From 39e0535048eef6e8bd1e77bc38a3dffc3a58e322 Mon Sep 17 00:00:00 2001 From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com> Date: Mon, 4 Dec 2023 21:43:28 +0000 Subject: [PATCH] Bump the nonbreaking group with 7 updates (#566) * Bump the nonbreaking group with 7 updates Bumps the nonbreaking group with 7 updates: | Package | From | To | | --- | --- | --- | | [tokio](https://github.com/tokio-rs/tokio) | `1.33.0` | `1.34.0` | | [serde](https://github.com/serde-rs/serde) | `1.0.190` | `1.0.193` | | [wasmprinter](https://github.com/bytecodealliance/wasm-tools) | `0.2.71` | `0.2.75` | | [walrus](https://github.com/rustwasm/walrus) | `0.20.1` | `0.20.3` | | [swc_core](https://github.com/swc-project/swc) | `0.86.29` | `0.86.39` | | [uuid](https://github.com/uuid-rs/uuid) | `1.5.0` | `1.6.1` | | [wasmparser](https://github.com/bytecodealliance/wasm-tools) | `0.116.0` | `0.118.1` | Updates `tokio` from 1.33.0 to 1.34.0 - [Release notes](https://github.com/tokio-rs/tokio/releases) - [Commits](https://github.com/tokio-rs/tokio/compare/tokio-1.33.0...tokio-1.34.0) Updates `serde` from 1.0.190 to 1.0.193 - [Release notes](https://github.com/serde-rs/serde/releases) - [Commits](https://github.com/serde-rs/serde/compare/v1.0.190...v1.0.193) Updates `wasmprinter` from 0.2.71 to 0.2.75 - [Release notes](https://github.com/bytecodealliance/wasm-tools/releases) - [Commits](https://github.com/bytecodealliance/wasm-tools/compare/wasmprinter-0.2.71...wasmprinter-0.2.75) Updates `walrus` from 0.20.1 to 0.20.3 - [Release notes](https://github.com/rustwasm/walrus/releases) - [Changelog](https://github.com/rustwasm/walrus/blob/main/CHANGELOG.md) - [Commits](https://github.com/rustwasm/walrus/compare/0.20.1...0.20.3) Updates `swc_core` from 0.86.29 to 0.86.39 - [Release notes](https://github.com/swc-project/swc/releases) - [Changelog](https://github.com/swc-project/swc/blob/main/CHANGELOG.md) - [Commits](https://github.com/swc-project/swc/commits) Updates `uuid` from 1.5.0 to 1.6.1 - [Release notes](https://github.com/uuid-rs/uuid/releases) - [Commits](https://github.com/uuid-rs/uuid/compare/1.5.0...1.6.1) Updates `wasmparser` from 0.116.0 to 0.118.1 - [Release notes](https://github.com/bytecodealliance/wasm-tools/releases) - [Commits](https://github.com/bytecodealliance/wasm-tools/compare/wasmparser-0.116.0...wasmparser-0.118.1) --- updated-dependencies: - dependency-name: tokio dependency-type: direct:production update-type: version-update:semver-minor dependency-group: nonbreaking - dependency-name: serde dependency-type: direct:production update-type: version-update:semver-patch dependency-group: nonbreaking - dependency-name: wasmprinter dependency-type: direct:production update-type: version-update:semver-patch dependency-group: nonbreaking - dependency-name: walrus dependency-type: direct:production update-type: version-update:semver-patch dependency-group: nonbreaking - dependency-name: swc_core dependency-type: direct:production update-type: version-update:semver-patch dependency-group: nonbreaking - dependency-name: uuid dependency-type: direct:production update-type: version-update:semver-minor dependency-group: nonbreaking - dependency-name: wasmparser dependency-type: direct:production update-type: version-update:semver-minor dependency-group: nonbreaking ... Signed-off-by: dependabot[bot] * cargo vet --------- Signed-off-by: dependabot[bot] Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> Co-authored-by: Jeff Charles --- Cargo.lock | 127 +++++++++++++++++++---------- crates/cli/Cargo.toml | 10 +-- crates/quickjs-wasm-sys/Cargo.toml | 2 +- supply-chain/audits.toml | 12 +++ supply-chain/config.toml | 26 ++---- supply-chain/imports.lock | 60 ++++++++++---- 6 files changed, 159 insertions(+), 78 deletions(-) diff --git a/Cargo.lock b/Cargo.lock index 2d8767ae..f08bf238 100644 --- a/Cargo.lock +++ b/Cargo.lock @@ -1472,7 +1472,7 @@ dependencies = [ "uuid", "walrus", "wasi-common", - "wasmparser 0.116.0", + "wasmparser 0.118.1", "wasmprinter", "wasmtime", "wasmtime-wasi", @@ -1863,18 +1863,38 @@ version = "0.10.1" source = "registry+https://github.com/rust-lang/crates.io-index" checksum = "fabbf1ead8a5bcbc20f5f8b939ee3f5b0f6f281b6ad3468b84656b658b455259" dependencies = [ - "phf_macros", - "phf_shared", + "phf_macros 0.10.0", + "phf_shared 0.10.0", "proc-macro-hack", ] +[[package]] +name = "phf" +version = "0.11.2" +source = "registry+https://github.com/rust-lang/crates.io-index" +checksum = "ade2d8b8f33c7333b51bcf0428d37e217e9f32192ae4772156f65063b8ce03dc" +dependencies = [ + "phf_macros 0.11.2", + "phf_shared 0.11.2", +] + [[package]] name = "phf_generator" version = "0.10.0" source = "registry+https://github.com/rust-lang/crates.io-index" checksum = "5d5285893bb5eb82e6aaf5d59ee909a06a16737a8970984dd7746ba9283498d6" dependencies = [ - "phf_shared", + "phf_shared 0.10.0", + "rand", +] + +[[package]] +name = "phf_generator" +version = "0.11.2" +source = "registry+https://github.com/rust-lang/crates.io-index" +checksum = "48e4cc64c2ad9ebe670cb8fd69dd50ae301650392e81c05f9bfcb2d5bdbc24b0" +dependencies = [ + "phf_shared 0.11.2", "rand", ] @@ -1884,14 +1904,27 @@ version = "0.10.0" source = "registry+https://github.com/rust-lang/crates.io-index" checksum = "58fdf3184dd560f160dd73922bea2d5cd6e8f064bf4b13110abd81b03697b4e0" dependencies = [ - "phf_generator", - "phf_shared", + "phf_generator 0.10.0", + "phf_shared 0.10.0", "proc-macro-hack", "proc-macro2", "quote", "syn 1.0.109", ] +[[package]] +name = "phf_macros" +version = "0.11.2" +source = "registry+https://github.com/rust-lang/crates.io-index" +checksum = "3444646e286606587e49f3bcf1679b8cef1dc2c5ecc29ddacaffc305180d464b" +dependencies = [ + "phf_generator 0.11.2", + "phf_shared 0.11.2", + "proc-macro2", + "quote", + "syn 2.0.32", +] + [[package]] name = "phf_shared" version = "0.10.0" @@ -1901,6 +1934,15 @@ dependencies = [ "siphasher", ] +[[package]] +name = "phf_shared" +version = "0.11.2" +source = "registry+https://github.com/rust-lang/crates.io-index" +checksum = "90fcb95eef784c2ac79119d1dd819e162b5da872ce6f3c3abe1e8ca1c082f72b" +dependencies = [ + "siphasher", +] + [[package]] name = "pin-project" version = "1.1.3" @@ -2404,9 +2446,9 @@ checksum = "388a1df253eca08550bef6c72392cfe7c30914bf41df5269b68cbd6ff8f570a3" [[package]] name = "serde" -version = "1.0.190" +version = "1.0.193" source = "registry+https://github.com/rust-lang/crates.io-index" -checksum = "91d3c334ca1ee894a2c6f6ad698fe8c435b76d504b13d436f0685d648d6d96f7" +checksum = "25dd9975e68d0cb5aa1120c288333fc98731bd1dd12f561e468ea4728c042b89" dependencies = [ "serde_derive", ] @@ -2431,9 +2473,9 @@ dependencies = [ [[package]] name = "serde_derive" -version = "1.0.190" +version = "1.0.193" source = "registry+https://github.com/rust-lang/crates.io-index" -checksum = "67c5609f394e5c2bd7fc51efda478004ea80ef42fee983d5c67a65e34f32c0e3" +checksum = "43576ca501357b9b071ac53cdc7da8ef0cbd9493d8df094cd821777ea6e894d3" dependencies = [ "proc-macro2", "quote", @@ -2565,7 +2607,7 @@ dependencies = [ "new_debug_unreachable", "once_cell", "parking_lot", - "phf_shared", + "phf_shared 0.10.0", "precomputed-hash", "serde", ] @@ -2576,8 +2618,8 @@ version = "0.5.2" source = "registry+https://github.com/rust-lang/crates.io-index" checksum = "6bb30289b722be4ff74a408c3cc27edeaad656e06cb1fe8fa9231fa59c728988" dependencies = [ - "phf_generator", - "phf_shared", + "phf_generator 0.10.0", + "phf_shared 0.10.0", "proc-macro2", "quote", ] @@ -2641,9 +2683,9 @@ dependencies = [ [[package]] name = "swc_common" -version = "0.33.2" +version = "0.33.4" source = "registry+https://github.com/rust-lang/crates.io-index" -checksum = "c290470b7a9a4323c356208caf3c6c424b4c68e1d9aa63758b21d3e04e89cb07" +checksum = "1b392fa3590181ab52441aaf6132bd247d447444663f4f9bcb43166d2c2f6853" dependencies = [ "ast_node", "better_scoped_tls", @@ -2668,9 +2710,9 @@ dependencies = [ [[package]] name = "swc_core" -version = "0.86.29" +version = "0.86.39" source = "registry+https://github.com/rust-lang/crates.io-index" -checksum = "3cf7b74e68546ff37fa2c853cd3690b475dafe4efbdc77c5050b968ade6004b6" +checksum = "1d624b7b8c133eeda034c85593553efe1f66f37a5a95cf0f48aed008a4f4199a" dependencies = [ "swc_atoms", "swc_common", @@ -2682,13 +2724,14 @@ dependencies = [ [[package]] name = "swc_ecma_ast" -version = "0.110.2" +version = "0.110.5" source = "registry+https://github.com/rust-lang/crates.io-index" -checksum = "2505e1bb74456695f6a92e68005a5fd1054fb3516e88268e81dbcfa4b26394b4" +checksum = "2a6db4d66bf6f59bd60b27ae12ad934f2ecca50bd134b6f65944131a646f32ec" dependencies = [ "bitflags 2.4.1", "is-macro", "num-bigint", + "phf 0.11.2", "scoped-tls", "string_enum", "swc_atoms", @@ -2698,13 +2741,15 @@ dependencies = [ [[package]] name = "swc_ecma_parser" -version = "0.141.7" +version = "0.141.13" source = "registry+https://github.com/rust-lang/crates.io-index" -checksum = "c4894cf31ae94d15abba75e89cbe0d368ac8a360936d83bc0a951a545ab98b95" +checksum = "b3c7da7124f91c624316c8e2f06ce03fafafc1def769968fea9b5d53362a05a6" dependencies = [ "either", + "new_debug_unreachable", "num-bigint", "num-traits", + "phf 0.11.2", "serde", "smallvec", "smartstring", @@ -2718,15 +2763,15 @@ dependencies = [ [[package]] name = "swc_ecma_transforms_base" -version = "0.134.14" +version = "0.134.21" source = "registry+https://github.com/rust-lang/crates.io-index" -checksum = "35e9d83999eba644dc0f56f56dae5295d16b17b96ee1c6d5b9938363a4afd8de" +checksum = "b2f579e198e370c7cc81ccac5dcbd55278524dd15ca73fa83eceb81714816fe8" dependencies = [ "better_scoped_tls", "bitflags 2.4.1", "indexmap 1.9.3", "once_cell", - "phf", + "phf 0.10.1", "rustc-hash", "serde", "smallvec", @@ -2741,9 +2786,9 @@ dependencies = [ [[package]] name = "swc_ecma_utils" -version = "0.124.12" +version = "0.124.18" source = "registry+https://github.com/rust-lang/crates.io-index" -checksum = "11dbd330bd07e3e59eeea04d8304b6bf029216e3ee2133ed9f27802e9579d326" +checksum = "259dfe66cdf95f347bce647e72cb73c3f92def8f3386f9504d70c0c5924110d4" dependencies = [ "indexmap 1.9.3", "num_cpus", @@ -2759,9 +2804,9 @@ dependencies = [ [[package]] name = "swc_ecma_visit" -version = "0.96.2" +version = "0.96.5" source = "registry+https://github.com/rust-lang/crates.io-index" -checksum = "f98eae0217e246aff1fc010bf716a94b781effa223b0e39449dced60db012deb" +checksum = "363d97d22639a755f8ecfc34cdf8bff0def7efcd76783a6a79da8b27becd8f1b" dependencies = [ "num-bigint", "swc_atoms", @@ -2968,9 +3013,9 @@ checksum = "cda74da7e1a664f795bb1f8a87ec406fb89a02522cf6e50620d016add6dbbf5c" [[package]] name = "tokio" -version = "1.33.0" +version = "1.34.0" source = "registry+https://github.com/rust-lang/crates.io-index" -checksum = "4f38200e3ef7995e5ef13baec2f432a6da0aa9ac495b2c0e8f3b7eec2c92d653" +checksum = "d0c014766411e834f7af5b8f4cf46257aab4036ca95e9d2c144a10f59ad6f5b9" dependencies = [ "backtrace", "libc", @@ -2983,9 +3028,9 @@ dependencies = [ [[package]] name = "tokio-macros" -version = "2.1.0" +version = "2.2.0" source = "registry+https://github.com/rust-lang/crates.io-index" -checksum = "630bdcf245f78637c13ec01ffae6187cca34625e8c63150d424b59e55af2675e" +checksum = "5b8a1e28f2deaa14e508979454cb3a223b10b938b45af148bc0986de36f1923b" dependencies = [ "proc-macro2", "quote", @@ -3167,9 +3212,9 @@ dependencies = [ [[package]] name = "uuid" -version = "1.5.0" +version = "1.6.1" source = "registry+https://github.com/rust-lang/crates.io-index" -checksum = "88ad59a7560b41a70d191093a945f0b87bc1deeda46fb237479708a1d6b6cdfc" +checksum = "5e395fcf16a7a3d8127ec99782007af141946b4795001f876d54fb0d55978560" dependencies = [ "getrandom", ] @@ -3219,9 +3264,9 @@ dependencies = [ [[package]] name = "walrus" -version = "0.20.1" +version = "0.20.3" source = "registry+https://github.com/rust-lang/crates.io-index" -checksum = "cc27d837c587f863d99515dc8cae7cef1098bd1d99fa29373e3660c12766265e" +checksum = "2c03529cd0c4400a2449f640d2f27cd1b48c3065226d15e26d98e4429ab0adb7" dependencies = [ "anyhow", "gimli 0.26.2", @@ -3420,9 +3465,9 @@ dependencies = [ [[package]] name = "wasmparser" -version = "0.116.0" +version = "0.118.1" source = "registry+https://github.com/rust-lang/crates.io-index" -checksum = "53290b1276c5c2d47d694fb1a920538c01f51690e7e261acbe1d10c5fc306ea1" +checksum = "95ee9723b928e735d53000dec9eae7b07a60e490c85ab54abb66659fc61bfcd9" dependencies = [ "indexmap 2.0.2", "semver 1.0.17", @@ -3430,12 +3475,12 @@ dependencies = [ [[package]] name = "wasmprinter" -version = "0.2.71" +version = "0.2.75" source = "registry+https://github.com/rust-lang/crates.io-index" -checksum = "8f98260aa20f939518bcec1fac32c78898d5c68872e7363a4651f21f791b6c7e" +checksum = "3d027eb8294904fc715ac0870cebe6b0271e96b90605ee21511e7565c4ce568c" dependencies = [ "anyhow", - "wasmparser 0.116.0", + "wasmparser 0.118.1", ] [[package]] diff --git a/crates/cli/Cargo.toml b/crates/cli/Cargo.toml index 1857076f..2f14a546 100644 --- a/crates/cli/Cargo.toml +++ b/crates/cli/Cargo.toml @@ -20,24 +20,24 @@ structopt = "0.3" anyhow = { workspace = true } binaryen = { git = "https://github.com/pepyakin/binaryen-rs", rev = "00c98174843f957681ba0bc5cdcc9d15f5d0cb23" } brotli = "3.4.0" -wasmprinter = { version = "0.2.71", optional = true } +wasmprinter = { version = "0.2.75", optional = true } wasmtime = { workspace = true } wasmtime-wasi = { workspace = true } wasi-common = { workspace = true } -walrus = "0.20.1" -swc_core = { version = "0.86.29", features = ["common_sourcemap", "ecma_ast", "ecma_parser"] } +walrus = "0.20.3" +swc_core = { version = "0.86.39", features = ["common_sourcemap", "ecma_ast", "ecma_parser"] } wit-parser = "0.13.0" convert_case = "0.6.0" [dev-dependencies] serde_json = "1.0" -uuid = { version = "1.5", features = ["v4"] } +uuid = { version = "1.6", features = ["v4"] } lazy_static = "1.4" serde = { version = "1.0", default-features = false, features = ["derive"] } criterion = "0.5" num-format = "0.4.4" tempfile = "3.8.0" -wasmparser = "0.116.0" +wasmparser = "0.118.1" [build-dependencies] anyhow = "1.0.75" diff --git a/crates/quickjs-wasm-sys/Cargo.toml b/crates/quickjs-wasm-sys/Cargo.toml index 4a3445c0..5bcfb4d1 100644 --- a/crates/quickjs-wasm-sys/Cargo.toml +++ b/crates/quickjs-wasm-sys/Cargo.toml @@ -14,7 +14,7 @@ cc = "1.0" bindgen = "0.69.1" walkdir = "2" anyhow.workspace = true -tokio = { version = "1.33", default-features = false, features = ["rt", "macros"] } +tokio = { version = "1.34", default-features = false, features = ["rt", "macros"] } http-body-util = "0.1.0" hyper = "1.0" hyper-tls = "0.6.0" diff --git a/supply-chain/audits.toml b/supply-chain/audits.toml index f67a778a..85d062c2 100644 --- a/supply-chain/audits.toml +++ b/supply-chain/audits.toml @@ -345,6 +345,18 @@ user-id = 189 # Andrew Gallant (BurntSushi) start = "2019-06-04" end = "2024-10-03" +[[trusted.tokio]] +criteria = "safe-to-deploy" +user-id = 10 # Carl Lerche (carllerche) +start = "2019-03-02" +end = "2024-12-04" + +[[trusted.tokio-macros]] +criteria = "safe-to-deploy" +user-id = 10 # Carl Lerche (carllerche) +start = "2019-04-24" +end = "2024-12-04" + [[trusted.unicode-ident]] criteria = "safe-to-deploy" user-id = 3618 # David Tolnay (dtolnay) diff --git a/supply-chain/config.toml b/supply-chain/config.toml index 659e87cf..055bed3a 100644 --- a/supply-chain/config.toml +++ b/supply-chain/config.toml @@ -574,31 +574,31 @@ version = "0.6.0" criteria = "safe-to-deploy" [[exemptions.swc_common]] -version = "0.33.2" +version = "0.33.4" criteria = "safe-to-deploy" [[exemptions.swc_core]] -version = "0.86.29" +version = "0.86.39" criteria = "safe-to-deploy" [[exemptions.swc_ecma_ast]] -version = "0.110.2" +version = "0.110.5" criteria = "safe-to-deploy" [[exemptions.swc_ecma_parser]] -version = "0.141.7" +version = "0.141.13" criteria = "safe-to-deploy" [[exemptions.swc_ecma_transforms_base]] -version = "0.134.14" +version = "0.134.21" criteria = "safe-to-deploy" [[exemptions.swc_ecma_utils]] -version = "0.124.12" +version = "0.124.18" criteria = "safe-to-deploy" [[exemptions.swc_ecma_visit]] -version = "0.96.2" +version = "0.96.5" criteria = "safe-to-deploy" [[exemptions.swc_eq_ignore_macros]] @@ -637,14 +637,6 @@ criteria = "safe-to-deploy" version = "1.2.1" criteria = "safe-to-run" -[[exemptions.tokio]] -version = "1.33.0" -criteria = "safe-to-deploy" - -[[exemptions.tokio-macros]] -version = "1.7.0" -criteria = "safe-to-deploy" - [[exemptions.toml]] version = "0.5.8" criteria = "safe-to-deploy" @@ -690,7 +682,7 @@ version = "0.3.3" criteria = "safe-to-deploy" [[exemptions.uuid]] -version = "1.5.0" +version = "1.6.1" criteria = "safe-to-deploy" [[exemptions.vergen]] @@ -698,7 +690,7 @@ version = "7.5.1" criteria = "safe-to-deploy" [[exemptions.walrus]] -version = "0.20.1" +version = "0.20.3" criteria = "safe-to-deploy" [[exemptions.walrus-macro]] diff --git a/supply-chain/imports.lock b/supply-chain/imports.lock index 73d07f55..faafc186 100644 --- a/supply-chain/imports.lock +++ b/supply-chain/imports.lock @@ -440,8 +440,8 @@ user-login = "Amanieu" user-name = "Amanieu d'Antras" [[publisher.serde]] -version = "1.0.190" -when = "2023-10-26" +version = "1.0.193" +when = "2023-11-21" user-id = 3618 user-login = "dtolnay" user-name = "David Tolnay" @@ -454,8 +454,8 @@ user-login = "dtolnay" user-name = "David Tolnay" [[publisher.serde_derive]] -version = "1.0.190" -when = "2023-10-26" +version = "1.0.193" +when = "2023-11-21" user-id = 3618 user-login = "dtolnay" user-name = "David Tolnay" @@ -495,6 +495,20 @@ user-id = 189 user-login = "BurntSushi" user-name = "Andrew Gallant" +[[publisher.tokio]] +version = "1.34.0" +when = "2023-11-09" +user-id = 10 +user-login = "carllerche" +user-name = "Carl Lerche" + +[[publisher.tokio-macros]] +version = "2.2.0" +when = "2023-11-09" +user-id = 10 +user-login = "carllerche" +user-name = "Carl Lerche" + [[publisher.unicode-ident]] version = "1.0.6" when = "2022-12-17" @@ -578,15 +592,15 @@ user-login = "alexcrichton" user-name = "Alex Crichton" [[publisher.wasmparser]] -version = "0.116.0" -when = "2023-10-30" +version = "0.118.1" +when = "2023-11-29" user-id = 1 user-login = "alexcrichton" user-name = "Alex Crichton" [[publisher.wasmprinter]] -version = "0.2.71" -when = "2023-10-30" +version = "0.2.75" +when = "2023-11-29" user-id = 1 user-login = "alexcrichton" user-name = "Alex Crichton" @@ -1574,12 +1588,6 @@ intended to multiplex across the internal representation of a tinyvec, presumably. This trivially doesn't contain anything bad. """ -[[audits.bytecode-alliance.audits.tokio-macros]] -who = "Alex Crichton " -criteria = "safe-to-deploy" -delta = "1.7.0 -> 2.1.0" -notes = "A number of updates to parsed syntax and such but nothing unexpected and entirely what one would expect a Rust procedural macro to do." - [[audits.bytecode-alliance.audits.tokio-native-tls]] who = "Pat Hickey " criteria = "safe-to-deploy" @@ -2048,6 +2056,30 @@ criteria = "safe-to-deploy" delta = "2.2.0 -> 2.3.0" aggregated-from = "https://hg.mozilla.org/mozilla-central/raw-file/tip/supply-chain/audits.toml" +[[audits.mozilla.audits.phf]] +who = "Mike Hommey " +criteria = "safe-to-deploy" +delta = "0.10.1 -> 0.11.2" +aggregated-from = "https://hg.mozilla.org/mozilla-central/raw-file/tip/supply-chain/audits.toml" + +[[audits.mozilla.audits.phf_generator]] +who = "Mike Hommey " +criteria = "safe-to-deploy" +delta = "0.10.0 -> 0.11.2" +aggregated-from = "https://hg.mozilla.org/mozilla-central/raw-file/tip/supply-chain/audits.toml" + +[[audits.mozilla.audits.phf_macros]] +who = "Mike Hommey " +criteria = "safe-to-deploy" +delta = "0.10.0 -> 0.11.2" +aggregated-from = "https://hg.mozilla.org/mozilla-central/raw-file/tip/supply-chain/audits.toml" + +[[audits.mozilla.audits.phf_shared]] +who = "Mike Hommey " +criteria = "safe-to-deploy" +delta = "0.10.0 -> 0.11.2" +aggregated-from = "https://hg.mozilla.org/mozilla-central/raw-file/tip/supply-chain/audits.toml" + [[audits.mozilla.audits.pkg-config]] who = "Mike Hommey " criteria = "safe-to-deploy"