From e1cbd41f864ee71f3e7cfb629121a91ac4662100 Mon Sep 17 00:00:00 2001 From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com> Date: Thu, 2 Jul 2026 02:14:02 +0000 Subject: [PATCH 1/3] chore(deps): Bump time from 0.3.49 to 0.3.53 Bumps [time](https://github.com/time-rs/time) from 0.3.49 to 0.3.53. - [Release notes](https://github.com/time-rs/time/releases) - [Changelog](https://github.com/time-rs/time/blob/main/CHANGELOG.md) - [Commits](https://github.com/time-rs/time/compare/v0.3.49...v0.3.53) --- updated-dependencies: - dependency-name: time dependency-version: 0.3.53 dependency-type: direct:production update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] --- Cargo.lock | 8 ++++---- 1 file changed, 4 insertions(+), 4 deletions(-) diff --git a/Cargo.lock b/Cargo.lock index 80d93e5..e81c1d1 100644 --- a/Cargo.lock +++ b/Cargo.lock @@ -2948,9 +2948,9 @@ dependencies = [ [[package]] name = "time" -version = "0.3.49" +version = "0.3.53" source = "registry+https://github.com/rust-lang/crates.io-index" -checksum = "711a53c2d47bbd818258c498c8dbfe186a2526c631495cfe7e078567f86b8469" +checksum = "18dfaaeddcb932337b5e7866ee7d0ce9b76d2fd092997146f187ec09b4558a50" dependencies = [ "deranged", "num-conv", @@ -2968,9 +2968,9 @@ checksum = "9e1c906769ad99c88eaa54e728060edef082f8e358ff32030cb7c7d315e81109" [[package]] name = "time-macros" -version = "0.2.29" +version = "0.2.31" source = "registry+https://github.com/rust-lang/crates.io-index" -checksum = "71c652a3727a9cbb9a02f707f530b618ce00d0ccd762009c8c23bd191df3c17d" +checksum = "c431b87111666e491a90baa837f914fb45cd5dc3c268591b0220ff5057f2085f" dependencies = [ "num-conv", "time-core", From d77e8179b094e0ae166758b85e77d1001d23c7c1 Mon Sep 17 00:00:00 2001 From: Maximiliano Salvatti <40447063+msalvatti@users.noreply.github.com> Date: Fri, 10 Jul 2026 17:27:11 -0300 Subject: [PATCH 2/3] chore(supply-chain): bump time vet exemption to 0.3.53 --- supply-chain/config.toml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/supply-chain/config.toml b/supply-chain/config.toml index 150ceef..5f18c24 100644 --- a/supply-chain/config.toml +++ b/supply-chain/config.toml @@ -612,7 +612,7 @@ version = "0.15.0" criteria = "safe-to-run" [[exemptions.time]] -version = "0.3.49" +version = "0.3.53" criteria = "safe-to-deploy" [[exemptions.time-core]] From 6514035fb9f0255e54d09d993e00d6816e53e2aa Mon Sep 17 00:00:00 2001 From: Maximiliano Salvatti <40447063+msalvatti@users.noreply.github.com> Date: Fri, 10 Jul 2026 17:28:35 -0300 Subject: [PATCH 3/3] chore(supply-chain): bump time-macros vet exemption to 0.2.31 --- supply-chain/config.toml | 2 +- supply-chain/imports.lock | 66 ++++++++++++++++++++++++++++++--------- 2 files changed, 53 insertions(+), 15 deletions(-) diff --git a/supply-chain/config.toml b/supply-chain/config.toml index 5f18c24..1e0f8ad 100644 --- a/supply-chain/config.toml +++ b/supply-chain/config.toml @@ -620,7 +620,7 @@ version = "0.1.9" criteria = "safe-to-deploy" [[exemptions.time-macros]] -version = "0.2.29" +version = "0.2.31" criteria = "safe-to-deploy" [[exemptions.tinystr]] diff --git a/supply-chain/imports.lock b/supply-chain/imports.lock index 8ba73d2..cfe50df 100644 --- a/supply-chain/imports.lock +++ b/supply-chain/imports.lock @@ -106,13 +106,6 @@ user-id = 8785 user-login = "bheisler" user-name = "Brook Heisler" -[[publisher.criterion-plot]] -version = "0.5.0" -when = "2022-09-10" -user-id = 8785 -user-login = "bheisler" -user-name = "Brook Heisler" - [[publisher.crypto-common]] version = "0.1.7" when = "2025-11-12" @@ -211,13 +204,6 @@ user-id = 91569 user-login = "mkroening" user-name = "Martin Kröning" -[[publisher.is-terminal]] -version = "0.4.17" -when = "2025-10-23" -user-id = 6825 -user-login = "sunfishcode" -user-name = "Dan Gohman" - [[publisher.itoa]] version = "1.0.18" when = "2026-03-20" @@ -1445,6 +1431,11 @@ criteria = "safe-to-run" version = "0.2.0" aggregated-from = "https://chromium.googlesource.com/chromiumos/third_party/rust_crates/+/refs/heads/main/cargo-vet/audits.toml?format=TEXT" +[[audits.isrg.audits.alloca]] +who = "David Cook " +criteria = "safe-to-run" +version = "0.4.0" + [[audits.isrg.audits.block-buffer]] who = "David Cook " criteria = "safe-to-deploy" @@ -1480,6 +1471,42 @@ who = "Brandon Pitman " criteria = "safe-to-run" delta = "0.4.0 -> 0.5.1" +[[audits.isrg.audits.criterion]] +who = "Tim Geoghegan " +criteria = "safe-to-run" +delta = "0.5.1 -> 0.6.0" +notes = "No new unsafe code and nothing suspicious in build scripts." + +[[audits.isrg.audits.criterion]] +who = "David Cook " +criteria = "safe-to-run" +delta = "0.6.0 -> 0.7.0" + +[[audits.isrg.audits.criterion]] +who = "David Cook " +criteria = "safe-to-run" +delta = "0.7.0 -> 0.8.0" + +[[audits.isrg.audits.criterion]] +who = "J.C. Jones " +criteria = "safe-to-run" +delta = "0.8.0 -> 0.8.1" + +[[audits.isrg.audits.criterion]] +who = "J.C. Jones " +criteria = "safe-to-run" +delta = "0.8.1 -> 0.8.2" + +[[audits.isrg.audits.criterion-plot]] +who = "J.C. Jones " +criteria = "safe-to-run" +version = "0.8.1" + +[[audits.isrg.audits.criterion-plot]] +who = "J.C. Jones " +criteria = "safe-to-run" +delta = "0.8.1 -> 0.8.2" + [[audits.isrg.audits.getrandom]] who = "David Cook " criteria = "safe-to-deploy" @@ -1490,6 +1517,12 @@ who = "David Cook " criteria = "safe-to-deploy" version = "0.12.1" +[[audits.isrg.audits.itertools]] +who = "Tim Geoghegan " +criteria = "safe-to-run" +delta = "0.14.0 -> 0.13.0" +notes = "This *downgrade* only removes `unsafe` code." + [[audits.isrg.audits.num-iter]] who = "David Cook " criteria = "safe-to-deploy" @@ -1505,6 +1538,11 @@ who = "David Cook " criteria = "safe-to-deploy" version = "0.3.0" +[[audits.isrg.audits.page_size]] +who = "David Cook " +criteria = "safe-to-run" +version = "0.6.0" + [[audits.isrg.audits.rand]] who = "David Cook " criteria = "safe-to-deploy"