summaryrefslogtreecommitdiff
path: root/maint
Commit message (Collapse)AuthorAgeFilesLines
...
* maint: Ignore RUSTSEC-2025-0141Clara Engler2026-01-121-0/+10
| | | | | | | | | | | | | | | | | | | | Bincode is unmaintained. Right now, we do not depend on it directly, but rather transitively through maybenot (with tor-proto) and typed-index-collections (with tor-netdoc). This has been reported upstream in the respective crates: * <https://github.com/zheland/typed-index-collections/issues/10> * <https://github.com/maybenot-io/maybenot/issues/40> It is pretty unfortunate, but there is not much we can do at the current moment, given that it is an external matter and we need it for the next arti release; also, as far as I am aware, there are no known security vulnerabilities in the current version of bincode. Therefore, this commit adds it to the list of exception. Fixes #2311 See #2312
* check_licenses: Adjust comment on priority-queue exceptionGabriela Moldovan2025-12-091-4/+3
| | | | | | | | | | | | | Technically `priority-queue` belongs in the `MPL_20_OK` list, but our current checks are too rudimentary to be able to handle the `OR` (we *do* split on `OR` for one of the checks, but we only compare the resulting licenses against `RECOGNIZED_LICENSES`, not `MPL_20_OK`). So for now, let's retain the exception for `priority-queue`. (We could expand the logic in the branch handling the `OR'`d licenses to fix this issue, but the result would be quite fragile; and besides, I think we're going to eventually want to replace this with a proper license parser).
* check_licenses: Update comment about priority-queueGabriela Moldovan2025-12-091-2/+0
| | | | | | | | | | | They have in fact added the MPL "Exhibit A" text to every file in the crate. The license is still LGPL-3.0-or-later OR MPL-2.0, so the rest of the comment still applies. See https://github.com/garro95/priority-queue/pull/54/commits/e2f90b0811c252f80165bbdb19233464289e428f
* maint: rework 'extract-md-links' interpositionSteven Engler2025-12-081-52/+86
| | | | Do less parsing, and instead interpose the mistune internals.
* maint: add comment to 'extract-md-links' re manual parsingSteven Engler2025-12-081-0/+9
|
* maint: add a self-test to 'extract-md-links'Steven Engler2025-12-081-0/+39
|
* maint: fix 'extract-md-links' to work with mistune 3.1.3Steven Engler2025-12-081-6/+45
|
* maint: fix accidental globals in 'extract-md-links'Steven Engler2025-12-081-2/+6
|
* maint: fix method names for 'extract-md-links' parsersSteven Engler2025-12-081-4/+4
| | | | | `InlineParser::parse_link` isn't publicly documented, so may be subject to more breakage.
* Bump all the unstable tor- and arti- crates to 0.37.0.Gabriela Moldovan2025-12-021-3/+3
| | | | | | | | | Done using: ``` for crate in $(./maint/list_crates | rg '^(tor|arti-)'); do cargo set-version -p $crate 0.37.0 done
* opentelemetry: Instrument a bunch of functions.Wesley Aptekar-Cassels2025-11-241-2/+2
| | | | | These are all aimed at figuring out in more detail what's going on in #2079 and related issues.
* Add `hsc key ctor-migrate` subcommandhjrgrn2025-11-241-1/+1
|
* Fix name of clippy lint to unchecked_time_subtraction (2)Ian Jackson2025-11-061-2/+2
| | | | Run maint/add_warning
* Fix name of clippy lint to unchecked_time_subtraction (1)Ian Jackson2025-11-061-2/+2
| | | | | | | | | | | | warning: lint `clippy::unchecked_duration_subtraction` has been renamed to `clippy::unchecked_time_subtraction` --> crates/arti-client/examples/advanced_isolation.rs:11:10 | 11 | #![allow(clippy::unchecked_duration_subtraction)] | ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^ help: use the new name: `clippy::unchecked_time_subtraction` | = note: `#[warn(renamed_and_removed_lints)]` on by default Add the change to maint/add_warning.
