Bump the nonbreaking group across 1 directory with 13 updates (#853)

bytecodealliance · Dec 4, 2024 · fe7fe58 · fe7fe58
1 parent f4c1ee3
commit fe7fe58
Show file tree

Hide file tree

Showing 9 changed files with 226 additions and 119 deletions.
diff --git a/Cargo.lock b/Cargo.lock
diff --git a/Cargo.toml b/Cargo.toml
@@ -24,7 +24,7 @@ wasmtime-wasi = "23"
 wasi-common = "23"
 anyhow = "1.0"
 javy = { path = "crates/javy", version = "3.1.1-alpha.1" }
-tempfile = "3.13.0"
+tempfile = "3.14.0"
 uuid = { version = "1.11", features = ["v4"] }
 serde = { version = "1.0", default-features = false }
 serde_json = "1.0"

diff --git a/crates/cli/Cargo.toml b/crates/cli/Cargo.toml
@@ -17,11 +17,11 @@ dump_wat = ["dep:wasmprinter"]
 wizer = { workspace = true }
 anyhow = { workspace = true }
 brotli = "7.0.0"
-wasmprinter = { version = "0.219.1", optional = true }
+wasmprinter = { version = "0.221.2", optional = true }
 wasmtime = { workspace = true }
 wasmtime-wasi = { workspace = true }
 wasi-common = { workspace = true }
-walrus = "0.22.0"
+walrus = "0.23.2"
 swc_core = { version = "8.0.1", features = [
     "common_sourcemap",
     "ecma_ast",
@@ -31,21 +31,21 @@ wit-parser = "0.212.0"
 convert_case = "0.6.0"
 wasm-opt = "0.116.1"
 tempfile = { workspace = true }
-clap = { version = "4.5.20", features = ["derive"] }
+clap = { version = "4.5.22", features = ["derive"] }
 serde = { workspace = true, default-features = false }
 serde_json = { workspace = true }
 
 [dev-dependencies]
 lazy_static = "1.5"
 criterion = "0.5"
 num-format = "0.4.4"
-wasmparser = "0.219.1"
+wasmparser = "0.221.2"
 javy-runner = { path = "../runner/" }
 uuid = { workspace = true }
 javy-test-macros = { path = "../test-macros/" }
 
 [build-dependencies]
-anyhow = "1.0.92"
+anyhow = "1.0.94"
 wizer = { workspace = true }
 
 [[bench]]

diff --git a/crates/javy/Cargo.toml b/crates/javy/Cargo.toml
@@ -22,8 +22,8 @@ rmp-serde = { version = "^1.3", optional = true }
 # tests.
 quickcheck = "1"
 bitflags = "2.6.0"
-fastrand = "2.1.1"
-simd-json = { version = "0.14.2", optional = true, default-features = false, features = [
+fastrand = "2.2.0"
+simd-json = { version = "0.14.3", optional = true, default-features = false, features = [
     "big-int-as-float",
     "serde_impl",
 ] }

diff --git a/crates/runner/Cargo.toml b/crates/runner/Cargo.toml
@@ -13,4 +13,4 @@ wasi-common = { workspace = true }
 anyhow = { workspace = true }
 tempfile = { workspace = true }
 uuid = { workspace = true }
-wasmparser = "0.219.1"
+wasmparser = "0.221.2"
diff --git a/crates/test-macros/Cargo.toml b/crates/test-macros/Cargo.toml
@@ -12,6 +12,6 @@ doctest = false
 
 [dependencies]
 anyhow = { workspace = true }
-proc-macro2 = "1.0.89"
+proc-macro2 = "1.0.92"
 quote = "1.0.37"
-syn = { version = "2.0.87", features = ["full"] }
+syn = { version = "2.0.90", features = ["full"] }
diff --git a/supply-chain/audits.toml b/supply-chain/audits.toml
@@ -324,6 +324,12 @@ user-id = 51017
 start = "2020-03-17"
 end = "2024-10-30"
 
