| Commit message (Collapse) | Author | Age | Files | Lines | |
|---|---|---|---|---|---|
| * | maint: Remove obsolete cargo_audit warnings. | Wesley Aptekar-Cassels | 2025-04-30 | 1 | -19/+23 |
| | | |||||
| * | maint: Revert ignore of RUSTSEC-2025-0014 | vcrn | 2025-03-13 | 1 | -9/+0 |
| | | | | | Crate humantime is no longer unmaintained | ||||
| * | maint: ignore RUSTSEC-2025-0014 | Steven Engler | 2025-03-11 | 1 | -0/+9 |
| | | |||||
| * | cargo_audit: Ignore paste deprecation notice. | Gabriela Moldovan | 2025-03-10 | 1 | -0/+10 |
| | | |||||
| * | maint: update comments for RUSTSEC-2024-0384 exception | Steven Engler | 2025-02-26 | 1 | -4/+9 |
| | | | | | | The 'notify' lib was recently upgraded to 8.0.0, but that's not the only place that we depend on 'instant'. | ||||
| * | Un-ignore RUSTSEC-2024-0421 | Nick Mathewson | 2025-01-07 | 1 | -9/+10 |
| | | | | | We no longer require a version of hickory that requires an affected idns. | ||||
| * | Un-ignore RUSTSEC-2024-0370 | Nick Mathewson | 2025-01-06 | 1 | -5/+5 |
| | | |||||
| * | Add an exception for RUSTSEC-2024-0421 to fix CI. | Nick Mathewson | 2024-12-09 | 1 | -0/+9 |
| | | |||||
| * | cargo_audit: Temporarily ignore RUSTSEC-2024-0384. | Gabriela Moldovan | 2024-11-12 | 1 | -0/+8 |
| | | | | | | | | | | We depend on `instant`, which is unmaintained, via `notify`. `notify` switched over to [`web-time`], but hasn't relased the change yet, so we need to ignore the advisory for now. [`web-time`]: https://github.com/notify-rs/notify/pull/652 | ||||
| * | maint/cargo_audit: Add exception for RUSTSEC-2024-0370. | Gabriela Moldovan | 2024-09-09 | 1 | -0/+5 |
| | | | | | Adding an exception for now, as per #1608 | ||||
| * | maint: Remove exceptions for generational-arena | Nick Mathewson | 2024-08-14 | 1 | -8/+7 |
| | | | | | | Now that it's gone, we no longer need to bless its MPL-2.0 usage or excuse it from cargo-audit. | ||||
| * | Remove an obsolete RUSTSEC allow | Ian Jackson | 2024-07-09 | 1 | -18/+0 |
| | | | | | | We don't use the affected crates any more, now that arti-hyper is gone. | ||||
| * | cargo_audit: Add an exception for RUSTSEC-2024-0014. | Gabriela Moldovan | 2024-02-19 | 1 | -0/+8 |
| | | | | | | We should migrate to `slotmap`, but in the meantime let's just add an exception to unblock CI. | ||||
| * | Restore deleted entries to OBSOLETE_IGNORE | Nick Mathewson | 2023-12-11 | 1 | -0/+23 |
| | | | | | | We should have added these to our record of previous rustsec ignores, but we accidentally removed them instead. | ||||
| * | Remove our cargo-audit exception for ed25519-dalek | Nick Mathewson | 2023-12-11 | 1 | -8/+11 |
| | | | | | It's no longer necessary now that we have upgraded. | ||||
| * | Ignore rsa timing cargo-audit warning | Nick Mathewson | 2023-11-28 | 1 | -0/+6 |
| | | |||||
| * | Merge branch 'clap4' into 'main' | gabi-250 | 2023-11-15 | 1 | -2/+1 |
| |\ | | | | | | | | | Upgrade to clap 4 See merge request tpo/core/arti!1735 | ||||
| | * | cargo_audit: Remove note about clap use of atty. | Nick Mathewson | 2023-11-15 | 1 | -2/+1 |
| | | | |||||
| * | | Remove webpki cargo_audit exception | Nick Mathewson | 2023-11-15 | 1 | -13/+0 |
