cargo-vet uniffi

supply-chain/config.toml

@@ -44,10 +44,6 @@ criteria = "safe-to-deploy"
 version = "1.3.3"
 criteria = "safe-to-deploy"
 
-[[exemptions.bitflags]]
-version = "1.3.2"
-criteria = "safe-to-deploy"
-
 [[exemptions.byteorder]]
 version = "1.4.3"
 criteria = "safe-to-deploy"

supply-chain/imports.lock

@@ -23,56 +23,56 @@ user-login = "sunfishcode"
 user-name = "Dan Gohman"
 
 [[publisher.uniffi]]
-version = "0.28.0"
-when = "2024-06-11"
+version = "0.28.1"
+when = "2024-08-13"
 user-id = 127697
 user-login = "bendk"
 
 [[publisher.uniffi_bindgen]]
-version = "0.28.0"
-when = "2024-06-11"
+version = "0.28.1"
+when = "2024-08-13"
 user-id = 127697
 user-login = "bendk"
 
 [[publisher.uniffi_build]]
-version = "0.28.0"
-when = "2024-06-11"
+version = "0.28.1"
+when = "2024-08-13"
 user-id = 127697
 user-login = "bendk"
 
 [[publisher.uniffi_checksum_derive]]
-version = "0.28.0"
-when = "2024-06-11"
+version = "0.28.1"
+when = "2024-08-13"
 user-id = 127697
 user-login = "bendk"
 
 [[publisher.uniffi_core]]
-version = "0.28.0"
-when = "2024-06-11"
+version = "0.28.1"
+when = "2024-08-13"
 user-id = 127697
 user-login = "bendk"
 
 [[publisher.uniffi_macros]]
-version = "0.28.0"
-when = "2024-06-11"
+version = "0.28.1"
+when = "2024-08-13"
 user-id = 127697
 user-login = "bendk"
 
 [[publisher.uniffi_meta]]
-version = "0.28.0"
-when = "2024-06-11"
+version = "0.28.1"
+when = "2024-08-13"
 user-id = 127697
 user-login = "bendk"
 
 [[publisher.uniffi_testing]]
-version = "0.28.0"
-when = "2024-06-11"
+version = "0.28.1"
+when = "2024-08-13"
 user-id = 127697
 user-login = "bendk"
 
 [[publisher.uniffi_udl]]
-version = "0.28.0"
-when = "2024-06-11"
+version = "0.28.1"
+when = "2024-08-13"
 user-id = 127697
 user-login = "bendk"
 
@@ -383,6 +383,22 @@ criteria = "safe-to-deploy"
 version = "1.0.40"
 notes = "Found no unsafe or ambient capabilities used"
 
+[[audits.google.audits.bitflags]]
+who = "Lukasz Anforowicz <lukasza@chromium.org>"
+criteria = "safe-to-deploy"
+version = "1.3.2"
+notes = """
+Security review of earlier versions of the crate can be found at
+(Google-internal, sorry): go/image-crate-chromium-security-review
+
+The crate exposes a function marked as `unsafe`, but doesn't use any
+`unsafe` blocks (except for tests of the single `unsafe` function). I
+think this justifies marking this crate as `ub-risk-1`.
+
+Additional review comments can be found at https://crrev.com/c/4723145/31
+"""
+aggregated-from = "https://chromium.googlesource.com/chromium/src/+/main/third_party/rust/chromium_crates_io/supply-chain/audits.toml?format=TEXT"
+
 [[audits.google.audits.ctor]]
 who = "George Burgess IV <gbiv@google.com>"
 criteria = "safe-to-run"