Commit Graph
385 Commits
Author SHA1 Message Date
Oliver HamletandGitHub 1d4e84b8d1 Merge pull request #80 from loot/dependabot/cargo/regex-1.11.3
Bump regex from 1.11.2 to 1.11.3
2025-10-03 18:45:22 +01:00
Oliver Hamlet 966bf75a29 Add audits for regex v1.11.2 to v1.11.3 update 2025-10-03 18:39:36 +01:00
dependabot[bot]andOliver Hamlet 33efacb6d8 Bump regex from 1.11.2 to 1.11.3
Bumps [regex](https://github.com/rust-lang/regex) from 1.11.2 to 1.11.3.
- [Release notes](https://github.com/rust-lang/regex/releases)
- [Changelog](https://github.com/rust-lang/regex/blob/master/CHANGELOG.md)
- [Commits](https://github.com/rust-lang/regex/compare/1.11.2...1.11.3)

---
updated-dependencies:
- dependency-name: regex
  dependency-version: 1.11.3
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
2025-10-03 18:39:21 +01:00
Oliver HamletandGitHub 5949e0078c Merge pull request #81 from loot/dependabot/cargo/esplugin-6.1.4
Bump esplugin from 6.1.3 to 6.1.4
2025-10-03 18:25:34 +01:00
Oliver Hamlet 6a66d8fcd0 Add audit for esplugin v6.1.4 as workaround for trust 2025-10-03 18:18:52 +01:00
Oliver HamletandGitHub 84a78c5b52 Merge pull request #78 from loot/dependabot/cargo/libc-0.2.176
Bump libc from 0.2.175 to 0.2.176
2025-10-03 18:05:34 +01:00
Oliver Hamlet a88f424219 Update libc entry in cargo-vet lockfile 2025-10-03 18:02:03 +01:00
dependabot[bot]andGitHub b3bfc160fe Bump libc from 0.2.175 to 0.2.176
Bumps [libc](https://github.com/rust-lang/libc) from 0.2.175 to 0.2.176.
- [Release notes](https://github.com/rust-lang/libc/releases)
- [Changelog](https://github.com/rust-lang/libc/blob/0.2.176/CHANGELOG.md)
- [Commits](https://github.com/rust-lang/libc/compare/0.2.175...0.2.176)

---
updated-dependencies:
- dependency-name: libc
  dependency-version: 0.2.176
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
2025-10-03 13:34:03 +00:00
Oliver Hamlet 4a1fe296ed Check the hashes of files downloaded in CI 2025-10-02 17:40:16 +01:00
Oliver HamletandGitHub b5f1d0677b Merge pull request #82 from loot/dependabot/github_actions/actions/checkout-5
Bump actions/checkout from 4 to 5
2025-10-02 08:02:36 +01:00
dependabot[bot]andGitHub 53b151db04 Bump actions/checkout from 4 to 5
Bumps [actions/checkout](https://github.com/actions/checkout) from 4 to 5.
- [Release notes](https://github.com/actions/checkout/releases)
- [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md)
- [Commits](https://github.com/actions/checkout/compare/v4...v5)

---
updated-dependencies:
- dependency-name: actions/checkout
  dependency-version: '5'
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
2025-10-01 19:17:28 +00:00
Oliver Hamlet 26b3f2f152 Use Dependabot to keep Actions up to date 2025-10-01 20:11:36 +01:00
Oliver Hamlet bd10075c72 Pin third-party Action versions
The versions that are installed have not changed: the hashes correspond to the current values of the version tags that were previously used.
2025-10-01 20:08:54 +01:00
Oliver Hamlet b8bb06581d Install cargo-vet using a Git commit hash
The hash doubles as a checksum of the code that's downloaded and built. Installing from crates.io doesn't provide equivalent functionality.
2025-10-01 20:06:08 +01:00
Oliver Hamlet a5cb37f203 Install cbindgen using a Git commit hash
The hash doubles as a checksum of the code that's downloaded and built. Installing from crates.io doesn't provide equivalent functionality.
2025-10-01 20:01:52 +01:00
Oliver Hamlet 8cfe561712 Pass ---locked to cargo install 2025-10-01 19:58:01 +01:00
dependabot[bot]andGitHub 41e30702c3 Bump esplugin from 6.1.3 to 6.1.4
Bumps [esplugin](https://github.com/Ortham/esplugin) from 6.1.3 to 6.1.4.
- [Changelog](https://github.com/Ortham/esplugin/blob/master/CHANGELOG.md)
- [Commits](https://github.com/Ortham/esplugin/compare/6.1.3...6.1.4)

---
updated-dependencies:
- dependency-name: esplugin
  dependency-version: 6.1.4
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
2025-09-30 03:25:43 +00:00
Oliver Hamlet b1a0840690 Update versions and changelog for v5.3.3 5.3.3 2025-09-29 17:19:59 +01:00
Oliver Hamlet 2ac9a9e374 Add a CI job to run cargo vet 2025-09-28 16:27:40 +01:00
Oliver Hamlet bdeeaee9e9 Use more permissive dependency version selectors
So that dependents have more freedom in choosing versions in their dependency tree.

I've run the tests using the oldest versions allowed by the new specifiers, and they all pass.

The current release of esplugin unnecessarily requires at least unicase v2.8.1, but with that fixed, unicase v2.0.0 is fine.
2025-09-28 16:26:13 +01:00
Oliver Hamlet 940aa22f26 Update errno, rustix, winapi-util, windows-sys
To remove several windows* crates.
2025-09-28 16:26:13 +01:00
Oliver Hamlet a3fab8f8c7 Downgrade crossbeam-deque to an audited version
The differences don't seem to be significant for LCI's usage.
2025-09-28 16:26:13 +01:00
Oliver Hamlet 7469c7ba41 Downgrade walkdir to an audited version
The differences don't seem to be significant for LCI's usage.
2025-09-28 16:26:13 +01:00
Oliver Hamlet e1ad153df2 Downgrade ryu to an audited version
The differences don't seem to be significant for LCI's usage.
2025-09-28 16:26:13 +01:00
Oliver Hamlet 185dd20834 Downgrade syn to an audited version
The differences don't seem to be significant for LCI's usage.
2025-09-28 16:26:13 +01:00