From 79161034290ab445703079d2c029bfb53aabba82 Mon Sep 17 00:00:00 2001 From: Albert Hui Date: Sun, 2 Aug 2026 15:19:26 +0800 Subject: [PATCH 1/5] docs(terms): state Apache-2.0, the licence this repo actually ships docs/terms.md named the MIT Licence while LICENSE and Cargo.toml both declare Apache-2.0. The fleet standardised on Apache-2.0 for its explicit patent grant; the LICENSE file and the crate manifest were migrated and this document was not. The grant sentence listed the MIT permissions verbatim ("use, copy, modify, merge, publish, distribute, sublicense, and/or sell copies"). Apache-2.0 grants a different set, so that sentence is replaced with the wording the rest of the fleet uses. Co-Authored-By: Claude Opus 5 (1M context) --- docs/terms.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/docs/terms.md b/docs/terms.md index 47fa7532..2476593a 100644 --- a/docs/terms.md +++ b/docs/terms.md @@ -8,7 +8,7 @@ ## Licence -blazehash is released under the [MIT Licence](https://github.com/SecurityRonin/blazehash/blob/main/LICENSE). You are free to use, copy, modify, merge, publish, distribute, sublicense, and/or sell copies of the software, subject to the licence terms. +blazehash is released under the [Apache License 2.0](https://github.com/SecurityRonin/blazehash/blob/main/LICENSE). You may use, modify, and distribute it subject to the terms of that licence. --- From bd49437be950f383a8f51a8878c9a38199fc42a6 Mon Sep 17 00:00:00 2001 From: Albert Hui Date: Fri, 7 Aug 2026 06:50:55 -0700 Subject: [PATCH 2/5] fix(deps): move yara-x to ~1.7 so wasmtime lands on a PATCHED release `deny` was failing on a genuine, unignored vulnerability: error[vulnerability]: Stores can mix up type indices between engines wasmtime 25.0.3 (RUSTSEC-2026-0222 / GHSA-hgjw-h833-99q9) wasmtime v25.0.3 <- yara-x v0.9.0 <- blazehash v0.2.6 Fixed by upgrading, not by ignoring. The version choice is counter-intuitive and worth recording, because the obvious move is wrong. RUSTSEC-2026-0222 lists these patched ranges, and only these: >= 24.0.12, < 25.0.0 >= 36.0.13, < 37.0.0 >= 46.0.2, < 47.0.0 >= 47.0.3 Upstream only backported to supported release branches, so most wasmtime lines have no fix at all. Checking every published yara-x against those ranges (its wasmtime requirement is a caret, so what matters is whether the range INTERSECTS a patched range, not where it starts): yara-x 0.9 -> wasmtime ^25 -> highest 25.0.3 NOT patched (today) yara-x 1.7 -> wasmtime ^36.0.2 -> reaches 36.0.13 PATCHED yara-x 1.8 -> wasmtime ^37.0.1 -> highest 37.0.3 NOT patched yara-x 1.19 -> wasmtime ^43.0.2 -> highest 43.0.2 NOT patched So jumping to the newest yara-x (1.19) would have left `deny` just as red. The 1.7 line is currently the ONLY yara-x that resolves to a patched wasmtime, which is why the requirement is `~1.7` rather than `1.19` or a bare caret. Pinned the sibling crates to 1.7.1 too: their requirements are carets, so yara-x-proto/-parser/-macros floated to 1.18/1.16/1.19 against a 1.7.1 yara-x and broke its build script ("no field `rust_module` on type `ModuleOptions`") -- an upstream semver problem, not ours. REMOVAL CONDITION for the `~1.7` pin: widen it as soon as yara-x ships a release whose wasmtime requirement can reach >= 46.0.2. Until then, widening means going back to an unpatched wasmtime. This upgrade also let thirteen Wasmtime ignores be DELETED rather than added to. They carried the note "will resolve when yara-x upgrades its wasmtime dependency"; that is now true, so keeping them would have left suppressions whose stated reason no longer holds -- the failure mode where a stale ignore survives review by looking diligent. Removed sixteen in total: RUSTSEC-2026-0020/0021/0085/0086/0087/0088/0089/0091/0092/0093/0094/0095/0096 (wasmtime -- genuinely fixed by this upgrade) RUSTSEC-2025-0046 (fxhash), RUSTSEC-2025-0118 (tonic) (crates left the audited graph in the upgrade) RUSTSEC-2024-0384 (instant) (cargo-deny was ALREADY reporting this as advisory-not-detected before this change -- it was stale independently of the upgrade) cargo-deny now reports zero advisory-not-detected entries, so every ignore that remains is one it actually encounters. Licences: allowed `bzip2-1.0.6`, which arrives as yara-x -> zip -> bzip2 -> libbz2-rs-sys. It is the original bzip2/libbzip2 licence -- BSD-style, attribution plus a no-misrepresentation clause, no copyleft and no source -disclosure obligation -- so it belongs to the same permissive class as the BSD-2/3-Clause and Zlib entries already allowed, and is FSF-recognised as free and GPL-compatible. REVIEWER NOTE -- this expands the shipped dependency set. Thirteen crate names that were not previously in the graph now are, and they are exempted (i.e. nobody has audited them), not certified: addr2line bincode_derive bzip2 libbz2-rs-sys lzma-rust2 nom ppmd-rust psl psl-types unty virtue wasmtime-internal-asm-macros zeroize_derive That is a supply-chain decision rather than bookkeeping, so it is called out here explicitly rather than buried in a regenerated file. The other 19 unvetted entries are version churn on names already in the graph. Verification on this branch: cargo deny check advisories ok, bans ok, licenses ok, sources ok (0 advisory-not-detected) cargo test --all-features 104 suites, 987 passed, 0 failed (includes tests/yara_tests.rs) cargo +1.88.0 check --all-features clean (MSRV job's toolchain; the upgrade does not raise the floor) cargo clippy --all-features --all-targets 0 errors cargo fmt --all --check clean cargo vet --locked Succeeded (177 audited, 7 partial, 616 exempted) CONTROL (proving the gate can still fail): restoring the previous Cargo.toml/Cargo.lock/deny.toml made `cargo deny check advisories` exit 1 again with the same "Stores can mix up type indices between engines" against wasmtime 25.0.3; re-applying the change returned it to exit 0, and all three restored files are byte-identical to the committed ones. --- Cargo.lock | 812 +++++++++++++++++++------------------- Cargo.toml | 2 +- deny.toml | 48 +-- supply-chain/config.toml | 186 ++++----- supply-chain/imports.lock | 722 ++++++++++++++++++++------------- 5 files changed, 944 insertions(+), 826 deletions(-) diff --git a/Cargo.lock b/Cargo.lock index 06cadd3a..401902d4 100644 --- a/Cargo.lock +++ b/Cargo.lock @@ -2,6 +2,15 @@ # It is not intended for manual editing. version = 4 +[[package]] +name = "addr2line" +version = "0.25.1" +source = "registry+https://github.com/rust-lang/crates.io-index" +checksum = "1b5d307320b3181d6d7954e663bd7c774a838b8220fe0593c86d9fb09f498b4b" +dependencies = [ + "gimli 0.32.3", +] + [[package]] name = "adler2" version = "2.0.1" @@ -81,9 +90,9 @@ dependencies = [ [[package]] name = "annotate-snippets" -version = "0.11.5" +version = "0.12.5" source = "registry+https://github.com/rust-lang/crates.io-index" -checksum = "710e8eae58854cdc1790fcb56cca04d712a17be849eeb81da2a724bf4bae2bc4" +checksum = "96401ca08501972288ecbcde33902fce858bf73fbcbdf91dab8c3a9544e106bb" dependencies = [ "anstyle", "unicode-width 0.2.0", @@ -125,7 +134,7 @@ version = "1.1.5" source = "registry+https://github.com/rust-lang/crates.io-index" checksum = "40c48f72fd53cd289104fc64099abca73db4166ad86ea0b4341abe65af83dadc" dependencies = [ - "windows-sys 0.61.2", + "windows-sys 0.60.2", ] [[package]] @@ -136,7 +145,7 @@ checksum = "291e6a250ff86cd4a820112fb8898808a366d8f9f58ce16d1f538353ad55747d" dependencies = [ "anstyle", "once_cell_polyfill", - "windows-sys 0.61.2", + "windows-sys 0.60.2", ] [[package]] @@ -145,15 +154,6 @@ version = "1.0.102" source = "registry+https://github.com/rust-lang/crates.io-index" checksum = "7f202df86484c868dbad7eaa557ef785d5c66295e41b460ef922eca0723b842c" -[[package]] -name = "ar_archive_writer" -version = "0.5.1" -source = "registry+https://github.com/rust-lang/crates.io-index" -checksum = "7eb93bbb63b9c227414f6eb3a0adfddca591a8ce1e9b60661bb08969b87e340b" -dependencies = [ - "object 0.37.3", -] - [[package]] name = "arbitrary" version = "1.4.2" @@ -177,9 +177,13 @@ dependencies = [ [[package]] name = "array-bytes" -version = "6.2.3" +version = "9.3.0" source = "registry+https://github.com/rust-lang/crates.io-index" -checksum = "5d5dde061bd34119e902bbb2d9b90c5692635cf59fb91d582c2b68043f1b8293" +checksum = "27d55334c98d756b32dcceb60248647ab34f027690f87f9a362fd292676ee927" +dependencies = [ + "smallvec", + "thiserror 2.0.18", +] [[package]] name = "arrayref" @@ -544,7 +548,7 @@ dependencies = [ "memchr", "num", "regex", - "regex-syntax 0.8.10", + "regex-syntax", ] [[package]] @@ -561,7 +565,7 @@ dependencies = [ "memchr", "num-traits", "regex", - "regex-syntax 0.8.10", + "regex-syntax", ] [[package]] @@ -581,25 +585,25 @@ dependencies = [ [[package]] name = "asn1-rs" -version = "0.6.2" +version = "0.7.2" source = "registry+https://github.com/rust-lang/crates.io-index" -checksum = "5493c3bedbacf7fd7382c6346bbd66687d12bbaad3a89a2d2c303ee6cf20b048" +checksum = "b7f43a50ac4fdca5df8e885c21b835997f0a1cdee65494a6847694a98652d9d8" dependencies = [ "asn1-rs-derive", "asn1-rs-impl", "displaydoc", - "nom", + "nom 7.1.3", "num-traits", "rusticata-macros", - "thiserror 1.0.69", + "thiserror 2.0.18", "time", ] [[package]] name = "asn1-rs-derive" -version = "0.5.1" +version = "0.6.0" source = "registry+https://github.com/rust-lang/crates.io-index" -checksum = "965c2d33e53cb6b267e148a4cb0760bc01f4904c1cd4bb4002a085bb016d1490" +checksum = "3109e49b1e4909e9db6515a30c633684d68cdeaa252f215214cb4fa1a5bfee2c" dependencies = [ "proc-macro2", "quote", @@ -732,6 +736,26 @@ dependencies = [ "serde", ] +[[package]] +name = "bincode" +version = "2.0.1" +source = "registry+https://github.com/rust-lang/crates.io-index" +checksum = "36eaf5d7b090263e8150820482d5d93cd964a81e4019913c972f4edcc6edb740" +dependencies = [ + "bincode_derive", + "serde", + "unty", +] + +[[package]] +name = "bincode_derive" +version = "2.0.1" +source = "registry+https://github.com/rust-lang/crates.io-index" +checksum = "bf95709a440f45e986983918d0e8a1f30a9b1df04918fc828670606804ac3c09" +dependencies = [ + "virtue", +] + [[package]] name = "bit-set" version = "0.6.0" @@ -765,12 +789,6 @@ dependencies = [ "serde_core", ] -[[package]] -name = "bitmask" -version = "0.5.0" -source = "registry+https://github.com/rust-lang/crates.io-index" -checksum = "5da9b3d9f6f585199287a473f4f8dfab6566cf827d15c00c219f53c645687ead" - [[package]] name = "bitvec" version = "1.0.1" @@ -816,7 +834,7 @@ dependencies = [ "arrow 54.3.1", "assert_cmd", "base64 0.22.1", - "bincode", + "bincode 1.3.3", "blake2", "blake3", "blazehash-core", @@ -994,6 +1012,9 @@ name = "bumpalo" version = "3.20.2" source = "registry+https://github.com/rust-lang/crates.io-index" checksum = "5d20789868f4b01b2f2caec9f5c4e0213b41e3e5702a50157d699ae31ced2fcb" +dependencies = [ + "allocator-api2", +] [[package]] name = "bytemuck" @@ -1019,6 +1040,15 @@ version = "1.11.1" source = "registry+https://github.com/rust-lang/crates.io-index" checksum = "1e748733b7cbc798e1434b6ac524f0c1ff2ab456fe201501e6497c8417a4fc33" +[[package]] +name = "bzip2" +version = "0.6.1" +source = "registry+https://github.com/rust-lang/crates.io-index" +checksum = "f3a53fac24f34a81bc9954b5d6cfce0c21e18ec6959f44f56e8e90e4bb7c346c" +dependencies = [ + "libbz2-rs-sys", +] + [[package]] name = "bzip2-rs" version = "0.1.2" @@ -1385,20 +1415,38 @@ dependencies = [ "libc", ] +[[package]] +name = "cranelift-assembler-x64" +version = "0.123.13" +source = "registry+https://github.com/rust-lang/crates.io-index" +checksum = "5f8e1303ae2128891cb59691a74de4547dd208bc8511a2f287cca2b93bb3c728" +dependencies = [ + "cranelift-assembler-x64-meta", +] + +[[package]] +name = "cranelift-assembler-x64-meta" +version = "0.123.13" +source = "registry+https://github.com/rust-lang/crates.io-index" +checksum = "58b2740a5936332028d9a1e8f29a199de2fd386e426d44da5fea70cf8e3f8e75" +dependencies = [ + "cranelift-srcgen", +] + [[package]] name = "cranelift-bforest" -version = "0.112.3" +version = "0.123.13" source = "registry+https://github.com/rust-lang/crates.io-index" -checksum = "69792bd40d21be8059f7c709f44200ded3bbd073df7eb3fa3c282b387c7ffa5b" +checksum = "37fd128d3629fb105e433bda09744c5a2959cd1da04617a455c4cc17dff1ebef" dependencies = [ "cranelift-entity", ] [[package]] name = "cranelift-bitset" -version = "0.112.3" +version = "0.123.13" source = "registry+https://github.com/rust-lang/crates.io-index" -checksum = "38da1eb6f7d8cdfa92f05acfae63c9a1d7a337e49ce7a2d0769c7fa03a2613a5" +checksum = "24a88f6d5a6cf6fcbc6386415d48948094721dfa4585d6615938b11ca938f20a" dependencies = [ "serde", "serde_derive", @@ -1406,11 +1454,12 @@ dependencies = [ [[package]] name = "cranelift-codegen" -version = "0.112.3" +version = "0.123.13" source = "registry+https://github.com/rust-lang/crates.io-index" -checksum = "709f5567a2bff9f06edf911a7cb5ebb091e4c81701714dc6ab574d08b4a69a0d" +checksum = "daa4a357d030bdd586d8fe3da56b394f7f6b6ded506e59f945e7b32b1e126b71" dependencies = [ "bumpalo", + "cranelift-assembler-x64", "cranelift-bforest", "cranelift-bitset", "cranelift-codegen-meta", @@ -1418,44 +1467,51 @@ dependencies = [ "cranelift-control", "cranelift-entity", "cranelift-isle", - "gimli 0.29.0", - "hashbrown 0.14.5", + "gimli 0.32.3", + "hashbrown 0.15.5", "log", + "pulley-interpreter", "regalloc2", "rustc-hash 2.1.2", + "serde", "smallvec", "target-lexicon", + "wasmtime-internal-math", ] [[package]] name = "cranelift-codegen-meta" -version = "0.112.3" +version = "0.123.13" source = "registry+https://github.com/rust-lang/crates.io-index" -checksum = "72d39a6b194c069fd091ca1f17b9d86ff1a4627ccad8806095828f61989a691f" +checksum = "4121e36a8757dea6fb237435ee5095eba25bc13ecc2eaee57eb9bffd4b27784f" dependencies = [ + "cranelift-assembler-x64-meta", "cranelift-codegen-shared", + "cranelift-srcgen", + "heck 0.5.0", + "pulley-interpreter", ] [[package]] name = "cranelift-codegen-shared" -version = "0.112.3" +version = "0.123.13" source = "registry+https://github.com/rust-lang/crates.io-index" -checksum = "18f81aefad1f80ed4132ae33f40b92779eeb57edeb1e28bb24424a4098c963a2" +checksum = "5173265fc30b9e42205cf06dfca9a272ee949667ce4115d975ed2c08d466e2f8" [[package]] name = "cranelift-control" -version = "0.112.3" +version = "0.123.13" source = "registry+https://github.com/rust-lang/crates.io-index" -checksum = "6adbaac785ad4683c4f199686f9e15c1471f52ae2f4c013a3be039b4719db754" +checksum = "9b6ca8a393e66dc13f915c6f456bdcf496d78fac4995792f7022b7806352d7a4" dependencies = [ "arbitrary", ] [[package]] name = "cranelift-entity" -version = "0.112.3" +version = "0.123.13" source = "registry+https://github.com/rust-lang/crates.io-index" -checksum = "70b85ed43567e13782cd1b25baf42a8167ee57169a60dfd3d7307c6ca3839da0" +checksum = "e609d9ba416bc26d774f343295a1d411515248a6a6d83d5f7492a0dd919569fa" dependencies = [ "cranelift-bitset", "serde", @@ -1464,9 +1520,9 @@ dependencies = [ [[package]] name = "cranelift-frontend" -version = "0.112.3" +version = "0.123.13" source = "registry+https://github.com/rust-lang/crates.io-index" -checksum = "8349f71373bb69c6f73992c6c1606236a66c8134e7a60e04e03fbd64b1aa7dcf" +checksum = "90a3a277b1a0aff1123f6bae61c080a4bcb6df964829ed427f98e18dff14257f" dependencies = [ "cranelift-codegen", "log", @@ -1476,15 +1532,15 @@ dependencies = [ [[package]] name = "cranelift-isle" -version = "0.112.3" +version = "0.123.13" source = "registry+https://github.com/rust-lang/crates.io-index" -checksum = "464a6b958ce05e0c237c8b25508012b6c644e8c37348213a8c786ba29e28cfdb" +checksum = "be53dd9b3a4cbeb9ced45c4a543ea8417ccfb334c3ba1cbb2233f4b25fb2531f" [[package]] name = "cranelift-native" -version = "0.112.3" +version = "0.123.13" source = "registry+https://github.com/rust-lang/crates.io-index" -checksum = "ffc4acaf6894ee323ff4e9ce786bec09f0ebbe49941e8012f1c1052f1d965034" +checksum = "ca62ab1d9f48cad97da5843b913ccf96c3dfde935af5d750cb5a6d367ccfb262" dependencies = [ "cranelift-codegen", "libc", @@ -1492,20 +1548,10 @@ dependencies = [ ] [[package]] -name = "cranelift-wasm" -version = "0.112.3" +name = "cranelift-srcgen" +version = "0.123.13" source = "registry+https://github.com/rust-lang/crates.io-index" -checksum = "b878860895cca97454ef8d8b12bfda9d0889dd49efee175dba78d54ff8363ec2" -dependencies = [ - "cranelift-codegen", - "cranelift-entity", - "cranelift-frontend", - "itertools 0.12.1", - "log", - "smallvec", - "wasmparser 0.217.1", - "wasmtime-types", -] +checksum = "a13b72860f54a2a19d3756bd47575fd8bddeafd6e5bbbf16372cdfebc482628a" [[package]] name = "crc" @@ -1826,13 +1872,13 @@ dependencies = [ [[package]] name = "der-parser" -version = "9.0.0" +version = "10.0.0" source = "registry+https://github.com/rust-lang/crates.io-index" -checksum = "5cd0a5c643689626bec213c4d8bd4d96acc8ffdb4ad4bb6bc16abf27d5f4b553" +checksum = "07da5016415d5a3c4dd39b11ed26f915f52fc4e0dc197d87908bc916e51bc1a6" dependencies = [ "asn1-rs", "displaydoc", - "nom", + "nom 7.1.3", "num-bigint", "num-traits", "rusticata-macros", @@ -2083,18 +2129,6 @@ version = "1.0.0" source = "registry+https://github.com/rust-lang/crates.io-index" checksum = "34aa73646ffb006b8f5147f3dc182bd4bcb190227ce861fc4a4844bf8e3cb2c0" -[[package]] -name = "enum_dispatch" -version = "0.3.13" -source = "registry+https://github.com/rust-lang/crates.io-index" -checksum = "aa18ce2bc66555b3218614519ac839ddb759a7d6720732f979ef8d13be147ecd" -dependencies = [ - "once_cell", - "proc-macro2", - "quote", - "syn 2.0.117", -] - [[package]] name = "equivalent" version = "1.0.2" @@ -2108,7 +2142,7 @@ source = "registry+https://github.com/rust-lang/crates.io-index" checksum = "39cab71617ae0d63f51a36d69f866391735b51691dbda63cf6f96d042b63efeb" dependencies = [ "libc", - "windows-sys 0.61.2", + "windows-sys 0.52.0", ] [[package]] @@ -2267,20 +2301,6 @@ dependencies = [ "spin", ] -[[package]] -name = "fmmap" -version = "0.3.3" -source = "registry+https://github.com/rust-lang/crates.io-index" -checksum = "6099ab52d5329340a3014f60ca91bc892181ae32e752360d07be9295924dcb0b" -dependencies = [ - "byteorder", - "bytes", - "enum_dispatch", - "fs4", - "memmapix", - "parse-display", -] - [[package]] name = "fnv" version = "1.0.7" @@ -2344,16 +2364,6 @@ dependencies = [ "percent-encoding", ] -[[package]] -name = "fs4" -version = "0.6.6" -source = "registry+https://github.com/rust-lang/crates.io-index" -checksum = "2eeb4ed9e12f43b7fa0baae3f9cdda28352770132ef2e09a23760c29cae8bd47" -dependencies = [ - "rustix 0.38.44", - "windows-sys 0.48.0", -] - [[package]] name = "fsevent-sys" version = "4.1.0" @@ -2573,9 +2583,9 @@ dependencies = [ [[package]] name = "gimli" -version = "0.29.0" +version = "0.32.3" source = "registry+https://github.com/rust-lang/crates.io-index" -checksum = "40ecd4077b5ae9fd2e9e169b102c6c330d0605168eb0e8bf79952b256dbefffd" +checksum = "e629b9b98ef3dd8afe6ca2bd0f89306cec16d43d907889945bc5d6687f2f13c7" dependencies = [ "fallible-iterator 0.3.0", "indexmap 