Commit Graph
388 Commits
Author SHA1 Message Date
Oliver Hamlet 65f0719c2f Update tempfile from 3.22.0 to 3.25.0 2026-02-23 17:57:20 +00:00
Oliver Hamlet 454f395ae4 Use my aggregated audits 2026-02-23 17:55:02 +00:00
Oliver Hamlet 41a4b44e3b Update version and changelog for v6.0.0 6.0.0 2026-01-21 17:32:11 +00:00
Oliver Hamlet bc0c243f91 Eval *version functions to false if file does not exist 2026-01-19 18:53:11 +00:00
Oliver Hamlet d362d6d530 Update cargo-vet to v0.10.2 2026-01-19 18:21:17 +00:00
Oliver Hamlet 9563046e35 Write new *version condition syntax 2026-01-18 17:02:18 +00:00
Oliver Hamlet de09bc0d64 Support *version(path, compator, expected) syntax
It's easier to understand than *version(path, expected, comparator).
2026-01-18 17:02:13 +00:00
Oliver Hamlet 0878556e2e Update unicase to v2.9.0 2026-01-07 18:36:00 +00:00
Oliver Hamlet f9832fea8e Update versions and changelog for v5.4.0 5.4.0 2026-01-01 10:37:29 +00:00
Oliver Hamlet 176c4184ba Update criterion to v0.8.1
The new transitive dependency on cc is intentionally set to v1.2.5 in the lockfile because that's the newest version that already has an audit.
2026-01-01 02:26:02 +00:00
Oliver HamletandGitHub dcbee2ed9b Merge pull request #100 from loot/dependabot/github_actions/actions/cache-5
Bump actions/cache from 4 to 5
2025-12-15 09:07:03 +00:00
dependabot[bot]andGitHub 3b253cdbfc Bump actions/cache from 4 to 5
Bumps [actions/cache](https://github.com/actions/cache) from 4 to 5.
- [Release notes](https://github.com/actions/cache/releases)
- [Changelog](https://github.com/actions/cache/blob/main/RELEASES.md)
- [Commits](https://github.com/actions/cache/compare/v4...v5)

---
updated-dependencies:
- dependency-name: actions/cache
  dependency-version: '5'
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
2025-12-15 03:21:43 +00:00
Oliver Hamlet 84a8ef55d1 Remove libc FFI dependency
It was only used for a single type alias that's currently usize on all platforms, so using it was overkill. This removes libc from the dependency tree on Windows, but not on Linux, though there it's only needed for dev dependencies.
2025-12-06 12:47:47 +00:00
Oliver Hamlet 5aa61abc10 Remove pelite dependency
The advantages of using the built-in implementation instead of pelite are:

- It's much faster on average: for Starfield.exe (~ 100 MB) it is 2.8x
  faster and 4% slower reading file and product versions respectively,
  and for sfse_1_15_222.dll it is 3.35x faster and < 1% slower
  respectively.
- It reduces the transitive dependency count by 8
- It uses ~ 700 lines of first-party code that only depends on the
  standard library, instead of 240715 lines of unaudited third-party code
- pelite hasn't had a release in 3 years, and my PR for replacing winapi
  hasn't had any response in the month and a half it's been open, so the
  built-in implementation is probably less of a maintenance risk.
2025-12-03 18:39:27 +00:00
Oliver Hamlet daf229c1e9 Implement PE executable version parsing
Using only the standard library (i.e. without pelite).

This commit keeps the pelite dependency and uses it to check that the
new parser gives the same result. The next commit will remove pelite.

I've verified that both parsers give the same result for the following
files that are referenced in the masterlists' version conditions:

Starfield.exe
sfse_1_15_222.dll
SkyrimSE.exe
skse64_loader.exe
skseVR_loader.exe
ENBHelperSE.dll
d3d11.dll
EngineFixes.dll
QuickLootEE.dll
FalloutNV.exe
nvse_1_4.dll
nvse_1_4ng.dll
nvse_1_1.dll
Fallout3.exe
fose_1_7.dll
fose_1_7ng.dll
nvac.dll
Fallout4.exe
f4se_loader.exe
f4sevr_loader.exe
place.dll
obse_1_2_416.dll
TESV.exe
skse_loader.exe

The only referenced files that I couldn't test against were SkyrimVR.exe
and Fallout4VR.exe, because I don't own those games.
2025-12-03 18:39:27 +00:00
Oliver Hamlet 99f03bbade Update cargo-vet config 2025-12-03 18:11:53 +00:00
Oliver HamletandGitHub e451822309 Merge pull request #87 from loot/dependabot/cargo/regex-1.12.2
Bump regex from 1.11.3 to 1.12.2
2025-11-24 22:38:47 +00:00
Oliver Hamlet c8625a0851 Add audits for regex 1.11.3 -> 1.12.2 delta 2025-11-24 22:26:02 +00:00
Oliver Hamlet 2047429754 Replace use of taiki-e/install-action
The action updates very frequently with irrelevant changes (for other things it can install), making it more of a review burden than it's worth.
2025-11-24 20:32:21 +00:00
Oliver HamletandGitHub 732fab0573 Merge pull request #96 from loot/dependabot/github_actions/coverallsapp/github-action-2.3.7
Bump coverallsapp/github-action from 2.3.6 to 2.3.7
2025-11-24 09:13:33 +00:00
Oliver HamletandGitHub 04d9fe7fa5 Merge pull request #95 from loot/dependabot/github_actions/actions/checkout-6
Bump actions/checkout from 5 to 6
2025-11-24 08:55:56 +00:00
dependabot[bot]andGitHub 42082b1c2d Bump coverallsapp/github-action from 2.3.6 to 2.3.7
Bumps [coverallsapp/github-action](https://github.com/coverallsapp/github-action) from 2.3.6 to 2.3.7.
- [Release notes](https://github.com/coverallsapp/github-action/releases)
- [Commits](https://github.com/coverallsapp/github-action/compare/648a8eb78e6d50909eff900e4ec85cab4524a45b...5cbfd81b66ca5d10c19b062c04de0199c215fb6e)

---
updated-dependencies:
- dependency-name: coverallsapp/github-action
  dependency-version: 2.3.7
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
2025-11-24 03:45:33 +00:00
dependabot[bot]andGitHub db3bb0c77b Bump actions/checkout from 5 to 6
Bumps [actions/checkout](https://github.com/actions/checkout) from 5 to 6.
- [Release notes](https://github.com/actions/checkout/releases)
- [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md)
- [Commits](https://github.com/actions/checkout/compare/v5...v6)

---
updated-dependencies:
- dependency-name: actions/checkout
  dependency-version: '6'
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
2025-11-24 03:45:30 +00:00
Oliver Hamlet c7bd60cb74 Fix new clippy warning
It seems to have been introduced in Rust v1.91.0.
2025-11-10 18:33:49 +00:00
Oliver HamletandGitHub f951e2087c Merge pull request #92 from loot/dependabot/github_actions/rust-lang/crates-io-auth-action-1.0.3
Bump rust-lang/crates-io-auth-action from 1.0.1 to 1.0.3
2025-11-10 09:07:53 +00:00