+[[trusted.libfuzzer-sys]]
+criteria = "safe-to-deploy"
+user-id = 696 # Nick Fitzgerald (fitzgen)
+start = "2020-01-14"
+end = "2025-12-04"
+
 [[trusted.linux-raw-sys]]
 criteria = "safe-to-deploy"
 user-id = 6825 # Dan Gohman (sunfishcode)
@@ -430,7 +436,7 @@ end = "2024-10-03"
 criteria = "safe-to-deploy"
 user-id = 6825 # Dan Gohman (sunfishcode)
 start = "2021-10-29"
-end = "2024-07-25"
+end = "2025-12-04"
 
 [[trusted.rustversion]]
 criteria = "safe-to-deploy"

diff --git a/supply-chain/config.toml b/supply-chain/config.toml
@@ -214,7 +214,7 @@ version = "0.2.0"
 criteria = "safe-to-deploy"
 
 [[exemptions.fastrand]]
-version = "2.1.1"
+version = "2.2.0"
 criteria = "safe-to-deploy"
 
 [[exemptions.float-cmp]]
@@ -338,11 +338,7 @@ version = "1.3.0"
 criteria = "safe-to-deploy"
 
 [[exemptions.libc]]
-version = "0.2.159"
-criteria = "safe-to-deploy"
-
-[[exemptions.libfuzzer-sys]]
-version = "0.4.7"
+version = "0.2.167"
 criteria = "safe-to-deploy"
 
 [[exemptions.libloading]]
@@ -538,7 +534,7 @@ version = "0.7.1"
 criteria = "safe-to-deploy"
 
 [[exemptions.simd-json]]
-version = "0.14.2"
+version = "0.14.3"
 criteria = "safe-to-deploy"
 
 [[exemptions.simdutf8]]
@@ -626,7 +622,7 @@ version = "2.0.0"
 criteria = "safe-to-deploy"
 
 [[exemptions.tempfile]]
-version = "3.13.0"
+version = "3.14.0"
 criteria = "safe-to-deploy"
 
 [[exemptions.tinyvec_macros]]
@@ -694,7 +690,7 @@ version = "0.1.3"
 criteria = "safe-to-deploy"
 
 [[exemptions.walrus]]
-version = "0.22.0"
+version = "0.23.2"
 criteria = "safe-to-deploy"
 
 [[exemptions.walrus-macro]]

diff --git a/supply-chain/imports.lock b/supply-chain/imports.lock
@@ -44,8 +44,8 @@ user-login = "epage"
 user-name = "Ed Page"
 
 [[publisher.anyhow]]
-version = "1.0.92"
-when = "2024-11-01"
+version = "1.0.94"
+when = "2024-12-03"
 user-id = 3618
 user-login = "dtolnay"
 user-name = "David Tolnay"
@@ -128,15 +128,15 @@ user-login = "emilio"
 user-name = "Emilio Cobos Álvarez"
 
 [[publisher.clap]]
-version = "4.5.20"
-when = "2024-10-08"
+version = "4.5.22"
+when = "2024-12-03"
 user-id = 6743
 user-login = "epage"
 user-name = "Ed Page"
 
 [[publisher.clap_builder]]
-version = "4.5.20"
-when = "2024-10-08"
+version = "4.5.22"
+when = "2024-12-03"
 user-id = 6743
 user-login = "epage"
 user-name = "Ed Page"
@@ -347,6 +347,13 @@ user-id = 1
 user-login = "alexcrichton"
 user-name = "Alex Crichton"
 
+[[publisher.libfuzzer-sys]]
+version = "0.4.8"
+when = "2024-11-07"
+user-id = 696
+user-login = "fitzgen"
+user-name = "Nick Fitzgerald"
+
 [[publisher.linux-raw-sys]]
 version = "0.4.14"
 when = "2024-05-17"
@@ -390,8 +397,8 @@ user-login = "dtolnay"
 user-name = "David Tolnay"
 