| |/ | | | | | Apparently webpki came out of retirement and actually fixed RUSTSEC-2023-0052. Versions >=0.22.2 should be fine. | ||||
| * | Add a cargo-audit exception for RUSTSEC-2023-0052 | Nick Mathewson | 2023-08-22 | 1 | -0/+13 |
| | | | | | | We've solved this for rustls-webpki, but tls-api (which arti-hyper uses) still requires the unmaintained webpki crate. See #1016. | ||||
| * | cargo_audit: Add an exception for RUSTSEC-2022-0093. | Nick Mathewson | 2023-08-14 | 1 | -0/+8 |
| | | | | | | | | This is the API deficiency in ed25519-dalek v1 that allows you to mismatch public and private keys, leading to a (fatal) double-signing attack. We have worked around this in our current design, so it's appropriate to suppress this warning for now. | ||||
| * | cargo audit: un-ignore RUSTSEC-2023-0040 ("`users` is unmaintained" | Ian Jackson | 2023-07-14 | 1 | -3/+0 |
| | | |||||
| * | maint/cargo-audit: Ignore RUSTSEC-2023-0040 (the users crate is unmaintained) | Gabriela Moldovan | 2023-06-05 | 1 | -0/+3 |
| | | | | | Signed-off-by: Gabriela Moldovan <[email protected]> | ||||
| * | shell: use /usr/bin/env instead of absolute paths | Emil Engler | 2023-01-25 | 1 | -1/+1 |
| | | | | | | | | | | | This commit changes the shebang in all shell scripts from absolute paths (such as `/bin/bash` or `/usr/bin/python3`) to the `/usr/bin/env` binary with the accompanying interpreter as it's argument. The reason for this are as follows: - NixOS cannot work with absolute paths - BSD systems install their packages in /usr/local/bin | ||||
| * | Ignore atty theoretical unaligned read for now | Ian Jackson | 2022-11-22 | 1 | -0/+7 |
| | | |||||
| * | Upgrade to clap 3 with minimal changes | Gabriel de Perthuis | 2022-11-04 | 1 | -5/+5 |
| | | | | | | | | | This removes the last cargo audit override (for the unmaintained ansi_term). Don't mark options as required when they have default values: see <https://github.com/clap-rs/clap/pull/3793>. | ||||
| * | update to v5.0.0 | trinity-1686a | 2022-08-31 | 1 | -5/+4 |
| | | |||||
| * | maint/cargo_audit: Tolerate RUSTSEC-2021-0139 (ansi_term unmaintained) | Ian Jackson | 2022-08-22 | 1 | -0/+5 |
| | | |||||
| * | maint/cargo_audit: Honour $CARGO | Ian Jackson | 2022-08-22 | 1 | -1/+1 |
| | | | | | | This makes it easier to for me to test this script. (I would like to do this to all of them but it's easier on a case-by-case basis.) | ||||
| * | update tls-api to 0.8.0 | trinity-1686a | 2022-04-28 | 1 | -4/+4 |
| | | | | | and remove corresponding RUSTSEC from ignored list | ||||
| * | Fix typos | Dimitris Apostolou | 2022-04-11 | 1 | -3/+3 |
| | | |||||
| * | fix maint/cargo_audit not propagating error and add temporary exceptions | trinity-1686a | 2022-04-08 | 1 | -0/+11 |
| | | |||||
| * | rename *.sh scripts to bare name | Ian Jackson | 2022-02-18 | 1 | -0/+77 |
| As per #309 Update all references. There is one remaining hit for git-grep '\.sh\b' namely "build.sh" in maint/reproducible_build, which I think is the build script for osxcross - ie, an external project. | |||||
 |
index : mirrors/arti.git | |
| mirror of https://gitlab.torproject.org/tpo/core/arti |
| summaryrefslogtreecommitdiff |