mirrors/arti.git/maint/cargo_audit.sh, branch arti-v0.0.1 mirror of https://gitlab.torproject.org/tpo/core/arti http://git.dilluti0n.com/mirrors/arti.git/atom?h=arti-v0.0.1 2021-10-24T15:33:12Z Remove chrono exception from cargo_audit.sh 2021-10-24T15:33:12Z Nick Mathewson nickm@torproject.org 2021-10-24T15:33:12Z urn:sha1:c4710ce9296b0c92f353790218ea88364394d1d7 Fix some typos in comments. 2021-10-19T14:40:32Z Nick Mathewson nickm@torproject.org 2021-10-19T14:38:26Z urn:sha1:36353aacd829fd606a46e90db2e3a910af499bfc Also, tell the "typos" tool to ignore Cargo.lock. Upgrade to latest chrono; update cargo_audit.sh 2021-10-19T12:03:41Z Nick Mathewson nickm@torproject.org 2021-10-19T12:03:41Z urn:sha1:5b6a862096c989750c1cbca8c84c511c967f4073 Thanks to the chrono update, we no longer include an obsolete/vulnerable version of the `time` crate. Unfortunately, it turns out that chrono has the same trouble as `time`: it, too, looks at the environment via localtime_r, and the environment isn't threadsafe. One step forward, one step back. At least the underlying issue is one that lots of people seem to care about; let's hope they come up with a solution. Add in first cargo-audit exception, as an example. 2021-10-17T15:11:54Z Nick Mathewson nickm@torproject.org 2021-10-17T15:11:54Z urn:sha1:a1758644a6c7e34cd2e0a843f1bdd58bd69b64dd Add an ignored cargo-audit warning, with appropriate documentation 2021-10-17T15:02:11Z Nick Mathewson nickm@torproject.org 2021-10-17T15:02:11Z urn:sha1:342dec3872b54a5496265e43071bb73a5dd7b7f6 Move "cargo audit" invocation into a script. 2021-10-17T14:41:52Z Nick Mathewson nickm@torproject.org 2021-10-17T14:39:19Z urn:sha1:290fe83671fc6bc3d56bca62128238e51362be1a