* Merge branch 'maint-common-2' into 'main'Ian Jackson2025-11-043-7/+22
|\ | | | | | | | | Import changes from upstream rust-maint-common See merge request tpo/core/arti!3438
| * Merge commit 'c8451e50f3aeb268cfa6b81e1e32928250ea3aca' into maint-common-2Ian Jackson2025-11-043-7/+22
| |\
* | \ Merge branch 'msrv-ci-check' into 'main'Nick Mathewson2025-11-041-0/+33
|\ \ \ | |/ / |/| | | | | | | | ci-check-msrv: Add check for MSRV See merge request tpo/core/arti!3405
| * | ci-check-msrv: CI check for MSRV declaration in cratesnield2025-10-291-0/+33
| | | | | | | | | | | | Checks if each crate has rust-version property in Cargo.toml.
* | | maint: update 'extract-md-links' for mistune 3.xSteven Engler2025-10-311-6/+5
| | |
* | | ci: upgrade container versionsSteven Engler2025-10-311-1/+1
| | |
* | | Revert "maint/downgrade_dependencies: No longer mess with [email protected]"Clara Engler2025-10-301-0/+4
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | This reverts commit d37824953f9c530c57c8c5936c12b16a829778c3. Unfortunately, this merge request introduces futures-lite again into the Cargo.lock generated by maint/downgrade_dependencies. Without this, it once again caused the same failures in async-fs and async-global-executor, that were previously fixed before the above commit landed into main. This bug is apparently not reproducible on current git main, because the downgraded Cargo.lock lacks respective dependencies that get transitively introduced by this (arti!3301) merge request.
* | | maint: bump minor versions of all published cratesSteven Engler2025-10-291-3/+3
|/ / | | | | | | | | | | | | ```bash readarray -t publish < <(cargo metadata --format-version 1 | jq -r '.packages[] | select((.id | startswith("path+file:///")) and (.rust_version != null) and (.publish == null or .publish == true or .publish != [])) | .name') for package in "${publish[@]}"; do echo "$package:"; cargo set-version --bump minor -p "$package"; done ```
* | Bump MSRV from 1.85.1 to 1.86Clara Engler2025-10-212-2/+2
| |
* | ci: Parallelize minimal-features-testWesley Aptekar-Cassels2025-10-161-1/+29
| | | | | | | | | | | | | | 3 seems like a good number to start with, we can tune it later if needed. Fixes: #2207
* | maint/reproducible_build: Use cp -R to placate shellcheckIan Jackson2025-10-161-1/+1
| | | | | | | | | | | | I'm not sure I agree with this complaint - it seems like foolish standards-wonkery - but GNU cp supports -R too and this change will fix CI on main.
* | CI: limit cargo parallelism based on memory and ncpuJim Newsome2025-10-081-0/+167
| | | | | | | | See https://gitlab.torproject.org/tpo/tpa/team/-/issues/42283
* | maint: Add issue for --direct-minimal-versions.Wesley Aptekar-Cassels2025-10-071-1/+1
| |
* | maint: Add note on exceptions to downgrade_dependencies.Wesley Aptekar-Cassels2025-10-071-0/+5
| | | | | | | | As discussed in last week's meeting.
* | Merge branch 'fixup-indented' into 'main'Nick Mathewson2025-10-071-1/+35
|\ \ | | | | | | | | | | | | | | | | | | Teach fixup-features to duplicate the modal indentation in an array Closes #1719 See merge request tpo/core/arti!3317
| * | Teach fixup-features to duplicate the modal indentation in an arrayNick Mathewson2025-10-021-1/+35
| | | | | | | | | | | | | | | | | | If we can't figure out the modal indentation, use " ". Closes #1719.
