mirrors/arti.git/maint, branch arti-v1.1.8mirror of https://gitlab.torproject.org/tpo/core/arti
http://git.dilluti0n.com/mirrors/arti.git/atom?h=arti-v1.1.82023-09-05T15:17:24Zdowngrade_dependencies: re-upgrade filetime2023-09-05T15:17:24ZNick Mathewsonnickm@torproject.org2023-09-05T15:17:24Zurn:sha1:aca15b17dd7aed75f987c7bb1161c61fe092369f
We don't actually use filetime directly, but notify wants it, and
notify accepts a version that doesn't actually appear to work.
This fixes minimal_versions CI.
CI: cargo install caching: Use cache/ directory, per-image2023-08-25T16:28:16ZIan Jacksonijackson@chiark.greenend.org.uk2023-08-25T15:59:04Zurn:sha1:f45e53b15f0fd142a5403ed58af6a4a471f0fbf4
This avoids us trying to run binaries built on one image, on a
different one. I believe that this is supposed to work according to
Rust doctrine, but empirically it doesn't.
clippy: Suppress needless_pass_by_value in tests2023-08-23T09:34:00ZIan Jacksonijackson@chiark.greenend.org.uk2023-08-22T14:26:40Zurn:sha1:ce8b0184ec6d896a7c7d136467f40db34a6b61fd
Rationale: same as for useless_vec, as in 01cb7ee0a112.
Prompted by reading a commit where someone did makework to get rid of
an occurrence of this warning.
Add a cargo-audit exception for RUSTSEC-2023-00522023-08-22T14:00:02ZNick Mathewsonnickm@torproject.org2023-08-22T14:00:02Zurn:sha1:55bc2977049a54f20c7b12be6e262c35f00e6293
We've solved this for rustls-webpki, but tls-api (which arti-hyper
uses) still requires the unmaintained webpki crate. See #1016.
cargo_audit: Add an exception for RUSTSEC-2022-0093.2023-08-14T18:15:15ZNick Mathewsonnickm@torproject.org2023-08-14T18:15:15Zurn:sha1:875de204e9d004b66b81203b6335b4abb7365202
This is the API deficiency in ed25519-dalek v1 that allows you to
mismatch public and private keys, leading to a (fatal)
double-signing attack. We have worked around this in our current
design, so it's appropriate to suppress this warning for now.
maint: use relative shebang in `maint/bump_nodep`2023-08-09T12:33:01ZEmil Englerme@emilengler.com2023-08-09T12:33:01Zurn:sha1:e8cdc4c3d2694b866376ead8bf00399e8081f34aMerge branch 'with_coverage-no-list' into 'main'2023-08-09T10:37:43ZIan Jacksoniwj@torproject.org2023-08-09T10:37:43Zurn:sha1:17b78f61082cf05f66cdcceb753a4b5bdfb65cdf
maint: provide no list of grcov formats
See merge request tpo/core/arti!1482maint: remove useless optarg2023-08-08T14:32:31ZEmil Englerme@emilengler.com2023-08-08T14:32:31Zurn:sha1:ab4d0182ab0b775b705c8c2ff7f65b08784c5942
The `maint/coverage` script has a useless option `c`.
This commit removes it.
maint: list the HTML dependencies in coverage2023-08-08T14:29:53ZEmil Englerme@emilengler.com2023-08-08T14:29:53Zurn:sha1:3c1e5e32c2e84006444a84e2cbf30b45f228e90c
Currently, the `maint/coverage` script does not inform about the
dependencies required for generating the HTML output, those are, the
Python packages `bs4` and `lxml`.
This commit fixes that, by updating the help section accordingly.
maint: provide no list of grcov formats2023-08-08T14:16:21ZEmil Englerme@emilengler.com2023-08-08T14:15:25Zurn:sha1:e584cc8c08c40737da7c2155496c1241a306f323
This commit removes a list we provide for the supported grcov formats.
In my opinion, this is a practice of bad software engineering, as we would then
have to maintain this list by ourselves.
Therefore, this commit removes this list from the `maint/with_coverage` script
and replaces it with a references to the accompanying grcov command.