From 24a02aabf82c0ff5604e143a280d93a3bb2a4cf1 Mon Sep 17 00:00:00 2001 From: Jose Storopoli Date: Fri, 29 Nov 2024 05:20:04 -0300 Subject: [PATCH 1/3] ci: FREE CARGO-AUDIT! Signed-off-by: Jose Storopoli --- .github/workflows/security.yml | 6 ++---- 1 file changed, 2 insertions(+), 4 deletions(-) diff --git a/.github/workflows/security.yml b/.github/workflows/security.yml index 7abcc216d..9f5f9cc2d 100644 --- a/.github/workflows/security.yml +++ b/.github/workflows/security.yml @@ -21,10 +21,8 @@ jobs: with: cache-on-failure: true - # HACK: v0.21.0 fails during dependency resolution. Remove when this is resolved - # https://github.com/rustsec/rustsec/issues/1249#issuecomment-2423257490 - - name: Install cargo-audit v0.20.0 - run: cargo install cargo-audit --version 0.20.0 --force + - name: Install cargo-audit + run: cargo install cargo-audit --force # HACK: not denying warnings as we depend on `yaml-rust` via `format-serde-error` which is unmaintained - name: Check for audit warnings From 34a660a5a84521c54613f7659f29144e4de8f3a1 Mon Sep 17 00:00:00 2001 From: Jose Storopoli Date: Fri, 29 Nov 2024 05:26:56 -0300 Subject: [PATCH 2/3] ci: add `--locked` to `cargo-audit` install Signed-off-by: Jose Storopoli --- .github/workflows/security.yml | 5 +++-- 1 file changed, 3 insertions(+), 2 deletions(-) diff --git a/.github/workflows/security.yml b/.github/workflows/security.yml index 9f5f9cc2d..293a3622b 100644 --- a/.github/workflows/security.yml +++ b/.github/workflows/security.yml @@ -22,9 +22,10 @@ jobs: cache-on-failure: true - name: Install cargo-audit - run: cargo install cargo-audit --force + run: cargo install --locked cargo-audit --force - # HACK: not denying warnings as we depend on `yaml-rust` via `format-serde-error` which is unmaintained + # HACK: not denying warnings as we depend on `yaml-rust` via `format-serde-error` + # which is unmaintained - name: Check for audit warnings run: cargo audit -D warnings continue-on-error: true From 710ced1d1240ac41a951ad26d77bc4b557eacc50 Mon Sep 17 00:00:00 2001 From: Jose Storopoli Date: Wed, 4 Dec 2024 14:39:36 -0300 Subject: [PATCH 3/3] chore: Cargo.lock version 4 Signed-off-by: Jose Storopoli --- Cargo.lock | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/Cargo.lock b/Cargo.lock index b3cdfe839..91274bcb0 100644 --- a/Cargo.lock +++ b/Cargo.lock @@ -1,6 +1,6 @@ # This file is automatically @generated by Cargo. # It is not intended for manual editing. -version = 3 +version = 4 [[package]] name = "Inflector"