5...v6)

---
updated-dependencies:
- dependency-name: actions/checkout
  dependency-version: '6'
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
2025-11-24 03:45:30 +00:00
Oliver Hamlet c7bd60cb74 Fix new clippy warning
It seems to have been introduced in Rust v1.91.0.
2025-11-10 18:33:49 +00:00
Oliver HamletandGitHub f951e2087c Merge pull request #92 from loot/dependabot/github_actions/rust-lang/crates-io-auth-action-1.0.3
Bump rust-lang/crates-io-auth-action from 1.0.1 to 1.0.3
2025-11-10 09:07:53 +00:00
dependabot[bot]andGitHub 8b686c1ad2 Bump rust-lang/crates-io-auth-action from 1.0.1 to 1.0.3
Bumps [rust-lang/crates-io-auth-action](https://github.com/rust-lang/crates-io-auth-action) from 1.0.1 to 1.0.3.
- [Release notes](https://github.com/rust-lang/crates-io-auth-action/releases)
- [Commits](https://github.com/rust-lang/crates-io-auth-action/compare/e919bc7605cde86df457cf5b93c5e103838bd879...b7e9a28eded4986ec6b1fa40eeee8f8f165559ec)

---
updated-dependencies:
- dependency-name: rust-lang/crates-io-auth-action
  dependency-version: 1.0.3
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
2025-11-10 03:29:33 +00:00
Oliver Hamlet 67dfd78017 Explicitly limit permissions in CI jobs 2025-10-31 21:48:59 +00:00
dependabot[bot]andGitHub d0979f0b68 Bump regex from 1.11.3 to 1.12.2
Bumps [regex](https://github.com/rust-lang/regex) from 1.11.3 to 1.12.2.
- [Release notes](https://github.com/rust-lang/regex/releases)
- [Changelog](https://github.com/rust-lang/regex/blob/master/CHANGELOG.md)
- [Commits](https://github.com/rust-lang/regex/compare/1.11.3...1.12.2)

---
updated-dependencies:
- dependency-name: regex
  dependency-version: 1.12.2
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
2025-10-14 03:01:37 +00:00
Oliver HamletandGitHub 1d4e84b8d1 Merge pull request #80 from loot/dependabot/cargo/regex-1.11.3
Bump regex from 1.11.2 to 1.11.3
2025-10-03 18:45:22 +01:00
Oliver Hamlet 966bf75a29 Add audits for regex v1.11.2 to v1.11.3 update 2025-10-03 18:39:36 +01:00
dependabot[bot]andOliver Hamlet 33efacb6d8 Bump regex from 1.11.2 to 1.11.3
Bumps [regex](https://github.com/rust-lang/regex) from 1.11.2 to 1.11.3.
- [Release notes](https://github.com/rust-lang/regex/releases)
- [Changelog](https://github.com/rust-lang/regex/blob/master/CHANGELOG.md)
- [Commits](https://github.com/rust-lang/regex/compare/1.11.2...1.11.3)

---
updated-dependencies:
- dependency-name: regex
  dependency-version: 1.11.3
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
2025-10-03 18:39:21 +01:00
Oliver HamletandGitHub 5949e0078c Merge pull request #81 from loot/dependabot/cargo/esplugin-6.1.4
Bump esplugin from 6.1.3 to 6.1.4
2025-10-03 18:25:34 +01:00
Oliver Hamlet 6a66d8fcd0 Add audit for esplugin v6.1.4 as workaround for trust 2025-10-03 18:18:52 +01:00
Oliver HamletandGitHub 84a78c5b52 Merge pull request #78 from loot/dependabot/cargo/libc-0.2.176
Bump libc from 0.2.175 to 0.2.176
2025-10-03 18:05:34 +01:00
Oliver Hamlet a88f424219 Update libc entry in cargo-vet lockfile 2025-10-03 18:02:03 +01:00
dependabot[bot]andGitHub b3bfc160fe Bump libc from 0.2.175 to 0.2.176
Bumps [libc](https://github.com/rust-lang/libc) from 0.2.175 to 0.2.176.
- [Release notes](https://github.com/rust-lang/libc/releases)
- [Changelog](https://github.com/rust-lang/libc/blob/0.2.176/CHANGELOG.md)
- [Commits](https://github.com/rust-lang/libc/compare/0.2.175...0.2.176)

---
updated-dependencies:
- dependency-name: libc
  dependency-version: 0.2.176
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
2025-10-03 13:34:03 +00:00
Oliver Hamlet 4a1fe296ed Check the hashes of files downloaded in CI 2025-10-02 17:40:16 +01:00
Oliver HamletandGitHub b5f1d0677b Merge pull request #82 from loot/dependabot/github_actions/actions/checkout-5
Bump actions/checkout from 4 to 5
2025-10-02 08:02:36 +01:00