From 9e79bf94fbf6169ac2a0d2e45ae9662bb2f2f741 Mon Sep 17 00:00:00 2001 From: Alex Crichton Date: Fri, 26 Jul 2024 13:49:55 -0700 Subject: [PATCH] Add vets --- supply-chain/audits.toml | 10 ++++++++++ supply-chain/config.toml | 8 ++++++++ supply-chain/imports.lock | 13 +++++++++++++ 3 files changed, 31 insertions(+) diff --git a/supply-chain/audits.toml b/supply-chain/audits.toml index aa6c21129b67..3f8c7d6d4786 100644 --- a/supply-chain/audits.toml +++ b/supply-chain/audits.toml @@ -2424,6 +2424,11 @@ criteria = "safe-to-deploy" version = "1.0.17" notes = "plenty of unsafe pointer and vec tricks, but in well-structured and commented code that appears to be correct" +[[audits.sha1_smol]] +who = "Alex Crichton " +criteria = "safe-to-deploy" +version = "1.0.1" + [[audits.sha2]] who = "Benjamin Bouvier " criteria = "safe-to-deploy" @@ -2476,6 +2481,11 @@ criteria = "safe-to-deploy" delta = "0.4.7 -> 0.4.9" notes = "Minor OS compat updates but otherwise nothing major here." +[[audits.socket2]] +who = "Alex Crichton " +criteria = "safe-to-deploy" +delta = "0.4.9 -> 0.4.4" + [[audits.spin]] who = "Alex Crichton " criteria = "safe-to-run" diff --git a/supply-chain/config.toml b/supply-chain/config.toml index 290afc7a9905..20fb7d75e8a4 100644 --- a/supply-chain/config.toml +++ b/supply-chain/config.toml @@ -218,6 +218,10 @@ criteria = "safe-to-deploy" version = "0.2.7" criteria = "safe-to-run" +[[exemptions.combine]] +version = "4.6.7" +criteria = "safe-to-deploy" + [[exemptions.console]] version = "0.15.0" criteria = "safe-to-deploy" @@ -486,6 +490,10 @@ criteria = "safe-to-deploy" version = "0.3.0" criteria = "safe-to-deploy" +[[exemptions.redis]] +version = "0.25.4" +criteria = "safe-to-deploy" + [[exemptions.redox_syscall]] version = "0.2.13" criteria = "safe-to-deploy" diff --git a/supply-chain/imports.lock b/supply-chain/imports.lock index ff04c495512d..2d7845bc04ba 100644 --- a/supply-chain/imports.lock +++ b/supply-chain/imports.lock @@ -4008,6 +4008,13 @@ version = "0.2.9" notes = "Reviewed on https://fxrev.dev/824504" aggregated-from = "https://fuchsia.googlesource.com/fuchsia/+/refs/heads/main/third_party/rust_crates/supply-chain/audits.toml?format=TEXT" +[[audits.google.audits.socket2]] +who = "David Koloski " +criteria = "safe-to-deploy" +delta = "0.4.4 -> 0.5.5" +notes = "Reviewed at https://fxrev.dev/946307" +aggregated-from = "https://fuchsia.googlesource.com/fuchsia/+/refs/heads/main/third_party/rust_crates/supply-chain/audits.toml?format=TEXT" + [[audits.google.audits.threadpool]] who = "Dennis Kempin " criteria = "safe-to-run" @@ -4545,6 +4552,12 @@ criteria = "safe-to-deploy" delta = "0.4.6 -> 0.4.7" aggregated-from = "https://hg.mozilla.org/mozilla-central/raw-file/tip/supply-chain/audits.toml" +[[audits.mozilla.audits.socket2]] +who = "Kershaw Chang " +criteria = "safe-to-deploy" +delta = "0.5.5 -> 0.5.7" +aggregated-from = "https://hg.mozilla.org/mozilla-central/raw-file/tip/supply-chain/audits.toml" + [[audits.mozilla.audits.subtle]] who = "Simon Friedberger " criteria = "safe-to-deploy"