2.14.0", @@ -2609,7 +2619,7 @@ dependencies = [ "bstr", "log", "regex-automata", - "regex-syntax 0.8.10", + "regex-syntax", ] [[package]] @@ -2757,6 +2767,7 @@ dependencies = [ "allocator-api2", "equivalent", "foldhash", + "serde", ] [[package]] @@ -3320,18 +3331,18 @@ checksum = "a6cb138bb79a146c1bd460005623e142ef0181e3d0219cb493e02f7d08a35695" [[package]] name = "itertools" -version = "0.12.1" +version = "0.13.0" source = "registry+https://github.com/rust-lang/crates.io-index" -checksum = "ba291022dbbd398a455acf126c1e341954079855bc60dfdda641363bd6922569" +checksum = "413ee7dfc52ee1a4949ceeb7dbc8a33f2d6c088194d9f922fb8318faf1f01186" dependencies = [ "either", ] [[package]] name = "itertools" -version = "0.13.0" +version = "0.14.0" source = "registry+https://github.com/rust-lang/crates.io-index" -checksum = "413ee7dfc52ee1a4949ceeb7dbc8a33f2d6c088194d9f922fb8318faf1f01186" +checksum = "2b192c782037fadd9cfa75548310488aabdbf3d2da73885b31bd0abd03351285" dependencies = [ "either", ] @@ -3354,7 +3365,7 @@ dependencies = [ "portable-atomic", "portable-atomic-util", "serde_core", - "windows-sys 0.61.2", + "windows-sys 0.52.0", ] [[package]] @@ -3626,6 +3637,12 @@ dependencies = [ "lexical-util", ] +[[package]] +name = "libbz2-rs-sys" +version = "0.2.5" +source = "registry+https://github.com/rust-lang/crates.io-index" +checksum = "34b357333733e8260735ba5894eb928c02ecc69c78715f01a8019e7fa7f2db4c" + [[package]] name = "libc" version = "0.2.184" @@ -3785,33 +3802,34 @@ checksum = "5e5032e24019045c762d3c0f28f5b6b8bbf38563a65908389bf7978758920897" [[package]] name = "logos" -version = "0.14.4" +version = "0.15.1" source = "registry+https://github.com/rust-lang/crates.io-index" -checksum = "7251356ef8cb7aec833ddf598c6cb24d17b689d20b993f9d11a3d764e34e6458" +checksum = "ff472f899b4ec2d99161c51f60ff7075eeb3097069a36050d8037a6325eb8154" dependencies = [ "logos-derive", ] [[package]] name = "logos-codegen" -version = "0.14.4" +version = "0.15.1" source = "registry+https://github.com/rust-lang/crates.io-index" -checksum = "59f80069600c0d66734f5ff52cc42f2dabd6b29d205f333d61fd7832e9e9963f" +checksum = "192a3a2b90b0c05b27a0b2c43eecdb7c415e29243acc3f89cc8247a5b693045c" dependencies = [ "beef", "fnv", "lazy_static", "proc-macro2", "quote", - "regex-syntax 0.8.10", + "regex-syntax", + "rustc_version", "syn 2.0.117", ] [[package]] name = "logos-derive" -version = "0.14.4" +version = "0.15.1" source = "registry+https://github.com/rust-lang/crates.io-index" -checksum = "24fb722b06a9dc12adb0963ed585f19fc61dc5413e6a9be9422ef92c091e731d" +checksum = "605d9697bcd5ef3a42d38efc51541aa3d6a4a25f7ab6d1ed0da5ac632a26b470" dependencies = [ "logos-codegen", ] @@ -3850,6 +3868,16 @@ dependencies = [ "crc", ] +[[package]] +name = "lzma-rust2" +version = "0.13.0" +source = "registry+https://github.com/rust-lang/crates.io-index" +checksum = "c60a23ffb90d527e23192f1246b14746e2f7f071cb84476dd879071696c18a4a" +dependencies = [ + "crc", + "sha2", +] + [[package]] name = "mach2" version = "0.4.3" @@ -3911,30 +3939,12 @@ dependencies = [ "libc", ] -[[package]] -name = "memmapix" -version = "0.7.6" -source = "registry+https://github.com/rust-lang/crates.io-index" -checksum = "f517ab414225d5f1755bd284d9545bd08a72a3958b3c6384d72e95de9cc1a1d3" -dependencies = [ - "rustix 0.38.44", -] - [[package]] name = "memo-map" version = "0.3.3" source = "registry+https://github.com/rust-lang/crates.io-index" checksum = "38d1115007560874e373613744c6fba374c17688327a71c1476d1a5954cc857b" -[[package]] -name = "memoffset" -version = "0.9.1" -source = "registry+https://github.com/rust-lang/crates.io-index" -checksum = "488016bfae457b036d996092f6cb448677611ce4449e970ceaf42695203f218a" -dependencies = [ - "autocfg", -] - [[package]] name = "memx" version = "0.1.32" @@ -4122,6 +4132,15 @@ dependencies = [ "minimal-lexical", ] +[[package]] +name = "nom" +version = "8.0.0" +source = "registry+https://github.com/rust-lang/crates.io-index" +checksum = "df9761775871bdef83bee530e60050f7e54b1105350d6884eb0fb4f46c2f9405" +dependencies = [ + "memchr", +] + [[package]] name = "normalize-line-endings" version = "0.3.0" @@ -4265,9 +4284,9 @@ dependencies = [ [[package]] name = "object" -version = "0.36.7" +version = "0.37.3" source = "registry+https://github.com/rust-lang/crates.io-index" -checksum = "62948e14d923ea95ea2c7c86c71013138b66525b86bdc08d2dcc262bdb497b87" +checksum = "ff76201f031d8863c38aa7f905eca4f53abbfa15f609db4277d44cd8938f33fe" dependencies = [ "crc32fast", "hashbrown 0.15.5", @@ -4275,15 +4294,6 @@ dependencies = [ "memchr", ] -[[package]] -name = "object" -version = "0.37.3" -source = "registry+https://github.com/rust-lang/crates.io-index" -checksum = "ff76201f031d8863c38aa7f905eca4f53abbfa15f609db4277d44cd8938f33fe" -dependencies = [ - "memchr", -] - [[package]] name = "oci-distribution" version = "0.11.0" @@ -4311,9 +4321,9 @@ dependencies = [ [[package]] name = "oid-registry" -version = "0.7.1" +version = "0.8.1" source = "registry+https://github.com/rust-lang/crates.io-index" -checksum = "a8d8034d9489cdaf79228eb9f6a3b8d7bb32ba00d6645ebd48eef4077ceb5bd9" +checksum = "12f40cff3dde1b6087cc5d5f5d4d65712f34016a03ed60e9c08dcc392736b5b7" dependencies = [ "asn1-rs", ] @@ -4564,32 +4574,6 @@ dependencies = [ "zstd", ] -[[package]] -name = "parse-display" -version = "0.8.2" -source = "registry+https://github.com/rust-lang/crates.io-index" -checksum = "c6509d08722b53e8dafe97f2027b22ccbe3a5db83cb352931e9716b0aa44bc5c" -dependencies = [ - "once_cell", - "parse-display-derive", - "regex", -] - -[[package]] -name = "parse-display-derive" -version = "0.8.2" -source = "registry+https://github.com/rust-lang/crates.io-index" -checksum = "68517892c8daf78da08c0db777fcc17e07f2f63ef70041718f8a7630ad84f341" -dependencies = [ - "once_cell", - "proc-macro2", - "quote", - "regex", - "regex-syntax 0.7.5", - "structmeta", - "syn 2.0.117", -] - [[package]] name = "password-hash" version = "0.5.0" @@ -4769,6 +4753,12 @@ version = "0.2.0" source = "registry+https://github.com/rust-lang/crates.io-index" checksum = "439ee305def115ba05938db6eb1644ff94165c5ab5e9420d1c1bcedbba909391" +[[package]] +name = "ppmd-rust" +version = "1.4.0" +source = "registry+https://github.com/rust-lang/crates.io-index" +checksum = "efca4c95a19a79d1c98f791f10aebd5c1363b473244630bb7dbde1dc98455a24" + [[package]] name = "ppv-lite86" version = "0.2.21" @@ -4945,13 +4935,41 @@ dependencies = [ ] [[package]] -name = "psm" -version = "0.1.30" +name = "psl" +version = "2.1.223" source = "registry+https://github.com/rust-lang/crates.io-index" -checksum = "3852766467df634d74f0b2d7819bf8dc483a0eb2e3b0f50f756f9cfe8b0d18d8" +checksum = "c0dedad316e05de220cbf3fd8bfb69f3df8755dde2d7d479211827b595168a93" dependencies = [ - "ar_archive_writer", - "cc", + "psl-types", +] + +[[package]] +name = "psl-types" +version = "2.0.11" +source = "registry+https://github.com/rust-lang/crates.io-index" +checksum = "33cb294fe86a74cbcf50d4445b37da762029549ebeea341421c7c70370f86cac" + +[[package]] +name = "pulley-interpreter" +version = "36.0.13" +source = "registry+https://github.com/rust-lang/crates.io-index" +checksum = "2662666315cb90dfb4d99a652ee053d4d8598f71c474209e84da031ca56ae5a4" +dependencies = [ + "cranelift-bitset", + "log", + "pulley-macros", + "wasmtime-internal-math", +] + +[[package]] +name = "pulley-macros" +version = "36.0.13" +source = "registry+https://github.com/rust-lang/crates.io-index" +checksum = "bb9a7d9ed2618f94b6d054aba3eb2768c9b489fe16b4ef8847fbc6ed41b707bb" +dependencies = [ + "proc-macro2", + "quote", + "syn 2.0.117", ] [[package]] @@ -5220,14 +5238,15 @@ dependencies = [ [[package]] name = "regalloc2" -version = "0.10.2" +version = "0.12.2" source = "registry+https://github.com/rust-lang/crates.io-index" -checksum = "12908dbeb234370af84d0579b9f68258a0f67e201412dd9a2814e6f45b2fc0f0" +checksum = "5216b1837de2149f8bc8e6d5f88a9326b63b8c836ed58ce4a0a29ec736a59734" dependencies = [ - "hashbrown 0.14.5", + "allocator-api2", + "bumpalo", + "hashbrown 0.15.5", "log", "rustc-hash 2.1.2", - "slice-group-by", "smallvec", ] @@ -5240,7 +5259,7 @@ dependencies = [ "aho-corasick", "memchr", "regex-automata", - "regex-syntax 0.8.10", + "regex-syntax", ] [[package]] @@ -5251,15 +5270,9 @@ checksum = "6e1dd4122fc1595e8162618945476892eefca7b88c52820e74af6262213cae8f" dependencies = [ "aho-corasick", "memchr", - "regex-syntax 0.8.10", + "regex-syntax", ] -[[package]] -name = "regex-syntax" -version = "0.7.5" -source = "registry+https://github.com/rust-lang/crates.io-index" -checksum = "dbb5fb1acd8a1a18b3dd5be62d25485eb770e05afb408a9627d14d451bae12da" - [[package]] name = "regex-syntax" version = "0.8.10" @@ -5389,13 +5402,12 @@ checksum = "323c417e1d9665a65b263ec744ba09030cfb277e9daa0b018a4ab62e57bc8189" [[package]] name = "rowan" -version = "0.15.18" +version = "0.16.1" source = "registry+https://github.com/rust-lang/crates.io-index" -checksum = "62f509095fc8cc0c8c8564016771d458079c11a8d857e65861f045145c0d3208" +checksum = "417a3a9f582e349834051b8a10c8d71ca88da4211e4093528e36b9845f6b5f21" dependencies = [ "countme", "hashbrown 0.14.5", - "memoffset", "rustc-hash 1.1.0", "text-size", ] @@ -5499,7 +5511,7 @@ version = "4.1.0" source = "registry+https://github.com/rust-lang/crates.io-index" checksum = "faf0c4a6ece9950b9abdb62b1cfcf2a68b3b67a10ba445b3bb85be2a293d0632" dependencies = [ - "nom", + "nom 7.1.3", ] [[package]] @@ -5512,7 +5524,7 @@ dependencies = [ "errno", "libc", "linux-raw-sys 0.4.15", - "windows-sys 0.59.0", + "windows-sys 0.52.0", ] [[package]] @@ -5525,7 +5537,7 @@ dependencies = [ "errno", "libc", "linux-raw-sys 0.12.1", - "windows-sys 0.61.2", + "windows-sys 0.52.0", ] [[package]] @@ -5938,12 +5950,6 @@ version = "0.4.12" source = "registry+https://github.com/rust-lang/crates.io-index" checksum = "0c790de23124f9ab44544d7ac05d60440adc586479ce501c1d6d7da3cd8c9cf5" -[[package]] -name = "slice-group-by" -version = "0.3.1" -source = "registry+https://github.com/rust-lang/crates.io-index" -checksum = "826167069c09b99d56f31e9ae5c99049e932a98c9dc2dac47645b08dbbf76ba7" - [[package]] name = "slotmap" version = "1.1.1" @@ -5984,7 +5990,7 @@ source = "registry+https://github.com/rust-lang/crates.io-index" checksum = "3a766e1110788c36f4fa1c2b71b387a7815aa65f88ce0229841826633d93723e" dependencies = [ "libc", - "windows-sys 0.61.2", + "windows-sys 0.60.2", ] [[package]] @@ -6025,19 +6031,13 @@ dependencies = [ "der 0.8.0", ] -[[package]] -name = "sptr" -version = "0.3.2" -source = "registry+https://github.com/rust-lang/crates.io-index" -checksum = "3b9b39299b249ad65f3b7e96443bad61c02ca5cd3589f46cb6d610a0fd6c0d6a" - [[package]] name = "sqlformat" version = "0.2.6" source = "registry+https://github.com/rust-lang/crates.io-index" checksum = "7bba3a93db0cc4f7bdece8bb09e77e2e785c20bfebf79eb8340ed80708048790" dependencies = [ - "nom", + "nom 7.1.3", "unicode_categories", ] @@ -6288,29 +6288,6 @@ version = "0.11.1" source = "registry+https://github.com/rust-lang/crates.io-index" checksum = "7da8b5736845d9f2fcb837ea5d9e2628564b3b043a70948a3f0b778838c5fb4f" -[[package]] -name = "structmeta" -version = "0.2.0" -source = "registry+https://github.com/rust-lang/crates.io-index" -checksum = "78ad9e09554f0456d67a69c1584c9798ba733a5b50349a6c0d0948710523922d" -dependencies = [ - "proc-macro2", - "quote", - "structmeta-derive", - "syn 2.0.117", -] - -[[package]] -name = "structmeta-derive" -version = "0.2.0" -source = "registry+https://github.com/rust-lang/crates.io-index" -checksum = "a60bcaff7397072dca0017d1db428e30d5002e00b6847703e2e42005c95fbe00" -dependencies = [ - "proc-macro2", - "quote", - "syn 2.0.117", -] - [[package]] name = "strum" version = "0.26.3" @@ -6441,9 +6418,9 @@ dependencies = [ [[package]] name = "target-lexicon" -version = "0.12.16" +version = "0.13.5" source = "registry+https://github.com/rust-lang/crates.io-index" -checksum = "61c41af27dd6d1e27b1b16b489db798443478cef1f06a660c96db617ba5de3b1" +checksum = "adb6935a6f5c20170eeceb1a3835a49e12e19d792f6dd344ccc76a985ca5a6ca" [[package]] name = "tempfile" @@ -6455,7 +6432,7 @@ dependencies = [ "getrandom 0.4.2", "once_cell", "rustix 1.1.4", - "windows-sys 0.61.2", + "windows-sys 0.52.0", ] [[package]] @@ -6918,6 +6895,12 @@ version = "0.9.0" source = "registry+https://github.com/rust-lang/crates.io-index" checksum = "8ecb6da28b8a351d773b68d5825ac39017e680750f980f3a1a85cd8dd28a47c1" +[[package]] +name = "unty" +version = "0.0.4" +source = "registry+https://github.com/rust-lang/crates.io-index" +checksum = "6d49784317cd0d1ee7ec5c716dd598ec5b4483ea832a2dced265471cc0f690ae" + [[package]] name = "ureq" version = "2.12.1" @@ -7019,6 +7002,12 @@ version = "0.9.5" source = "registry+https://github.com/rust-lang/crates.io-index" checksum = "0b928f33d975fc6ad9f86c8f283853ad26bdd5b10b7f1542aa2fa15e2289105a" +[[package]] +name = "virtue" +version = "0.0.18" +source = "registry+https://github.com/rust-lang/crates.io-index" +checksum = "051eb1abcf10076295e815102942cc58f9d5e3b4560e46e53c21e8ff6f3af7b1" + [[package]] name = "wait-timeout" version = "0.2.1" @@ -7040,9 +7029,9 @@ dependencies = [ [[package]] name = "walrus" -version = "0.22.0" +version = "0.23.3" source = "registry+https://github.com/rust-lang/crates.io-index" -checksum = "d68aa3c7b80be75c8458fc087453e5a31a226cfffede2e9b932393b2ea1c624a" +checksum = "6481311b98508f4bc2d0abbfa5d42172e7a54b4b24d8f15e28b0dc650be0c59f" dependencies = [ "anyhow", "gimli 0.26.2", @@ -7050,8 +7039,8 @@ dependencies = [ "leb128", "log", "walrus-macro", - "wasm-encoder 0.212.0", - "wasmparser 0.212.0", + "wasm-encoder 0.214.0", + "wasmparser 0.214.0", ] [[package]] @@ -7162,20 +7151,21 @@ dependencies = [ [[package]] name = "wasm-encoder" -version = "0.212.0" +version = "0.214.0" source = "registry+https://github.com/rust-lang/crates.io-index" -checksum = "501940df4418b8929eb6d52f1aade1fdd15a5b86c92453cb696e3c906bd3fc33" +checksum = "ff694f02a8d7a50b6922b197ae03883fbf18cdb2ae9fbee7b6148456f5f44041" dependencies = [ "leb128", ] [[package]] name = "wasm-encoder" -version = "0.217.1" +version = "0.236.1" source = "registry+https://github.com/rust-lang/crates.io-index" -checksum = "10961fd76db420582926af70816dd205019d8152d9e51e1b939125dd1639f854" +checksum = "724fccfd4f3c24b7e589d333fc0429c68042897a7e8a5f8694f31792471841e7" dependencies = [ - "leb128", + "leb128fmt", + "wasmparser 0.236.1", ] [[package]] @@ -7215,9 +7205,9 @@ dependencies = [ [[package]] name = "wasmparser" -version = "0.212.0" +version = "0.214.0" source = "registry+https://github.com/rust-lang/crates.io-index" -checksum = "8d28bc49ba1e5c5b61ffa7a2eace10820443c4b7d1c0b144109261d14570fdf8" +checksum = "5309c1090e3e84dad0d382f42064e9933fdaedb87e468cc239f0eabea73ddcb6" dependencies = [ "ahash", "bitflags 2.11.0", @@ -7229,13 +7219,12 @@ dependencies = [ [[package]] name = "wasmparser" -version = "0.217.1" +version = "0.236.1" source = "registry+https://github.com/rust-lang/crates.io-index" -checksum = "65a5a0689975b9fd93c02f5400cfd9669858b99607e54e7b892c6080cba598bb" +checksum = "a9b1e81f3eb254cf7404a82cee6926a4a3ccc5aad80cc3d43608a070c67aa1d7" dependencies = [ - "ahash", "bitflags 2.11.0", - "hashbrown 0.14.5", + "hashbrown 0.15.5", "indexmap 2.14.0", "semver", "serde", @@ -7255,90 +7244,93 @@ dependencies = [ [[package]] name = "wasmprinter" -version = "0.217.1" +version = "0.236.1" source = "registry+https://github.com/rust-lang/crates.io-index" -checksum = "324c6782d7b81c01625335d252653b26ea68e835ddb4aef4cb1ed3ea40ae3a49" +checksum = "2df225df06a6df15b46e3f73ca066ff92c2e023670969f7d50ce7d5e695abbb1" dependencies = [ "anyhow", "termcolor", - "wasmparser 0.217.1", + "wasmparser 0.236.1", ] [[package]] name = "wasmtime" -version = "25.0.3" +version = "36.0.13" source = "registry+https://github.com/rust-lang/crates.io-index" -checksum = "f38dbf42dc56a6fe41ccd77211ea8ec90855de05e52cd00df5a0a3bca87d6147" +checksum = "93d881c5dcff5f230368d84fcf110ca25fe47badc694e7d559c3891492159916" dependencies = [ + "addr2line", "anyhow", "bitflags 2.11.0", "bumpalo", "cc", "cfg-if", - "hashbrown 0.14.5", + "hashbrown 0.15.5", "indexmap 2.14.0", "libc", - "libm", "log", "mach2", "memfd", - "object 0.36.7", + "object", "once_cell", - "paste", "postcard", - "psm", - "rustix 0.38.44", + "pulley-interpreter", + "rustix 1.1.4", "serde", "serde_derive", "smallvec", - "sptr", "target-lexicon", - "wasmparser 0.217.1", - "wasmtime-asm-macros", - "wasmtime-component-macro", - "wasmtime-cranelift", + "wasmparser 0.236.1", "wasmtime-environ", - "wasmtime-jit-icache-coherence", - "wasmtime-slab", - "wasmtime-versioned-export-macros", - "windows-sys 0.52.0", + "wasmtime-internal-asm-macros", + "wasmtime-internal-cranelift", + "wasmtime-internal-fiber", + "wasmtime-internal-jit-debug", + "wasmtime-internal-jit-icache-coherence", + "wasmtime-internal-math", + "wasmtime-internal-slab", + "wasmtime-internal-unwinder", + "wasmtime-internal-versioned-export-macros", + "windows-sys 0.60.2", ] [[package]] -name = "wasmtime-asm-macros" -version = "25.0.3" +name = "wasmtime-environ" +version = "36.0.13" source = "registry+https://github.com/rust-lang/crates.io-index" -checksum = "30e0c7f9983c2d60109a939d9ab0e0df301901085c3608e1c22c27c98390a027" +checksum = "a4b25534a3ff9dd844701c2bc997f76cb1f97bf2af0546a7066ae96f49c2e068" dependencies = [ - "cfg-if", + "anyhow", + "cranelift-bitset", + "cranelift-entity", + "gimli 0.32.3", + "indexmap 2.14.0", + "log", + "object", + "postcard", + "serde", + "serde_derive", + "smallvec", + "target-lexicon", + "wasm-encoder 0.236.1", + "wasmparser 0.236.1", + "wasmprinter", ] [[package]] -name = "wasmtime-component-macro" -version = "25.0.3" +name = "wasmtime-internal-asm-macros" +version = "36.0.13" source = "registry+https://github.com/rust-lang/crates.io-index" -checksum = "0929ffffaca32dd8770b56848c94056036963ca05de25fb47cac644e20262168" +checksum = "1d02832d760351fb3a1aa99eb8f7b95596c0f4e4e52df1547fcdb295ea5c780c" dependencies = [ - "anyhow", - "proc-macro2", - "quote", - "syn 2.0.117", - "wasmtime-component-util", - "wasmtime-wit-bindgen", - "wit-parser 0.217.1", + "cfg-if", ] [[package]] -name = "wasmtime-component-util" -version = "25.0.3" -source = "registry+https://github.com/rust-lang/crates.io-index" -checksum = "fdc29d2b56629d66d2fd791d1b46471d0016e0d684ed2dc299e870d127082268" - -[[package]] -name = "wasmtime-cranelift" -version = "25.0.3" +name = "wasmtime-internal-cranelift" +version = "36.0.13" source = "registry+https://github.com/rust-lang/crates.io-index" -checksum = "f8c8af1197703f4de556a274384adf5db36a146f9892bc9607bad16881e75c80" +checksum = "65821bab751956cddfc6ee957beb13a0e2a6cf682050d75dfb7a0228db2ed499" dependencies = [ "anyhow", "cfg-if", @@ -7347,96 +7339,97 @@ dependencies = [ "cranelift-entity", "cranelift-frontend", "cranelift-native", - "cranelift-wasm", - "gimli 0.29.0", + "gimli 0.32.3", + "itertools 0.14.0", "log", - "object 