Skip to content

Commit 312b6ec

Browse files
hashcatHitmanhashcatHitman
committed
build: Audit proc-macro2 diff 1.0.104 -> 1.0.105
Doing this also caused `cargo-vet` to actually pull in the relevant preceding audits from the imports. Signed-off-by: hashcatHitman <155700084+hashcatHitman@users.noreply.github.com>
1 parent 5ad8f06 commit 312b6ec

2 files changed

Lines changed: 117 additions & 1 deletion

File tree

‎supply-chain/audits.toml‎

Lines changed: 5 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -51,6 +51,11 @@ who = "hashcatHitman <155700084+hashcatHitman@users.noreply.github.com>"
5151
criteria = "safe-to-deploy"
5252
delta = "1.0.103 -> 1.0.104"
5353

54+
[[audits.proc-macro2]]
55+
who = "hashcatHitman <155700084+hashcatHitman@users.noreply.github.com>"
56+
criteria = "safe-to-deploy"
57+
delta = "1.0.104 -> 1.0.105"
58+
5459
[[audits.unicode-ident]]
5560
who = "hashcatHitman <155700084+hashcatHitman@users.noreply.github.com>"
5661
criteria = "safe-to-deploy"

‎supply-chain/imports.lock‎

Lines changed: 112 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -1,7 +1,118 @@
11

