| Commit message (Collapse) | Author | Age | Files | Lines |
| | |
|
| | |
|
| | |
|
| | |
|
| |
|
|
|
| |
We should have added these to our record of previous rustsec
ignores, but we accidentally removed them instead.
|
| |
|
|
| |
It's no longer necessary now that we have upgraded.
|
| | |
|
| |\
| |
| |
| |
| | |
Increase our MSRV to 1.70
See merge request tpo/core/arti!1773
|
| | | |
|
| |\ \
| |/
|/|
| |
| | |
Upgrade several crates in preparation for this month's release.
See merge request tpo/core/arti!1763
|
| | |
| |
| |
| |
| |
| | |
This is necessary for async-global-executor, which uses
`futures_lite::future::or`, which futures-lite does not have before
1.4.0 or thereabouts.
|
| |/ |
|
| | |
|
| |\
| |
| |
| |
| | |
Upgrade to clap 4
See merge request tpo/core/arti!1735
|
| | | |
|
| |/
|
|
|
| |
Apparently webpki came out of retirement and actually fixed
RUSTSEC-2023-0052. Versions >=0.22.2 should be fine.
|
| | |
|
| | |
|
| |\
| |
| |
| |
| | |
Provide and use a SimpleMockTimeProvider
See merge request tpo/core/arti!1639
|
| | |
| |
| |
| |
| |
| |
| |
| | |
For our time provider we want a priority queue that lets us look up
entries and delete them. std's Heap doesn't do that. priority-queue
has the API we need and reasonable stats etc, and is maintained.
It has some IMO-tolerable licence wrinkles.
|
| | |
| |
| |
| |
| | |
(If a published crate depends on an unpublished crate, crates.io
will refuse it.)
|
| | |
| |
| |
| |
| | |
None of our crates should use wildcard versions; this will help us
detect them before publishing.
|
| |/
|
|
|
|
|
|
|
|
| |
In particular, this change should help avoid the kind of problem we
ran into as #1054 and fixed with 00e4405943498754, where a crate
changed only in which versions of our crates it depended upon,
and we didn't notice that we had to update its version too.
This commit also fixes a couple of minor issues in the
`changed_crates` script, and gives it a verbose mode.
|
| |\
| |
| |
| |
| | |
CI: Use cargo install --locked
See merge request tpo/core/arti!1587
|
| | | |
|
| | |
| |
| |
| | |
Unaccountably, this isn't the default.
|
| |/
|
|
| |
This let me run it with my privsep setup.
|
| |\
| |
| |
| |
| | |
maint/bump_nodep: Two changes to help it work in my environment
See merge request tpo/core/arti!1573
|
| | |
| |
| |
| |
| |
| | |
Sadly the environment I ran this command on today didn't have
"git restore". I should upgrade it but there are yaks, and I may
not have managed to upgrade it by *next* Arti release.
|
| | |
| |
| |
| |
| |
| |
| |
| |
| |
| | |
This is a more convenient approach to command overriding. It's what
we do elsewhere. I need this because with a script like
"maint/bump_nodep", which edits the tree, I need to write
CARGO='nailing-cargo -E' maint/bump_nodep ....
(The -E option tells my privsep tool that the command is *supposed* to
edit the tree - and that I am intending to review those changes.)
|
| | | |
|
| | | |
|
| | |
| |
| |
| | |
We don't use "log" but some dependency of one of our examples does.
|
| | |
| |
| |
| |
| |
| |
| |
| | |
We have automatic support for "OR", but we can't do anything
automated with AND, since the intersection of licenses can get
complicated. So we just have to authorize the specific combinations
that exist. This is used by matchit, which is used in the gotlou's
examples.
|
| |/ |
|
| |
|
|
|
|
|
| |
We don't actually use filetime directly, but notify wants it, and
notify accepts a version that doesn't actually appear to work.
This fixes minimal_versions CI.
|
| |
|
|
|
|
| |
This avoids us trying to run binaries built on one image, on a
different one. I believe that this is supposed to work according to
Rust doctrine, but empirically it doesn't.
|
| |
|
|
|
|
|
| |
Rationale: same as for useless_vec, as in 01cb7ee0a112.
Prompted by reading a commit where someone did makework to get rid of
an occurrence of this warning.
|
| |
|
|
|
| |
We've solved this for rustls-webpki, but tls-api (which arti-hyper
uses) still requires the unmaintained webpki crate. See #1016.
|
| |
|
|
|
|
|
| |
This is the API deficiency in ed25519-dalek v1 that allows you to
mismatch public and private keys, leading to a (fatal)
double-signing attack. We have worked around this in our current
design, so it's appropriate to suppress this warning for now.
|
| | |
|
| |\
| |
| |
| |
| | |
maint: provide no list of grcov formats
See merge request tpo/core/arti!1482
|
| | |
| |
| |
| |
| |
| |
| |
| |
| | |
This commit removes a list we provide for the supported grcov formats.
In my opinion, this is a practice of bad software engineering, as we would then
have to maintain this list by ourselves.
Therefore, this commit removes this list from the `maint/with_coverage` script
and replaces it with a references to the accompanying grcov command.
|
| | |
| |
| |
| |
| | |
The `maint/coverage` script has a useless option `c`.
This commit removes it.
|
| |/
|
|
|
|
|
|
| |
Currently, the `maint/coverage` script does not inform about the
dependencies required for generating the HTML output, those are, the
Python packages `bs4` and `lxml`.
This commit fixes that, by updating the help section accordingly.
|
| |
|
|
| |
Part of #951. See comments for explanation of why this is important.
|
| |
|
|
|
| |
Looks for any checked-in Cargo.lock files, and checks the lockfile
quickly by running `cargo tree --locked` there.
|
| |
|
|
|
|
|
|
| |
The build found a stale private doc comment as well as an exception
that needed to be made in check_doc_features.
The check_doc_features change solidifies a decision that things marked
with cfg(fuzzing) aren't part of the documented API.
|
| |
|
|
|
|
|
|
| |
Closes #945.
Based on @diziet's comment in #945, with a little extra safety and
paranoia. We use this for cases when there are trivial changes only
in one of our crates.
|
| |
|
|
|
|
|
| |
Narrows the previous check, allowing this particular LGPL
only for the hashx and equix crates.
Signed-off-by: Micah Elizabeth Scott <[email protected]>
|