0.36.7", + "object", + "pulley-interpreter", "smallvec", "target-lexicon", - "thiserror 1.0.69", - "wasmparser 0.217.1", + "thiserror 2.0.18", + "wasmparser 0.236.1", "wasmtime-environ", - "wasmtime-versioned-export-macros", + "wasmtime-internal-math", + "wasmtime-internal-versioned-export-macros", ] [[package]] -name = "wasmtime-environ" -version = "25.0.3" +name = "wasmtime-internal-fiber" +version = "36.0.13" source = "registry+https://github.com/rust-lang/crates.io-index" -checksum = "3f1b5af7bac868c5bce3b78a366a10677caacf6e6467c156301297e36ed31f3e" +checksum = "18cf73e5e8d28a2b30d86454430c7dea3b593598dcbbc0ebb927ca2716222d41" dependencies = [ "anyhow", - "cranelift-bitset", - "cranelift-entity", - "gimli 0.29.0", - "indexmap 2.14.0", - "log", - "object 0.36.7", - "postcard", - "serde", - "serde_derive", - "target-lexicon", - "wasm-encoder 0.217.1", - "wasmparser 0.217.1", - "wasmprinter", - "wasmtime-types", + "cc", + "cfg-if", + "libc", + "rustix 1.1.4", + "wasmtime-internal-asm-macros", + "wasmtime-internal-versioned-export-macros", + "windows-sys 0.60.2", +] + +[[package]] +name = "wasmtime-internal-jit-debug" +version = "36.0.13" +source = "registry+https://github.com/rust-lang/crates.io-index" +checksum = "4279dc3147ddaa21e5b3d2c0eaff117881c4f937747bdd2379eb361665843bd3" +dependencies = [ + "cc", + "wasmtime-internal-versioned-export-macros", ] [[package]] -name = "wasmtime-jit-icache-coherence" -version = "25.0.3" +name = "wasmtime-internal-jit-icache-coherence" +version = "36.0.13" source = "registry+https://github.com/rust-lang/crates.io-index" -checksum = "5d7314e32c624f645ad7d6b9fc3ac89eb7d2b9aa06695d6445cec087958ec27d" +checksum = "a8eb677944201839c0be19b39b0f19dcd663efbcbc05a09c73f26fec7bdf0331" dependencies = [ "anyhow", "cfg-if", "libc", - "windows-sys 0.52.0", + "windows-sys 0.60.2", +] + +[[package]] +name = "wasmtime-internal-math" +version = "36.0.13" +source = "registry+https://github.com/rust-lang/crates.io-index" +checksum = "db9a153e184878df396a11f8912444531c2e4d0c7a1d9e9a52b30d9853d89cb9" +dependencies = [ + "libm", ] [[package]] -name = "wasmtime-slab" -version = "25.0.3" +name = "wasmtime-internal-slab" +version = "36.0.13" source = "registry+https://github.com/rust-lang/crates.io-index" -checksum = "f75cba1a8cc327839f493cfc3036c9de3d077d59ab76296bc710ee5f95be5391" +checksum = "b771494bead25e1f0c4c89a9476dd0b65eacca314ed82125f1e197fbc3f0396b" [[package]] -name = "wasmtime-types" -version = "25.0.3" +name = "wasmtime-internal-unwinder" +version = "36.0.13" source = "registry+https://github.com/rust-lang/crates.io-index" -checksum = "c6d83a7816947a4974e2380c311eacb1db009b8bad86081dc726b705603c93c7" +checksum = "90199caed6925420434a923861d8ad813689ca8533d2c679f805d12e35b40a4b" dependencies = [ "anyhow", - "cranelift-entity", - "serde", - "serde_derive", - "smallvec", - "wasmparser 0.217.1", + "cfg-if", + "cranelift-codegen", + "log", + "object", ] [[package]] -name = "wasmtime-versioned-export-macros" -version = "25.0.3" +name = "wasmtime-internal-versioned-export-macros" +version = "36.0.13" source = "registry+https://github.com/rust-lang/crates.io-index" -checksum = "6879a8e168aef3fe07335343b7fbede12fa494215e83322e173d4018e124a846" +checksum = "ae71687aa834f9cc9eb5b0f97c85184d7dc70b84d32fd8927af0887998a1ba35" dependencies = [ "proc-macro2", "quote", "syn 2.0.117", ] -[[package]] -name = "wasmtime-wit-bindgen" -version = "25.0.3" -source = "registry+https://github.com/rust-lang/crates.io-index" -checksum = "3f571f63ac1d532e986eb3973bbef3a45e4ae83de521a8d573b0fe0594dc9608" -dependencies = [ - "anyhow", - "heck 0.4.1", - "indexmap 2.14.0", - "wit-parser 0.217.1", -] - [[package]] name = "web-sys" version = "0.3.95" @@ -7647,7 +7640,7 @@ version = "0.1.11" source = "registry+https://github.com/rust-lang/crates.io-index" checksum = "c2a7b1c03c876122aa43f3020e6c3c3ee5c05081c9a00739faf7503aeba10d22" dependencies = [ - "windows-sys 0.61.2", + "windows-sys 0.48.0", ] [[package]] @@ -7991,7 +7984,7 @@ checksum = "ea61de684c3ea68cb082b7a88508a8b27fcc8b797d738bfc99a82facf1d752dc" dependencies = [ "anyhow", "heck 0.5.0", - "wit-parser 0.244.0", + "wit-parser", ] [[package]] @@ -8041,25 +8034,7 @@ dependencies = [ "wasm-encoder 0.244.0", "wasm-metadata", "wasmparser 0.244.0", - "wit-parser 0.244.0", -] - -[[package]] -name = "wit-parser" -version = "0.217.1" -source = "registry+https://github.com/rust-lang/crates.io-index" -checksum = "e5aaf02882453eaeec4fe30f1e4263cfd8b8ea36dd00e1fe7d902d9cb498bccd" -dependencies = [ - "anyhow", - "id-arena", - "indexmap 2.14.0", - "log", - "semver", - "serde", - "serde_derive", - "serde_json", - "unicode-xid", - "wasmparser 0.217.1", + "wit-parser", ] [[package]] @@ -8097,18 +8072,18 @@ dependencies = [ [[package]] name = "x509-parser" -version = "0.16.0" +version = "0.18.1" source = "registry+https://github.com/rust-lang/crates.io-index" -checksum = "fcbc162f30700d6f3f82a24bf7cc62ffe7caea42c0b2cba8bf7f3ae50cf51f69" +checksum = "d43b0f71ce057da06bc0851b23ee24f3f86190b07203dd8f567d0b706a185202" dependencies = [ "asn1-rs", "data-encoding", "der-parser", "lazy_static", - "nom", + "nom 7.1.3", "oid-registry", "rusticata-macros", - "thiserror 1.0.69", + "thiserror 2.0.18", "time", ] @@ -8142,18 +8117,17 @@ checksum = "cfe53a6657fd280eaa890a3bc59152892ffa3e30101319d168b781ed6529b049" [[package]] name = "yara-x" -version = "0.9.0" +version = "1.7.1" source = "registry+https://github.com/rust-lang/crates.io-index" -checksum = "7e82e362edb9ae04e676d76338bb9971ec011f0698a88239c532076bc146b9d9" +checksum = "457a9192e5a45347f4a8e33d4827f06ae9c546201f9c9f19a2558f6e2f3a4345" dependencies = [ "aho-corasick", "annotate-snippets", "anyhow", "array-bytes", - "ascii_tree", "base64 0.22.1", - "bincode", - "bitmask", + "bincode 2.0.1", + "bitflags 2.11.0", "bitvec", "bstr", "const-oid 0.9.6", @@ -8162,18 +8136,18 @@ dependencies = [ "digest 0.10.7", "dsa", "ecdsa", - "fmmap", "globwalk", "indexmap 2.14.0", "intaglio", - "itertools 0.13.0", - "lazy_static", + "ipnet", + "itertools 0.14.0", "linkme", "md-5", "md2", "memchr", + "memmap2", "memx", - "nom", + "nom 8.0.0", "num-derive", "num-traits", "p256", @@ -8181,8 +8155,10 @@ dependencies = [ "protobuf", "protobuf-codegen", "protobuf-parse", + "psl", + "regex", "regex-automata", - "regex-syntax 0.8.10", + "regex-syntax", "roxmltree 0.20.0", "rsa", "rustc-hash 2.1.2", @@ -8191,23 +8167,24 @@ dependencies = [ "sha1", "sha2", "smallvec", - "thiserror 1.0.69", + "strum_macros 0.27.2", + "thiserror 2.0.18", "tlsh-fixed", "uuid", "walrus", "wasmtime", "x509-parser", - "yansi", "yara-x-macros", "yara-x-parser", "yara-x-proto", + "zip 5.1.1", ] [[package]] name = "yara-x-macros" -version = "0.9.0" +version = "1.7.1" source = "registry+https://github.com/rust-lang/crates.io-index" -checksum = "941f4eb88204963a7cc1d9251344667f32f1521a0d262d4a1a35771cbb90d542" +checksum = "1f53514966552a7a0ffe89fd70ea5b27d97793567f2099cee9c980c824cdd069" dependencies = [ "darling 0.20.11", "proc-macro2", @@ -8217,32 +8194,30 @@ dependencies = [ [[package]] name = "yara-x-parser" -version = "0.9.0" +version = "1.7.1" source = "registry+https://github.com/rust-lang/crates.io-index" -checksum = "680bc1cf691e8ac59c349df51fd3b84925c32042a1affd9b71ca17a4b05a3100" +checksum = "eea3855a5e32277c45c0c74ada98edd83520416fcbcebbb8f2e384e0b73b2812" dependencies = [ "ascii_tree", - "bitmask", + "bitflags 2.11.0", "bstr", "indexmap 2.14.0", - "itertools 0.13.0", + "itertools 0.14.0", "logos", "num-traits", "rowan", "rustc-hash 2.1.2", "serde", - "yansi", ] [[package]] name = "yara-x-proto" -version = "0.9.0" +version = "1.7.1" source = "registry+https://github.com/rust-lang/crates.io-index" -checksum = "f9381f250a03b3b0da8bfe50b469dd297a3b95d2997184255ddd2ed2279f396f" +checksum = "ff9daafc62df6323146596a5bdc7c48194b73f8426a009d0382d064dfa916e08" dependencies = [ "protobuf", "protobuf-codegen", - "protobuf-parse", ] [[package]] @@ -8314,6 +8289,20 @@ name = "zeroize" version = "1.8.2" source = "registry+https://github.com/rust-lang/crates.io-index" checksum = "b97154e67e32c85465826e8bcc1c59429aaaf107c1e4a9e53c8d8ccd5eff88d0" +dependencies = [ + "zeroize_derive", +] + +[[package]] +name = "zeroize_derive" +version = "1.5.0" +source = "registry+https://github.com/rust-lang/crates.io-index" +checksum = "3c50655cbb0fe3fc43170059e702f1ce5e19b84cec58dc87b037a09935c2f328" +dependencies = [ + "proc-macro2", + "quote", + "syn 2.0.117", +] [[package]] name = "zerotrie" @@ -8365,6 +8354,33 @@ dependencies = [ "zopfli", ] +[[package]] +name = "zip" +version = "5.1.1" +source = "registry+https://github.com/rust-lang/crates.io-index" +checksum = "2f852905151ac8d4d06fdca66520a661c09730a74c6d4e2b0f27b436b382e532" +dependencies = [ + "aes", + "arbitrary", + "bzip2", + "constant_time_eq 0.3.1", + "crc32fast", + "deflate64", + "flate2", + "getrandom 0.3.4", + "hmac", + "indexmap 2.14.0", + "lzma-rust2", + "memchr", + "pbkdf2", + "ppmd-rust", + "sha1", + "time", + "zeroize", + "zopfli", + "zstd", +] + [[package]] name = "zip" version = "6.0.0" diff --git a/Cargo.toml b/Cargo.toml index 9242dd1d..8a4d31e8 100644 --- a/Cargo.toml +++ b/Cargo.toml @@ -119,7 +119,7 @@ toml = "0.8" dirs = "5" rusqlite = { version = "0.31", optional = true, features = ["bundled"] } bloomfilter = { version = "1", optional = true, features = ["serde"] } -yara-x = { version = "0.9", optional = true } +yara-x = { version = "~1.7", optional = true } minijinja = { version = "2", optional = true } parquet = { version = "54", optional = true } arrow = { version = "54", optional = true } diff --git a/deny.toml b/deny.toml index 4b32e1c0..61e34d9f 100644 --- a/deny.toml +++ b/deny.toml @@ -31,23 +31,11 @@ ignore = [ # paste v1 is unmaintained but is a transitive dep of metal (wgpu-hal, GPU feature). # No action available until wgpu updates its metal dependency. "RUSTSEC-2024-0436", - # instant v0.1.13 is unmaintained (author recommends web-time) — an - # unmaintained-ONLY advisory, not a vulnerability, with no reachable defect in a - # hashing workload. In the audited graph it is reachable solely via the GPU - # feature (wgpu 22 -> parking_lot 0.11.2 -> instant); parking_lot is held on the - # 0.11 line by sled (opendal/remote stack, which is excluded from this audit). - # No safe upgrade exists (instant is abandoned; parking_lot 0.12 dropped it), and - # the only removals — a wgpu major bump (rewrites the GPU backend) or updating the - # excluded opendal/sled remote tree — are out of scope for this change. Remove - # this ignore when wgpu updates its parking_lot dependency off the 0.11 line. - "RUSTSEC-2024-0384", # bincode v1 is unmaintained (RUSTSEC-2025-0141) but is only used by the optional # `nsrl` feature for bloom filter serialization. No drop-in v2 replacement exists # for the bloomfilter crate's serde output. Will migrate when bloomfilter updates. "RUSTSEC-2025-0141", - # fxhash unmaintained — transitive dep via yara-x. - "RUSTSEC-2025-0046", # rustls-pemfile unmaintained — transitive dep via yara-x. "RUSTSEC-2026-0098", # rustls 0.21 cert validation bugs — transitive dep via yara-x. @@ -55,29 +43,21 @@ ignore = [ # RSA Marvin Attack / timing side-channel — transitive via yara-x. # No direct key-recovery risk in our hashing workload (we never do RSA decryption). "RUSTSEC-2023-0071", - # tonic advisory — transitive via yara-x. - "RUSTSEC-2025-0118", # rustls-webpki CRL parsing panic — transitive via yara-x. # No CRL parsing performed in blazehash; only hash computation paths are used. "RUSTSEC-2026-0104", - # Wasmtime vulnerabilities — all transitive via yara-x → wasmtime. - # We do not run untrusted Wasm; only YARA rules execute in the Cranelift sandbox. - # Will resolve when yara-x upgrades its wasmtime dependency. - "RUSTSEC-2026-0020", - "RUSTSEC-2026-0021", - "RUSTSEC-2026-0085", - "RUSTSEC-2026-0086", - "RUSTSEC-2026-0087", - "RUSTSEC-2026-0088", - "RUSTSEC-2026-0089", - "RUSTSEC-2026-0091", - "RUSTSEC-2026-0092", - "RUSTSEC-2026-0093", - "RUSTSEC-2026-0094", - "RUSTSEC-2026-0095", - "RUSTSEC-2026-0096", + # NOTE: the thirteen Wasmtime ignores that used to live here + # (RUSTSEC-2026-0020/0021/0085/0086/0087/0088/0089/0091/0092/0093/0094/0095/0096) + # said "will resolve when yara-x upgrades its wasmtime dependency". That has now + # happened — yara-x ~1.7 puts us on wasmtime 36.0.13, a patched release — so the + # ignores were deleted rather than carried forward. Same for the fxhash + # (RUSTSEC-2025-0046) and tonic (RUSTSEC-2025-0118) ignores, whose crates left + # the audited graph in that upgrade, and the instant ignore (RUSTSEC-2024-0384), + # which cargo-deny had already been reporting as advisory-not-detected before + # this change. cargo-deny confirms every remaining entry above is still + # encountered; none of them is a stale rubber stamp. ] [licenses] @@ -99,6 +79,14 @@ allow = [ "Apache-2.0 WITH LLVM-exception", # Used by Substrait/Arrow ecosystem crates pulled in by yara-x "CDLA-Permissive-2.0", + # libbz2-rs-sys (the pure-Rust bzip2 implementation), reached as + # yara-x -> zip -> bzip2 -> libbz2-rs-sys. bzip2-1.0.6 is the original + # bzip2/libbzip2 licence: a BSD-style permissive licence — attribution and + # a no-misrepresentation clause, no copyleft and no source-disclosure + # obligation — so it sits in the same class as the BSD-2/3-Clause and Zlib + # entries already allowed above. FSF-recognised as a free, GPL-compatible + # licence. Arrived with the yara-x 0.9 -> 1.7 upgrade in this change. + "bzip2-1.0.6", ] [bans] diff --git a/supply-chain/config.toml b/supply-chain/config.toml index de49285c..9bc78ff3 100644 --- a/supply-chain/config.toml +++ b/supply-chain/config.toml @@ -22,6 +22,10 @@ audit-as-crates-io = false [policy.blazehash-core] audit-as-crates-io = false +[[exemptions.addr2line]] +version = "0.17.0" +criteria = "safe-to-deploy" + [[exemptions.aes]] version = "0.8.4" criteria = "safe-to-deploy" @@ -47,7 +51,7 @@ version = "0.2.2" criteria = "safe-to-deploy" [[exemptions.annotate-snippets]] -version = "0.11.5" +version = "0.12.5" criteria = "safe-to-deploy" [[exemptions.anstream]] @@ -74,16 +78,12 @@ criteria = "safe-to-deploy" version = "1.0.102" criteria = "safe-to-deploy" -[[exemptions.ar_archive_writer]] -version = "0.5.1" -criteria = "safe-to-deploy" - [[exemptions.argon2]] version = "0.5.3" criteria = "safe-to-deploy" [[exemptions.array-bytes]] -version = "6.2.3" +version = "9.3.0" criteria = "safe-to-deploy" [[exemptions.arrayref]] @@ -195,11 +195,11 @@ version = "0.1.1" criteria = "safe-to-deploy" [[exemptions.asn1-rs]] -version = "0.6.2" +version = "0.7.2" criteria = "safe-to-deploy" [[exemptions.asn1-rs-derive]] -version = "0.5.1" +version = "0.6.0" criteria = "safe-to-deploy" [[exemptions.asn1-rs-impl]] @@ -242,12 +242,16 @@ criteria = "safe-to-deploy" version = "1.3.3" criteria = "safe-to-deploy" -[[exemptions.bitflags]] -version = "2.11.0" +[[exemptions.bincode]] +version = "2.0.1" criteria = "safe-to-deploy" -[[exemptions.bitmask]] -version = "0.5.0" +[[exemptions.bincode_derive]] +version = "2.0.1" +criteria = "safe-to-deploy" + +[[exemptions.bitflags]] +version = "2.11.0" criteria = "safe-to-deploy" [[exemptions.bitvec]] @@ -306,6 +310,10 @@ criteria = "safe-to-deploy" version = "1.11.1" criteria = "safe-to-deploy" +[[exemptions.bzip2]] +version = "0.6.1" +criteria = "safe-to-deploy" + [[exemptions.bzip2-rs]] version = "0.1.2" criteria = "safe-to-deploy" @@ -434,10 +442,6 @@ criteria = "safe-to-deploy" version = "0.3.0" criteria = "safe-to-deploy" -[[exemptions.cranelift-bitset]] -version = "0.112.3" -criteria = "safe-to-deploy" - [[exemptions.crc]] version = "3.4.0" criteria = "safe-to-deploy" @@ -563,7 +567,7 @@ version = "0.8.0" criteria = "safe-to-deploy" [[exemptions.der-parser]] -version = "9.0.0" +version = "10.0.0" criteria = "safe-to-deploy" [[exemptions.des]] @@ -626,10 +630,6 @@ criteria = "safe-to-deploy" version = "1.0.0" criteria = "safe-to-deploy" -[[exemptions.enum_dispatch]] -version = "0.3.13" -criteria = "safe-to-deploy" - [[exemptions.errno]] version = "0.3.14" criteria = "safe-to-deploy" @@ -682,14 +682,6 @@ criteria = "safe-to-run" version = "0.11.1" criteria = "safe-to-deploy" -[[exemptions.fmmap]] -version = "0.3.3" -criteria = "safe-to-deploy" - -[[exemptions.fs4]] -version = "0.6.6" -criteria = "safe-to-deploy" - [[exemptions.fsevent-sys]] version = "4.1.0" criteria = "safe-to-deploy" @@ -778,10 +770,6 @@ criteria = "safe-to-deploy" version = "0.14.0" criteria = "safe-to-deploy" -[[exemptions.glob]] -version = "0.3.3" -criteria = "safe-to-deploy" - [[exemptions.globset]] version = "0.4.18" criteria = "safe-to-deploy" @@ -946,10 +934,6 @@ criteria = "safe-to-deploy" version = "1.9.3" criteria = "safe-to-deploy" -[[exemptions.indexmap]] -version = "2.14.0" -criteria = "safe-to-deploy" - [[exemptions.indicatif]] version = "0.18.6" criteria = "safe-to-deploy" @@ -1106,6 +1090,10 @@ criteria = "safe-to-deploy" version = "1.0.6" criteria = "safe-to-deploy" +[[exemptions.libbz2-rs-sys]] +version = "0.2.5" +criteria = "safe-to-deploy" + [[exemptions.libc]] version = "0.2.184" criteria = "safe-to-deploy" @@ -1163,15 +1151,15 @@ version = "0.4.14" criteria = "safe-to-deploy" [[exemptions.logos]] -version = "0.14.4" +version = "0.15.1" criteria = "safe-to-deploy" [[exemptions.logos-codegen]] -version = "0.14.4" +version = "0.15.1" criteria = "safe-to-deploy" [[exemptions.logos-derive]] -version = "0.14.4" +version = "0.15.1" criteria = "safe-to-deploy" [[exemptions.lru]] @@ -1190,6 +1178,10 @@ criteria = "safe-to-deploy" version = "0.3.0" criteria = "safe-to-deploy" +[[exemptions.lzma-rust2]] +version = "0.13.0" +criteria = "safe-to-deploy" + [[exemptions.mach2]] version = "0.4.3" criteria = "safe-to-deploy" @@ -1210,18 +1202,10 @@ criteria = "safe-to-deploy" version = "0.9.10" criteria = "safe-to-deploy" -[[exemptions.memmapix]] -version = "0.7.6" -criteria = "safe-to-deploy" - [[exemptions.memo-map]] version = "0.3.3" criteria = "safe-to-deploy" -[[exemptions.memoffset]] -version = "0.9.1" -criteria = "safe-to-deploy" - [[exemptions.memx]] version = "0.1.32" criteria = "safe-to-deploy" @@ -1270,6 +1254,10 @@ criteria = "safe-to-deploy" version = "0.5.0+25.2.9519653" criteria = "safe-to-deploy" +[[exemptions.nom]] +version = "8.0.0" +criteria = "safe-to-deploy" + [[exemptions.notify]] version = "6.1.1" criteria = "safe-to-deploy" @@ -1298,10 +1286,6 @@ criteria = "safe-to-deploy" version = "0.2.7" criteria = "safe-to-deploy" -[[exemptions.object]] -version = "0.36.7" -criteria = "safe-to-deploy" - [[exemptions.object]] version = "0.37.3" criteria = "safe-to-deploy" @@ -1311,7 +1295,7 @@ version = "0.11.0" criteria = "safe-to-deploy" [[exemptions.oid-registry]] -version = "0.7.1" +version = "0.8.1" criteria = "safe-to-deploy" [[exemptions.olpc-cjson]] @@ -1370,18 +1354,10 @@ criteria = "safe-to-deploy" version = "0.13.1" criteria = "safe-to-deploy" -[[exemptions.parking_lot]] -version = "0.11.2" -criteria = "safe-to-deploy" - [[exemptions.parking_lot]] version = "0.12.5" criteria = "safe-to-deploy" -[[exemptions.parking_lot_core]] -version = "0.8.6" -criteria = "safe-to-deploy" - [[exemptions.parking_lot_core]] version = "0.9.12" criteria = "safe-to-deploy" @@ -1390,14 +1366,6 @@ criteria = "safe-to-deploy" version = "54.3.1" criteria = "safe-to-deploy" -[[exemptions.parse-display]] -version = "0.8.2" -criteria = "safe-to-deploy" - -[[exemptions.parse-display-derive]] -version = "0.8.2" -criteria = "safe-to-deploy" - [[exemptions.password-hash]] version = "0.5.0" criteria = "safe-to-deploy" @@ -1454,6 +1422,10 @@ criteria = "safe-to-deploy" version = "0.1.5" criteria = "safe-to-deploy" +[[exemptions.ppmd-rust]] +version = "1.4.0" +criteria = "safe-to-deploy" + [[exemptions.ppv-lite86]] version = "0.2.21" criteria = "safe-to-deploy" @@ -1502,8 +1474,12 @@ criteria = "safe-to-deploy" version = "3.7.2" criteria = "safe-to-deploy" -[[exemptions.psm]] -version = "0.1.30" +[[exemptions.psl]] +version = "2.1.223" +criteria = "safe-to-deploy" + +[[exemptions.psl-types]] +version = "2.0.11" criteria = "safe-to-deploy" [[exemptions.pxfm]] @@ -1578,10 +1554,6 @@ criteria = "safe-to-deploy" version = "1.13.0" criteria = "safe-to-deploy" -[[exemptions.redox_syscall]] -version = "0.2.16" -criteria = "safe-to-deploy" - [[exemptions.redox_syscall]] version = "0.5.18" criteria = "safe-to-deploy" @@ -1602,10 +1574,6 @@ criteria = "safe-to-deploy" version = "0.4.14" criteria = "safe-to-deploy" -[[exemptions.regex-syntax]] -version = "0.7.5" -criteria = "safe-to-deploy" - [[exemptions.regex-syntax]] version = "0.8.10" criteria = "safe-to-deploy" @@ -1639,7 +1607,7 @@ version = "1.1.1" criteria = "safe-to-deploy" [[exemptions.rowan]] -version = "0.15.18" +version = "0.16.1" criteria = "safe-to-deploy" [[exemptions.roxmltree]] @@ -1758,10 +1726,6 @@ criteria = "safe-to-deploy" version = "2.17.0" criteria = "safe-to-deploy" -[[exemptions.semver]] -version = "1.0.28" -criteria = "safe-to-deploy" - [[exemptions.seq-macro]] version = "0.3.6" criteria = "safe-to-deploy" @@ -1846,10 +1810,6 @@ criteria = "safe-to-deploy" version = "0.4.12" criteria = "safe-to-deploy" -[[exemptions.slice-group-by]] -version = "0.3.1" -criteria = "safe-to-deploy" - [[exemptions.slotmap]] version = "1.1.1" criteria = "safe-to-deploy" @@ -1862,10 +1822,6 @@ criteria = "safe-to-deploy" version = "1.1.1" criteria = "safe-to-deploy" -[[exemptions.socket2]] -version = "0.5.10" -criteria = "safe-to-deploy" - [[exemptions.socket2]] version = "0.6.3" criteria = "safe-to-deploy" @@ -1934,14 +1890,6 @@ criteria = "safe-to-deploy" version = "0.1.5" criteria = "safe-to-deploy" -[[exemptions.structmeta]] -version = "0.2.0" -criteria = "safe-to-deploy" - -[[exemptions.structmeta-derive]] -version = "0.2.0" -criteria = "safe-to-deploy" - [[exemptions.strum]] version = "0.27.2" criteria = "safe-to-deploy" @@ -1979,7 +1927,7 @@ version = "0.4.45" criteria = "safe-to-deploy" [[exemptions.target-lexicon]] -version = "0.12.16" +version = "0.13.5" criteria = "safe-to-deploy" [[exemptions.tempfile]] @@ -2150,6 +2098,10 @@ criteria = "safe-to-deploy" version = "0.9.0" criteria = "safe-to-deploy" +[[exemptions.unty]] +version = "0.0.4" +criteria = "safe-to-deploy" + [[exemptions.url]] version = "2.5.8" criteria = "safe-to-deploy" @@ -2162,12 +2114,16 @@ criteria = "safe-to-deploy" version = "0.9.5" criteria = "safe-to-deploy" +[[exemptions.virtue]] +version = "0.0.18" +criteria = "safe-to-deploy" + [[exemptions.walkdir]] version = "2.5.0" criteria = "safe-to-deploy" [[exemptions.walrus]] -version = "0.22.0" +version = "0.23.3" criteria = "safe-to-deploy" [[exemptions.walrus-macro]] @@ -2210,8 +2166,8 @@ criteria = "safe-to-deploy" version = "0.4.2" criteria = "safe-to-deploy" -[[exemptions.wasmtime-versioned-export-macros]] -version = "25.0.3" +[[exemptions.wasmtime-internal-asm-macros]] +version = "36.0.13" criteria = "safe-to-deploy" [[exemptions.web-sys]] @@ -2439,7 +2395,7 @@ version = "0.5.1" criteria = "safe-to-deploy" [[exemptions.x509-parser]] -version = "0.16.0" +version = "0.18.1" criteria = "safe-to-deploy" [[exemptions.xml-rs]] @@ -2455,19 +2411,19 @@ version = "1.0.1" criteria = "safe-to-deploy" [[exemptions.yara-x]] -version = "0.9.0" +version = "1.7.1" criteria = "safe-to-deploy" [[exemptions.yara-x-macros]] -version = "0.9.0" +version = "1.7.1" criteria = "safe-to-deploy" [[exemptions.yara-x-parser]] -version = "0.9.0" +version = "1.7.1" criteria = "safe-to-deploy" [[exemptions.yara-x-proto]] -version = "0.9.0" +version = "1.7.1" criteria = "safe-to-deploy" [[exemptions.yoke]] @@ -2494,6 +2450,10 @@ criteria = "safe-to-deploy" version = "0.1.7" criteria = "safe-to-deploy" +[[exemptions.zeroize_derive]] +version = "1.5.0" +criteria = "safe-to-deploy" + [[exemptions.zerotrie]] version = "0.2.4" criteria = "safe-to-deploy" @@ -2506,6 +2466,10 @@ criteria = "safe-to-deploy" version = "0.11.3" criteria = "safe-to-deploy" +[[exemptions.zip]] +version = "5.1.1" +criteria = "safe-to-deploy" + [[exemptions.zip]] version = "6.0.0" criteria = "safe-to-deploy" @@ -2518,10 +2482,6 @@ criteria = "safe-to-deploy" version = "0.6.3" criteria = "safe-to-deploy" -[[exemptions.zmij]] -version = "1.0.21" -criteria = "safe-to-deploy" - [[exemptions.zopfli]] version = "0.8.3" criteria = "safe-to-deploy" diff --git a/supply-chain/imports.lock b/supply-chain/imports.lock index daed9791..71193194 100644 --- a/supply-chain/imports.lock +++ b/supply-chain/imports.lock @@ -36,65 +36,70 @@ user-id = 2396 user-login = "jdm" user-name = "Josh Matthews" +[[publisher.cranelift-assembler-x64]] +version = "0.123.13" +when = "2026-07-31" +trusted-publisher = "github:bytecodealliance/wasmtime" + +[[publisher.cranelift-assembler-x64-meta]] +version = "0.123.13" +when = "2026-07-31" +trusted-publisher = "github:bytecodealliance/wasmtime" + [[publisher.cranelift-bforest]] -version = "0.112.3" -when = "2024-11-05" -user-id = 73222 -user-login = "wasmtime-publish" +version = "0.123.13" +when = "2026-07-31" +trusted-publisher = "github:bytecodealliance/wasmtime" + +[[publisher.cranelift-bitset]] +version = "0.123.13" +when = "2026-07-31" +trusted-publisher = "github:bytecodealliance/wasmtime" [[publisher.cranelift-codegen]] -version = "0.112.3" -when = "2024-11-05" -user-id = 73222 -user-login = "wasmtime-publish" +version = "0.123.13" +when = "2026-07-31" +trusted-publisher = "github:bytecodealliance/wasmtime" [[publisher.cranelift-codegen-meta]] -version = "0.112.3" -when = "2024-11-05" -user-id = 73222 -user-login = "wasmtime-publish" +version = "0.123.13" +when = "2026-07-31" +trusted-publisher = "github:bytecodealliance/wasmtime" [[publisher.cranelift-codegen-shared]] -version = "0.112.3" -when = "2024-11-05" -user-id = 73222 -user-login = "wasmtime-publish" +version = "0.123.13" +when = "2026-07-31" +trusted-publisher = "github:bytecodealliance/wasmtime" [[publisher.cranelift-control]] -version = "0.112.3" -when = "2024-11-05" -user-id = 73222 -user-login = "wasmtime-publish" +version = "0.123.13" +when = "2026-07-31" +trusted-publisher = "github:bytecodealliance/wasmtime" [[publisher.cranelift-entity]] -version = "0.112.3" -when = "2024-11-05" -user-id = 73222 -user-login = "wasmtime-publish" +version = "0.123.13" +when = "2026-07-31" +trusted-publisher = "github:bytecodealliance/wasmtime" [[publisher.cranelift-frontend]] -version = "0.112.3" -when = "2024-11-05" -user-id = 73222 -user-login = "wasmtime-publish" +version = "0.123.13" +when = "2026-07-31" +trusted-publisher = "github:bytecodealliance/wasmtime" [[publisher.cranelift-isle]] -version = "0.112.3" -when = "2024-11-05" -user-id = 73222 -user-login = "wasmtime-publish" +version = "0.123.13" +when = "2026-07-31" +trusted-publisher = "github:bytecodealliance/wasmtime" [[publisher.cranelift-native]] -version = "0.112.3" -when = "2024-11-05" -user-id = 73222 -user-login = "wasmtime-publish" +version = "0.123.13" +when = "2026-07-31" +trusted-publisher = "github:bytecodealliance/wasmtime" -[[publisher.cranelift-wasm]] -version = "0.112.3" -when = "2024-11-05" -user-id = 73222 -user-login = "wasmtime-publish" +[[publisher.cranelift-srcgen]] +version = "0.123.13" +when = "2026-07-31" +trusted-publisher = "github:bytecodealliance/wasmtime" [[publisher.derive_arbitrary]] version = "1.4.2" @@ -137,12 +142,22 @@ when = "2022-10-16" user-id = 52553 user-login = "embark-studios" +[[publisher.pulley-interpreter]] +version = "36.0.13" +when = "2026-07-31" +trusted-publisher = "github:bytecodealliance/wasmtime" + +[[publisher.pulley-macros]] +version = "36.0.13" +when = "2026-07-31" +trusted-publisher = "github:bytecodealliance/wasmtime" + [[publisher.regalloc2]] -version = "0.10.2" -when = "2024-09-11" -user-id = 187138 -user-login = "elliottt" -user-name = "Trevor Elliott" +version = "0.12.2" +when = "2025-05-07" +user-id = 3726 +user-login = "cfallin" +user-name = "Chris Fallin" [[publisher.unicode-normalization]] version = "0.1.25" @@ -229,16 +244,15 @@ user-login = "alexcrichton" user-name = "Alex Crichton" [[publisher.wasm-encoder]] -version = "0.212.0" -when = "2024-06-27" +version = "0.214.0" +when = "2024-07-16" user-id = 73222 user-login = "wasmtime-publish" [[publisher.wasm-encoder]] -version = "0.217.1" -when = "2025-02-05" -user-id = 73222 -user-login = "wasmtime-publish" +version = "0.236.1" +when = "2025-08-14" +trusted-publisher = "github:bytecodealliance/wasm-tools" [[publisher.wasm-encoder]] version = "0.244.0" @@ -252,16 +266,15 @@ user-id = 73222 user-login = "wasmtime-publish" [[publisher.wasmparser]] -version = "0.212.0" -when = "2024-06-27" +version = "0.214.0" +when = "2024-07-16" user-id = 73222 user-login = "wasmtime-publish" [[publisher.wasmparser]] -version = "0.217.1" -when = "2025-02-05" -user-id = 73222 -user-login = "wasmtime-publish" +version = "0.236.1" +when = "2025-08-14" +trusted-publisher = "github:bytecodealliance/wasm-tools" [[publisher.wasmparser]] version = "0.244.0" @@ -269,70 +282,59 @@ when = "2026-01-06" trusted-publisher = "github:bytecodealliance/wasm-tools" [[publisher.wasmprinter]] -version = "0.217.1" -when = "2025-02-05" -user-id = 73222 -user-login = "wasmtime-publish" +version = "0.236.1" +when = "2025-08-14" +trusted-publisher = "github:bytecodealliance/wasm-tools" [[publisher.wasmtime]] -version = "25.0.3" -when = "2024-11-05" -user-id = 73222 -user-login = "wasmtime-publish" - -[[publisher.wasmtime-asm-macros]] -version = "25.0.3" -when = "2024-11-05" -user-id = 73222 -user-login = "wasmtime-publish" - -[[publisher.wasmtime-component-macro]] -version = "25.0.3" -when = "2024-11-05" -user-id = 73222 -user-login = "wasmtime-publish" - -[[publisher.wasmtime-component-util]] -version = "25.0.3" -when = "2024-11-05" -user-id = 73222 -user-login = "wasmtime-publish" - -[[publisher.wasmtime-cranelift]] -version = "25.0.3" -when = "2024-11-05" -user-id = 73222 -user-login = "wasmtime-publish" +version = "36.0.13" +when = "2026-07-31" +trusted-publisher = "github:bytecodealliance/wasmtime" [[publisher.wasmtime-environ]] -version = "25.0.3" -when = "2024-11-05" -user-id = 73222 -user-login = "wasmtime-publish" - -[[publisher.wasmtime-jit-icache-coherence]] -version = "25.0.3" -when = "2024-11-05" -user-id = 73222 -user-login = "wasmtime-publish" - -[[publisher.wasmtime-slab]] -version = "25.0.3" -when = "2024-11-05" -user-id = 73222 -user-login = "wasmtime-publish" - -[[publisher.wasmtime-types]] -version = "25.0.3" -when = "2024-11-05" -user-id = 73222 -user-login = "wasmtime-publish" - -[[publisher.wasmtime-wit-bindgen]] -version = "25.0.3" -when = "2024-11-05" -user-id = 73222 -user-login = "wasmtime-publish" +version = "36.0.13" +when = "2026-07-31" +trusted-publisher = "github:bytecodealliance/wasmtime" + +[[publisher.wasmtime-internal-cranelift]] +version = "36.0.13" +when = "2026-07-31" +trusted-publisher = "github:bytecodealliance/wasmtime" + +[[publisher.wasmtime-internal-fiber]] +version = "36.0.13" +when = "2026-07-31" +trusted-publisher = "github:bytecodealliance/wasmtime" + +[[publisher.wasmtime-internal-jit-debug]] +version = "36.0.13" +when = "2026-07-31" +trusted-publisher = "github:bytecodealliance/wasmtime" + +[[publisher.wasmtime-internal-jit-icache-coherence]] +version = "36.0.13" +when = "2026-07-31" +trusted-publisher = "github:bytecodealliance/wasmtime" + +[[publisher.wasmtime-internal-math]] +version = "36.0.13" +when = "2026-07-31" +trusted-publisher = "github:bytecodealliance/wasmtime" + +[[publisher.wasmtime-internal-slab]] +version = "36.0.13" +when = "2026-07-31" +trusted-publisher = "github:bytecodealliance/wasmtime" + +[[publisher.wasmtime-internal-unwinder]] +version = "36.0.13" +when = "2026-07-31" +trusted-publisher = "github:bytecodealliance/wasmtime" + +[[publisher.wasmtime-internal-versioned-export-macros]] +version = "36.0.13" +when = "2026-07-31" +trusted-publisher = "github:bytecodealliance/wasmtime" [[publisher.wit-bindgen]] version = "0.51.0" @@ -359,12 +361,6 @@ version = "0.244.0" when = "2026-01-06" trusted-publisher = "github:bytecodealliance/wasm-tools" -[[publisher.wit-parser]] -version = "0.217.1" -when = "2025-02-05" -user-id = 73222 -user-login = "wasmtime-publish" - [[publisher.wit-parser]] version = "0.244.0" when = "2026-01-06" @@ -385,85 +381,109 @@ user-id = 696 # Nick Fitzgerald (fitzgen) start = "2019-03-16" end = "2026-08-21" +[[audits.bytecode-alliance.wildcard-audits.cranelift-assembler-x64]] +who = "Alex Crichton " +criteria = "safe-to-deploy" +trusted-publisher = "github:bytecodealliance/wasmtime" +start = "2026-01-07" +end = "2027-01-08" +notes = "The Bytecode Alliance is the author of this crate" + +[[audits.bytecode-alliance.wildcard-audits.cranelift-assembler-x64-meta]] +who = "Alex Crichton " +criteria = "safe-to-deploy" +trusted-publisher = "github:bytecodealliance/wasmtime" +start = "2026-01-07" +end = "2027-01-08" +notes = "The Bytecode Alliance is the author of this crate" + [[audits.bytecode-alliance.wildcard-audits.cranelift-bforest]] -who = "Bobby Holley " +who = "Alex Crichton " criteria = "safe-to-deploy" -user-id = 73222 # wasmtime-publish -start = "2021-10-29" -end = "2026-08-21" -notes = "The Bytecode Alliance is the author of this crate." +trusted-publisher = "github:bytecodealliance/wasmtime" +start = "2026-01-07" +end = "2027-01-08" +notes = "The Bytecode Alliance is the author of this crate" + +[[audits.bytecode-alliance.wildcard-audits.cranelift-bitset]] +who = "Alex Crichton " +criteria = "safe-to-deploy" +trusted-publisher = "github:bytecodealliance/wasmtime" +start = "2026-01-07" +end = "2027-01-08" +notes = "The Bytecode Alliance is the author of this crate" [[audits.bytecode-alliance.wildcard-audits.cranelift-codegen]] -who = "Bobby Holley " +who = "Alex Crichton " criteria = "safe-to-deploy" -user-id = 73222 # wasmtime-publish -start = "2021-10-29" -end = "2026-08-21" -notes = "The Bytecode Alliance is the author of this crate." +trusted-publisher = "github:bytecodealliance/wasmtime" +start = "2026-01-07" +end = "2027-01-08" +notes = "The Bytecode Alliance is the author of this crate" [[audits.bytecode-alliance.wildcard-audits.cranelift-codegen-meta]] -who = "Bobby Holley " +who = "Alex Crichton " criteria = "safe-to-deploy" -user-id = 73222 # wasmtime-publish -start = "2021-10-29" -end = "2026-08-21" -notes = "The Bytecode Alliance is the author of this crate." +trusted-publisher = "github:bytecodealliance/wasmtime" +start = "2026-01-07" +end = "2027-01-08" +notes = "The Bytecode Alliance is the author of this crate" [[audits.bytecode-alliance.wildcard-audits.cranelift-codegen-shared]] -who = "Bobby Holley " +who = "Alex Crichton " criteria = "safe-to-deploy" -user-id = 73222 # wasmtime-publish -start = "2021-10-29" -end = "2026-08-21" -notes = "The Bytecode Alliance is the author of this crate." +trusted-publisher = "github:bytecodealliance/wasmtime" +start = "2026-01-07" +end = "2027-01-08" +notes = "The Bytecode Alliance is the author of this crate" [[audits.bytecode-alliance.wildcard-audits.cranelift-control]] -who = "Bobby Holley " +who = "Alex Crichton " criteria = "safe-to-deploy" -user-id = 73222 # wasmtime-publish -start = "2023-05-22" -end = "2026-08-21" -notes = "The Bytecode Alliance is the author of this crate." +trusted-publisher = "github:bytecodealliance/wasmtime" +start = "2026-01-07" +end = "2027-01-08" +notes = "The Bytecode Alliance is the author of this crate" [[audits.bytecode-alliance.wildcard-audits.cranelift-entity]] -who = "Bobby Holley " +who = "Alex Crichton " criteria = "safe-to-deploy" -user-id = 73222 # wasmtime-publish -start = "2021-10-29" -end = "2026-08-21" -notes = "The Bytecode Alliance is the author of this crate." +trusted-publisher = "github:bytecodealliance/wasmtime" +start = "2026-01-07" +end = "2027-01-08" +notes = "The Bytecode Alliance is the author of this crate" [[audits.bytecode-alliance.wildcard-audits.cranelift-frontend]] -who = "Bobby Holley " +who = "Alex Crichton " criteria = "safe-to-deploy" -user-id = 73222 # wasmtime-publish -start = "2021-10-29" -end = "2026-08-21" -notes = "The Bytecode Alliance is the author of this crate." +trusted-publisher = "github:bytecodealliance/wasmtime" +start = "2026-01-07" +end = "2027-01-08" +notes = "The Bytecode Alliance is the author of this crate" [[audits.bytecode-alliance.wildcard-audits.cranelift-isle]] -who = "Bobby Holley " +who = "Alex Crichton " criteria = "safe-to-deploy" -user-id = 73222 # wasmtime-publish -start = "2021-12-13" -end = "2026-08-21" -notes = "The Bytecode Alliance is the author of this crate." +trusted-publisher = "github:bytecodealliance/wasmtime" +start = "2026-01-07" +end = "2027-01-08" +notes = "The Bytecode Alliance is the author of this crate" [[audits.bytecode-alliance.wildcard-audits.cranelift-native]] -who = "Bobby Holley " +who = "Alex Crichton " criteria = "safe-to-deploy" -user-id = 73222 # wasmtime-publish -start = "2021-10-29" -end = "2026-08-21" -notes = "The Bytecode Alliance is the author of this crate." +trusted-publisher = "github:bytecodealliance/wasmtime" +start = "2026-01-07" +end = "2027-01-08" +notes = "The Bytecode Alliance is the author of this crate" -[[audits.bytecode-alliance.wildcard-audits.cranelift-wasm]] -who = "Bobby Holley " +[[audits.bytecode-alliance.wildcard-audits.cranelift-srcgen]] +who = "Alex Crichton " criteria = "safe-to-deploy" -user-id = 73222 # wasmtime-publish -start = "2021-10-29" -end = "2026-08-21" -notes = "The Bytecode Alliance is the author of this crate." +trusted-publisher = "github:bytecodealliance/wasmtime" +start = "2026-01-07" +end = "2027-01-08" +notes = "The Bytecode Alliance is the author of this crate" [[audits.bytecode-alliance.wildcard-audits.derive_arbitrary]] who = "Nick Fitzgerald " @@ -473,18 +493,29 @@ start = "2020-01-14" end = "2026-08-21" notes = "I am an author of this crate" +[[audits.bytecode-alliance.wildcard-audits.pulley-interpreter]] +who = "Alex Crichton " +criteria = "safe-to-deploy" +trusted-publisher = "github:bytecodealliance/wasmtime" +start = "2026-01-07" +end = "2027-01-08" +notes = "The Bytecode Alliance is the author of this crate" + +[[audits.bytecode-alliance.wildcard-audits.pulley-macros]] +who = "Alex Crichton " +criteria = "safe-to-deploy" +trusted-publisher = "github:bytecodealliance/wasmtime" +start = "2026-01-07" +end = "2027-01-08" +notes = "The Bytecode Alliance is the author of this crate" + [[audits.bytecode-alliance.wildcard-audits.regalloc2]] -who = "Trevor Elliott " +who = "Chris Fallin " criteria = "safe-to-deploy" -user-id = 187138 # Trevor Elliott (elliottt) -start = "2022-11-29" +user-id = 3726 # Chris Fallin (cfallin) +start = "2021-12-03" end = "2026-08-21" -notes = """ -This is a Bytecode Alliance authored crate maintained in the `regalloc2` -repository of which I'm one of the maintainers and publishers for. I am employed -by a member of the Bytecode Alliance and plan to continue doing so and will -actively maintain this crate over time. -""" +notes = "We (Bytecode Alliance) are the primary authors of regalloc2 and co-develop it with Cranelift/Wasmtime, with the same code-review, testing/fuzzing, and security standards." [[audits.bytecode-alliance.wildcard-audits.wasip2]] who = "Alex Crichton " @@ -561,98 +592,90 @@ notes = "The Bytecode Alliance is the author of this crate" [[audits.bytecode-alliance.wildcard-audits.wasmprinter]] who = "Alex Crichton " criteria = "safe-to-deploy" -user-id = 73222 # wasmtime-publish -start = "2023-01-01" -end = "2026-06-03" -notes = """ -The Bytecode Alliance uses the `wasmtime-publish` crates.io account to automate -publication of this crate from CI. This repository requires all PRs are reviewed -by a Bytecode Alliance maintainer and it owned by the Bytecode Alliance itself. -""" +trusted-publisher = "github:bytecodealliance/wasm-tools" +start = "2025-08-14" +end = "2027-01-08" +notes = "The Bytecode Alliance is the author of this crate" [[audits.bytecode-alliance.wildcard-audits.wasmtime]] -who = "Bobby Holley " +who = "Alex Crichton " criteria = "safe-to-deploy" -user-id = 73222 # wasmtime-publish -start = "2021-10-29" -end = "2026-08-21" -notes = "The Bytecode Alliance is the author of this crate." +trusted-publisher = "github:bytecodealliance/wasmtime" +start = "2026-01-07" +end = "2027-01-08" +notes = "The Bytecode Alliance is the author of this crate" -[[audits.bytecode-alliance.wildcard-audits.wasmtime-asm-macros]] -who = "Bobby Holley " +[[audits.bytecode-alliance.wildcard-audits.wasmtime-environ]] +who = "Alex Crichton " criteria = "safe-to-deploy" -user-id = 73222 # wasmtime-publish -start = "2022-08-22" -end = "2026-08-21" -notes = "The Bytecode Alliance is the author of this crate." +trusted-publisher = "github:bytecodealliance/wasmtime" +start = "2026-01-07" +end = "2027-01-08" +notes = "The Bytecode Alliance is the author of this crate" -[[audits.bytecode-alliance.wildcard-audits.wasmtime-component-macro]] -who = "Bobby Holley " +[[audits.bytecode-alliance.wildcard-audits.wasmtime-internal-cranelift]] +who = "Alex Crichton " criteria = "safe-to-deploy" -user-id = 73222 # wasmtime-publish -start = "2022-07-20" -end = "2026-08-21" -notes = "The Bytecode Alliance is the author of this crate." +trusted-publisher = "github:bytecodealliance/wasmtime" +start = "2026-01-07" +end = "2027-01-08" +notes = "The Bytecode Alliance is the author of this crate" -[[audits.bytecode-alliance.wildcard-audits.wasmtime-component-util]] -who = "Bobby Holley " +[[audits.bytecode-alliance.wildcard-audits.wasmtime-internal-fiber]] +who = "Alex Crichton " criteria = "safe-to-deploy" -user-id = 73222 # wasmtime-publish -start = "2022-08-22" -end = "2026-08-21" -notes = "The Bytecode Alliance is the author of this crate." +trusted-publisher = "github:bytecodealliance/wasmtime" +start = "2026-01-07" +end = "2027-01-08" +notes = "The Bytecode Alliance is the author of this crate" -[[audits.bytecode-alliance.wildcard-audits.wasmtime-cranelift]] -who = "Bobby Holley " +[[audits.bytecode-alliance.wildcard-audits.wasmtime-internal-jit-debug]] +who = "Alex Crichton " criteria = "safe-to-deploy" -user-id = 73222 # wasmtime-publish -start = "2021-10-29" -end = "2026-08-21" -notes = "The Bytecode Alliance is the author of this crate." +trusted-publisher = "github:bytecodealliance/wasmtime" +start = "2026-01-07" +end = "2027-01-08" +notes = "The Bytecode Alliance is the author of this crate" -[[audits.bytecode-alliance.wildcard-audits.wasmtime-environ]] -who = "Bobby Holley " +[[audits.bytecode-alliance.wildcard-audits.wasmtime-internal-jit-icache-coherence]] +who = "Alex Crichton " criteria = "safe-to-deploy" -user-id = 73222 # wasmtime-publish -start = "2021-10-29" -end = "2026-08-21" -notes = "The Bytecode Alliance is the author of this crate." +trusted-publisher = "github:bytecodealliance/wasmtime" +start = "2026-01-07" +end = "2027-01-08" +notes = "The Bytecode Alliance is the author of this crate" -[[audits.bytecode-alliance.wildcard-audits.wasmtime-jit-icache-coherence]] -who = "Bobby Holley " +[[audits.bytecode-alliance.wildcard-audits.wasmtime-internal-math]] +who = "Alex Crichton " criteria = "safe-to-deploy" -user-id = 73222 # wasmtime-publish -start = "2022-11-21" -end = "2026-08-21" -notes = "The Bytecode Alliance is the author of this crate." +trusted-publisher = "github:bytecodealliance/wasmtime" +start = "2026-01-07" +end = "2027-01-08" +notes = "The Bytecode Alliance is the author of this crate" -[[audits.bytecode-alliance.wildcard-audits.wasmtime-slab]] +[[audits.bytecode-alliance.wildcard-audits.wasmtime-internal-slab]] who = "Alex Crichton " criteria = "safe-to-deploy" -user-id = 73222 # wasmtime-publish -start = "2023-01-01" -end = "2026-06-03" -notes = """ -The Bytecode Alliance uses the `wasmtime-publish` crates.io account to automate -publication of this crate from CI. This repository requires all PRs are reviewed -by a Bytecode Alliance maintainer and it owned by the Bytecode Alliance itself. -""" +trusted-publisher = "github:bytecodealliance/wasmtime" +start = "2026-01-07" +end = "2027-01-08" +notes = "The Bytecode Alliance is the author of this crate" -[[audits.bytecode-alliance.wildcard-audits.wasmtime-types]] -who = "Bobby Holley " +[[audits.bytecode-alliance.wildcard-audits.wasmtime-internal-unwinder]] +who = "Alex Crichton " criteria = "safe-to-deploy" -user-id = 73222 # wasmtime-publish -start = "2021-10-29" -end = "2026-08-21" -notes = "The Bytecode Alliance is the author of this crate." +trusted-publisher = "github:bytecodealliance/wasmtime" +start = "2026-01-07" +end = "2027-01-08" +notes = "The Bytecode Alliance is the author of this crate" -[[audits.bytecode-alliance.wildcard-audits.wasmtime-wit-bindgen]] -who = "Bobby Holley " +[[audits.bytecode-alliance.wildcard-audits.wasmtime-internal-versioned-export-macros]] +who = "Alex Crichton " criteria = "safe-to-deploy" -user-id = 73222 # wasmtime-publish -start = "2023-01-20" -end = "2026-08-21" -notes = "The Bytecode Alliance is the author of this crate." +trusted-publisher = "github:bytecodealliance/wasmtime" +start = "2026-01-07" +end = "2027-01-08" +notes = "The Bytecode Alliance is the author of this crate" [[audits.bytecode-alliance.wildcard-audits.wit-bindgen]] who = "Alex Crichton " @@ -697,22 +720,54 @@ notes = "The Bytecode Alliance is the author of this crate" [[audits.bytecode-alliance.wildcard-audits.wit-parser]] who = "Alex Crichton " criteria = "safe-to-deploy" -user-id = 73222 # wasmtime-publish -start = "2023-01-01" -end = "2026-06-03" +trusted-publisher = "github:bytecodealliance/wasm-tools" +start = "2025-08-14" +end = "2027-01-08" +notes = "The Bytecode Alliance is the author of this crate" + +[[audits.bytecode-alliance.audits.addr2line]] +who = "Alex Crichton " +criteria = "safe-to-deploy" +delta = "0.17.0 -> 0.19.0" notes = """ -The Bytecode Alliance uses the `wasmtime-publish` crates.io account to automate -publication of this crate from CI. This repository requires all PRs are reviewed -by a Bytecode Alliance maintainer and it owned by the Bytecode Alliance itself. +This is a minor update for addr2line which looks to mainly update its +dependencies and refactor existing code to expose more functionality and such. """ -[[audits.bytecode-alliance.wildcard-audits.wit-parser]] +[[audits.bytecode-alliance.audits.addr2line]] who = "Alex Crichton " criteria = "safe-to-deploy" -trusted-publisher = "github:bytecodealliance/wasm-tools" -start = "2025-08-14" -end = "2027-01-08" -notes = "The Bytecode Alliance is the author of this crate" +delta = "0.19.0 -> 0.20.0" +notes = "This version brings support for split-dwarf which while it uses the filesystem is always done at the behest of the caller, so everything is as expected for this update." + +[[audits.bytecode-alliance.audits.addr2line]] +who = "Alex Crichton " +criteria = "safe-to-deploy" +delta = "0.20.0 -> 0.21.0" +notes = "This version bump updated some dependencies and optimized some internals. All looks good." + +[[audits.bytecode-alliance.audits.addr2line]] +who = "Alex Crichton " +criteria = "safe-to-deploy" +delta = "0.21.0 -> 0.22.0" + +[[audits.bytecode-alliance.audits.addr2line]] +who = "Alex Crichton " +criteria = "safe-to-deploy" +delta = "0.22.0 -> 0.24.1" +notes = "Lots of internal code refactorings and code movement. Nothing out of place however." + +[[audits.bytecode-alliance.audits.addr2line]] +who = "Alex Crichton " +criteria = "safe-to-deploy" +delta = "0.24.1 -> 0.25.0" +notes = "All minor changes, even a net reduction of `unsafe`." + +[[audits.bytecode-alliance.audits.addr2line]] +who = "Alex Crichton " +criteria = "safe-to-deploy" +delta = "0.25.0 -> 0.25.1" +notes = "Minor updates, looks like a minor bug fix, nothing awry." [[audits.bytecode-alliance.audits.adler2]] who = "Alex Crichton " @@ -819,6 +874,30 @@ who = "Pat Hickey " criteria = "safe-to-deploy" version = "0.1.1" +[[audits.bytecode-alliance.audits.gimli]] +who = "Alex Crichton " +criteria = "safe-to-deploy" +delta = "0.29.0 -> 0.31.0" +notes = "Various updates here and there, nothing too major, what you'd expect from a DWARF parsing crate." + +[[audits.bytecode-alliance.audits.gimli]] +who = "Alex Crichton " +criteria = "safe-to-deploy" +delta = "0.31.0 -> 0.31.1" +notes = "No fundmanetally new `unsafe` code, some small refactoring of existing code. Lots of changes in tests, not as many changes in the rest of the crate. More dwarf!" + +[[audits.bytecode-alliance.audits.gimli]] +who = "Alex Crichton " +criteria = "safe-to-deploy" +delta = "0.31.1 -> 0.32.0" +notes = "Ever more DWARF to parse, but also no new `unsafe` and everything looks like gimli." + +[[audits.bytecode-alliance.audits.gimli]] +who = "Alex Crichton " +criteria = "safe-to-deploy" +delta = "0.32.0 -> 0.32.3" +notes = "Ever more dwarf, it never ends! (nothing out of the ordinary)" + [[audits.bytecode-alliance.audits.hashbrown]] who = "Chris Fallin " criteria = "safe-to-deploy" @@ -846,17 +925,14 @@ crate is broadly used throughout the ecosystem and does not contain anything suspicious. """ -[[audits.bytecode-alliance.audits.instant]] -who = "Chris Fallin " -criteria = "safe-to-deploy" -version = "0.1.12" -notes = "Small crate wrapping platform primitives for time that uses `unsafe` only for FFI." - -[[audits.bytecode-alliance.audits.instant]] +[[audits.bytecode-alliance.audits.itertools]] who = "Alex Crichton " criteria = "safe-to-deploy" -delta = "0.1.12 -> 0.1.13" -notes = "Nothing major changed in this update" +delta = "0.12.1 -> 0.14.0" +notes = """ +Lots of new iterators and shuffling some things around. Some new unsafe code but +it's well-documented and well-tested. Nothing suspicious. +""" [[audits.bytecode-alliance.audits.leb128]] who = "Nick Fitzgerald " @@ -1007,6 +1083,12 @@ criteria = "safe-to-deploy" delta = "1.0.8 -> 1.1.3" notes = "Substantial updates, but nothing out of the ordinary one would expect from a serialization crate. Minor `unsafe` updates, but nothing major from what was already there." +[[audits.bytecode-alliance.audits.semver]] +who = "Pat Hickey " +criteria = "safe-to-deploy" +version = "1.0.17" +notes = "plenty of unsafe pointer and vec tricks, but in well-structured and commented code that appears to be correct" + [[audits.bytecode-alliance.audits.sha1]] who = "Andrew Brown " criteria = "safe-to-deploy" @@ -1030,16 +1112,6 @@ criteria = "safe-to-deploy" delta = "1.13.2 -> 1.14.0" notes = "Minor new feature, nothing out of the ordinary." -[[audits.bytecode-alliance.audits.sptr]] -who = "Alex Crichton " -criteria = "safe-to-deploy" -version = "0.3.2" -notes = """ -This crate is 90% documentation and does contain a good deal of `unsafe` code, -but it's all doing what it says on the tin: being a stable polyfill for strict -provenance APIs in the standard library while they're on Nightly. -""" - [[audits.bytecode-alliance.audits.static_assertions]] who = "Andrew Brown " criteria = "safe-to-deploy" @@ -1352,6 +1424,12 @@ delta = "0.1.4 -> 0.1.5" notes = "No new `unsafe`." aggregated-from = "https://chromium.googlesource.com/chromium/src/+/main/third_party/rust/chromium_crates_io/supply-chain/audits.toml?format=TEXT" +[[audits.google.audits.glob]] +who = "George Burgess IV " +criteria = "safe-to-deploy" +version = "0.3.1" +aggregated-from = "https://chromium.googlesource.com/chromiumos/third_party/rust_crates/+/refs/heads/main/cargo-vet/audits.toml?format=TEXT" + [[audits.google.audits.heck]] who = "Lukasz Anforowicz " criteria = "safe-to-deploy" @@ -1365,6 +1443,31 @@ https://source.chromium.org/chromium/chromium/src/+/28841c33c77833cc30b286f9ae24 """ aggregated-from = "https://chromium.googlesource.com/chromium/src/+/main/third_party/rust/chromium_crates_io/supply-chain/audits.toml?format=TEXT" +[[audits.google.audits.indexmap]] +who = "Lukasz Anforowicz " +criteria = "safe-to-deploy" +version = "2.7.1" +notes = ''' +Grepped for `-i cipher`, `-i crypto`, `'\bfs\b'`, `'\bnet\b'` +and there were no hits. + +There is a little bit of `unsafe` Rust code - the audit can be found at +https://chromium-review.googlesource.com/c/chromium/src/+/6187726/2 +''' +aggregated-from = "https://chromium.googlesource.com/chromium/src/+/main/third_party/rust/chromium_crates_io/supply-chain/audits.toml?format=TEXT" + +[[audits.google.audits.indexmap]] +who = "Lukasz Anforowicz " +criteria = "safe-to-deploy" +delta = "2.7.1 -> 2.8.0" +notes = """ +No `unsafe` introduced or affected in: +* `indexmap_with_default!` and `indexset_with_default!` macros +* New `PartialEq` implementations +* `fn slice_eq` in `util.rs` +""" +aggregated-from = "https://chromium.googlesource.com/chromium/src/+/main/third_party/rust/chromium_crates_io/supply-chain/audits.toml?format=TEXT" + [[audits.google.audits.lazy_static]] who = "Lukasz Anforowicz " criteria = "safe-to-deploy" @@ -2025,6 +2128,13 @@ delta = "0.30.0 -> 0.29.0" notes = "No unsafe code, mostly algorithms and parsing. Very unlikely to cause security issues." aggregated-from = "https://hg.mozilla.org/mozilla-central/raw-file/tip/supply-chain/audits.toml" +[[audits.mozilla.audits.glob]] +who = "Ben Dean-Kawamura " +criteria = "safe-to-deploy" +delta = "0.3.1 -> 0.3.3" +notes = "Very few changes. No new unsafe code." +aggregated-from = "https://hg.mozilla.org/mozilla-central/raw-file/tip/supply-chain/audits.toml" + [[audits.mozilla.audits.gpu-allocator]] who = "Erich Gubler " criteria = "safe-to-deploy" @@ -2118,6 +2228,19 @@ criteria = "safe-to-deploy" delta = "1.2.0 -> 1.2.1" aggregated-from = "https://hg.mozilla.org/mozilla-central/raw-file/tip/supply-chain/audits.toml" +[[audits.mozilla.audits.indexmap]] +who = "Erich Gubler " +criteria = "safe-to-deploy" +delta = "2.8.0 -> 2.11.4" +aggregated-from = "https://hg.mozilla.org/mozilla-central/raw-file/tip/supply-chain/audits.toml" + +[[audits.mozilla.audits.indexmap]] +who = "Ben Dean-Kawamura " +criteria = "safe-to-deploy" +delta = "2.11.4 -> 2.14.0" +notes = "Mostly internal refactorings. No new unsafe code." +aggregated-from = "https://hg.mozilla.org/mozilla-central/raw-file/tip/supply-chain/audits.toml" + [[audits.mozilla.audits.libloading]] who = "Jan-Erik Rediger " criteria = "safe-to-deploy" @@ -2333,6 +2456,19 @@ version = "1.1.0" notes = "Straightforward crate with no unsafe code, does what it says on the tin." aggregated-from = "https://hg.mozilla.org/mozilla-central/raw-file/tip/supply-chain/audits.toml" +[[audits.mozilla.audits.semver]] +who = "Ben Dean-Kawamura " +criteria = "safe-to-deploy" +delta = "1.0.16 -> 1.0.28" +notes = "Very few changes, mostly removes support for older Rust versions. Some unsafe code refactored, but it seemed to be functionally equivalent to me." +aggregated-from = "https://hg.mozilla.org/mozilla-central/raw-file/tip/supply-chain/audits.toml" + +[[audits.mozilla.audits.semver]] +who = "Bobby Holley " +criteria = "safe-to-deploy" +delta = "1.0.17 -> 1.0.16" +aggregated-from = "https://hg.mozilla.org/mozilla-central/raw-file/tip/supply-chain/audits.toml" + [[audits.mozilla.audits.shlex]] who = "Max Inden " criteria = "safe-to-deploy" @@ -2639,3 +2775,21 @@ who = "Lars Eggert " criteria = "safe-to-deploy" delta = "2.1.3 -> 2.4.2" aggregated-from = "https://hg.mozilla.org/mozilla-central/raw-file/tip/supply-chain/audits.toml" + +[[audits.mozilla.audits.zmij]] +who = "Benjamin VanderSloot " +criteria = "safe-to-deploy" +version = "1.0.20" +notes = """ +A lot of unsafe code here, included as a dependency of serde_json. +The testing is very thorough, validating all 32-bit floats, and 100m +random 64-bit floats. No unsafe imports. +""" +aggregated-from = "https://hg.mozilla.org/mozilla-central/raw-file/tip/supply-chain/audits.toml" + +[[audits.mozilla.audits.zmij]] +who = "Ben Dean-Kawamura " +criteria = "safe-to-deploy" +delta = "1.0.20 -> 1.0.21" +notes = "Almost no code changes. No new unsafe code." +aggregated-from = "https://hg.mozilla.org/mozilla-central/raw-file/tip/supply-chain/audits.toml" From d773602477280eacb47a58f9980da0fd8190b11d Mon Sep 17 00:00:00 2001 From: Albert Hui Date: Fri, 7 Aug 2026 09:03:50 -0700 Subject: [PATCH 3/5] fix(supply-chain): drop the RUSTSEC-2026-0222 ignore this branch makes obsolete MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit Merging main brought in the wasmtime advisory ignore added while the vulnerability was genuinely unfixable. This branch fixes it properly — pinning yara-x to ~1.7 reaches wasmtime 36.0.13, inside the patched range >=36.0.13,<37 — so the ignore now suppresses a finding that no longer exists. A suppression whose stated reason has become false is worse than a bare one: it passes review by looking diligent while its comment actively misinforms. This one claimed "upgrading is