Oliver Hamlet and GitHub
1d4e84b8d1
Merge pull request #80 from loot/dependabot/cargo/regex-1.11.3
...
Bump regex from 1.11.2 to 1.11.3
2025-10-03 18:45:22 +01:00
Oliver Hamlet
966bf75a29
Add audits for regex v1.11.2 to v1.11.3 update
2025-10-03 18:39:36 +01:00
dependabot[bot] and Oliver Hamlet
33efacb6d8
Bump regex from 1.11.2 to 1.11.3
...
Bumps [regex](https://github.com/rust-lang/regex ) from 1.11.2 to 1.11.3.
- [Release notes](https://github.com/rust-lang/regex/releases )
- [Changelog](https://github.com/rust-lang/regex/blob/master/CHANGELOG.md )
- [Commits](https://github.com/rust-lang/regex/compare/1.11.2...1.11.3 )
---
updated-dependencies:
- dependency-name: regex
dependency-version: 1.11.3
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com >
2025-10-03 18:39:21 +01:00
Oliver Hamlet and GitHub
5949e0078c
Merge pull request #81 from loot/dependabot/cargo/esplugin-6.1.4
...
Bump esplugin from 6.1.3 to 6.1.4
2025-10-03 18:25:34 +01:00
Oliver Hamlet
6a66d8fcd0
Add audit for esplugin v6.1.4 as workaround for trust
2025-10-03 18:18:52 +01:00
Oliver Hamlet and GitHub
84a78c5b52
Merge pull request #78 from loot/dependabot/cargo/libc-0.2.176
...
Bump libc from 0.2.175 to 0.2.176
2025-10-03 18:05:34 +01:00
Oliver Hamlet
a88f424219
Update libc entry in cargo-vet lockfile
2025-10-03 18:02:03 +01:00
dependabot[bot] and GitHub
b3bfc160fe
Bump libc from 0.2.175 to 0.2.176
...
Bumps [libc](https://github.com/rust-lang/libc ) from 0.2.175 to 0.2.176.
- [Release notes](https://github.com/rust-lang/libc/releases )
- [Changelog](https://github.com/rust-lang/libc/blob/0.2.176/CHANGELOG.md )
- [Commits](https://github.com/rust-lang/libc/compare/0.2.175...0.2.176 )
---
updated-dependencies:
- dependency-name: libc
dependency-version: 0.2.176
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com >
2025-10-03 13:34:03 +00:00
Oliver Hamlet
4a1fe296ed
Check the hashes of files downloaded in CI
2025-10-02 17:40:16 +01:00
Oliver Hamlet and GitHub
b5f1d0677b
Merge pull request #82 from loot/dependabot/github_actions/actions/checkout-5
...
Bump actions/checkout from 4 to 5
2025-10-02 08:02:36 +01:00
dependabot[bot] and GitHub
53b151db04
Bump actions/checkout from 4 to 5
...
Bumps [actions/checkout](https://github.com/actions/checkout ) from 4 to 5.
- [Release notes](https://github.com/actions/checkout/releases )
- [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md )
- [Commits](https://github.com/actions/checkout/compare/v4...v5 )
---
updated-dependencies:
- dependency-name: actions/checkout
dependency-version: '5'
dependency-type: direct:production
update-type: version-update:semver-major
...
Signed-off-by: dependabot[bot] <support@github.com >
2025-10-01 19:17:28 +00:00
Oliver Hamlet
26b3f2f152
Use Dependabot to keep Actions up to date
2025-10-01 20:11:36 +01:00
Oliver Hamlet
bd10075c72
Pin third-party Action versions
...
The versions that are installed have not changed: the hashes correspond to the current values of the version tags that were previously used.
2025-10-01 20:08:54 +01:00
Oliver Hamlet
b8bb06581d
Install cargo-vet using a Git commit hash
...
The hash doubles as a checksum of the code that's downloaded and built. Installing from crates.io doesn't provide equivalent functionality.
2025-10-01 20:06:08 +01:00
Oliver Hamlet
a5cb37f203
Install cbindgen using a Git commit hash
...
The hash doubles as a checksum of the code that's downloaded and built. Installing from crates.io doesn't provide equivalent functionality.
2025-10-01 20:01:52 +01:00
Oliver Hamlet
8cfe561712
Pass ---locked to cargo install
2025-10-01 19:58:01 +01:00
dependabot[bot] and GitHub
41e30702c3
Bump esplugin from 6.1.3 to 6.1.4
...
Bumps [esplugin](https://github.com/Ortham/esplugin ) from 6.1.3 to 6.1.4.
- [Changelog](https://github.com/Ortham/esplugin/blob/master/CHANGELOG.md )
- [Commits](https://github.com/Ortham/esplugin/compare/6.1.3...6.1.4 )
---
updated-dependencies:
- dependency-name: esplugin
dependency-version: 6.1.4
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com >
2025-09-30 03:25:43 +00:00
Oliver Hamlet
b1a0840690
Update versions and changelog for v5.3.3
5.3.3
2025-09-29 17:19:59 +01:00
Oliver Hamlet
2ac9a9e374
Add a CI job to run cargo vet
2025-09-28 16:27:40 +01:00
Oliver Hamlet
bdeeaee9e9
Use more permissive dependency version selectors
...
So that dependents have more freedom in choosing versions in their dependency tree.
I've run the tests using the oldest versions allowed by the new specifiers, and they all pass.
The current release of esplugin unnecessarily requires at least unicase v2.8.1, but with that fixed, unicase v2.0.0 is fine.
2025-09-28 16:26:13 +01:00
Oliver Hamlet
940aa22f26
Update errno, rustix, winapi-util, windows-sys
...
To remove several windows* crates.
2025-09-28 16:26:13 +01:00
Oliver Hamlet
a3fab8f8c7
Downgrade crossbeam-deque to an audited version
...
The differences don't seem to be significant for LCI's usage.
2025-09-28 16:26:13 +01:00
Oliver Hamlet
7469c7ba41
Downgrade walkdir to an audited version
...
The differences don't seem to be significant for LCI's usage.
2025-09-28 16:26:13 +01:00
Oliver Hamlet
e1ad153df2
Downgrade ryu to an audited version
...
The differences don't seem to be significant for LCI's usage.
2025-09-28 16:26:13 +01:00
Oliver Hamlet
185dd20834
Downgrade syn to an audited version
...
The differences don't seem to be significant for LCI's usage.
2025-09-28 16:26:13 +01:00