 [[publisher.proc-macro2]]
-version = "1.0.89"
-when = "2024-10-22"
+version = "1.0.92"
+when = "2024-11-21"
 user-id = 3618
 user-login = "dtolnay"
 user-name = "David Tolnay"
@@ -460,8 +467,8 @@ user-login = "BurntSushi"
 user-name = "Andrew Gallant"
 
 [[publisher.rustix]]
-version = "0.38.34"
-when = "2024-04-22"
+version = "0.38.41"
+when = "2024-11-18"
 user-id = 6825
 user-login = "sunfishcode"
 user-name = "Dan Gohman"
@@ -509,8 +516,8 @@ user-login = "dtolnay"
 user-name = "David Tolnay"
 
 [[publisher.serde_json]]
-version = "1.0.132"
-when = "2024-10-19"
+version = "1.0.133"
+when = "2024-11-17"
 user-id = 3618
 user-login = "dtolnay"
 user-name = "David Tolnay"
@@ -537,8 +544,8 @@ user-login = "dtolnay"
 user-name = "David Tolnay"
 
 [[publisher.syn]]
-version = "2.0.87"
-when = "2024-11-02"
+version = "2.0.90"
+when = "2024-11-29"
 user-id = 3618
 user-login = "dtolnay"
 user-name = "David Tolnay"
@@ -695,6 +702,12 @@ when = "2024-06-27"
 user-id = 73222
 user-login = "wasmtime-publish"
 
+[[publisher.wasm-encoder]]
+version = "0.214.0"
+when = "2024-07-16"
+user-id = 73222
+user-login = "wasmtime-publish"
+
 [[publisher.wasmparser]]
 version = "0.202.0"
 when = "2024-03-26"
@@ -708,8 +721,14 @@ user-id = 73222
 user-login = "wasmtime-publish"
 
 [[publisher.wasmparser]]
-version = "0.219.1"
-when = "2024-10-10"
+version = "0.214.0"
+when = "2024-07-16"
+user-id = 73222
+user-login = "wasmtime-publish"
+
+[[publisher.wasmparser]]
+version = "0.221.2"
+when = "2024-12-02"
 user-id = 73222
 user-login = "wasmtime-publish"
 
@@ -720,8 +739,8 @@ user-id = 73222
 user-login = "wasmtime-publish"
 
 [[publisher.wasmprinter]]
-version = "0.219.1"
-when = "2024-10-10"
+version = "0.221.2"
+when = "2024-12-02"
 user-id = 73222
 user-login = "wasmtime-publish"
 
@@ -1463,6 +1482,15 @@ this crate has to do with iterators and `Result` and such. No `unsafe` or
 anything like that, all looks good.
 """
 
+[[audits.bytecode-alliance.audits.foldhash]]
+who = "Alex Crichton <[email protected]>"
+criteria = "safe-to-deploy"
+version = "0.1.3"
+notes = """
+Only a minor amount of `unsafe` code in this crate related to global per-process
+initialization which looks correct to me.
+"""
+
 [[audits.bytecode-alliance.audits.fxprof-processed-profile]]
 who = "Jamey Sharp <[email protected]>"
 criteria = "safe-to-deploy"
@@ -1486,6 +1514,11 @@ criteria = "safe-to-deploy"
 delta = "0.13.1 -> 0.13.2"
 notes = "I read through the diff between v0.13.1 and v0.13.2, and verified that the changes made matched up with the changelog entries. There were very few changes between these two releases, and it was easy to verify what they did."
 
