mirrors/arti.git/maint/cargo_audit, branch arti-v1.3.2mirror of https://gitlab.torproject.org/tpo/core/arti
http://git.dilluti0n.com/mirrors/arti.git/atom?h=arti-v1.3.22025-01-06T16:03:41ZUn-ignore RUSTSEC-2024-03702025-01-06T16:03:41ZNick Mathewsonnickm@torproject.org2025-01-06T13:24:32Zurn:sha1:20b3d7b6bacf2eb32c32e903c35cfee50a98d71fAdd an exception for RUSTSEC-2024-0421 to fix CI.2024-12-09T20:12:05ZNick Mathewsonnickm@torproject.org2024-12-09T20:12:05Zurn:sha1:0dfc2d4d79e6477061552b5772868ccb6c69e9abcargo_audit: Temporarily ignore RUSTSEC-2024-0384.2024-11-12T12:07:40ZGabriela Moldovangabi@torproject.org2024-11-12T12:07:40Zurn:sha1:58d51105d73835976365eb2fec504ab62dbf0d83
We depend on `instant`, which is unmaintained, via `notify`.
`notify` switched over to [`web-time`], but hasn't relased the change
yet, so we need to ignore the advisory for now.
[`web-time`]: https://github.com/notify-rs/notify/pull/652
maint/cargo_audit: Add exception for RUSTSEC-2024-0370.2024-09-09T12:04:07ZGabriela Moldovangabi@torproject.org2024-09-09T12:04:07Zurn:sha1:627a744fe1c1892ec729718c5ed9b3b3b72d5658
Adding an exception for now, as per #1608
maint: Remove exceptions for generational-arena2024-08-14T16:33:06ZNick Mathewsonnickm@torproject.org2024-08-14T16:33:06Zurn:sha1:1b7c77124f3c70895e390a5a926b2140b98a62eb
Now that it's gone, we no longer need to bless its MPL-2.0 usage
or excuse it from cargo-audit.
Remove an obsolete RUSTSEC allow2024-07-09T11:08:43ZIan Jacksonijackson@chiark.greenend.org.uk2024-07-09T11:08:43Zurn:sha1:8328b02b2aedc722c5b99963cb926c0335f7bc3a
We don't use the affected crates any more, now that arti-hyper is
gone.
cargo_audit: Add an exception for RUSTSEC-2024-0014.2024-02-19T12:29:53ZGabriela Moldovangabi@torproject.org2024-02-19T11:45:21Zurn:sha1:1fd9077db406835277093caff745bbb8ce6bce05
We should migrate to `slotmap`, but in the meantime let's just add an
exception to unblock CI.
Restore deleted entries to OBSOLETE_IGNORE2023-12-11T13:34:41ZNick Mathewsonnickm@torproject.org2023-11-30T15:27:59Zurn:sha1:e3678842775c91b108f6efb5f0a771bcaab1b8e5
We should have added these to our record of previous rustsec
ignores, but we accidentally removed them instead.
Remove our cargo-audit exception for ed25519-dalek2023-12-11T13:34:41ZNick Mathewsonnickm@torproject.org2023-11-30T13:51:15Zurn:sha1:b3b8d7f10f2c99101ccc22379f36b831b8da5cff
It's no longer necessary now that we have upgraded.
Ignore rsa timing cargo-audit warning2023-11-28T15:41:54ZNick Mathewsonnickm@torproject.org2023-11-28T15:41:54Zurn:sha1:41a421d6a23e65052f84cca9496712387fd75b5e