diff --git a/.github/workflows/portfolio-check.yml b/.github/workflows/portfolio-check.yml new file mode 100644 index 0000000..0785c32 --- /dev/null +++ b/.github/workflows/portfolio-check.yml @@ -0,0 +1,26 @@ +# Portfolio check - calls the shared harness in Remade-With-Rust/.github. +# +# Managed by remade-updater. Edit the shared workflow, not this file: this exists +# only so the run attaches to the pull request, where a merge can wait on it. + +name: portfolio-check + +on: + pull_request: + # Also on the base branch, so a red pull request can be compared against a + # real run of THIS check on main. Without it the only baseline available is + # "are main's own checks green", which answers a different question: this + # harness is stricter than most repositories' own CI, so a pre-existing + # failure it alone catches looks exactly like a regression. + push: + branches: [main, master] + workflow_dispatch: + +permissions: + contents: read + +jobs: + check: + uses: Remade-With-Rust/.github/.github/workflows/portfolio-test.yml@main + with: + command: test diff --git a/Cargo.lock b/Cargo.lock index 0bdc333..4829129 100644 --- a/Cargo.lock +++ b/Cargo.lock @@ -93,7 +93,7 @@ version = "1.1.5" source = "registry+https://github.com/rust-lang/crates.io-index" checksum = "40c48f72fd53cd289104fc64099abca73db4166ad86ea0b4341abe65af83dadc" dependencies = [ - "windows-sys 0.61.2", + "windows-sys 0.60.2", ] [[package]] @@ -104,7 +104,7 @@ checksum = "291e6a250ff86cd4a820112fb8898808a366d8f9f58ce16d1f538353ad55747d" dependencies = [ "anstyle", "once_cell_polyfill", - "windows-sys 0.61.2", + "windows-sys 0.60.2", ] [[package]] @@ -358,7 +358,7 @@ checksum = "fc652a48c352aef3ea3aed32080501cf3ef6ed5da78602a020c991775b0aff04" [[package]] name = "candle-core" version = "0.11.0" -source = "git+https://github.com/Remade-With-Rust/candle?branch=simd128-f16-gates-0.11.0#fa366d84d12c5732cbc34c973fe92b8f480bfdbe" +source = "git+https://github.com/Remade-With-Rust/candle?branch=simd128-f16-gates-0.11.0#8fe731857d67f5fe83ee6fa717e0d549ec6827d3" dependencies = [ "byteorder", "candle-kernels", @@ -390,7 +390,7 @@ dependencies = [ [[package]] name = "candle-kernels" version = "0.11.0" -source = "git+https://github.com/Remade-With-Rust/candle?branch=simd128-f16-gates-0.11.0#fa366d84d12c5732cbc34c973fe92b8f480bfdbe" +source = "git+https://github.com/Remade-With-Rust/candle?branch=simd128-f16-gates-0.11.0#8fe731857d67f5fe83ee6fa717e0d549ec6827d3" dependencies = [ "cudaforge", ] @@ -414,7 +414,7 @@ dependencies = [ [[package]] name = "candle-metal-kernels" version = "0.11.0" -source = "git+https://github.com/Remade-With-Rust/candle?branch=simd128-f16-gates-0.11.0#fa366d84d12c5732cbc34c973fe92b8f480bfdbe" +source = "git+https://github.com/Remade-With-Rust/candle?branch=simd128-f16-gates-0.11.0#8fe731857d67f5fe83ee6fa717e0d549ec6827d3" dependencies = [ "block2", "half", @@ -467,7 +467,7 @@ dependencies = [ [[package]] name = "candle-ug" version = "0.11.0" -source = "git+https://github.com/Remade-With-Rust/candle?branch=simd128-f16-gates-0.11.0#fa366d84d12c5732cbc34c973fe92b8f480bfdbe" +source = "git+https://github.com/Remade-With-Rust/candle?branch=simd128-f16-gates-0.11.0#8fe731857d67f5fe83ee6fa717e0d549ec6827d3" dependencies = [ "ug", "ug-cuda", @@ -617,7 +617,7 @@ version = "3.1.1" source = "registry+https://github.com/rust-lang/crates.io-index" checksum = "faf9468729b8cbcea668e36183cb69d317348c2e08e994829fb56ebfdfbaac34" dependencies = [ - "windows-sys 0.61.2", + "windows-sys 0.60.2", ] [[package]] @@ -1071,7 +1071,7 @@ dependencies = [ "libc", "option-ext", "redox_users 0.5.2", - "windows-sys 0.61.2", + "windows-sys 0.60.2", ] [[package]] @@ -1172,7 +1172,7 @@ source = "registry+https://github.com/rust-lang/crates.io-index" checksum = "39cab71617ae0d63f51a36d69f866391735b51691dbda63cf6f96d042b63efeb" dependencies = [ "libc", - "windows-sys 0.61.2", + "windows-sys 0.60.2", ] [[package]] @@ -2864,6 +2864,18 @@ dependencies = [ "rawpointer", ] +[[package]] +name = "nix" +version = "0.31.3" +source = "registry+https://github.com/rust-lang/crates.io-index" +checksum = "cf20d2fde8ff38632c426f1165ed7436270b44f199fc55284c38276f9db47c3d" +dependencies = [ + "bitflags 2.13.1", + "cfg-if 1.0.4", + "cfg_aliases", + "libc", +] + [[package]] name = "nom" version = "7.1.3" @@ -2898,7 +2910,7 @@ version = "0.50.3" source = "registry+https://github.com/rust-lang/crates.io-index" checksum = "7957b9740744892f114936ab4a57b3f487491bbeafaf8083688b16841a4240e5" dependencies = [ - "windows-sys 0.61.2", + "windows-sys 0.60.2", ] [[package]] @@ -3440,9 +3452,9 @@ dependencies = [ [[package]] name = "quinn-proto" -version = "0.11.16" +version = "0.11.19" source = "registry+https://github.com/rust-lang/crates.io-index" -checksum = "2f4bfc015262b9df63c8845072ce59068853ff5872180c2ce2f13038b970e560" +checksum = "0e750cca55fe4f0439a15d0bb529da9651e79993e8e72c61a899a36d462befbe" dependencies = [ "aws-lc-rs", "bytes", @@ -3472,7 +3484,7 @@ dependencies = [ "once_cell", "socket2", "tracing", - "windows-sys 0.61.2", + "windows-sys 0.60.2", ] [[package]] @@ -3749,36 +3761,36 @@ dependencies = [ [[package]] name = "rff-codec" -version = "0.2.0" +version = "0.2.4" source = "registry+https://github.com/rust-lang/crates.io-index" -checksum = "61677fc31588351aedd8f8c931aceb3df9c407fbf0f0b655d434bd65a5b84e09" +checksum = "ed5e4d6500121bb1dd3d3b19623a236253f59980365bfda5ec86c3213d59a0e3" dependencies = [ "rff-core", ] [[package]] name = "rff-core" -version = "0.2.1" +version = "0.2.4" source = "registry+https://github.com/rust-lang/crates.io-index" -checksum = "14f1d6f3bcfc56f5220ed6ccf30e10fdd2de16cd2d1c2ec111d6bed6439b2120" +checksum = "868b8d79b0819bfa63277238ca968373ebebc06637c64abafc58a7e0502ee7fb" dependencies = [ "thiserror 2.0.19", ] [[package]] name = "rff-format" -version = "0.2.1" +version = "0.2.4" source = "registry+https://github.com/rust-lang/crates.io-index" -checksum = "3ede37b5f32c0d20416ca1ee8214483469388f3e76dbca38b76126d96851a4bd" +checksum = "c32f9ba14e6304d258a42d94e8794bcedf804e5d1d0827c0d598f411e421e30c" dependencies = [ "rff-core", ] [[package]] name = "rff-format-avi" -version = "0.2.0" +version = "0.2.4" source = "registry+https://github.com/rust-lang/crates.io-index" -checksum = "95e9a5dfd75e53aca4ab0171714ed9807706b3e584b3d5269666038fd4f31f7b" +checksum = "ad0409b2ad3830c886839566c3c8e5ed6d873a6ea6f38692df84ae01f28d3786" dependencies = [ "rff-core", "rff-format", @@ -3786,9 +3798,9 @@ dependencies = [ [[package]] name = "rff-format-mkv" -version = "0.2.1" +version = "0.2.4" source = "registry+https://github.com/rust-lang/crates.io-index" -checksum = "c9a1356e1385b32df3abb8741c9f86f94edce07f09c1c3f6fd43992b990a1ded" +checksum = "98d1b7a585aff4c8b3894d2c7dbd384a5889d7c773c85d2c6ea12aa8a32e76bf" dependencies = [ "rff-core", "rff-format", @@ -3797,9 +3809,9 @@ dependencies = [ [[package]] name = "rff-format-mp4" -version = "0.2.1" +version = "0.2.4" source = "registry+https://github.com/rust-lang/crates.io-index" -checksum = "fd50c0332f1e700a19a244b76be86c3081e1f36f8b7b2ce19cf5f63fef430006" +checksum = "1e12d30bdff9950bd5e9ddc7a25d7c96c951ee9da7114bdfe5ff1a5d37b153d8" dependencies = [ "rff-core", "rff-format", @@ -3807,9 +3819,9 @@ dependencies = [ [[package]] name = "rff-format-ts" -version = "0.2.1" +version = "0.2.4" source = "registry+https://github.com/rust-lang/crates.io-index" -checksum = "64991d97bb9e24008d5b906725030acb2f98abd11326c360687d20797f17c26b" +checksum = "5955490e82ad1d494524fb2706432796fc0e3411ec822d0367d497afbae97ac9" dependencies = [ "rff-core", "rff-format", @@ -3817,9 +3829,9 @@ dependencies = [ [[package]] name = "rff-subtitle" -version = "0.2.0" +version = "0.2.4" source = "registry+https://github.com/rust-lang/crates.io-index" -checksum = "9735c92fade5b42e986d6d88562c5c0093c11ad7d6a8b36014f6d73ae2fb7759" +checksum = "75e215a66ac3f6aed735699eac72b811097b568d8b477b6540f17f5790610903" [[package]] name = "ring" @@ -3874,14 +3886,14 @@ dependencies = [ "errno", "libc", "linux-raw-sys", - "windows-sys 0.61.2", + "windows-sys 0.60.2", ] [[package]] name = "rustls" -version = "0.23.45" +version = "0.23.46" source = "registry+https://github.com/rust-lang/crates.io-index" -checksum = "0d41d731c7d2f962d1ccc364cec258de3c0e93b38c2fb3ba97ac74513048d634" +checksum = "48e13bd8c0e9365c43cfa5c9e8f9ad49d3c8444926c9aac819e0e4dc503c8fdf" dependencies = [ "aws-lc-rs", "log", @@ -3933,7 +3945,7 @@ dependencies = [ "security-framework", "security-framework-sys", "webpki-root-certs", - "windows-sys 0.61.2", + "windows-sys 0.60.2", ] [[package]] @@ -3974,9 +3986,9 @@ dependencies = [ [[package]] name = "rusty_alloc" -version = "2.2.5" +version = "2.2.6" source = "registry+https://github.com/rust-lang/crates.io-index" -checksum = "c12ed1752127ac2fabc5bc5aed934055f4be5f093885d830a66686bff4cd7668" +checksum = "318c1ca44267aa30e631ed57f8c1db3e25991374bdadc35d97db11b65faba496" dependencies = [ "libc", "portable-atomic", @@ -3985,9 +3997,9 @@ dependencies = [ [[package]] name = "rusty_alloc-api" -version = "2.2.5" +version = "2.2.6" source = "registry+https://github.com/rust-lang/crates.io-index" -checksum = "a68d299fc4818e1b26164556504f28240de294ea709c519ec465add9238f30f7" +checksum = "613568557b57208dff4fa2cdb1ada1bc98339d3cc3ab9533edd712c4946165b4" dependencies = [ "rusty_alloc", ] @@ -4049,9 +4061,9 @@ dependencies = [ [[package]] name = "rusty_jpeg" -version = "0.4.1" +version = "0.4.3" source = "registry+https://github.com/rust-lang/crates.io-index" -checksum = "04b834f51d522e52dc7ad26fd6e157865f565eaf7f224a7a1a6d75ca617dd793" +checksum = "f3794e723ee5f142ba039039aa701e42263851a0f3921116ec0d389adede2211" [[package]] name = "rusty_json_turbo" @@ -4361,7 +4373,7 @@ source = "registry+https://github.com/rust-lang/crates.io-index" checksum = "c3d1e2c7f27f8d4cb10542a02c49005dbd6e93095799d6f3be745fae9f8fedd4" dependencies = [ "libc", - "windows-sys 0.61.2", + "windows-sys 0.60.2", ] [[package]] @@ -4567,10 +4579,10 @@ source = "registry+https://github.com/rust-lang/crates.io-index" checksum = "32497e9a4c7b38532efcdebeef879707aa9f794296a4f0244f6f69e9bc8574bd" dependencies = [ "fastrand", - "getrandom 0.4.3", + "getrandom 0.3.4", "once_cell", "rustix", - "windows-sys 0.61.2", + "windows-sys 0.60.2", ] [[package]] @@ -5473,7 +5485,7 @@ version = "0.1.11" source = "registry+https://github.com/rust-lang/crates.io-index" checksum = "c2a7b1c03c876122aa43f3020e6c3c3ee5c05081c9a00739faf7503aeba10d22" dependencies = [ - "windows-sys 0.61.2", + "windows-sys 0.60.2", ] [[package]] @@ -6132,13 +6144,14 @@ dependencies = [ [[package]] name = "zip" -version = "8.6.0" +version = "9.0.5" source = "registry+https://github.com/rust-lang/crates.io-index" -checksum = "2d04a6b5381502aa6087c94c669499eb1602eb9c5e8198e534de571f7154809b" +checksum = "6e04976da629d3b04204ba8105b396a193af8ad2583b2c79bfb3ab8af580a11e" dependencies = [ "crc32fast", "indexmap", "memchr", + "nix", "typed-path", ] diff --git a/crates/ffai-argus-wasm/Cargo.toml b/crates/ffai-argus-wasm/Cargo.toml index eb94129..4d4b11a 100644 --- a/crates/ffai-argus-wasm/Cargo.toml +++ b/crates/ffai-argus-wasm/Cargo.toml @@ -36,7 +36,7 @@ wasm-bindgen = "=0.2.121" # pinned to the installed wasm-bindgen-cli; the two # feeding an autoregressive decoder with a growing KV cache — so # `--no-default-features` keeps the dlmalloc arm buildable for whoever takes # that measurement. -rusty_alloc-api = { version = "=2.2.5", optional = true } +rusty_alloc-api = { version = "=2.2.6", optional = true } # The gemm SIMD A/B, off by default. `gemm` is already in the tree beneath # candle; this makes its runtime switch reachable so a browser can measure diff --git a/crates/ffai-argus/Cargo.toml b/crates/ffai-argus/Cargo.toml index 53b4ce5..4908e4c 100644 --- a/crates/ffai-argus/Cargo.toml +++ b/crates/ffai-argus/Cargo.toml @@ -63,7 +63,7 @@ getrandom = { version = "0.3", features = ["wasm_js"] } # places: a SigLIP/Llama forward allocates a 47 MB score tensor per layer, and # 47 MB is above the threshold where most allocators stop pooling and go # straight to the OS. See `examples/alloc_ab.rs`. -rusty_alloc-api = "=2.2.5" +rusty_alloc-api = "=2.2.6" # The step-3 oracle test reads the reference dump's summary.json. serde_json = { workspace = true } diff --git a/crates/ffai-carmenta-wasm/Cargo.toml b/crates/ffai-carmenta-wasm/Cargo.toml index 7d49ea1..2518e4b 100644 --- a/crates/ffai-carmenta-wasm/Cargo.toml +++ b/crates/ffai-carmenta-wasm/Cargo.toml @@ -37,13 +37,13 @@ serde-wasm-bindgen = "0.6" # rusty_alloc at parity with dlmalloc on Diana's workload. Carmenta's # allocation pattern is different (many small line crops rather than one big # tensor chain), so the answer here is its own open measurement. -rusty_alloc-api = { version = "=2.2.5", optional = true } +rusty_alloc-api = { version = "=2.2.6", optional = true } # The allocator CORE, for `arena::reserve_os_memory_ex`. `rusty_alloc-api` is # the mi_*-compatible surface and does not re-export the arena module, but on # wasm the arena is the ONLY layer that recycles a freed segment — `prim::free` # is a no-op there because linear memory cannot shrink. Same version as the # api crate, so this adds no second copy of the allocator. -rusty_alloc = { version = "=2.2.5", optional = true } +rusty_alloc = { version = "=2.2.6", optional = true } [features] # **`rusty_alloc`, and the "open measurement" this comment used to ask for has diff --git a/crates/ffai-carmenta/Cargo.toml b/crates/ffai-carmenta/Cargo.toml index f7aad95..1816bfc 100644 --- a/crates/ffai-carmenta/Cargo.toml +++ b/crates/ffai-carmenta/Cargo.toml @@ -84,7 +84,7 @@ tokenizers = { version = "0.23", default-features = false, features = ["unstable mimalloc = { version = "0.1", default-features = false } # Superseded as the default by the pure-Rust remake; see the allocator # doc comment in `ffai-cli/src/main.rs` for the measurement. -rusty_alloc-api = "=2.2.5" +rusty_alloc-api = "=2.2.6" ffai-media = { path = "../ffai-media" } ffai-bench = { path = "../ffai-bench" } diff --git a/crates/ffai-cli/Cargo.toml b/crates/ffai-cli/Cargo.toml index f0ae1f6..ce647c9 100644 --- a/crates/ffai-cli/Cargo.toml +++ b/crates/ffai-cli/Cargo.toml @@ -64,10 +64,10 @@ mimalloc = { version = "0.1", default-features = false, optional = true } # It reproduced in the CLI (which declares this allocator) and never in an # example (which declared none and got the system one), and that difference is # what finally identified it. -rusty_alloc-api = "=2.2.5" +rusty_alloc-api = "=2.2.6" # The core, for `alloc::collect` — see `spawn_page_trimmer` in main.rs. # Without it rusty_alloc's RSS does not bound on a rayon pool. -rusty_alloc = "=2.2.5" +rusty_alloc = "=2.2.6" clap = { workspace = true } [features] diff --git a/crates/ffai-diana/Cargo.toml b/crates/ffai-diana/Cargo.toml index 3eb26d2..5d1aeee 100644 --- a/crates/ffai-diana/Cargo.toml +++ b/crates/ffai-diana/Cargo.toml @@ -66,10 +66,10 @@ libmimalloc-sys = { version = "0.1", default-features = false } # margin the largest single effect in the Diana latency campaign (1.64x), so # it is simultaneously the dependency we most want to drop and the one that # costs the most to drop wrongly. -rusty_alloc-api = "=2.2.5" +rusty_alloc-api = "=2.2.6" # The core, for `alloc::collect` — the reclaim `examples/scaling.rs` drives. # `rusty_alloc-api` deliberately exposes collect only per-`Heap`. -rusty_alloc = "=2.2.5" +rusty_alloc = "=2.2.6" ffai-media = { path = "../ffai-media" } ffai-bench = { path = "../ffai-bench" } diff --git a/crates/ffai-mercury-wasm/Cargo.toml b/crates/ffai-mercury-wasm/Cargo.toml index ef334ce..0d4a7d1 100644 --- a/crates/ffai-mercury-wasm/Cargo.toml +++ b/crates/ffai-mercury-wasm/Cargo.toml @@ -38,7 +38,7 @@ wasm-bindgen = "=0.2.121" # pinned to the installed wasm-bindgen-cli; the two # Mercury's allocation pattern is its own question — one long encoder/decoder # chain rather than many small crops — so `--no-default-features` keeps the # dlmalloc arm buildable for whoever takes that measurement. -rusty_alloc-api = { version = "=2.2.5", optional = true } +rusty_alloc-api = { version = "=2.2.6", optional = true } [features] default = ["rusty-alloc"] diff --git a/crates/ffai-wasm/Cargo.toml b/crates/ffai-wasm/Cargo.toml index 4124f6a..9e39d6a 100644 --- a/crates/ffai-wasm/Cargo.toml +++ b/crates/ffai-wasm/Cargo.toml @@ -27,7 +27,7 @@ wasm-bindgen = "=0.2.121" # pinned to the installed wasm-bindgen-cli; the two # pre-reservation is disabled there, because wasm `memory.grow` is never # returned to the host). Whether it beats dlmalloc on THIS workload is a # measurement we can now run, which is the point of having a cdylib at all. -rusty_alloc-api = { version = "=2.2.5", optional = true } +rusty_alloc-api = { version = "=2.2.6", optional = true } [features] # `rusty_alloc` is the default; `--no-default-features` leaves the target's own diff --git a/supply-chain/config.toml b/supply-chain/config.toml index 65b3650..6f332c1 100644 --- a/supply-chain/config.toml +++ b/supply-chain/config.toml @@ -156,11 +156,11 @@ version = "1.11.0" criteria = "safe-to-deploy" [[exemptions.candle-core]] -version = "0.11.0@git:fa366d84d12c5732cbc34c973fe92b8f480bfdbe" +version = "0.11.0@git:8fe731857d67f5fe83ee6fa717e0d549ec6827d3" criteria = "safe-to-deploy" [[exemptions.candle-kernels]] -version = "0.11.0@git:fa366d84d12c5732cbc34c973fe92b8f480bfdbe" +version = "0.11.0@git:8fe731857d67f5fe83ee6fa717e0d549ec6827d3" criteria = "safe-to-deploy" [[exemptions.candle-metal-kernels]] @@ -168,7 +168,7 @@ version = "0.11.0" criteria = "safe-to-deploy" [[exemptions.candle-metal-kernels]] -version = "0.11.0@git:fa366d84d12c5732cbc34c973fe92b8f480bfdbe" +version = "0.11.0@git:8fe731857d67f5fe83ee6fa717e0d549ec6827d3" criteria = "safe-to-deploy" [[exemptions.candle-nn]] @@ -180,7 +180,7 @@ version = "0.11.0" criteria = "safe-to-deploy" [[exemptions.candle-ug]] -version = "0.11.0@git:fa366d84d12c5732cbc34c973fe92b8f480bfdbe" +version = "0.11.0@git:8fe731857d67f5fe83ee6fa717e0d549ec6827d3" criteria = "safe-to-deploy" [[exemptions.castaway]] @@ -731,6 +731,10 @@ criteria = "safe-to-deploy" version = "0.16.1" criteria = "safe-to-deploy" +[[exemptions.nix]] +version = "0.31.3" +criteria = "safe-to-deploy" + [[exemptions.nom]] version = "8.0.0" criteria = "safe-to-deploy" @@ -852,7 +856,7 @@ version = "0.11.11" criteria = "safe-to-deploy" [[exemptions.quinn-proto]] -version = "0.11.16" +version = "0.11.19" criteria = "safe-to-deploy" [[exemptions.r-efi]] @@ -908,35 +912,35 @@ version = "0.5.2" criteria = "safe-to-deploy" [[exemptions.rff-codec]] -version = "0.2.0" +version = "0.2.4" criteria = "safe-to-deploy" [[exemptions.rff-core]] -version = "0.2.1" +version = "0.2.4" criteria = "safe-to-deploy" [[exemptions.rff-format]] -version = "0.2.1" +version = "0.2.4" criteria = "safe-to-deploy" [[exemptions.rff-format-avi]] -version = "0.2.0" +version = "0.2.4" criteria = "safe-to-deploy" [[exemptions.rff-format-mkv]] -version = "0.2.1" +version = "0.2.4" criteria = "safe-to-deploy" [[exemptions.rff-format-mp4]] -version = "0.2.1" +version = "0.2.4" criteria = "safe-to-deploy" [[exemptions.rff-format-ts]] -version = "0.2.1" +version = "0.2.4" criteria = "safe-to-deploy" [[exemptions.rff-subtitle]] -version = "0.2.0" +version = "0.2.4" criteria = "safe-to-deploy" [[exemptions.ring]] @@ -980,11 +984,11 @@ version = "0.3.1" criteria = "safe-to-run" [[exemptions.rusty_alloc]] -version = "2.2.5" +version = "2.2.6" criteria = "safe-to-deploy" [[exemptions.rusty_alloc-api]] -version = "2.2.5" +version = "2.2.6" criteria = "safe-to-deploy" [[exemptions.rusty_expressions]] @@ -1012,7 +1016,7 @@ version = "0.16.0" criteria = "safe-to-deploy" [[exemptions.rusty_jpeg]] -version = "0.4.1" +version = "0.4.3" criteria = "safe-to-deploy" [[exemptions.rusty_json_turbo]] @@ -1368,7 +1372,7 @@ version = "1.9.0" criteria = "safe-to-deploy" [[exemptions.zip]] -version = "8.6.0" +version = "9.0.5" criteria = "safe-to-deploy" [[exemptions.zlib-rs]] diff --git a/supply-chain/imports.lock b/supply-chain/imports.lock index 20231e9..f1880a6 100644 --- a/supply-chain/imports.lock +++ b/supply-chain/imports.lock @@ -1526,6 +1526,11 @@ criteria = "safe-to-deploy" delta = "0.3.0 -> 0.4.0" notes = "Minor updates for a new `rand` crate version, nothing awry." +[[audits.bytecode-alliance.audits.rustls]] +who = "Pat Hickey " +criteria = "safe-to-deploy" +delta = "0.23.45 -> 0.23.46" + [[audits.bytecode-alliance.audits.semver]] who = "Pat Hickey " criteria = "safe-to-deploy"