mirrors/arti.git/maint/cargo_audit, branch arti-v1.1.11

Ignore rsa timing cargo-audit warning

2023-11-28T15:41:54Z

Merge branch 'clap4' into 'main'

2023-11-15T17:35:29Z

Upgrade to clap 4 See merge request tpo/core/arti!1735

Remove webpki cargo_audit exception

2023-11-15T15:05:55Z

Apparently webpki came out of retirement and actually fixed RUSTSEC-2023-0052. Versions >=0.22.2 should be fine.

cargo_audit: Remove note about clap use of atty.

2023-11-15T14:46:45Z

Add a cargo-audit exception for RUSTSEC-2023-0052

2023-08-22T14:00:02Z

We've solved this for rustls-webpki, but tls-api (which arti-hyper uses) still requires the unmaintained webpki crate. See #1016.

cargo_audit: Add an exception for RUSTSEC-2022-0093.

2023-08-14T18:15:15Z

This is the API deficiency in ed25519-dalek v1 that allows you to mismatch public and private keys, leading to a (fatal) double-signing attack. We have worked around this in our current design, so it's appropriate to suppress this warning for now.

cargo audit: un-ignore RUSTSEC-2023-0040 ("`users` is unmaintained"

2023-07-14T15:02:45Z

maint/cargo-audit: Ignore RUSTSEC-2023-0040 (the users crate is unmaintained)

2023-06-05T10:52:06Z

Signed-off-by: Gabriela Moldovan

shell: use /usr/bin/env instead of absolute paths

2023-01-25T17:35:53Z

This commit changes the shebang in all shell scripts from absolute paths (such as `/bin/bash` or `/usr/bin/python3`) to the `/usr/bin/env` binary with the accompanying interpreter as it's argument. The reason for this are as follows: - NixOS cannot work with absolute paths - BSD systems install their packages in /usr/local/bin

Ignore atty theoretical unaligned read for now

2022-11-22T12:54:21Z