Skip to content

Commit 4b29e38

Browse files
committed
build: Audit quote diff 1.0.42 -> 1.0.43
Doing this also caused `cargo-vet` to actually pull in the relevant preceding audits from the imports. Signed-off-by: hashcatHitman <155700084+hashcatHitman@users.noreply.github.com>
1 parent dcd49cb commit 4b29e38

2 files changed

Lines changed: 55 additions & 0 deletions

File tree

supply-chain/audits.toml

Lines changed: 5 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -66,6 +66,11 @@ who = "hashcatHitman <155700084+hashcatHitman@users.noreply.github.com>"
6666
criteria = "safe-to-deploy"
6767
delta = "1.0.41 -> 1.0.42"
6868

69+
[[audits.quote]]
70+
who = "hashcatHitman <155700084+hashcatHitman@users.noreply.github.com>"
71+
criteria = "safe-to-deploy"
72+
delta = "1.0.42 -> 1.0.43"
73+
6974
[[audits.regex-syntax]]
7075
who = "hashcatHitman <155700084+hashcatHitman@users.noreply.github.com>"
7176
criteria = "safe-to-deploy"

supply-chain/imports.lock

Lines changed: 50 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -114,6 +114,56 @@ delta = "1.0.93 -> 1.0.94"
114114
notes = "Minor doc changes and clippy lint adjustments+fixes."
115115
aggregated-from = "https://chromium.googlesource.com/chromium/src/+/main/third_party/rust/chromium_crates_io/supply-chain/audits.toml?format=TEXT"
116116

117+
[[audits.google.audits.quote]]
118+
who = "Lukasz Anforowicz <lukasza@chromium.org>"
119+
criteria = "safe-to-deploy"
120+
version = "1.0.35"
121+
notes = """
122+
Grepped for "unsafe", "crypt", "cipher", "fs", "net" - there were no hits
123+
(except for benign "net" hit in tests and "fs" hit in README.md)
124+
"""
125+
aggregated-from = "https://chromium.googlesource.com/chromium/src/+/main/third_party/rust/chromium_crates_io/supply-chain/audits.toml?format=TEXT"
126+
127+
[[audits.google.audits.quote]]
128+
who = "Adrian Taylor <adetaylor@chromium.org>"
129+
criteria = "safe-to-deploy"
130+
delta = "1.0.35 -> 1.0.36"
131+
aggregated-from = "https://chromium.googlesource.com/chromium/src/+/main/third_party/rust/chromium_crates_io/supply-chain/audits.toml?format=TEXT"
132+
133+
[[audits.google.audits.quote]]
134+
who = "Lukasz Anforowicz <lukasza@chromium.org>"
135+
criteria = "safe-to-deploy"
136+
delta = "1.0.36 -> 1.0.37"
137+
notes = """
138+
The delta just 1) inlines/expands `impl ToTokens` that used to be handled via
139+
`primitive!` macro and 2) adds `impl ToTokens` for `CStr` and `CString`.
140+
"""
141+
aggregated-from = "https://chromium.googlesource.com/chromium/src/+/main/third_party/rust/chromium_crates_io/supply-chain/audits.toml?format=TEXT"
142+
143+
[[audits.google.audits.quote]]
144+
who = "Dustin J. Mitchell <djmitche@chromium.org>"
145+
criteria = "safe-to-deploy"
146+
delta = "1.0.37 -> 1.0.38"
147+
notes = "Still no unsafe"
148+
aggregated-from = "https://chromium.googlesource.com/chromium/src/+/main/third_party/rust/chromium_crates_io/supply-chain/audits.toml?format=TEXT"
149+
150+
[[audits.google.audits.quote]]
151+
who = "Daniel Cheng <dcheng@chromium.org>"
152+
criteria = "safe-to-deploy"
153+
delta = "1.0.38 -> 1.0.39"
154+
notes = "Only minor changes for clippy lints and documentation."
155+
aggregated-from = "https://chromium.googlesource.com/chromium/src/+/main/third_party/rust/chromium_crates_io/supply-chain/audits.toml?format=TEXT"
156+
157+
[[audits.google.audits.quote]]
158+
who = "Lukasz Anforowicz <lukasza@chromium.org>"
159+
criteria = "safe-to-deploy"
160+
delta = "1.0.39 -> 1.0.40"
161+
notes = """
162+
The delta is just a simplification of how `tokens.extend(...)` call is made.
163+
Still no `unsafe` anywhere.
164+
"""
165+
aggregated-from = "https://chromium.googlesource.com/chromium/src/+/main/third_party/rust/chromium_crates_io/supply-chain/audits.toml?format=TEXT"
166+
117167
[[audits.google.audits.regex-syntax]]
118168
who = "Manish Goregaokar <manishearth@google.com>"
119169
criteria = "safe-to-deploy"

0 commit comments

Comments
 (0)