+[[audits.bytecode-alliance.audits.hashbrown]]
+who = "Chris Fallin <[email protected]>"
+criteria = "safe-to-deploy"
+delta = "0.14.5 -> 0.15.2"
+
 [[audits.bytecode-alliance.audits.heck]]
 who = "Alex Crichton <[email protected]>"
 criteria = "safe-to-deploy"
@@ -1608,11 +1641,6 @@ who = "Alex Crichton <[email protected]>"
 criteria = "safe-to-deploy"
 delta = "0.1.21 -> 0.1.24"
 
-[[audits.bytecode-alliance.audits.rustix]]
-who = "Dan Gohman <[email protected]>"
-criteria = "safe-to-deploy"
-delta = "0.38.34 -> 0.38.37"
-
 [[audits.bytecode-alliance.audits.slice-group-by]]
 who = "Alex Crichton <[email protected]>"
 criteria = "safe-to-deploy"
@@ -1920,6 +1948,25 @@ delta = "1.0.209 -> 1.0.210"
 notes = "Almost no new code - just feature rearrangement"
 aggregated-from = "https://chromium.googlesource.com/chromium/src/+/main/third_party/rust/chromium_crates_io/supply-chain/audits.toml?format=TEXT"
 
+[[audits.google.audits.serde]]
+who = "Liza Burakova <[email protected]>"
+criteria = "safe-to-deploy"
+delta = "1.0.210 -> 1.0.213"
+aggregated-from = "https://chromium.googlesource.com/chromium/src/+/main/third_party/rust/chromium_crates_io/supply-chain/audits.toml?format=TEXT"
+
+[[audits.google.audits.serde]]
+who = "Dustin J. Mitchell <[email protected]>"
+criteria = "safe-to-deploy"
+delta = "1.0.213 -> 1.0.214"
+notes = "No unsafe, no crypto"
+aggregated-from = "https://chromium.googlesource.com/chromium/src/+/main/third_party/rust/chromium_crates_io/supply-chain/audits.toml?format=TEXT"
+
+[[audits.google.audits.serde]]
+who = "Adrian Taylor <[email protected]>"
+criteria = "safe-to-deploy"
+delta = "1.0.214 -> 1.0.215"
+aggregated-from = "https://chromium.googlesource.com/chromium/src/+/main/third_party/rust/chromium_crates_io/supply-chain/audits.toml?format=TEXT"
+
 [[audits.google.audits.serde_derive]]
 who = "Lukasz Anforowicz <[email protected]>"
 criteria = "safe-to-deploy"
@@ -1946,6 +1993,27 @@ delta = "1.0.209 -> 1.0.210"
 notes = "Almost no new code - just feature rearrangement"
 aggregated-from = "https://chromium.googlesource.com/chromium/src/+/main/third_party/rust/chromium_crates_io/supply-chain/audits.toml?format=TEXT"
 
+[[audits.google.audits.serde_derive]]
+who = "Liza Burakova <[email protected]>"
+criteria = "safe-to-deploy"
+delta = "1.0.210 -> 1.0.213"
+notes = "Grepped for 'unsafe', 'crypt', 'cipher', 'fs', 'net' - there were no hits"
+aggregated-from = "https://chromium.googlesource.com/chromium/src/+/main/third_party/rust/chromium_crates_io/supply-chain/audits.toml?format=TEXT"
+
+[[audits.google.audits.serde_derive]]
+who = "Dustin J. Mitchell <[email protected]>"
+criteria = "safe-to-deploy"
+delta = "1.0.213 -> 1.0.214"
+notes = "No changes to unsafe, no crypto"
+aggregated-from = "https://chromium.googlesource.com/chromium/src/+/main/third_party/rust/chromium_crates_io/supply-chain/audits.toml?format=TEXT"
+
+[[audits.google.audits.serde_derive]]
+who = "Adrian Taylor <[email protected]>"
+criteria = "safe-to-deploy"
+delta = "1.0.214 -> 1.0.215"
+notes = "Minor changes should not impact UB risk"
+aggregated-from = "https://chromium.googlesource.com/chromium/src/+/main/third_party/rust/chromium_crates_io/supply-chain/audits.toml?format=TEXT"
+
 [[audits.google.audits.socket2]]
 who = "David Koloski <[email protected]>"
 criteria = "safe-to-deploy"