diff --git a/Cargo.lock b/Cargo.lock index cc7e172c..fd2e06b7 100644 --- a/Cargo.lock +++ b/Cargo.lock @@ -1,6 +1,6 @@ # This file is automatically @generated by Cargo. # It is not intended for manual editing. -version = 3 +version = 4 [[package]] name = "Inflector" @@ -174,9 +174,9 @@ checksum = "96d30a06541fbafbc7f82ed10c06164cfbd2c401138f6addd8404629c4b16711" [[package]] name = "ast_node" -version = "2.0.0" +version = "3.0.0" source = "registry+https://github.com/rust-lang/crates.io-index" -checksum = "94741d66bdda032fcbf33e621b4e3a888d7d11bd3ac4446d82c5593a136936ff" +checksum = "91fb5864e2f5bf9fd9797b94b2dfd1554d4c3092b535008b27d7e15c86675a2f" dependencies = [ "proc-macro2", "quote", @@ -2103,22 +2103,22 @@ dependencies = [ [[package]] name = "ptr_meta" -version = "0.1.4" +version = "0.3.0" source = "registry+https://github.com/rust-lang/crates.io-index" -checksum = "0738ccf7ea06b608c10564b31debd4f5bc5e197fc8bfe088f68ae5ce81e7a4f1" +checksum = "fe9e76f66d3f9606f44e45598d155cb13ecf09f4a28199e48daf8c8fc937ea90" dependencies = [ "ptr_meta_derive", ] [[package]] name = "ptr_meta_derive" -version = "0.1.4" +version = "0.3.0" source = "registry+https://github.com/rust-lang/crates.io-index" -checksum = "16b845dbfca988fa33db069c0e230574d15a3088f147a87b64c7589eb662c9ac" +checksum = "ca414edb151b4c8d125c12566ab0d74dc9cdba36fb80eb7b848c15f495fd32d1" dependencies = [ "proc-macro2", "quote", - "syn 1.0.109", + "syn 2.0.87", ] [[package]] @@ -2682,9 +2682,9 @@ dependencies = [ [[package]] name = "swc_allocator" -version = "1.0.0" +version = "2.0.0" source = "registry+https://github.com/rust-lang/crates.io-index" -checksum = "52cacc28f0ada8e4e31a720dd849ff06864b10e6ab0a1aaa99c06456cfe046af" +checksum = "117d5d3289663f53022ebf157df8a42b3872d7ac759e63abf96b5987b85d4af3" dependencies = [ "bumpalo", "hashbrown 0.14.5", @@ -2695,9 +2695,9 @@ dependencies = [ [[package]] name = "swc_atoms" -version = "2.0.0" +version = "3.0.0" source = "registry+https://github.com/rust-lang/crates.io-index" -checksum = "5d7211e5c57ea972f32b8a104d7006c4a68d094ec30c6a73bcd20d4d6c473c7c" +checksum = "151a6feb82b989a087433baca7f6a6eb4fcf83f828c479eecd039c9312d60e10" dependencies = [ "hstr", "once_cell", @@ -2707,9 +2707,9 @@ dependencies = [ [[package]] name = "swc_common" -version = "3.0.0" +version = "5.0.0" source = "registry+https://github.com/rust-lang/crates.io-index" -checksum = "992b89cdcff8e61c1308a984af5450a60a382b106f3e79fd6aabf9e2e193d076" +checksum = "a521e8120dc0401580864a643b5bffa035c29fc3fc41697c972743d4f008ed22" dependencies = [ "ast_node", "better_scoped_tls", @@ -2734,9 +2734,9 @@ dependencies = [ [[package]] name = "swc_core" -version = "4.0.3" +version = "8.0.1" source = "registry+https://github.com/rust-lang/crates.io-index" -checksum = "776e6ea3970315bae96fedf5a88c6a778a2e18b125537de8768bc7ebad0d3cc7" +checksum = "324e9dc1ddc05bb3ccef6b7541177a4bf7ae25ccaee65832a45a8c20a968ed80" dependencies = [ "swc_allocator", "swc_atoms", @@ -2749,9 +2749,9 @@ dependencies = [ [[package]] name = "swc_ecma_ast" -version = "3.0.0" +version = "5.0.0" source = "registry+https://github.com/rust-lang/crates.io-index" -checksum = "99e7c0cd9dfe2a49c8f0b4ce699c13c9e270b8487a0176e1d89e5a9a586d0b3b" +checksum = "94cf86f17358b93fcfe2876a9f0f7a7ebbff94cd6eaab4c809c7a0da1f4b892e" dependencies = [ "bitflags", "is-macro", @@ -2767,9 +2767,9 @@ dependencies = [ [[package]] name = "swc_ecma_parser" -version = "4.0.0" +version = "6.0.0" source = "registry+https://github.com/rust-lang/crates.io-index" -checksum = "a49f6ab5fa19498d0feb45a4943e1ad962736ee251e8f0f885330f7aeca39c39" +checksum = "c2c361b4153905dc088a6bacfaa944b582305cf94fbfcaa9b3aa61a7dd3adbf9" dependencies = [ "either", "new_debug_unreachable", @@ -2789,9 +2789,9 @@ dependencies = [ [[package]] name = "swc_ecma_transforms_base" -version = "4.0.1" +version = "6.0.1" source = "registry+https://github.com/rust-lang/crates.io-index" -checksum = "a6f43d1983d48dca819a7d0c79c5eb98011a2f8759acbddd972858ec228c66d4" +checksum = "2409f9c896f99481d9f609de89c7786ccd0dba008650a4116f1aef7a58926422" dependencies = [ "better_scoped_tls", "bitflags", @@ -2812,9 +2812,9 @@ dependencies = [ [[package]] name = "swc_ecma_utils" -version = "4.0.0" +version = "6.0.0" source = "registry+https://github.com/rust-lang/crates.io-index" -checksum = "9371e7e39fca55508ae91abf28fd3d8dae8eff3782e918081f6932523c68789c" +checksum = "527fad9bdb16883782d55291fd3330925b3572f512ef89b3d92a29e2f713fe4f" dependencies = [ "indexmap 2.2.6", "num_cpus", @@ -2831,9 +2831,9 @@ dependencies = [ [[package]] name = "swc_ecma_visit" -version = "3.0.0" +version = "5.0.0" source = "registry+https://github.com/rust-lang/crates.io-index" -checksum = "a380252c317c67f321b8e0d66dbc2427842bd184505e12016f0d3f811776af86" +checksum = "b04c06c1805bda18c27165560f1617a57453feb9fb0638d90839053641af42d4" dependencies = [ "new_debug_unreachable", "num-bigint", diff --git a/crates/cli/Cargo.toml b/crates/cli/Cargo.toml index de2e0251..14b22bb6 100644 --- a/crates/cli/Cargo.toml +++ b/crates/cli/Cargo.toml @@ -22,7 +22,7 @@ wasmtime = { workspace = true } wasmtime-wasi = { workspace = true } wasi-common = { workspace = true } walrus = "0.22.0" -swc_core = { version = "4.0.3", features = [ +swc_core = { version = "8.0.1", features = [ "common_sourcemap", "ecma_ast", "ecma_parser", diff --git a/supply-chain/config.toml b/supply-chain/config.toml index c4f79335..8f9fd291 100644 --- a/supply-chain/config.toml +++ b/supply-chain/config.toml @@ -50,7 +50,7 @@ version = "0.1.1" criteria = "safe-to-deploy" [[exemptions.ast_node]] -version = "2.0.0" +version = "3.0.0" criteria = "safe-to-deploy" [[exemptions.autocfg]] @@ -462,11 +462,11 @@ version = "0.1.21" criteria = "safe-to-deploy" [[exemptions.ptr_meta]] -version = "0.1.4" +version = "0.3.0" criteria = "safe-to-deploy" [[exemptions.ptr_meta_derive]] -version = "0.1.4" +version = "0.3.0" criteria = "safe-to-deploy" [[exemptions.radium]] @@ -525,10 +525,6 @@ criteria = "safe-to-deploy" version = "1.1.1" criteria = "safe-to-deploy" -[[exemptions.sha2]] -version = "0.10.8" -criteria = "safe-to-deploy" - [[exemptions.shellexpand]] version = "2.1.2" criteria = "safe-to-deploy" @@ -582,39 +578,39 @@ version = "1.0.0" criteria = "safe-to-deploy" [[exemptions.swc_allocator]] -version = "1.0.0" +version = "2.0.0" criteria = "safe-to-deploy" [[exemptions.swc_atoms]] -version = "2.0.0" +version = "3.0.0" criteria = "safe-to-deploy" [[exemptions.swc_common]] -version = "3.0.0" +version = "5.0.0" criteria = "safe-to-deploy" [[exemptions.swc_core]] -version = "4.0.3" +version = "8.0.1" criteria = "safe-to-deploy" [[exemptions.swc_ecma_ast]] -version = "3.0.0" +version = "5.0.0" criteria = "safe-to-deploy" [[exemptions.swc_ecma_parser]] -version = "4.0.0" +version = "6.0.0" criteria = "safe-to-deploy" [[exemptions.swc_ecma_transforms_base]] -version = "4.0.1" +version = "6.0.1" criteria = "safe-to-deploy" [[exemptions.swc_ecma_utils]] -version = "4.0.0" +version = "6.0.0" criteria = "safe-to-deploy" [[exemptions.swc_ecma_visit]] -version = "3.0.0" +version = "5.0.0" criteria = "safe-to-deploy" [[exemptions.swc_eq_ignore_macros]] diff --git a/supply-chain/imports.lock b/supply-chain/imports.lock index fc68c8e3..a336154f 100644 --- a/supply-chain/imports.lock +++ b/supply-chain/imports.lock @@ -2064,6 +2064,11 @@ who = "Ameer Ghani " criteria = "safe-to-deploy" version = "1.12.1" +[[audits.isrg.audits.sha2]] +who = "David Cook " +criteria = "safe-to-deploy" +version = "0.10.2" + [[audits.mozilla.wildcard-audits.cexpr]] who = "Emilio Cobos Álvarez " criteria = "safe-to-deploy" @@ -2432,6 +2437,23 @@ version = "1.1.0" notes = "Straightforward crate with no unsafe code, does what it says on the tin." aggregated-from = "https://hg.mozilla.org/mozilla-central/raw-file/tip/supply-chain/audits.toml" +[[audits.mozilla.audits.sha2]] +who = "Mike Hommey " +criteria = "safe-to-deploy" +delta = "0.10.2 -> 0.10.6" +aggregated-from = "https://hg.mozilla.org/mozilla-central/raw-file/tip/supply-chain/audits.toml" + +[[audits.mozilla.audits.sha2]] +who = "Jeff Muizelaar " +criteria = "safe-to-deploy" +delta = "0.10.6 -> 0.10.8" +notes = """ +The bulk of this is https://github.com/RustCrypto/hashes/pull/490 which adds aarch64 support along with another PR adding longson. +I didn't check the implementation thoroughly but there wasn't anything obviously nefarious. 0.10.8 has been out for more than a year +which suggests no one else has found anything either. +""" +aggregated-from = "https://hg.mozilla.org/mozilla-central/raw-file/tip/supply-chain/audits.toml" + [[audits.mozilla.audits.socket2]] who = "Kershaw Chang " criteria = "safe-to-deploy"