mirrors/arti.git/maint/cargo_audit, branch ios-sqlite-hacks

Add a cargo-audit exception for RUSTSEC-2023-0052

2023-08-22T14:00:02Z

We've solved this for rustls-webpki, but tls-api (which arti-hyper uses) still requires the unmaintained webpki crate. See #1016.

cargo_audit: Add an exception for RUSTSEC-2022-0093.

2023-08-14T18:15:15Z

This is the API deficiency in ed25519-dalek v1 that allows you to mismatch public and private keys, leading to a (fatal) double-signing attack. We have worked around this in our current design, so it's appropriate to suppress this warning for now.

cargo audit: un-ignore RUSTSEC-2023-0040 ("`users` is unmaintained"

2023-07-14T15:02:45Z

maint/cargo-audit: Ignore RUSTSEC-2023-0040 (the users crate is unmaintained)

2023-06-05T10:52:06Z

Signed-off-by: Gabriela Moldovan

shell: use /usr/bin/env instead of absolute paths

2023-01-25T17:35:53Z

This commit changes the shebang in all shell scripts from absolute paths (such as `/bin/bash` or `/usr/bin/python3`) to the `/usr/bin/env` binary with the accompanying interpreter as it's argument. The reason for this are as follows: - NixOS cannot work with absolute paths - BSD systems install their packages in /usr/local/bin

Ignore atty theoretical unaligned read for now

2022-11-22T12:54:21Z

Upgrade to clap 3 with minimal changes

2022-11-04T18:28:38Z

This removes the last cargo audit override (for the unmaintained ansi_term). Don't mark options as required when they have default values: see .

update to v5.0.0

2022-08-31T17:08:06Z

maint/cargo_audit: Tolerate RUSTSEC-2021-0139 (ansi_term unmaintained)

2022-08-22T09:37:00Z

maint/cargo_audit: Honour $CARGO

2022-08-22T09:36:53Z

This makes it easier to for me to test this script. (I would like to do this to all of them but it's easier on a case-by-case basis.)