separately unavailable" and "resolved wasmtime is 25.0.3". Both were true when written and are false here. Verified by control, not assumption: with the ignore removed `cargo deny check advisories` still passes, so the suppression was doing no work. Merged rather than rebased, deliberately. Rebasing would have rewritten commits authored on this branch by someone else and required a force-push; a merge is additive and leaves their history intact. Conflicts in Cargo.lock and supply-chain/config.toml resolved in favour of this branch, whose entries describe the upgraded graph — main's described the pre-upgrade one. --- deny.toml | 25 ------------------------- 1 file changed, 25 deletions(-) diff --git a/deny.toml b/deny.toml index 54f96c55..61e34d9f 100644 --- a/deny.toml +++ b/deny.toml @@ -28,31 +28,6 @@ features = [ [advisories] version = 2 ignore = [ - # RUSTSEC-2026-0222 (wasmtime, "Stores can mix up type indices between engines"). - # - # NOT EXPOSED — the precondition is structurally unreachable here, which is a - # stronger claim than "we cannot upgrade" and is the reason this is ignored. - # - # The advisory states the bug "is not triggerable by guest WebAssembly - # programs. It requires the embedder to create two `Engine`s and mix objects - # between them." blazehash is not the embedder — yara-x is, and it holds a - # single process-wide engine: - # - # src/wasm/mod.rs:726 - # pub(crate) static ref ENGINE: Engine = Engine::new(&CONFIG).unwrap(); - # - # One lazy_static Engine means there is no second Engine to mix objects with, - # so the cross-engine index confusion cannot occur. (Identical in yara-x - # 0.12.0, which issen resolves.) blazehash also never executes untrusted - # WASM; wasmtime is present only because yara-x compiles YARA rules to WASM. - # - # Upgrading is separately unavailable: resolved wasmtime is 25.0.3 via yara-x - # 0.9.0, patched lines are 24.0.12+/36.0.13+/46.0.2+/47.0.3+, and the latest - # yara-x (1.19.0) requires ^43.0.2 — also not a patched line. - # CVSS 3.8 Low, AV:L/AC:H/PR:H/UI:R. - # REMOVE WHEN: yara-x depends on wasmtime >= 46.0.2, or yara-x gains a second - # Engine (which would make the precondition reachable and this reason void). - { id = "RUSTSEC-2026-0222", reason = "wasmtime via yara-x; NOT EXPOSED — advisory needs two Engines mixed, yara-x holds one lazy_static singleton; upgrade also unavailable (no yara-x release reaches a patched line)" }, # paste v1 is unmaintained but is a transitive dep of metal (wgpu-hal, GPU feature). # No action available until wgpu updates its metal dependency. "RUSTSEC-2024-0436", From f41cf4cc8b8e4bb0c0e5951d121cceda9ea85caa Mon Sep 17 00:00:00 2001 From: Albert Hui Date: Sat, 8 Aug 2026 00:58:15 -0700 Subject: [PATCH 4/5] fix(supply-chain): refresh the lock this branch's own manifest invalidated `cargo vet --locked` could not even start: it died in `cargo metadata` with "cannot update the lock file ... because --locked was passed". The committed lock pinned ratatui 0.29.0 while this branch's Cargo.toml already required ratatui "0.30" -- a bump made without regenerating the lock, so the two disagreed and every downstream check inherited the failure. Refreshing the lock minimally (not `cargo update`, which upgraded 1400 lines and pushed unvetted crates from 60 to 264) resolves ratatui 0.30.2. That release restructured the crate, so ratatui-core, ratatui-crossterm, ratatui-widgets and the termwiz/wezterm family now enter the graph: 49 crate names no imported audit set covers. Those 49 are recorded as EXEMPTIONS, never certifications. An exemption states "nobody audited this", which is true; a certify record would assert a human read the source, and generating those in bulk fabricates the very condition being claimed. Confirmed: this change adds 0 entries to audits.toml. The 49 are a consequence of a ratatui major already declared in the manifest, not of the security fix this branch carries -- worth saying plainly, because a supply-chain expansion riding along inside a security PR is exactly the kind of thing that passes review unnoticed. Verified end to end: cargo vet --locked Vetting Succeeded (180 fully audited, 8 partially, 668 exempted) cargo deny check advisories ok, bans ok, licenses ok, sources ok clippy -D warnings clean tests 987 passed, 0 failed (--no-fail-fast) The branch's purpose is intact: wasmtime resolves to 36.0.13, a patched release, so the RUSTSEC-2026-0222 ignore this branch removes is genuinely obsolete rather than merely deleted. Co-Authored-By: Claude Opus 5 --- Cargo.lock | 824 ++++++++++++++++++++++++++++++++++----- supply-chain/config.toml | 236 ++++++++++- 2 files changed, 944 insertions(+), 116 deletions(-) diff --git a/Cargo.lock b/Cargo.lock index 401902d4..95e733d5 100644 --- a/Cargo.lock +++ b/Cargo.lock @@ -134,7 +134,7 @@ version = "1.1.5" source = "registry+https://github.com/rust-lang/crates.io-index" checksum = "40c48f72fd53cd289104fc64099abca73db4166ad86ea0b4341abe65af83dadc" dependencies = [ - "windows-sys 0.60.2", + "windows-sys 0.61.2", ] [[package]] @@ -145,7 +145,7 @@ checksum = "291e6a250ff86cd4a820112fb8898808a366d8f9f58ce16d1f538353ad55747d" dependencies = [ "anstyle", "once_cell_polyfill", - "windows-sys 0.60.2", + "windows-sys 0.61.2", ] [[package]] @@ -154,6 +154,15 @@ version = "1.0.102" source = "registry+https://github.com/rust-lang/crates.io-index" checksum = "7f202df86484c868dbad7eaa557ef785d5c66295e41b460ef922eca0723b842c" +[[package]] +name = "approx" +version = "0.5.1" +source = "registry+https://github.com/rust-lang/crates.io-index" +checksum = "cab112f0a86d568ea0e627cc1d6be74a1e9cd55214684db5561995f6dad897c6" +dependencies = [ + "num-traits", +] + [[package]] name = "arbitrary" version = "1.4.2" @@ -503,7 +512,7 @@ version = "58.1.0" source = "registry+https://github.com/rust-lang/crates.io-index" checksum = "c30a1365d7a7dc50cc847e54154e6af49e4c4b0fddc9f607b687f29212082743" dependencies = [ - "bitflags 2.11.0", + "bitflags 2.13.1", ] [[package]] @@ -668,6 +677,15 @@ dependencies = [ "num-traits", ] +[[package]] +name = "atomic" +version = "0.6.1" +source = "registry+https://github.com/rust-lang/crates.io-index" +checksum = "a89cbf775b137e9b968e67227ef7f775587cde3fd31b0d8599dbd0f598a48340" +dependencies = [ + "bytemuck", +] + [[package]] name = "atomic-waker" version = "1.1.2" @@ -756,15 +774,30 @@ dependencies = [ "virtue", ] +[[package]] +name = "bit-set" +version = "0.5.3" +source = "registry+https://github.com/rust-lang/crates.io-index" +checksum = "0700ddab506f33b20a03b13996eccd309a48e5ff77d0d95926aa0210fb4e95f1" +dependencies = [ + "bit-vec 0.6.3", +] + [[package]] name = "bit-set" version = "0.6.0" source = "registry+https://github.com/rust-lang/crates.io-index" checksum = "f0481a0e032742109b1133a095184ee93d88f3dc9e0d28a5d033dc77a073f44f" dependencies = [ - "bit-vec", + "bit-vec 0.7.0", ] +[[package]] +name = "bit-vec" +version = "0.6.3" +source = "registry+https://github.com/rust-lang/crates.io-index" +checksum = "349f9b6a179ed607305526ca489b34ad0a41aed5f7980fa90eb03160b69598fb" + [[package]] name = "bit-vec" version = "0.7.0" @@ -782,9 +815,9 @@ checksum = "bef38d45163c2f1dde094a7dfd33ccf595c92905c8f8f4fdc18d06fb1037718a" [[package]] name = "bitflags" -version = "2.11.0" +version = "2.13.1" source = "registry+https://github.com/rust-lang/crates.io-index" -checksum = "843867be96c8daad0d758b57df9392b6d8d271134fce549de6ce169ff98a92af" +checksum = "b588b76d00fde79687d7646a9b5bdf3cc0f655e0bbd080335a95d7e96f3587da" dependencies = [ "serde_core", ] @@ -845,7 +878,7 @@ dependencies = [ "clap_mangen", "crc", "crc32c", - "crossterm", + "crossterm 0.28.1", "digest 0.10.7", "dirs", "duckdb", @@ -970,7 +1003,7 @@ version = "1.0.16" source = "registry+https://github.com/rust-lang/crates.io-index" checksum = "c541c70a910b485670304fd420f0eab8f7bde68439db6a8d98819c3d2774d7e2" dependencies = [ - "bit-vec", + "bit-vec 0.7.0", "getrandom 0.2.17", "siphasher", ] @@ -1016,6 +1049,12 @@ dependencies = [ "allocator-api2", ] +[[package]] +name = "by_address" +version = "1.2.1" +source = "registry+https://github.com/rust-lang/crates.io-index" +checksum = "64fa3c856b712db6612c019f14756e64e4bcea13337a6b33b696333a9eaa2d06" + [[package]] name = "bytemuck" version = "1.25.0" @@ -1059,12 +1098,6 @@ dependencies = [ "tinyvec", ] -[[package]] -name = "cassowary" -version = "0.3.0" -source = "registry+https://github.com/rust-lang/crates.io-index" -checksum = "df8670b8c7b9dae1793364eafadf7239c40d669904660c5960d74cfd80b46a53" - [[package]] name = "cast" version = "0.3.0" @@ -1270,16 +1303,16 @@ version = "7.1.4" source = "registry+https://github.com/rust-lang/crates.io-index" checksum = "4a65ebfec4fb190b6f90e944a817d60499ee0744e582530e2c9900a22e591d9a" dependencies = [ - "crossterm", + "crossterm 0.28.1", "unicode-segmentation", "unicode-width 0.2.0", ] [[package]] name = "compact_str" -version = "0.8.1" +version = "0.9.1" source = "registry+https://github.com/rust-lang/crates.io-index" -checksum = "3b79c4069c6cad78e2e0cdfcbd26275770669fb39fd308a752dc110e83b9af32" +checksum = "9dfdd1c2274d9aa354115b09dc9a901d6c5576818cdf70d14cae2bdb47df00ab" dependencies = [ "castaway", "cfg-if", @@ -1354,6 +1387,15 @@ version = "0.4.2" source = "registry+https://github.com/rust-lang/crates.io-index" checksum = "3d52eff69cd5e647efe296129160853a42795992097e8af39800e1060caeea9b" +[[package]] +name = "convert_case" +version = "0.10.0" +source = "registry+https://github.com/rust-lang/crates.io-index" +checksum = "633458d4ef8c78b72454de2d54fd6ab2e60f9e02be22f3c6104cdc8a4e0fceb9" +dependencies = [ + "unicode-segmentation", +] + [[package]] name = "core-foundation" version = "0.9.4" @@ -1586,6 +1628,12 @@ dependencies = [ "cfg-if", ] +[[package]] +name = "critical-section" +version = "1.2.0" +source = "registry+https://github.com/rust-lang/crates.io-index" +checksum = "790eea4361631c5e7d22598ecd5723ff611904e3344ce8720784c93e3d83d40b" + [[package]] name = "crossbeam-channel" version = "0.5.15" @@ -1635,7 +1683,7 @@ version = "0.28.1" source = "registry+https://github.com/rust-lang/crates.io-index" checksum = "829d955a0bb380ef178a640b91779e3987da38c9aea133b20614cfed8cdea9c6" dependencies = [ - "bitflags 2.11.0", + "bitflags 2.13.1", "crossterm_winapi", "mio 1.2.0", "parking_lot", @@ -1645,6 +1693,24 @@ dependencies = [ "winapi", ] +[[package]] +name = "crossterm" +version = "0.29.0" +source = "registry+https://github.com/rust-lang/crates.io-index" +checksum = "d8b9f2e4c67f833b660cdb0a3523065869fb35570177239812ed4c905aeff87b" +dependencies = [ + "bitflags 2.13.1", + "crossterm_winapi", + "derive_more", + "document-features", + "mio 1.2.0", + "parking_lot", + "rustix 1.1.4", + "signal-hook", + "signal-hook-mio", + "winapi", +] + [[package]] name = "crossterm_winapi" version = "0.9.1" @@ -1691,6 +1757,16 @@ dependencies = [ "hybrid-array", ] +[[package]] +name = "csscolorparser" +version = "0.6.2" +source = "registry+https://github.com/rust-lang/crates.io-index" +checksum = "eb2a7d3066da2de787b7f032c736763eb7ae5d355f81a68bab2675a96008b0bf" +dependencies = [ + "lab", + "phf", +] + [[package]] name = "csv" version = "1.4.0" @@ -1763,7 +1839,7 @@ version = "22.0.0" source = "registry+https://github.com/rust-lang/crates.io-index" checksum = "bdbd1f579714e3c809ebd822c81ef148b1ceaeb3d535352afc73fd0c4c6a0017" dependencies = [ - "bitflags 2.11.0", + "bitflags 2.13.1", "libloading 0.8.9", "winapi", ] @@ -1849,6 +1925,12 @@ version = "0.1.12" source = "registry+https://github.com/rust-lang/crates.io-index" checksum = "ac6b926516df9c60bfa16e107b21086399f8285a44ca9711344b9e553c5146e2" +[[package]] +name = "deltae" +version = "0.3.2" +source = "registry+https://github.com/rust-lang/crates.io-index" +checksum = "5729f5117e208430e437df2f4843f5e5952997175992d1414f94c57d61e270b4" + [[package]] name = "der" version = "0.7.10" @@ -1904,6 +1986,28 @@ dependencies = [ "syn 2.0.117", ] +[[package]] +name = "derive_more" +version = "2.1.1" +source = "registry+https://github.com/rust-lang/crates.io-index" +checksum = "d751e9e49156b02b44f9c1815bcb94b984cdcc4396ecc32521c739452808b134" +dependencies = [ + "derive_more-impl", +] + +[[package]] +name = "derive_more-impl" +version = "2.1.1" +source = "registry+https://github.com/rust-lang/crates.io-index" +checksum = "799a97264921d8623a957f6c3b9011f3b5492f557bbb7a5a19b7fa6d06ba8dcb" +dependencies = [ + "convert_case", + "proc-macro2", + "quote", + "rustc_version", + "syn 2.0.117", +] + [[package]] name = "des" version = "0.8.1" @@ -2142,7 +2246,7 @@ source = "registry+https://github.com/rust-lang/crates.io-index" checksum = "39cab71617ae0d63f51a36d69f866391735b51691dbda63cf6f96d042b63efeb" dependencies = [ "libc", - "windows-sys 0.52.0", + "windows-sys 0.61.2", ] [[package]] @@ -2156,6 +2260,15 @@ dependencies = [ "windows-sys 0.48.0", ] +[[package]] +name = "euclid" +version = "0.22.14" +source = "registry+https://github.com/rust-lang/crates.io-index" +checksum = "f1a05365e3b1c6d1650318537c7460c6923f1abdd272ad6842baa2b509957a06" +dependencies = [ + "num-traits", +] + [[package]] name = "event-listener" version = "5.4.1" @@ -2187,7 +2300,7 @@ dependencies = [ "flate2", "glob", "log", - "lru", + "lru 0.12.5", "md-5", "rayon", "sha-1", @@ -2212,6 +2325,16 @@ version = "0.1.9" source = "registry+https://github.com/rust-lang/crates.io-index" checksum = "7360491ce676a36bf9bb3c56c1aa791658183a54d2744120f27285738d90465a" +[[package]] +name = "fancy-regex" +version = "0.11.0" +source = "registry+https://github.com/rust-lang/crates.io-index" +checksum = "b95f7c0680e4142284cf8b22c14a476e87d61b004a3a0861872b32ef7ead40a2" +dependencies = [ + "bit-set 0.5.3", + "regex", +] + [[package]] name = "fastrand" version = "2.4.1" @@ -2243,6 +2366,17 @@ version = "0.2.9" source = "registry+https://github.com/rust-lang/crates.io-index" checksum = "28dea519a9695b9977216879a3ebfddf92f1c08c05d984f8996aecd6ecdc811d" +[[package]] +name = "filedescriptor" +version = "0.8.3" +source = "registry+https://github.com/rust-lang/crates.io-index" +checksum = "e40758ed24c9b2eeb76c35fb0aebc66c626084edd827e07e1552279814c6682d" +dependencies = [ + "libc", + "thiserror 1.0.69", + "winapi", +] + [[package]] name = "filetime" version = "0.2.27" @@ -2260,6 +2394,18 @@ version = "0.1.9" source = "registry+https://github.com/rust-lang/crates.io-index" checksum = "5baebc0774151f905a1a2cc41989300b1e6fbb29aff0ceffa1064fdd3088d582" +[[package]] +name = "finl_unicode" +version = "1.4.0" +source = "registry+https://github.com/rust-lang/crates.io-index" +checksum = "9844ddc3a6e533d62bba727eb6c28b5d360921d5175e9ff0f1e621a5c590a4d5" + +[[package]] +name = "fixedbitset" +version = "0.4.2" +source = "registry+https://github.com/rust-lang/crates.io-index" +checksum = "0ce7134b9999ecaf8bcd65542e436736ef32ddca1b3e06094cb6ec5755203b80" + [[package]] name = "flatbuffers" version = "24.12.23" @@ -2313,6 +2459,12 @@ version = "0.1.5" source = "registry+https://github.com/rust-lang/crates.io-index" checksum = "d9c4f5dac5e15c24eb999c26181a6ca40b39fe946cbe4c263c7209467bc83af2" +[[package]] +name = "foldhash" +version = "0.2.0" +source = "registry+https://github.com/rust-lang/crates.io-index" +checksum = "77ce24cb58228fbb8aa041425bb1050850ac19177686ea6e0f41a70416f56fdb" + [[package]] name = "foreign-types" version = "0.3.2" @@ -2628,7 +2780,7 @@ version = "0.9.1" source = "registry+https://github.com/rust-lang/crates.io-index" checksum = "0bf760ebf69878d9fd8f110c89703d90ce35095324d1f1edcb595c63945ee757" dependencies = [ - "bitflags 2.11.0", + "bitflags 2.13.1", "ignore", "walkdir", ] @@ -2672,7 +2824,7 @@ version = "0.6.0" source = "registry+https://github.com/rust-lang/crates.io-index" checksum = "fbcd2dba93594b227a1f57ee09b8b9da8892c34d55aa332e034a228d0fe6a171" dependencies = [ - "bitflags 2.11.0", + "bitflags 2.13.1", "gpu-alloc-types", ] @@ -2682,7 +2834,7 @@ version = "0.3.0" source = "registry+https://github.com/rust-lang/crates.io-index" checksum = "98ff03b468aa837d70984d55f5d3f846f6ec31fe34bbb97c4f85219caeee1ca4" dependencies = [ - "bitflags 2.11.0", + "bitflags 2.13.1", ] [[package]] @@ -2704,7 +2856,7 @@ version = "0.3.2" source = "registry+https://github.com/rust-lang/crates.io-index" checksum = "b89c83349105e3732062a895becfc71a8f921bb71ecbbdd8ff99263e3b53a0ca" dependencies = [ - "bitflags 2.11.0", + "bitflags 2.13.1", "gpu-descriptor-types", "hashbrown 0.15.5", ] @@ -2715,7 +2867,7 @@ version = "0.2.0" source = "registry+https://github.com/rust-lang/crates.io-index" checksum = "fdf242682df893b86f33a73828fb09ca4b2d3bb6cc95249707fc684d27484b91" dependencies = [ - "bitflags 2.11.0", + "bitflags 2.13.1", ] [[package]] @@ -2766,7 +2918,7 @@ checksum = "9229cfe53dfd69f0609a49f65461bd93001ea1ef889cd5529dd176593f5338a1" dependencies = [ "allocator-api2", "equivalent", - "foldhash", + "foldhash 0.1.5", "serde", ] @@ -2775,12 +2927,22 @@ name = "hashbrown" version = "0.16.1" source = "registry+https://github.com/rust-lang/crates.io-index" checksum = "841d1cc9bed7f9236f321df977030373f4a4163ae1a7dbfe1a51a2c1a51d9100" +dependencies = [ + "allocator-api2", + "equivalent", + "foldhash 0.2.0", +] [[package]] name = "hashbrown" version = "0.17.0" source = "registry+https://github.com/rust-lang/crates.io-index" checksum = "4f467dd6dccf739c208452f8014c75c18bb8301b050ad1cfb27153803edb0f51" +dependencies = [ + "allocator-api2", + "equivalent", + "foldhash 0.2.0", +] [[package]] name = "hashlink" @@ -2806,7 +2968,7 @@ version = "0.11.0" source = "registry+https://github.com/rust-lang/crates.io-index" checksum = "af2a7e73e1f34c48da31fb668a907f250794837e08faa144fd24f0b8b741e890" dependencies = [ - "bitflags 2.11.0", + "bitflags 2.13.1", "com", "libc", "libloading 0.8.9", @@ -2823,7 +2985,7 @@ checksum = "51610510377a0847d53b78b53f9c6c9b7df3ffb300d1181b2e04f68bba363734" dependencies = [ "aes", "base64 0.22.1", - "bitflags 2.11.0", + "bitflags 2.13.1", "bumpalo", "bytes", "cbc", @@ -3329,15 +3491,6 @@ version = "1.70.2" source = "registry+https://github.com/rust-lang/crates.io-index" checksum = "a6cb138bb79a146c1bd460005623e142ef0181e3d0219cb493e02f7d08a35695" -[[package]] -name = "itertools" -version = "0.13.0" -source = "registry+https://github.com/rust-lang/crates.io-index" -checksum = "413ee7dfc52ee1a4949ceeb7dbc8a33f2d6c088194d9f922fb8318faf1f01186" -dependencies = [ - "either", -] - [[package]] name = "itertools" version = "0.14.0" @@ -3365,7 +3518,7 @@ dependencies = [ "portable-atomic", "portable-atomic-util", "serde_core", - "windows-sys 0.52.0", + "windows-sys 0.61.2", ] [[package]] @@ -3480,6 +3633,17 @@ dependencies = [ "sha2", ] +[[package]] +name = "kasuari" +version = "0.4.12" +source = "registry+https://github.com/rust-lang/crates.io-index" +checksum = "bde5057d6143cc94e861d90f591b9303d6716c6b9602309150bd068853c10899" +dependencies = [ + "hashbrown 0.16.1", + "portable-atomic", + "thiserror 2.0.18", +] + [[package]] name = "keccak" version = "0.1.6" @@ -3536,6 +3700,12 @@ dependencies = [ "libc", ] +[[package]] +name = "lab" +version = "0.11.0" +source = "registry+https://github.com/rust-lang/crates.io-index" +checksum = "bf36173d4167ed999940f804952e6b08197cae5ad5d572eb4db150ce8ad5d58f" + [[package]] name = "lazy-regex" version = "3.6.0" @@ -3698,7 +3868,7 @@ version = "0.1.16" source = "registry+https://github.com/rust-lang/crates.io-index" checksum = "e02f3bb43d335493c96bf3fd3a321600bf6bd07ed34bc64118e9293bdffea46c" dependencies = [ - "bitflags 2.11.0", + "bitflags 2.13.1", "libc", "plain", "redox_syscall 0.7.4", @@ -3741,6 +3911,15 @@ dependencies = [ "vcpkg", ] +[[package]] +name = "line-clipping" +version = "0.3.8" +source = "registry+https://github.com/rust-lang/crates.io-index" +checksum = "e752191d037c44ad111a8caa762921926658402f01cc1253f7bef2020ece4f5e" +dependencies = [ + "bitflags 2.13.1", +] + [[package]] name = "linkme" version = "0.3.35" @@ -3843,6 +4022,15 @@ dependencies = [ "hashbrown 0.15.5", ] +[[package]] +name = "lru" +version = "0.18.2" +source = "registry+https://github.com/rust-lang/crates.io-index" +checksum = "5d2f2f9b4ba7e6b24d95e7e899329d35be83bcded72c8540cdd5368932d1d90a" +dependencies = [ + "hashbrown 0.17.0", +] + [[package]] name = "lru-slab" version = "0.1.2" @@ -3878,6 +4066,16 @@ dependencies = [ "sha2", ] +[[package]] +name = "mac_address" +version = "1.1.8" +source = "registry+https://github.com/rust-lang/crates.io-index" +checksum = "c0aeb26bf5e836cc1c341c8106051b573f1766dfa05aa87f0b98be5e51b02303" +dependencies = [ + "nix", + "winapi", +] + [[package]] name = "mach2" version = "0.4.3" @@ -3939,12 +4137,27 @@ dependencies = [ "libc", ] +[[package]] +name = "memmem" +version = "0.1.1" +source = "registry+https://github.com/rust-lang/crates.io-index" +checksum = "a64a92489e2744ce060c349162be1c5f33c6969234104dbd99ddb5feb08b8c15" + [[package]] name = "memo-map" version = "0.3.3" source = "registry+https://github.com/rust-lang/crates.io-index" checksum = "38d1115007560874e373613744c6fba374c17688327a71c1476d1a5954cc857b" +[[package]] +name = "memoffset" +version = "0.9.1" +source = "registry+https://github.com/rust-lang/crates.io-index" +checksum = "488016bfae457b036d996092f6cb448677611ce4449e970ceaf42695203f218a" +dependencies = [ + "autocfg", +] + [[package]] name = "memx" version = "0.1.32" @@ -3960,7 +4173,7 @@ version = "0.29.0" source = "registry+https://github.com/rust-lang/crates.io-index" checksum = "7ecfd3296f8c56b7c1f6fbac3c71cefa9d78ce009850c45000015f206dc7fa21" dependencies = [ - "bitflags 2.11.0", + "bitflags 2.13.1", "block", "core-graphics-types", "foreign-types 0.5.0", @@ -4082,8 +4295,8 @@ source = "registry+https://github.com/rust-lang/crates.io-index" checksum = "8bd5a652b6faf21496f2cfd88fc49989c8db0825d1f6746b1a71a6ede24a63ad" dependencies = [ "arrayvec", - "bit-set", - "bitflags 2.11.0", + "bit-set 0.6.0", + "bitflags 2.13.1", "cfg_aliases 0.1.1", "codespan-reporting", "hexf-parse", @@ -4122,6 +4335,19 @@ dependencies = [ "jni-sys 0.3.1", ] +[[package]] +name = "nix" +version = "0.29.0" +source = "registry+https://github.com/rust-lang/crates.io-index" +checksum = "71e2746dc3a24dd78b3cfcb7be93368c6de9963d30f43a6a73998a9cf4b17b46" +dependencies = [ + "bitflags 2.13.1", + "cfg-if", + "cfg_aliases 0.2.1", + "libc", + "memoffset", +] + [[package]] name = "nom" version = "7.1.3" @@ -4153,7 +4379,7 @@ version = "6.1.1" source = "registry+https://github.com/rust-lang/crates.io-index" checksum = "6205bd8bb1e454ad2e27422015fb5e4f2bcc7e08fa8f27058670d208324a4d2d" dependencies = [ - "bitflags 2.11.0", + "bitflags 2.13.1", "crossbeam-channel", "filetime", "fsevent-sys", @@ -4273,6 +4499,15 @@ dependencies = [ "libm", ] +[[package]] +name = "num_threads" +version = "0.1.7" +source = "registry+https://github.com/rust-lang/crates.io-index" +checksum = "5c7398b9c8b70908f6371f47ed36737907c87c52af34c268fed0bf0ceb92ead9" +dependencies = [ + "libc", +] + [[package]] name = "objc" version = "0.2.7" @@ -4391,7 +4626,7 @@ version = "0.10.76" source = "registry+https://github.com/rust-lang/crates.io-index" checksum = "951c002c75e16ea2c65b8c7e4d3d51d5530d8dfa7d060b4776828c88cfb18ecf" dependencies = [ - "bitflags 2.11.0", + "bitflags 2.13.1", "cfg-if", "foreign-types 0.3.2", "libc", @@ -4454,6 +4689,15 @@ dependencies = [ "num-traits", ] +[[package]] +name = "ordered-float" +version = "4.6.0" +source = "registry+https://github.com/rust-lang/crates.io-index" +checksum = "7bb71e1b3fa6ca1c61f383464aaf2bb0e2f8e772a1f01d486832464de363b951" +dependencies = [ + "num-traits", +] + [[package]] name = "ordered-multimap" version = "0.7.3" @@ -4512,6 +4756,39 @@ dependencies = [ "sha2", ] +[[package]] +name = "palette" +version = "0.7.7" +source = "registry+https://github.com/rust-lang/crates.io-index" +checksum = "ddeed8580d347d2abf3dcf06a5f0b3dc020258338526b277847cd4248a70fc64" +dependencies = [ + "approx", + "libm", + "palette_derive", + "palette_math", +] + +[[package]] +name = "palette_derive" +version = "0.7.7" +source = "registry+https://github.com/rust-lang/crates.io-index" +checksum = "88537020289b719d81be994ccf1bbf4990f477e2f69ee52fe3e45f43a02e56be" +dependencies = [ + "by_address", + "proc-macro2", + "quote", + "syn 2.0.117", +] + +[[package]] +name = "palette_math" +version = "0.7.7" +source = "registry+https://github.com/rust-lang/crates.io-index" +checksum = "6e6eb142958d64335fb0e345c5b9ead2ecd6fc438c307e9d7d3c4fd428dbaf12" +dependencies = [ + "libm", +] + [[package]] name = "parking" version = "2.2.1" @@ -4626,6 +4903,100 @@ version = "2.3.2" source = "registry+https://github.com/rust-lang/crates.io-index" checksum = "9b4f627cb1b25917193a259e49bdad08f671f8d9708acfd5fe0a8c1455d87220" +[[package]] +name = "pest" +version = "2.8.8" +source = "registry+https://github.com/rust-lang/crates.io-index" +checksum = "7df728be843c7070fab6ab7c328c4e9e9d78e23bf749c0669c86ee7ebfa050a2" +dependencies = [ + "memchr", + "ucd-trie", +] + +[[package]] +name = "pest_derive" +version = "2.8.8" +source = "registry+https://github.com/rust-lang/crates.io-index" +checksum = "9e2dd6fc3b26b3462ee188aac870f5a41d398f1cd5e2408d16531bd71c9591fd" +dependencies = [ + "pest", + "pest_generator", +] + +[[package]] +name = "pest_generator" +version = "2.8.8" +source = "registry+https://github.com/rust-lang/crates.io-index" +checksum = "6a7a9205cfb6f596a9e8b689c0a15f9ceb7a1aafae7aaf788150ac65b29975b6" +dependencies = [ + "pest", + "pest_meta", + "proc-macro2", + "quote", + "syn 2.0.117", +] + +[[package]] +name = "pest_meta" +version = "2.8.8" +source = "registry+https://github.com/rust-lang/crates.io-index" +checksum = "85abd351c0de1e8384fc791a0737111a350394937e92b956b743dac12429f57c" +dependencies = [ + "pest", +] + +[[package]] +name = "phf" +version = "0.11.3" +source = "registry+https://github.com/rust-lang/crates.io-index" +checksum = "1fd6780a80ae0c52cc120a26a1a42c1ae51b247a253e4e06113d23d2c2edd078" +dependencies = [ + "phf_macros", + "phf_shared", +] + +[[package]] +name = "phf_codegen" +version = "0.11.3" +source = "registry+https://github.com/rust-lang/crates.io-index" +checksum = "aef8048c789fa5e851558d709946d6d79a8ff88c0440c587967f8e94bfb1216a" +dependencies = [ + "phf_generator", + "phf_shared", +] + +[[package]] +name = "phf_generator" +version = "0.11.3" +source = "registry+https://github.com/rust-lang/crates.io-index" +checksum = "3c80231409c20246a13fddb31776fb942c38553c51e871f8cbd687a4cfb5843d" +dependencies = [ + "phf_shared", + "rand 0.8.5", +] + +[[package]] +name = "phf_macros" +version = "0.11.3" +source = "registry+https://github.com/rust-lang/crates.io-index" +checksum = "f84ac04429c13a7ff43785d75ad27569f2951ce0ffd30a3321230db2fc727216" +dependencies = [ + "phf_generator", + "phf_shared", + "proc-macro2", + "quote", + "syn 2.0.117", +] + +[[package]] +name = "phf_shared" +version = "0.11.3" +source = "registry+https://github.com/rust-lang/crates.io-index" +checksum = "67eabc2ef2a60eb7faa00097bd1ffdb5bd28e62bf39990626a582201b7a754e5" +dependencies = [ + "siphasher", +] + [[package]] name = "pin-project-lite" version = "0.2.17" @@ -4698,7 +5069,7 @@ version = "0.18.1" source = "registry+https://github.com/rust-lang/crates.io-index" checksum = "60769b8b31b2a9f263dae2776c37b1b28ae246943cf719eb6946a1db05128a61" dependencies = [ - "bitflags 2.11.0", + "bitflags 2.13.1", "crc32fast", "fdeflate", "flate2", @@ -4868,7 +5239,7 @@ source = "registry+https://github.com/rust-lang/crates.io-index" checksum = "27c6023962132f4b30eb4c172c91ce92d933da334c59c23cddee82358ddafb0b" dependencies = [ "anyhow", - "itertools 0.13.0", + "itertools", "proc-macro2", "quote", "syn 2.0.117", @@ -5162,22 +5533,102 @@ checksum = "ca45419789ae5a7899559e9512e58ca889e41f04f1f2445e9f4b290ceccd1d08" [[package]] name = "ratatui" -version = "0.29.0" +version = "0.30.2" source = "registry+https://github.com/rust-lang/crates.io-index" -checksum = "eabd94c2f37801c20583fc49dd5cd6b0ba68c716787c2dd6ed18571e1e63117b" +checksum = "3274ba0a2c5e1bcad2a2005d20f4dc59dad26b2eb0940fb094500dba4099d57d" dependencies = [ - "bitflags 2.11.0", - "cassowary", + "instability", + "ratatui-core", + "ratatui-crossterm", + "ratatui-macros", + "ratatui-termina", + "ratatui-termwiz", + "ratatui-widgets", + "serde", +] + +[[package]] +name = "ratatui-core" +version = "0.1.2" +source = "registry+https://github.com/rust-lang/crates.io-index" +checksum = "cbb175c433c8e28a809d1f5773a2ae96e68c0ce40db865cbab1020bf33ae479c" +dependencies = [ + "bitflags 2.13.1", "compact_str", - "crossterm", + "critical-section", + "hashbrown 0.17.0", + "itertools", + "kasuari", + "lru 0.18.2", + "palette", + "serde", + "strum 0.28.0", + "thiserror 2.0.18", + "unicode-segmentation", + "unicode-truncate", + "unicode-width 0.2.0", +] + +[[package]] +name = "ratatui-crossterm" +version = "0.1.2" +source = "registry+https://github.com/rust-lang/crates.io-index" +checksum = "567584a3b0e6a8203c23de40b4861497266725eb5363dbfd18a1edd603cca9f0" +dependencies = [ + "cfg-if", + "crossterm 0.29.0", + "instability", + "ratatui-core", +] + +[[package]] +name = "ratatui-macros" +version = "0.7.2" +source = "registry+https://github.com/rust-lang/crates.io-index" +checksum = "ed7dc68daa7498a43e4d68e0eb078427e10c38fbcfbb1e42d955f1fa2140d814" +dependencies = [ + "ratatui-core", + "ratatui-widgets", +] + +[[package]] +name = "ratatui-termina" +version = "0.1.0" +source = "registry+https://github.com/rust-lang/crates.io-index" +checksum = "c0bf912d9e66f057a759d92e386a280ea886b352ab757d6ac4d653c7ed2c43c2" +dependencies = [ + "instability", + "ratatui-core", + "termina", +] + +[[package]] +name = "ratatui-termwiz" +version = "0.1.2" +source = "registry+https://github.com/rust-lang/crates.io-index" +checksum = "faf03e0380b7744054d6cb74224fe3adf062a029754933f575ca1e3b4c2ce977" +dependencies = [ + "ratatui-core", + "termwiz", +] + +[[package]] +name = "ratatui-widgets" +version = "0.3.2" +source = "registry+https://github.com/rust-lang/crates.io-index" +checksum = "66e3d19bcc9130ca376277d93b60767ff121ace3be06f5f95f81dd68956407d1" +dependencies = [ + "bitflags 2.13.1", + "hashbrown 0.17.0", "indoc", "instability", - "itertools 0.13.0", - "lru", - "paste", - "strum 0.26.3", + "itertools", + "line-clipping", + "ratatui-core", + "serde", + "strum 0.28.0", + "time", "unicode-segmentation", - "unicode-truncate", "unicode-width 0.2.0", ] @@ -5213,7 +5664,7 @@ version = "0.5.18" source = "registry+https://github.com/rust-lang/crates.io-index" checksum = "ed2bf2547551a7053d6fdfafda3f938979645c44812fbfcda098faae3f1a362d" dependencies = [ - "bitflags 2.11.0", + "bitflags 2.13.1", ] [[package]] @@ -5222,7 +5673,7 @@ version = "0.7.4" source = "registry+https://github.com/rust-lang/crates.io-index" checksum = "f450ad9c3b1da563fb6948a8e0fb0fb9269711c9c73d9ea1de5058c79c8d643a" dependencies = [ - "bitflags 2.11.0", + "bitflags 2.13.1", ] [[package]] @@ -5466,7 +5917,7 @@ version = "0.31.0" source = "registry+https://github.com/rust-lang/crates.io-index" checksum = "b838eba278d213a8beaf485bd313fd580ca4505a00d5871caeb1457c55322cae" dependencies = [ - "bitflags 2.11.0", + "bitflags 2.13.1", "fallible-iterator 0.3.0", "fallible-streaming-iterator", "hashlink 0.9.1", @@ -5520,11 +5971,11 @@ version = "0.38.44" source = "registry+https://github.com/rust-lang/crates.io-index" checksum = "fdb5bc1ae2baa591800df16c9ca78619bf65c0488b41b96ccec5d11220d8c154" dependencies = [ - "bitflags 2.11.0", + "bitflags 2.13.1", "errno", "libc", "linux-raw-sys 0.4.15", - "windows-sys 0.52.0", + "windows-sys 0.59.0", ] [[package]] @@ -5533,11 +5984,11 @@ version = "1.1.4" source = "registry+https://github.com/rust-lang/crates.io-index" checksum = "b6fe4565b9518b83ef4f91bb47ce29620ca828bd32cb7e408f0062e9930ba190" dependencies = [ - "bitflags 2.11.0", + "bitflags 2.13.1", "errno", "libc", "linux-raw-sys 0.12.1", - "windows-sys 0.52.0", + "windows-sys 0.61.2", ] [[package]] @@ -5701,7 +6152,7 @@ version = "3.7.0" source = "registry+https://github.com/rust-lang/crates.io-index" checksum = "b7f4bc775c73d9a02cde8bf7b2ec4c9d12743edf609006c7facc23998404cd1d" dependencies = [ - "bitflags 2.11.0", + "bitflags 2.13.1", "core-foundation 0.10.1", "core-foundation-sys", "libc", @@ -5990,7 +6441,7 @@ source = "registry+https://github.com/rust-lang/crates.io-index" checksum = "3a766e1110788c36f4fa1c2b71b387a7815aa65f88ce0229841826633d93723e" dependencies = [ "libc", - "windows-sys 0.60.2", + "windows-sys 0.61.2", ] [[package]] @@ -6008,7 +6459,7 @@ version = "0.3.0+sdk-1.3.268.0" source = "registry+https://github.com/rust-lang/crates.io-index" checksum = "eda41003dc44290527a59b13432d4a0379379fa074b70174882adfbdfd917844" dependencies = [ - "bitflags 2.11.0", + "bitflags 2.13.1", ] [[package]] @@ -6143,7 +6594,7 @@ checksum = "5afe4c38a9b417b6a9a5eeffe7235d0a106716495536e7727d1c7f4b1ff3eba6" dependencies = [ "atoi", "base64 0.22.1", - "bitflags 2.11.0", + "bitflags 2.13.1", "byteorder", "bytes", "crc", @@ -6185,7 +6636,7 @@ checksum = "b1dbb157e65f10dbe01f729339c06d239120221c9ad9fa0ba8408c4cc18ecf21" dependencies = [ "atoi", "base64 0.22.1", - "bitflags 2.11.0", + "bitflags 2.13.1", "byteorder", "crc", "dotenvy", @@ -6244,7 +6695,7 @@ version = "0.9.5" source = "registry+https://github.com/rust-lang/crates.io-index" checksum = "2f84d13b3b8a0d4e91a2629911e951db1bb8671512f5c09d7d4ba34500ba68c8" dependencies = [ - "bitflags 2.11.0", + "bitflags 2.13.1", "libc", "libssh2-sys", "parking_lot", @@ -6290,40 +6741,39 @@ checksum = "7da8b5736845d9f2fcb837ea5d9e2628564b3b043a70948a3f0b778838c5fb4f" [[package]] name = "strum" -version = "0.26.3" +version = "0.27.2" source = "registry+https://github.com/rust-lang/crates.io-index" -checksum = "8fec0f0aef304996cf250b31b5a10dee7980c85da9d759361292b8bca5a18f06" +checksum = "af23d6f6c1a224baef9d3f61e287d2761385a5b88fdab4eb4c6f11aeb54c4bcf" dependencies = [ - "strum_macros 0.26.4", + "strum_macros 0.27.2", ] [[package]] name = "strum" -version = "0.27.2" +version = "0.28.0" source = "registry+https://github.com/rust-lang/crates.io-index" -checksum = "af23d6f6c1a224baef9d3f61e287d2761385a5b88fdab4eb4c6f11aeb54c4bcf" +checksum = "9628de9b8791db39ceda2b119bbe13134770b56c138ec1d3af810d045c04f9bd" dependencies = [ - "strum_macros 0.27.2", + "strum_macros 0.28.0", ] [[package]] name = "strum_macros" -version = "0.26.4" +version = "0.27.2" source = "registry+https://github.com/rust-lang/crates.io-index" -checksum = "4c6bee85a5a24955dc440386795aa378cd9cf82acd5f764469152d2270e581be" +checksum = "7695ce3845ea4b33927c055a39dc438a45b059f7c1b3d91d38d10355fb8cbca7" dependencies = [ "heck 0.5.0", "proc-macro2", "quote", - "rustversion", "syn 2.0.117", ] [[package]] name = "strum_macros" -version = "0.27.2" +version = "0.28.0" source = "registry+https://github.com/rust-lang/crates.io-index" -checksum = "7695ce3845ea4b33927c055a39dc438a45b059f7c1b3d91d38d10355fb8cbca7" +checksum = "ab85eea0270ee17587ed4156089e10b9e6880ee688791d45a905f5b1ca36f664" dependencies = [ "heck 0.5.0", "proc-macro2", @@ -6432,7 +6882,7 @@ dependencies = [ "getrandom 0.4.2", "once_cell", "rustix 1.1.4", - "windows-sys 0.52.0", + "windows-sys 0.61.2", ] [[package]] @@ -6444,12 +6894,88 @@ dependencies = [ "winapi-util", ] +[[package]] +name = "termina" +version = "0.3.3" +source = "registry+https://github.com/rust-lang/crates.io-index" +checksum = "9048a889effe34a5cddee0af7f53285198b16dca3be510858d38dfdb3e62a04e" +dependencies = [ + "bitflags 2.13.1", + "parking_lot", + "rustix 1.1.4", + "signal-hook", + "windows-sys 0.61.2", +] + +[[package]] +name = "terminfo" +version = "0.9.0" +source = "registry+https://github.com/rust-lang/crates.io-index" +checksum = "d4ea810f0692f9f51b382fff5893887bb4580f5fa246fde546e0b13e7fcee662" +dependencies = [ + "fnv", + "nom 7.1.3", + "phf", + "phf_codegen", +] + +[[package]] +name = "termios" +version = "0.3.3" +source = "registry+https://github.com/rust-lang/crates.io-index" +checksum = "411c5bf740737c7918b8b1fe232dca4dc9f8e754b8ad5e20966814001ed0ac6b" +dependencies = [ + "libc", +] + [[package]] name = "termtree" version = "0.5.1" source = "registry+https://github.com/rust-lang/crates.io-index" checksum = "8f50febec83f5ee1df3015341d8bd429f2d1cc62bcba7ea2076759d315084683" +[[package]] +name = "termwiz" +version = "0.23.3" +source = "registry+https://github.com/rust-lang/crates.io-index" +checksum = "4676b37242ccbd1aabf56edb093a4827dc49086c0ffd764a5705899e0f35f8f7" +dependencies = [ + "anyhow", + "base64 0.22.1", + "bitflags 2.13.1", + "fancy-regex", + "filedescriptor", + "finl_unicode", + "fixedbitset", + "hex", + "lazy_static", + "libc", + "log", + "memmem", + "nix", + "num-derive", + "num-traits", + "ordered-float 4.6.0", + "pest", + "pest_derive", + "phf", + "sha2", + "signal-hook", + "siphasher", + "terminfo", + "termios", + "thiserror 1.0.69", + "ucd-trie", + "unicode-segmentation", + "vtparse", + "wezterm-bidi", + "wezterm-blob-leases", + "wezterm-color-types", + "wezterm-dynamic", + "wezterm-input-types", + "winapi", +] + [[package]] name = "text-size" version = "1.1.1" @@ -6504,7 +7030,7 @@ checksum = "7e54bc85fc7faa8bc175c4bab5b92ba8d9a3ce893d0e9f42cc455c8ab16a9e09" dependencies = [ "byteorder", "integer-encoding", - "ordered-float", + "ordered-float 2.10.1", ] [[package]] @@ -6524,7 +7050,9 @@ checksum = "743bd48c283afc0388f9b8827b976905fb217ad9e647fae3a379a9283c4def2c" dependencies = [ "deranged", "itoa", + "libc", "num-conv", + "num_threads", "powerfmt", "serde_core", "time-core", @@ -6725,7 +7253,7 @@ version = "0.6.8" source = "registry+https://github.com/rust-lang/crates.io-index" checksum = "d4e6559d53cc268e5031cd8429d05415bc4cb4aefc4aa5d6cc35fbf5b924a1f8" dependencies = [ - "bitflags 2.11.0", + "bitflags 2.13.1", "bytes", "futures-util", "http", @@ -6809,6 +7337,12 @@ version = "1.19.0" source = "registry+https://github.com/rust-lang/crates.io-index" checksum = "562d481066bde0658276a35467c4af00bdc6ee726305698a55b86e61d7ad82bb" +[[package]] +name = "ucd-trie" +version = "0.1.7" +source = "registry+https://github.com/rust-lang/crates.io-index" +checksum = "2896d95c02a80c6d6a5d6e953d479f5ddf2dfdb6a244441010e373ac0fb88971" + [[package]] name = "unicase" version = "2.9.0" @@ -6850,13 +7384,13 @@ checksum = "9629274872b2bfaf8d66f5f15725007f635594914870f65218920345aa11aa8c" [[package]] name = "unicode-truncate" -version = "1.1.0" +version = "2.0.1" source = "registry+https://github.com/rust-lang/crates.io-index" -checksum = "b3644627a5af5fa321c95b9b235a72fd24cd29c648c2c379431e6628655627bf" +checksum = "16b380a1238663e5f8a691f9039c73e1cdae598a30e9855f541d29b08b53e9a5" dependencies = [ - "itertools 0.13.0", + "itertools", "unicode-segmentation", - "unicode-width 0.1.14", + "unicode-width 0.2.0", ] [[package]] @@ -6983,6 +7517,7 @@ version = "1.23.0" source = "registry+https://github.com/rust-lang/crates.io-index" checksum = "5ac8b6f42ead25368cf5b098aeb3dc8a1a2c05a3eee8a9a1a68c640edbfc79d9" dependencies = [ + "atomic", "getrandom 0.4.2", "js-sys", "serde_core", @@ -7008,6 +7543,15 @@ version = "0.0.18" source = "registry+https://github.com/rust-lang/crates.io-index" checksum = "051eb1abcf10076295e815102942cc58f9d5e3b4560e46e53c21e8ff6f3af7b1" +[[package]] +name = "vtparse" +version = "0.6.2" +source = "registry+https://github.com/rust-lang/crates.io-index" +checksum = "6d9b2acfb050df409c972a37d3b8e08cdea3bddb0c09db9d53137e504cfabed0" +dependencies = [ + "utf8parse", +] + [[package]] name = "wait-timeout" version = "0.2.1" @@ -7210,7 +7754,7 @@ source = "registry+https://github.com/rust-lang/crates.io-index" checksum = "5309c1090e3e84dad0d382f42064e9933fdaedb87e468cc239f0eabea73ddcb6" dependencies = [ "ahash", - "bitflags 2.11.0", + "bitflags 2.13.1", "hashbrown 0.14.5", "indexmap 2.14.0", "semver", @@ -7223,7 +7767,7 @@ version = "0.236.1" source = "registry+https://github.com/rust-lang/crates.io-index" checksum = "a9b1e81f3eb254cf7404a82cee6926a4a3ccc5aad80cc3d43608a070c67aa1d7" dependencies = [ - "bitflags 2.11.0", + "bitflags 2.13.1", "hashbrown 0.15.5", "indexmap 2.14.0", "semver", @@ -7236,7 +7780,7 @@ version = "0.244.0" source = "registry+https://github.com/rust-lang/crates.io-index" checksum = "47b807c72e1bac69382b3a6fb3dbe8ea4c0ed87ff5629b8685ae6b9a611028fe" dependencies = [ - "bitflags 2.11.0", + "bitflags 2.13.1", "hashbrown 0.15.5", "indexmap 2.14.0", "semver", @@ -7261,7 +7805,7 @@ checksum = "93d881c5dcff5f230368d84fcf110ca25fe47badc694e7d559c3891492159916" dependencies = [ "addr2line", "anyhow", - "bitflags 2.11.0", + "bitflags 2.13.1", "bumpalo", "cc", "cfg-if", @@ -7340,7 +7884,7 @@ dependencies = [ "cranelift-frontend", "cranelift-native", "gimli 0.32.3", - "itertools 0.14.0", + "itertools", "log", "object", "pulley-interpreter", @@ -7474,6 +8018,78 @@ dependencies = [ "rustls-pki-types", ] +[[package]] +name = "wezterm-bidi" +version = "0.2.3" +source = "registry+https://github.com/rust-lang/crates.io-index" +checksum = "0c0a6e355560527dd2d1cf7890652f4f09bb3433b6aadade4c9b5ed76de5f3ec" +dependencies = [ + "log", + "wezterm-dynamic", +] + +[[package]] +name = "wezterm-blob-leases" +version = "0.1.1" +source = "registry+https://github.com/rust-lang/crates.io-index" +checksum = "692daff6d93d94e29e4114544ef6d5c942a7ed998b37abdc19b17136ea428eb7" +dependencies = [ + "getrandom 0.3.4", + "mac_address", + "sha2", + "thiserror 1.0.69", + "uuid", +] + +[[package]] +name = "wezterm-color-types" +version = "0.3.0" +source = "registry+https://github.com/rust-lang/crates.io-index" +checksum = "7de81ef35c9010270d63772bebef2f2d6d1f2d20a983d27505ac850b8c4b4296" +dependencies = [ + "csscolorparser", + "deltae", + "lazy_static", + "wezterm-dynamic", +] + +[[package]] +name = "wezterm-dynamic" +version = "0.2.1" +source = "registry+https://github.com/rust-lang/crates.io-index" +checksum = "5f2ab60e120fd6eaa68d9567f3226e876684639d22a4219b313ff69ec0ccd5ac" +dependencies = [ + "log", + "ordered-float 4.6.0", + "strsim", + "thiserror 1.0.69", + "wezterm-dynamic-derive", +] + +[[package]] +name = "wezterm-dynamic-derive" +version = "0.1.1" +source = "registry+https://github.com/rust-lang/crates.io-index" +checksum = "46c0cf2d539c645b448eaffec9ec494b8b19bd5077d9e58cb1ae7efece8d575b" +dependencies = [ + "proc-macro2", + "quote", + "syn 1.0.109", +] + +[[package]] +name = "wezterm-input-types" +version = "0.1.0" +source = "registry+https://github.com/rust-lang/crates.io-index" +checksum = "7012add459f951456ec9d6c7e6fc340b1ce15d6fc9629f8c42853412c029e57e" +dependencies = [ + "bitflags 1.3.2", + "euclid", + "lazy_static", + "serde", + "wezterm-dynamic", +] + [[package]] name = "wgpu" version = "22.1.0" @@ -7506,8 +8122,8 @@ source = "registry+https://github.com/rust-lang/crates.io-index" checksum = "0348c840d1051b8e86c3bcd31206080c5e71e5933dabd79be1ce732b0b2f089a" dependencies = [ "arrayvec", - "bit-vec", - "bitflags 2.11.0", + "bit-vec 0.7.0", + "bitflags 2.13.1", "cfg_aliases 0.1.1", "document-features", "indexmap 2.14.0", @@ -7533,8 +8149,8 @@ dependencies = [ "android_system_properties", "arrayvec", "ash", - "bit-set", - "bitflags 2.11.0", + "bit-set 0.6.0", + "bitflags 2.13.1", "block", "cfg_aliases 0.1.1", "core-graphics-types", @@ -7575,7 +8191,7 @@ version = "22.0.0" source = "registry+https://github.com/rust-lang/crates.io-index" checksum = "bc9d91f0e2c4b51434dfa6db77846f2793149d8e73f800fa2e41f52b8eac3c5d" dependencies = [ - "bitflags 2.11.0", + "bitflags 2.13.1", "js-sys", "web-sys", ] @@ -7640,7 +8256,7 @@ version = "0.1.11" source = "registry+https://github.com/rust-lang/crates.io-index" checksum = "c2a7b1c03c876122aa43f3020e6c3c3ee5c05081c9a00739faf7503aeba10d22" dependencies = [ - "windows-sys 0.48.0", + "windows-sys 0.61.2", ] [[package]] @@ -8025,7 +8641,7 @@ source = "registry+https://github.com/rust-lang/crates.io-index" checksum = "9d66ea20e9553b30172b5e831994e35fbde2d165325bec84fc43dbf6f4eb9cb2" dependencies = [ "anyhow", - "bitflags 2.11.0", + "bitflags 2.13.1", "indexmap 2.14.0", "log", "serde", @@ -8127,7 +8743,7 @@ dependencies = [ "array-bytes", "base64 0.22.1", "bincode 2.0.1", - "bitflags 2.11.0", + "bitflags 2.13.1", "bitvec", "bstr", "const-oid 0.9.6", @@ -8140,7 +8756,7 @@ dependencies = [ "indexmap 2.14.0", "intaglio", "ipnet", - "itertools 0.14.0", + "itertools", "linkme", "md-5", "md2", @@ -8199,10 +8815,10 @@ source = "registry+https://github.com/rust-lang/crates.io-index" checksum = "eea3855a5e32277c45c0c74ada98edd83520416fcbcebbb8f2e384e0b73b2812" dependencies = [ "ascii_tree", - "bitflags 2.11.0", + "bitflags 2.13.1", "bstr", "indexmap 2.14.0", - "itertools 0.14.0", + "itertools", "logos", "num-traits", "rowan", diff --git a/supply-chain/config.toml b/supply-chain/config.toml index 9bc78ff3..5b3b320f 100644 --- a/supply-chain/config.toml +++ b/supply-chain/config.toml @@ -78,6 +78,10 @@ criteria = "safe-to-deploy" version = "1.0.102" criteria = "safe-to-deploy" +[[exemptions.approx]] +version = "0.5.1" +criteria = "safe-to-deploy" + [[exemptions.argon2]] version = "0.5.3" criteria = "safe-to-deploy" @@ -218,6 +222,10 @@ criteria = "safe-to-deploy" version = "2.0.0" criteria = "safe-to-deploy" +[[exemptions.atomic]] +version = "0.6.1" +criteria = "safe-to-deploy" + [[exemptions.autocfg]] version = "1.5.0" criteria = "safe-to-deploy" @@ -251,7 +259,7 @@ version = "2.0.1" criteria = "safe-to-deploy" [[exemptions.bitflags]] -version = "2.11.0" +version = "2.13.1" criteria = "safe-to-deploy" [[exemptions.bitvec]] @@ -298,6 +306,10 @@ criteria = "safe-to-deploy" version = "1.12.1" criteria = "safe-to-deploy" +[[exemptions.by_address]] +version = "1.2.1" +criteria = "safe-to-deploy" + [[exemptions.bytemuck]] version = "1.25.0" criteria = "safe-to-deploy" @@ -318,10 +330,6 @@ criteria = "safe-to-deploy" version = "0.1.2" criteria = "safe-to-deploy" -[[exemptions.cassowary]] -version = "0.3.0" -criteria = "safe-to-deploy" - [[exemptions.cast]] version = "0.3.0" criteria = "safe-to-deploy" @@ -391,7 +399,7 @@ version = "0.6.0" criteria = "safe-to-deploy" [[exemptions.compact_str]] -version = "0.8.1" +version = "0.9.1" criteria = "safe-to-deploy" [[exemptions.concurrent-queue]] @@ -426,6 +434,10 @@ criteria = "safe-to-deploy" version = "0.4.2" criteria = "safe-to-deploy" +[[exemptions.convert_case]] +version = "0.10.0" +criteria = "safe-to-deploy" + [[exemptions.core-foundation]] version = "0.10.1" criteria = "safe-to-deploy" @@ -458,6 +470,10 @@ criteria = "safe-to-deploy" version = "1.5.0" criteria = "safe-to-deploy" +[[exemptions.critical-section]] +version = "1.2.0" +criteria = "safe-to-deploy" + [[exemptions.crossbeam-channel]] version = "0.5.15" criteria = "safe-to-deploy" @@ -482,6 +498,10 @@ criteria = "safe-to-deploy" version = "0.28.1" criteria = "safe-to-deploy" +[[exemptions.crossterm]] +version = "0.29.0" +criteria = "safe-to-deploy" + [[exemptions.crossterm_winapi]] version = "0.9.1" criteria = "safe-to-deploy" @@ -502,6 +522,10 @@ criteria = "safe-to-deploy" version = "0.2.1" criteria = "safe-to-deploy" +[[exemptions.csscolorparser]] +version = "0.6.2" +criteria = "safe-to-deploy" + [[exemptions.csv]] version = "1.4.0" criteria = "safe-to-deploy" @@ -562,6 +586,10 @@ criteria = "safe-to-deploy" version = "0.1.12" criteria = "safe-to-deploy" +[[exemptions.deltae]] +version = "0.3.2" +criteria = "safe-to-deploy" + [[exemptions.der]] version = "0.8.0" criteria = "safe-to-deploy" @@ -570,6 +598,14 @@ criteria = "safe-to-deploy" version = "10.0.0" criteria = "safe-to-deploy" +[[exemptions.derive_more]] +version = "2.1.1" +criteria = "safe-to-deploy" + +[[exemptions.derive_more-impl]] +version = "2.1.1" +criteria = "safe-to-deploy" + [[exemptions.des]] version = "0.8.1" criteria = "safe-to-deploy" @@ -646,6 +682,10 @@ criteria = "safe-to-deploy" version = "0.5.4" criteria = "safe-to-deploy" +[[exemptions.fancy-regex]] +version = "0.11.0" +criteria = "safe-to-deploy" + [[exemptions.fastrand]] version = "2.4.1" criteria = "safe-to-deploy" @@ -658,6 +698,10 @@ criteria = "safe-to-deploy" version = "0.2.9" criteria = "safe-to-deploy" +[[exemptions.filedescriptor]] +version = "0.8.3" +criteria = "safe-to-deploy" + [[exemptions.filetime]] version = "0.2.27" criteria = "safe-to-deploy" @@ -666,6 +710,10 @@ criteria = "safe-to-deploy" version = "0.1.9" criteria = "safe-to-deploy" +[[exemptions.finl_unicode]] +version = "1.4.0" +criteria = "safe-to-deploy" + [[exemptions.flatbuffers]] version = "24.12.23" criteria = "safe-to-deploy" @@ -982,10 +1030,6 @@ criteria = "safe-to-deploy" version = "0.12.1" criteria = "safe-to-deploy" -[[exemptions.itertools]] -version = "0.13.0" -criteria = "safe-to-deploy" - [[exemptions.itoa]] version = "1.0.18" criteria = "safe-to-deploy" @@ -1034,6 +1078,10 @@ criteria = "safe-to-deploy" version = "0.16.0" criteria = "safe-to-deploy" +[[exemptions.kasuari]] +version = "0.4.12" +criteria = "safe-to-deploy" + [[exemptions.keccak]] version = "0.1.6" criteria = "safe-to-deploy" @@ -1058,6 +1106,10 @@ criteria = "safe-to-deploy" version = "1.0.4" criteria = "safe-to-deploy" +[[exemptions.lab]] +version = "0.11.0" +criteria = "safe-to-deploy" + [[exemptions.lazy-regex]] version = "3.6.0" criteria = "safe-to-deploy" @@ -1122,6 +1174,10 @@ criteria = "safe-to-deploy" version = "1.1.24" criteria = "safe-to-deploy" +[[exemptions.line-clipping]] +version = "0.3.8" +criteria = "safe-to-deploy" + [[exemptions.linkme]] version = "0.3.35" criteria = "safe-to-deploy" @@ -1166,6 +1222,10 @@ criteria = "safe-to-deploy" version = "0.12.5" criteria = "safe-to-deploy" +[[exemptions.lru]] +version = "0.18.2" +criteria = "safe-to-deploy" + [[exemptions.lru-slab]] version = "0.1.2" criteria = "safe-to-deploy" @@ -1182,6 +1242,10 @@ criteria = "safe-to-deploy" version = "0.13.0" criteria = "safe-to-deploy" +[[exemptions.mac_address]] +version = "1.1.8" +criteria = "safe-to-deploy" + [[exemptions.mach2]] version = "0.4.3" criteria = "safe-to-deploy" @@ -1202,10 +1266,18 @@ criteria = "safe-to-deploy" version = "0.9.10" criteria = "safe-to-deploy" +[[exemptions.memmem]] +version = "0.1.1" +criteria = "safe-to-deploy" + [[exemptions.memo-map]] version = "0.3.3" criteria = "safe-to-deploy" +[[exemptions.memoffset]] +version = "0.9.1" +criteria = "safe-to-deploy" + [[exemptions.memx]] version = "0.1.32" criteria = "safe-to-deploy" @@ -1254,6 +1326,10 @@ criteria = "safe-to-deploy" version = "0.5.0+25.2.9519653" criteria = "safe-to-deploy" +[[exemptions.nix]] +version = "0.15.0" +criteria = "safe-to-deploy" + [[exemptions.nom]] version = "8.0.0" criteria = "safe-to-deploy" @@ -1282,6 +1358,10 @@ criteria = "safe-to-deploy" version = "0.1.45" criteria = "safe-to-deploy" +[[exemptions.num_threads]] +version = "0.1.7" +criteria = "safe-to-deploy" + [[exemptions.objc]] version = "0.2.7" criteria = "safe-to-deploy" @@ -1334,6 +1414,10 @@ criteria = "safe-to-deploy" version = "2.10.1" criteria = "safe-to-deploy" +[[exemptions.ordered-float]] +version = "4.6.0" +criteria = "safe-to-deploy" + [[exemptions.ordered-multimap]] version = "0.7.3" criteria = "safe-to-deploy" @@ -1354,6 +1438,18 @@ criteria = "safe-to-deploy" version = "0.13.1" criteria = "safe-to-deploy" +[[exemptions.palette]] +version = "0.7.7" +criteria = "safe-to-deploy" + +[[exemptions.palette_derive]] +version = "0.7.7" +criteria = "safe-to-deploy" + +[[exemptions.palette_math]] +version = "0.7.7" +criteria = "safe-to-deploy" + [[exemptions.parking_lot]] version = "0.12.5" criteria = "safe-to-deploy" @@ -1382,6 +1478,42 @@ criteria = "safe-to-deploy" version = "3.0.6" criteria = "safe-to-deploy" +[[exemptions.pest]] +version = "2.8.8" +criteria = "safe-to-deploy" + +[[exemptions.pest_derive]] +version = "2.8.8" +criteria = "safe-to-deploy" + +[[exemptions.pest_generator]] +version = "2.8.8" +criteria = "safe-to-deploy" + +[[exemptions.pest_meta]] +version = "2.8.8" +criteria = "safe-to-deploy" + +[[exemptions.phf]] +version = "0.11.3" +criteria = "safe-to-deploy" + +[[exemptions.phf_codegen]] +version = "0.11.3" +criteria = "safe-to-deploy" + +[[exemptions.phf_generator]] +version = "0.11.3" +criteria = "safe-to-deploy" + +[[exemptions.phf_macros]] +version = "0.11.3" +criteria = "safe-to-deploy" + +[[exemptions.phf_shared]] +version = "0.11.3" +criteria = "safe-to-deploy" + [[exemptions.pin-project-lite]] version = "0.2.17" criteria = "safe-to-deploy" @@ -1543,7 +1675,31 @@ version = "0.1.5" criteria = "safe-to-deploy" [[exemptions.ratatui]] -version = "0.29.0" +version = "0.30.2" +criteria = "safe-to-deploy" + +[[exemptions.ratatui-core]] +version = "0.1.2" +criteria = "safe-to-deploy" + +[[exemptions.ratatui-crossterm]] +version = "0.1.2" +criteria = "safe-to-deploy" + +[[exemptions.ratatui-macros]] +version = "0.7.2" +criteria = "safe-to-deploy" + +[[exemptions.ratatui-termina]] +version = "0.1.0" +criteria = "safe-to-deploy" + +[[exemptions.ratatui-termwiz]] +version = "0.1.2" +criteria = "safe-to-deploy" + +[[exemptions.ratatui-widgets]] +version = "0.3.2" criteria = "safe-to-deploy" [[exemptions.rayon]] @@ -1894,10 +2050,18 @@ criteria = "safe-to-deploy" version = "0.27.2" criteria = "safe-to-deploy" +[[exemptions.strum]] +version = "0.28.0" +criteria = "safe-to-deploy" + [[exemptions.strum_macros]] version = "0.27.2" criteria = "safe-to-deploy" +[[exemptions.strum_macros]] +version = "0.28.0" +criteria = "safe-to-deploy" + [[exemptions.subtle]] version = "2.6.1" criteria = "safe-to-deploy" @@ -1938,6 +2102,22 @@ criteria = "safe-to-deploy" version = "1.4.1" criteria = "safe-to-deploy" +[[exemptions.termina]] +version = "0.3.3" +criteria = "safe-to-deploy" + +[[exemptions.terminfo]] +version = "0.9.0" +criteria = "safe-to-deploy" + +[[exemptions.termios]] +version = "0.3.3" +criteria = "safe-to-deploy" + +[[exemptions.termwiz]] +version = "0.23.3" +criteria = "safe-to-deploy" + [[exemptions.text-size]] version = "1.1.1" criteria = "safe-to-deploy" @@ -2070,6 +2250,10 @@ criteria = "safe-to-deploy" version = "1.19.0" criteria = "safe-to-deploy" +[[exemptions.ucd-trie]] +version = "0.1.7" +criteria = "safe-to-deploy" + [[exemptions.unicase]] version = "2.9.0" criteria = "safe-to-deploy" @@ -2083,7 +2267,7 @@ version = "0.1.4" criteria = "safe-to-deploy" [[exemptions.unicode-truncate]] -version = "1.1.0" +version = "2.0.1" criteria = "safe-to-deploy" [[exemptions.unicode_categories]] @@ -2118,6 +2302,10 @@ criteria = "safe-to-deploy" version = "0.0.18" criteria = "safe-to-deploy" +[[exemptions.vtparse]] +version = "0.6.2" +criteria = "safe-to-deploy" + [[exemptions.walkdir]] version = "2.5.0" criteria = "safe-to-deploy" @@ -2190,6 +2378,30 @@ criteria = "safe-to-deploy" version = "1.0.6" criteria = "safe-to-deploy" +[[exemptions.wezterm-bidi]] +version = "0.2.3" +criteria = "safe-to-deploy" + +[[exemptions.wezterm-blob-leases]] +version = "0.1.1" +criteria = "safe-to-deploy" + +[[exemptions.wezterm-color-types]] +version = "0.3.0" +criteria = "safe-to-deploy" + +[[exemptions.wezterm-dynamic]] +version = "0.2.1" +criteria = "safe-to-deploy" + +[[exemptions.wezterm-dynamic-derive]] +version = "0.1.1" +criteria = "safe-to-deploy" + +[[exemptions.wezterm-input-types]] +version = "0.1.0" +criteria = "safe-to-deploy" + [[exemptions.wgpu]] version = "22.1.0" criteria = "safe-to-deploy" From b701ecbbeae6ee9f9ae7fa4f5dc29e4407c7d5a8 Mon Sep 17 00:00:00 2001 From: Albert Hui Date: Sat, 8 Aug 2026 00:59:04 -0700 Subject: [PATCH 5/5] fix(supply-chain): commit the refreshed imports.lock too The previous commit staged Cargo.lock and config.toml but left the refreshed supply-chain/imports.lock behind, which would have shipped a still-red vet job. imports.lock caches what each imported audit set and publisher says. Ours went stale when ewf 0.4.7 was published: the trust entry for it is valid, but the cached publisher data predates the release, so vet cannot confirm it and reports 1 unvetted dependencies: ewf:0.4.7 missing ["safe-to-deploy"] Confirmed by control rather than assumed: reverting imports.lock to its committed state reproduces exactly that failure, and restoring the refreshed copy returns "Vetting Succeeded". The file is load-bearing, not incidental. Co-Authored-By: Claude Opus 5 --- supply-chain/imports.lock | 11 ++--------- 1 file changed, 2 insertions(+), 9 deletions(-) diff --git a/supply-chain/imports.lock b/supply-chain/imports.lock index f1d1614f..23454390 100644 --- a/supply-chain/imports.lock +++ b/supply-chain/imports.lock @@ -123,8 +123,8 @@ user-login = "nical" user-name = "Nicolas Silva" [[publisher.ewf]] -version = "0.4.9" -when = "2026-08-06" +version = "0.4.7" +when = "2026-07-25" user-id = 347968 user-login = "h4x0r" user-name = "Albert Hui" @@ -166,13 +166,6 @@ user-id = 3726 user-login = "cfallin" user-name = "Chris Fallin" -[[publisher.safe-read]] -version = "0.2.2" -when = "2026-08-06" -user-id = 347968 -user-login = "h4x0r" -user-name = "Albert Hui" - [[publisher.unicode-normalization]] version = "0.1.25" when = "2025-10-30"