Skip to content

Bump cargo-vet to 0.10.2 #32

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Merged
felipebalbi merged 3 commits into from
Aug 28, 2026
Merged

Bump cargo-vet to 0.10.2 #32

Show file tree
Hide file tree
Changes from all commits
Commits
Show all changes
3 commits
Select commit Hold shift + click to select a range
9ff0edd
Bump cargo-vet to 0.10.2
felipebalbi Aug 28, 2026
8f6bc78
Reformat supply-chain store for cargo-vet 0.10.2
felipebalbi Aug 28, 2026
4f97efc
Ignore RUSTSEC-2026-0173: proc-macro-error2 is unmaintained
felipebalbi Aug 28, 2026
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
2 changes: 1 addition & 1 deletion .github/workflows/cargo-vet.yml
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -16,7 +16,7 @@ jobs:
name: vet-dependencies
runs-on: ubuntu-latest
env:
CARGO_VET_VERSION: 0.10.1
CARGO_VET_VERSION: 0.10.2

steps:
- uses: actions/checkout@v4
Expand Down
1 change: 1 addition & 0 deletions deny.toml
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -76,6 +76,7 @@ ignore = [
#{ crate = "a-crate-that-is-yanked@0.1.1", reason = "you can specify why you are ignoring the yanked crate" },
{ id = "RUSTSEC-2024-0370", reason = "proc-macro-error is unmaintained, no safe upgrade available, need upstream dependencies to migrate away from it." },
{ id = "RUSTSEC-2024-0436", reason = "there are no suitable replacements for paste right now; paste has been archived as read-only. It only affects compile time concatenation in macros. We will allow it for now" },
{ id = "RUSTSEC-2026-0173", reason = "proc-macro-error2 is unmaintained, no safe upgrade available, need upstream dependencies to migrate away from it. Supersedes RUSTSEC-2024-0370 for the proc-macro-error2 fork." },
]
# If this is true, then cargo deny will use the git executable to fetch advisory database.
# If this is false, then it uses a built-in git library.
Expand Down
10 changes: 5 additions & 5 deletions supply-chain/imports.lock
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -304,8 +304,8 @@ who = "Lukasz Anforowicz <lukasza@chromium.org>"
criteria = "safe-to-deploy"
version = "1.0.78"
notes = """
Grepped for \"crypt\", \"cipher\", \"fs\", \"net\" - there were no hits
(except for a benign \"fs\" hit in a doc comment)
Grepped for "crypt", "cipher", "fs", "net" - there were no hits
(except for a benign "fs" hit in a doc comment)

Notes from the `unsafe` review can be found in https://crrev.com/c/5385745.
"""
Expand Down Expand Up @@ -423,8 +423,8 @@ who = "Lukasz Anforowicz <lukasza@chromium.org>"
criteria = "safe-to-deploy"
version = "1.0.35"
notes = """
Grepped for \"unsafe\", \"crypt\", \"cipher\", \"fs\", \"net\" - there were no hits
(except for benign \"net\" hit in tests and \"fs\" hit in README.md)
Grepped for "unsafe", "crypt", "cipher", "fs", "net" - there were no hits
(except for benign "net" hit in tests and "fs" hit in README.md)
"""
aggregated-from = "https://chromium.googlesource.com/chromium/src/+/main/third_party/rust/chromium_crates_io/supply-chain/audits.toml?format=TEXT"

Expand Down Expand Up @@ -529,7 +529,7 @@ and there were no hits except for:
* Using `unsafe` in a string:

```
src/constfn.rs: \"unsafe\" => Qualifiers::Unsafe,
src/constfn.rs: "unsafe" => Qualifiers::Unsafe,
```

* Using `std::fs` in `build/build.rs` to write `${OUT_DIR}/version.expr`
Expand Down
Loading