mirrors/arti.git/maint/cargo_audit, branch arti-v1.4.1mirror of https://gitlab.torproject.org/tpo/core/arti
http://git.dilluti0n.com/mirrors/arti.git/atom?h=arti-v1.4.12025-02-26T21:58:26Zmaint: update comments for RUSTSEC-2024-0384 exception2025-02-26T21:58:26ZSteven Engleropara@torproject.org2025-02-26T21:50:17Zurn:sha1:b8d21afb0cebc51f4d1ea7e61cda736bdf9269ea
The 'notify' lib was recently upgraded to 8.0.0, but that's not the only
place that we depend on 'instant'.
Un-ignore RUSTSEC-2024-04212025-01-07T16:46:54ZNick Mathewsonnickm@torproject.org2025-01-07T16:46:54Zurn:sha1:266e7850f1fff228a0f618a08f0aa34ba11f0459
We no longer require a version of hickory that requires an affected idns.
Un-ignore RUSTSEC-2024-03702025-01-06T16:03:41ZNick Mathewsonnickm@torproject.org2025-01-06T13:24:32Zurn:sha1:20b3d7b6bacf2eb32c32e903c35cfee50a98d71fAdd an exception for RUSTSEC-2024-0421 to fix CI.2024-12-09T20:12:05ZNick Mathewsonnickm@torproject.org2024-12-09T20:12:05Zurn:sha1:0dfc2d4d79e6477061552b5772868ccb6c69e9abcargo_audit: Temporarily ignore RUSTSEC-2024-0384.2024-11-12T12:07:40ZGabriela Moldovangabi@torproject.org2024-11-12T12:07:40Zurn:sha1:58d51105d73835976365eb2fec504ab62dbf0d83
We depend on `instant`, which is unmaintained, via `notify`.
`notify` switched over to [`web-time`], but hasn't relased the change
yet, so we need to ignore the advisory for now.
[`web-time`]: https://github.com/notify-rs/notify/pull/652
maint/cargo_audit: Add exception for RUSTSEC-2024-0370.2024-09-09T12:04:07ZGabriela Moldovangabi@torproject.org2024-09-09T12:04:07Zurn:sha1:627a744fe1c1892ec729718c5ed9b3b3b72d5658
Adding an exception for now, as per #1608
maint: Remove exceptions for generational-arena2024-08-14T16:33:06ZNick Mathewsonnickm@torproject.org2024-08-14T16:33:06Zurn:sha1:1b7c77124f3c70895e390a5a926b2140b98a62eb
Now that it's gone, we no longer need to bless its MPL-2.0 usage
or excuse it from cargo-audit.
Remove an obsolete RUSTSEC allow2024-07-09T11:08:43ZIan Jacksonijackson@chiark.greenend.org.uk2024-07-09T11:08:43Zurn:sha1:8328b02b2aedc722c5b99963cb926c0335f7bc3a
We don't use the affected crates any more, now that arti-hyper is
gone.
cargo_audit: Add an exception for RUSTSEC-2024-0014.2024-02-19T12:29:53ZGabriela Moldovangabi@torproject.org2024-02-19T11:45:21Zurn:sha1:1fd9077db406835277093caff745bbb8ce6bce05
We should migrate to `slotmap`, but in the meantime let's just add an
exception to unblock CI.
Restore deleted entries to OBSOLETE_IGNORE2023-12-11T13:34:41ZNick Mathewsonnickm@torproject.org2023-11-30T15:27:59Zurn:sha1:e3678842775c91b108f6efb5f0a771bcaab1b8e5
We should have added these to our record of previous rustsec
ignores, but we accidentally removed them instead.