Oliver Hamlet
a88f424219
Update libc entry in cargo-vet lockfile
2025-10-03 18:02:03 +01:00
dependabot[bot] and GitHub
b3bfc160fe
Bump libc from 0.2.175 to 0.2.176
...
Bumps [libc](https://github.com/rust-lang/libc ) from 0.2.175 to 0.2.176.
- [Release notes](https://github.com/rust-lang/libc/releases )
- [Changelog](https://github.com/rust-lang/libc/blob/0.2.176/CHANGELOG.md )
- [Commits](https://github.com/rust-lang/libc/compare/0.2.175...0.2.176 )
---
updated-dependencies:
- dependency-name: libc
dependency-version: 0.2.176
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com >
2025-10-03 13:34:03 +00:00
Oliver Hamlet
4a1fe296ed
Check the hashes of files downloaded in CI
2025-10-02 17:40:16 +01:00
Oliver Hamlet and GitHub
b5f1d0677b
Merge pull request #82 from loot/dependabot/github_actions/actions/checkout-5
...
Bump actions/checkout from 4 to 5
2025-10-02 08:02:36 +01:00
dependabot[bot] and GitHub
53b151db04
Bump actions/checkout from 4 to 5
...
Bumps [actions/checkout](https://github.com/actions/checkout ) from 4 to 5.
- [Release notes](https://github.com/actions/checkout/releases )
- [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md )
- [Commits](https://github.com/actions/checkout/compare/v4...v5 )
---
updated-dependencies:
- dependency-name: actions/checkout
dependency-version: '5'
dependency-type: direct:production
update-type: version-update:semver-major
...
Signed-off-by: dependabot[bot] <support@github.com >
2025-10-01 19:17:28 +00:00
Oliver Hamlet
26b3f2f152
Use Dependabot to keep Actions up to date
2025-10-01 20:11:36 +01:00
Oliver Hamlet
bd10075c72
Pin third-party Action versions
...
The versions that are installed have not changed: the hashes correspond to the current values of the version tags that were previously used.
2025-10-01 20:08:54 +01:00
Oliver Hamlet
b8bb06581d
Install cargo-vet using a Git commit hash
...
The hash doubles as a checksum of the code that's downloaded and built. Installing from crates.io doesn't provide equivalent functionality.
2025-10-01 20:06:08 +01:00
Oliver Hamlet
a5cb37f203
Install cbindgen using a Git commit hash
...
The hash doubles as a checksum of the code that's downloaded and built. Installing from crates.io doesn't provide equivalent functionality.
2025-10-01 20:01:52 +01:00
Oliver Hamlet
8cfe561712
Pass ---locked to cargo install
2025-10-01 19:58:01 +01:00
Oliver Hamlet
b1a0840690
Update versions and changelog for v5.3.3
5.3.3
2025-09-29 17:19:59 +01:00
Oliver Hamlet
2ac9a9e374
Add a CI job to run cargo vet
2025-09-28 16:27:40 +01:00
Oliver Hamlet
bdeeaee9e9
Use more permissive dependency version selectors
...
So that dependents have more freedom in choosing versions in their dependency tree.
I've run the tests using the oldest versions allowed by the new specifiers, and they all pass.
The current release of esplugin unnecessarily requires at least unicase v2.8.1, but with that fixed, unicase v2.0.0 is fine.
2025-09-28 16:26:13 +01:00
Oliver Hamlet
940aa22f26
Update errno, rustix, winapi-util, windows-sys
...
To remove several windows* crates.
2025-09-28 16:26:13 +01:00
Oliver Hamlet
a3fab8f8c7
Downgrade crossbeam-deque to an audited version
...
The differences don't seem to be significant for LCI's usage.
2025-09-28 16:26:13 +01:00
Oliver Hamlet
7469c7ba41
Downgrade walkdir to an audited version
...
The differences don't seem to be significant for LCI's usage.
2025-09-28 16:26:13 +01:00
Oliver Hamlet
e1ad153df2
Downgrade ryu to an audited version
...
The differences don't seem to be significant for LCI's usage.
2025-09-28 16:26:13 +01:00
Oliver Hamlet
185dd20834
Downgrade syn to an audited version
...
The differences don't seem to be significant for LCI's usage.
2025-09-28 16:26:13 +01:00
Oliver Hamlet
c9e9cef47f
Add cargo-vet config
2025-09-28 16:26:13 +01:00
Oliver Hamlet and GitHub
3e052ed8af
Merge pull request #77 from loot/dependabot/cargo/tempfile-3.22.0
...
Bump tempfile from 3.21.0 to 3.22.0
2025-09-10 09:27:14 +01:00
dependabot[bot] and GitHub
45dbdccb50
Bump tempfile from 3.21.0 to 3.22.0
...
Bumps [tempfile](https://github.com/Stebalien/tempfile ) from 3.21.0 to 3.22.0.
- [Changelog](https://github.com/Stebalien/tempfile/blob/master/CHANGELOG.md )
- [Commits](https://github.com/Stebalien/tempfile/compare/v3.21.0...v3.22.0 )
---
updated-dependencies:
- dependency-name: tempfile
dependency-version: 3.22.0
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com >
2025-09-10 03:01:07 +00:00
Oliver Hamlet and GitHub
90205b72fd
Merge pull request #76 from loot/dependabot/cargo/regex-1.11.2
...
Bump regex from 1.11.1 to 1.11.2
2025-08-25 09:09:19 +01:00
dependabot[bot] and GitHub
bb03c10217
Bump regex from 1.11.1 to 1.11.2
...
Bumps [regex](https://github.com/rust-lang/regex ) from 1.11.1 to 1.11.2.
- [Release notes](https://github.com/rust-lang/regex/releases )
- [Changelog](https://github.com/rust-lang/regex/blob/master/CHANGELOG.md )
- [Commits](https://github.com/rust-lang/regex/compare/1.11.1...1.11.2 )
---
updated-dependencies:
- dependency-name: regex
dependency-version: 1.11.2
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com >
2025-08-25 05:48:48 +00:00
Oliver Hamlet and GitHub
839821313e
Merge pull request #75 from loot/dependabot/cargo/tempfile-3.21.0
...
Bump tempfile from 3.20.0 to 3.21.0
2025-08-20 17:38:52 +01:00
dependabot[bot] and GitHub
d4714b69ce
Bump tempfile from 3.20.0 to 3.21.0
...
Bumps [tempfile](https://github.com/Stebalien/tempfile ) from 3.20.0 to 3.21.0.
- [Changelog](https://github.com/Stebalien/tempfile/blob/master/CHANGELOG.md )
- [Commits](https://github.com/Stebalien/tempfile/commits )
---
updated-dependencies:
- dependency-name: tempfile
dependency-version: 3.21.0
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com >
2025-08-20 16:33:24 +00:00