22
# cargo-vet imports lock
33

4-
[audits.google.audits]
4+
[[audits.google.audits.proc-macro2]]
5+
who = "Lukasz Anforowicz <lukasza@chromium.org>"
6+
criteria = "safe-to-deploy"
7+
version = "1.0.78"
8+
notes = """
9+
Grepped for "crypt", "cipher", "fs", "net" - there were no hits
10+
(except for a benign "fs" hit in a doc comment)
11+
12+
Notes from the `unsafe` review can be found in https://crrev.com/c/5385745.
13+
"""
14+
aggregated-from = "https://chromium.googlesource.com/chromium/src/+/main/third_party/rust/chromium_crates_io/supply-chain/audits.toml?format=TEXT"
15+
16+
[[audits.google.audits.proc-macro2]]
17+
who = "Adrian Taylor <adetaylor@chromium.org>"
18+
criteria = "safe-to-deploy"
19+
delta = "1.0.78 -> 1.0.79"
20+
aggregated-from = "https://chromium.googlesource.com/chromium/src/+/main/third_party/rust/chromium_crates_io/supply-chain/audits.toml?format=TEXT"
21+
22+
[[audits.google.audits.proc-macro2]]
23+
who = "Adrian Taylor <adetaylor@chromium.org>"
24+
criteria = "safe-to-deploy"
25+
delta = "1.0.79 -> 1.0.80"
26+
aggregated-from = "https://chromium.googlesource.com/chromium/src/+/main/third_party/rust/chromium_crates_io/supply-chain/audits.toml?format=TEXT"
27+
28+
[[audits.google.audits.proc-macro2]]
29+
who = "Dustin J. Mitchell <djmitche@chromium.org>"
30+
criteria = "safe-to-deploy"
31+
delta = "1.0.80 -> 1.0.81"
32+
notes = "Comment changes only"
33+
aggregated-from = "https://chromium.googlesource.com/chromium/src/+/main/third_party/rust/chromium_crates_io/supply-chain/audits.toml?format=TEXT"
34+
35+
[[audits.google.audits.proc-macro2]]
36+
who = "danakj <danakj@chromium.org>"
37+
criteria = "safe-to-deploy"
38+
delta = "1.0.81 -> 1.0.82"
39+
aggregated-from = "https://chromium.googlesource.com/chromium/src/+/main/third_party/rust/chromium_crates_io/supply-chain/audits.toml?format=TEXT"
40+
41+
[[audits.google.audits.proc-macro2]]
42+
who = "Dustin J. Mitchell <djmitche@chromium.org>"
43+
criteria = "safe-to-deploy"
44+
delta = "1.0.82 -> 1.0.83"
45+
notes = "Substantive change is replacing String with Box<str>, saving memory."
46+
aggregated-from = "https://chromium.googlesource.com/chromium/src/+/main/third_party/rust/chromium_crates_io/supply-chain/audits.toml?format=TEXT"
47+
48+
[[audits.google.audits.proc-macro2]]
49+
who = "Lukasz Anforowicz <lukasza@chromium.org>"
50+
criteria = "safe-to-deploy"
51+
delta = "1.0.83 -> 1.0.84"
52+
notes = "Only doc comment changes in `src/lib.rs`."
53+
aggregated-from = "https://chromium.googlesource.com/chromium/src/+/main/third_party/rust/chromium_crates_io/supply-chain/audits.toml?format=TEXT"
54+
55+
[[audits.google.audits.proc-macro2]]
56+
who = "danakj@chromium.org"
57+
criteria = "safe-to-deploy"
58+
delta = "1.0.84 -> 1.0.85"
59+
notes = "Test-only changes."
60+
aggregated-from = "https://chromium.googlesource.com/chromium/src/+/main/third_party/rust/chromium_crates_io/supply-chain/audits.toml?format=TEXT"
61+
62+
[[audits.google.audits.proc-macro2]]
63+
who = "Lukasz Anforowicz <lukasza@chromium.org>"
64+
criteria = "safe-to-deploy"
65+
delta = "1.0.85 -> 1.0.86"
66+
notes = """
67+
Comment-only changes in `build.rs`.
68+
Reordering of `Cargo.toml` entries.
69+
Just bumping up the version number in `lib.rs`.
70+
Config-related changes in `test_size.rs`.
71+
"""
72+
aggregated-from = "https://chromium.googlesource.com/chromium/src/+/main/third_party/rust/chromium_crates_io/supply-chain/audits.toml?format=TEXT"
73+
74+
[[audits.google.audits.proc-macro2]]
75+
who = "danakj <danakj@chromium.org>"
76+
criteria = "safe-to-deploy"
77+
delta = "1.0.86 -> 1.0.87"
78+
notes = "No new unsafe interactions."
79+
aggregated-from = "https://chromium.googlesource.com/chromium/src/+/main/third_party/rust/chromium_crates_io/supply-chain/audits.toml?format=TEXT"
80+
81+
[[audits.google.audits.proc-macro2]]
82+
who = "Liza Burakova <liza@chromium.org"
83+
criteria = "safe-to-deploy"
84+
delta = "1.0.87 -> 1.0.89"
85+
notes = """
86+
Biggest change is adding error handling in build.rs.
87+
Some config related changes in wrapper.rs.
88+
"""
89+
aggregated-from = "https://chromium.googlesource.com/chromium/src/+/main/third_party/rust/chromium_crates_io/supply-chain/audits.toml?format=TEXT"
90+
91+
[[audits.google.audits.proc-macro2]]
92+
who = "Lukasz Anforowicz <lukasza@chromium.org>"
93+
criteria = "safe-to-deploy"
94+
delta = "1.0.89 -> 1.0.92"
95+
notes = """
96+
I looked at the delta and the previous discussion at
97+
https://chromium-review.googlesource.com/c/chromium/src/+/5385745/3#message-a8e2813129fa3779dab15acede408ee26d67b7f3
98+
and the changes look okay to me (including the `unsafe fn from_str_unchecked`
99+
changes in `wrapper.rs`).
100+
"""
101+
aggregated-from = "https://chromium.googlesource.com/chromium/src/+/main/third_party/rust/chromium_crates_io/supply-chain/audits.toml?format=TEXT"
102+
103+
[[audits.google.audits.proc-macro2]]
104+
who = "Lukasz Anforowicz <lukasza@chromium.org>"
105+
criteria = "safe-to-deploy"
106+
delta = "1.0.92 -> 1.0.93"
107+
notes = "No `unsafe`-related changes."
108+
aggregated-from = "https://chromium.googlesource.com/chromium/src/+/main/third_party/rust/chromium_crates_io/supply-chain/audits.toml?format=TEXT"
109+
110+
[[audits.google.audits.proc-macro2]]
111+
who = "Daniel Cheng <dcheng@chromium.org>"
112+
criteria = "safe-to-deploy"
113+
delta = "1.0.93 -> 1.0.94"
114+
notes = "Minor doc changes and clippy lint adjustments+fixes."
115+
aggregated-from = "https://chromium.googlesource.com/chromium/src/+/main/third_party/rust/chromium_crates_io/supply-chain/audits.toml?format=TEXT"
5116

6117
[audits.hashcatHitman.audits]
7118

0 commit comments

Comments
 (0)