mirrors/arti.git/maint/cargo_audit, branch arti-v1.4.2mirror of https://gitlab.torproject.org/tpo/core/arti
http://git.dilluti0n.com/mirrors/arti.git/atom?h=arti-v1.4.22025-03-13T21:51:09Zmaint: Revert ignore of RUSTSEC-2025-00142025-03-13T21:51:09Zvcrn3893-vcrn@gitlab.torproject.org2025-03-13T21:51:09Zurn:sha1:50154ebf15b32da0f066409a50316c93f5d1946a
Crate humantime is no longer unmaintained
maint: ignore RUSTSEC-2025-00142025-03-11T17:31:33ZSteven Engleropara@torproject.org2025-03-11T17:31:33Zurn:sha1:e25331f8470e1ebe7e52e2078dee1dea341ce97dcargo_audit: Ignore paste deprecation notice.2025-03-10T11:32:08ZGabriela Moldovangabi@torproject.org2025-03-10T11:32:08Zurn:sha1:4dff8e054c49111db463ac35f257f9701d619324maint: update comments for RUSTSEC-2024-0384 exception2025-02-26T21:58:26ZSteven Engleropara@torproject.org2025-02-26T21:50:17Zurn:sha1:b8d21afb0cebc51f4d1ea7e61cda736bdf9269ea
The 'notify' lib was recently upgraded to 8.0.0, but that's not the only
place that we depend on 'instant'.
Un-ignore RUSTSEC-2024-04212025-01-07T16:46:54ZNick Mathewsonnickm@torproject.org2025-01-07T16:46:54Zurn:sha1:266e7850f1fff228a0f618a08f0aa34ba11f0459
We no longer require a version of hickory that requires an affected idns.
Un-ignore RUSTSEC-2024-03702025-01-06T16:03:41ZNick Mathewsonnickm@torproject.org2025-01-06T13:24:32Zurn:sha1:20b3d7b6bacf2eb32c32e903c35cfee50a98d71fAdd an exception for RUSTSEC-2024-0421 to fix CI.2024-12-09T20:12:05ZNick Mathewsonnickm@torproject.org2024-12-09T20:12:05Zurn:sha1:0dfc2d4d79e6477061552b5772868ccb6c69e9abcargo_audit: Temporarily ignore RUSTSEC-2024-0384.2024-11-12T12:07:40ZGabriela Moldovangabi@torproject.org2024-11-12T12:07:40Zurn:sha1:58d51105d73835976365eb2fec504ab62dbf0d83
We depend on `instant`, which is unmaintained, via `notify`.
`notify` switched over to [`web-time`], but hasn't relased the change
yet, so we need to ignore the advisory for now.
[`web-time`]: https://github.com/notify-rs/notify/pull/652
maint/cargo_audit: Add exception for RUSTSEC-2024-0370.2024-09-09T12:04:07ZGabriela Moldovangabi@torproject.org2024-09-09T12:04:07Zurn:sha1:627a744fe1c1892ec729718c5ed9b3b3b72d5658
Adding an exception for now, as per #1608
maint: Remove exceptions for generational-arena2024-08-14T16:33:06ZNick Mathewsonnickm@torproject.org2024-08-14T16:33:06Zurn:sha1:1b7c77124f3c70895e390a5a926b2140b98a62eb
Now that it's gone, we no longer need to bless its MPL-2.0 usage
or excuse it from cargo-audit.