diff --git a/Cargo.lock b/Cargo.lock index 092f25e81e6f..503c53cad641 100644 --- a/Cargo.lock +++ b/Cargo.lock @@ -2202,9 +2202,9 @@ checksum = "09edd9e8b54e49e587e4f6295a7d29c3ea94d469cb40ab8ca70b288248a81db2" [[package]] name = "libc" -version = "0.2.171" +version = "0.2.174" source = "registry+https://github.com/rust-lang/crates.io-index" -checksum = "c19937216e9d3aa9956d9bb8dfc0b0c8beb6058fc4f7a4dc4d850edf86a237d6" +checksum = "1171693293099992e19cddea4e8b849964e9846f4acee11b3948bcc337be8776" [[package]] name = "libfuzzer-sys" diff --git a/supply-chain/audits.toml b/supply-chain/audits.toml index c0754022df14..f0d10cdaf5c3 100644 --- a/supply-chain/audits.toml +++ b/supply-chain/audits.toml @@ -2197,7 +2197,7 @@ delta = "0.3.27 -> 0.3.31" who = "Pat Hickey " criteria = "safe-to-deploy" delta = "0.3.27 -> 0.3.31" -notes = "New waker_ref module contains \"FIXME: panics on Arc::clone / refcount changes could wreak havoc...\" comment, but this corner case feels low risk." +notes = 'New waker_ref module contains "FIXME: panics on Arc::clone / refcount changes could wreak havoc..." comment, but this corner case feels low risk.' [[audits.fxprof-processed-profile]] who = "Jamey Sharp " @@ -2205,7 +2205,7 @@ criteria = "safe-to-deploy" version = "0.6.0" notes = """ No unsafe code, I/O, or powerful imports. This is a straightforward set of data -structures representing the Firefox \"processed\" profile format, with serde +structures representing the Firefox "processed" profile format, with serde serialization support. All logic is trivial: either unit conversion, or hash-consing to support de-duplication required by the format. """ @@ -4880,6 +4880,12 @@ user-id = 2915 # Amanieu d'Antras (Amanieu) start = "2021-01-27" end = "2024-07-06" +[[trusted.libc]] +criteria = "safe-to-deploy" +user-id = 55123 # rust-lang-owner +start = "2024-08-15" +end = "2027-05-27" + [[trusted.libm]] criteria = "safe-to-deploy" user-id = 2915 # Amanieu d'Antras (Amanieu) diff --git a/supply-chain/imports.lock b/supply-chain/imports.lock index 589dacbb64c0..525ef097fce2 100644 --- a/supply-chain/imports.lock +++ b/supply-chain/imports.lock @@ -3468,11 +3468,10 @@ user-id = 73222 user-login = "wasmtime-publish" [[publisher.libc]] -version = "0.2.146" -when = "2023-06-06" -user-id = 2915 -user-login = "Amanieu" -user-name = "Amanieu d'Antras" +version = "0.2.174" +when = "2025-06-17" +user-id = 55123 +user-login = "rust-lang-owner" [[publisher.libm]] version = "0.2.8" @@ -5250,12 +5249,6 @@ version = "1.4.0" notes = "I have read over the macros, and audited the unsafe code." aggregated-from = "https://raw.githubusercontent.com/mozilla/cargo-vet/main/supply-chain/audits.toml" -[[audits.mozilla.audits.libc]] -who = "Mike Hommey " -criteria = "safe-to-deploy" -delta = "0.2.147 -> 0.2.148" -aggregated-from = "https://hg.mozilla.org/mozilla-central/raw-file/tip/supply-chain/audits.toml" - [[audits.mozilla.audits.libloading]] who = "Mike Hommey " criteria = "safe-to-deploy" @@ -5694,7 +5687,7 @@ aggregated-from = "https://hg.mozilla.org/mozilla-central/raw-file/tip/supply-ch who = "Makoto Kato " criteria = "safe-to-deploy" version = "0.1.2" -notes = "This crate is zero-copy version of \"From\". This has no unsafe code and uses no ambient capabilities." +notes = 'This crate is zero-copy version of "From". This has no unsafe code and uses no ambient capabilities.' aggregated-from = "https://hg.mozilla.org/mozilla-central/raw-file/tip/supply-chain/audits.toml" [[audits.mozilla.audits.zerofrom]]