* | | maint: add check option to 'maint/fuzz_it_all'Steven Engler2025-10-061-2/+23
| | |
* | | Merge branch 'release-1.6.0-bump-versions' into 'main'arti-v1.6.0wesleyac2025-10-061-3/+3
|\ \ \ | | | | | | | | | | | | | | | | release: Bump versions. See merge request tpo/core/arti!3311
| * | | release: Bump versions in examples/ and maint/Wesley Aptekar-Cassels2025-10-021-3/+3
| | | |
* | | | maint/downgrade_dependencies: Fix up event-Listeners for async-stdIan Jackson2025-10-061-0/+6
| | | |
* | | | maint/downgrade_dependencies: No longer mess with [email protected]Ian Jackson2025-10-061-4/+0
|/ / / | | | | | | | | | | | | Empirically, this is no longer present in our Cargo.lock. The problem was fixed upstream, presumably.
* / / release: Run fixup-features.Wesley Aptekar-Cassels2025-10-011-3/+3
|/ /
* | Remove check_doc_features.Nick Mathewson2025-09-291-197/+0
| | | | | | | | | | | | | | | | Now that rust nightly has merged doc_auto_cfg into doc_cfg, and completed https://github.com/rust-lang/rust/pull/138907, it is no longer necessary. Closes #1514.
* | maint: Add script to check OpenTelemetry macro invocations.Wesley Aptekar-Cassels2025-09-241-0/+22
| |
* | Bump MSRV from 1.85 to 1.85.1Nick Mathewson2025-09-092-2/+2
| | | | | | | | Closes #2107
* | arti: keys: Add `keys check-integrity` CLI toolhjrgrn2025-09-041-1/+1
| |
* | Merge branch 'ci-case' into 'main'David Goulet2025-09-021-0/+15
|\ \ | | | | | | | | | | | | maint: Add a check for case-insensitive files See merge request tpo/core/arti!3207
| * | maint: Add a check for case-insensitive filesClara Engler2025-08-281-0/+15
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Filenames within the tree that exists in multiple versions only differing by their case cause problems on case-insensitive filesystems. This commit introduces a simple check that lists all files indexes by git and searches for duplicate lines while ignoring case during comparison. See !3166, #2144
* | | Merge branch 'license_fixes' into 'main'Nick Mathewson2025-08-271-24/+31
|\ \ \ | | | | | | | | | | | | | | | | Fix up some license exceptions in check_licenses scipt. See merge request tpo/core/arti!3195
| * | | check_licenses: refactor how we handle per-crate exceptionsNick Mathewson2025-08-271-14/+31
| | | | | | | | | | | | | | | | | | | | | | | | | | | | Instead of using a specific "if" for each license/crate combo (as we had done for priority-queue) or adding a blanket exception (as we had done for ring and aws-lc-sys) we now use an associative array to indicate that a license is allowed for a single crate.
| * | | Remove a workaround for older broken cargo-licenseNick Mathewson2025-08-271-3/+0
| | | |
| * | | Remove license exception for ringNick Mathewson2025-08-271-7/+0
| | | | | | | | | | | | | | | | Ring is now "Apache-2.0 AND ISC".
* | | | cargo_audit: ignore async-std being unmaintainedJim Newsome2025-08-271-0/+4
|/ / / | | | | | | | | | | | | | | | Ignore RUSTSEC-2025-0052. Deprecation/removal plan: https://gitlab.torproject.org/tpo/core/arti/-/issues/2130
* | | Merge branch 'upgrade_deps' into 'main'Alexander Hansen Færøy2025-08-271-1/+1
|\ \ \ | | | | | | | | | | | | | | | | Upgrade various dependencies in preparation for next release See merge request tpo/core/arti!3188
| * | | Update toml_edit dependency to 0.23.4Nick Mathewson2025-08-261-1/+1
| |/ /
* / / Reformat check_doc_featuresNick Mathewson2025-08-261-8/+11
|/ / | | | | | | Should appease python CI.