Bump swc_core from 4.0.3 to 8.0.1 (#850)

crates/cli/Cargo.toml

@@ -22,7 +22,7 @@ wasmtime = { workspace = true }
 wasmtime-wasi = { workspace = true }
 wasi-common = { workspace = true }
 walrus = "0.22.0"
-swc_core = { version = "4.0.3", features = [
+swc_core = { version = "8.0.1", features = [
     "common_sourcemap",
     "ecma_ast",
     "ecma_parser",

supply-chain/config.toml

@@ -50,7 +50,7 @@ version = "0.1.1"
 criteria = "safe-to-deploy"
 
 [[exemptions.ast_node]]
-version = "2.0.0"
+version = "3.0.0"
 criteria = "safe-to-deploy"
 
 [[exemptions.autocfg]]
@@ -462,11 +462,11 @@ version = "0.1.21"
 criteria = "safe-to-deploy"
 
 [[exemptions.ptr_meta]]
-version = "0.1.4"
+version = "0.3.0"
 criteria = "safe-to-deploy"
 
 [[exemptions.ptr_meta_derive]]
-version = "0.1.4"
+version = "0.3.0"
 criteria = "safe-to-deploy"
 
 [[exemptions.radium]]
@@ -525,10 +525,6 @@ criteria = "safe-to-deploy"
 version = "1.1.1"
 criteria = "safe-to-deploy"
 
-[[exemptions.sha2]]
-version = "0.10.8"
-criteria = "safe-to-deploy"
-
 [[exemptions.shellexpand]]
 version = "2.1.2"
 criteria = "safe-to-deploy"
@@ -582,39 +578,39 @@ version = "1.0.0"
 criteria = "safe-to-deploy"
 
 [[exemptions.swc_allocator]]
-version = "1.0.0"
+version = "2.0.0"
 criteria = "safe-to-deploy"
 
 [[exemptions.swc_atoms]]
-version = "2.0.0"
+version = "3.0.0"
 criteria = "safe-to-deploy"
 
 [[exemptions.swc_common]]
-version = "3.0.0"
+version = "5.0.0"
 criteria = "safe-to-deploy"
 
 [[exemptions.swc_core]]
-version = "4.0.3"
+version = "8.0.1"
 criteria = "safe-to-deploy"
 
 [[exemptions.swc_ecma_ast]]
-version = "3.0.0"
+version = "5.0.0"
 criteria = "safe-to-deploy"
 
 [[exemptions.swc_ecma_parser]]
-version = "4.0.0"
+version = "6.0.0"
 criteria = "safe-to-deploy"
 
 [[exemptions.swc_ecma_transforms_base]]
-version = "4.0.1"
+version = "6.0.1"
 criteria = "safe-to-deploy"
 
 [[exemptions.swc_ecma_utils]]
-version = "4.0.0"
+version = "6.0.0"
 criteria = "safe-to-deploy"
 
 [[exemptions.swc_ecma_visit]]
-version = "3.0.0"
+version = "5.0.0"
 criteria = "safe-to-deploy"
 
 [[exemptions.swc_eq_ignore_macros]]

supply-chain/imports.lock

@@ -2064,6 +2064,11 @@ who = "Ameer Ghani <[email protected]>"
 criteria = "safe-to-deploy"
 version = "1.12.1"
 
+[[audits.isrg.audits.sha2]]
+who = "David Cook <[email protected]>"
+criteria = "safe-to-deploy"
+version = "0.10.2"
+
 [[audits.mozilla.wildcard-audits.cexpr]]
 who = "Emilio Cobos Álvarez <[email protected]>"
 criteria = "safe-to-deploy"
@@ -2432,6 +2437,23 @@ version = "1.1.0"
 notes = "Straightforward crate with no unsafe code, does what it says on the tin."
 aggregated-from = "https://hg.mozilla.org/mozilla-central/raw-file/tip/supply-chain/audits.toml"
 
+[[audits.mozilla.audits.sha2]]
+who = "Mike Hommey <[email protected]>"
+criteria = "safe-to-deploy"
+delta = "0.10.2 -> 0.10.6"
+aggregated-from = "https://hg.mozilla.org/mozilla-central/raw-file/tip/supply-chain/audits.toml"
+
+[[audits.mozilla.audits.sha2]]
+who = "Jeff Muizelaar <[email protected]>"
+criteria = "safe-to-deploy"
+delta = "0.10.6 -> 0.10.8"
+notes = """
+The bulk of this is https://github.com/RustCrypto/hashes/pull/490 which adds aarch64 support along with another PR adding longson.
+I didn't check the implementation thoroughly but there wasn't anything obviously nefarious. 0.10.8 has been out for more than a year
+which suggests no one else has found anything either.
+"""
+aggregated-from = "https://hg.mozilla.org/mozilla-central/raw-file/tip/supply-chain/audits.toml"
+
 [[audits.mozilla.audits.socket2]]
 who = "Kershaw Chang <[email protected]>"
 criteria = "safe-to-deploy"