Magic-Mirror/gecko-dev
1
0
Fork 0
mirror of https://github.com/mozilla/gecko-dev.git synced 2025-03-02 06:22:20 +00:00
Code Issues Actions Packages Projects Releases Wiki Activity

Bug 1858305 - Fix supply-chain audits. a=bholley

Browse Source 
See bug 1864816.

MANUAL PUSH: Manual fix-up to fix developer tooling.
This commit is contained in:
Emilio Cobos Álvarez 2023-11-15 10:50:02 +01:00
parent 72853c5b0e
commit 5d51c81f0e
2 changed files with 20 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

12
supply-chain/audits.toml
View File

@ -1007,6 +1007,12 @@ Mozilla authored. Breaking changes from 0.32 involve splitting color APIs into
their own crate and removing an unused line number offset mechanism.
"""
[[audits.cssparser]]
who = "Emilio Cobos Álvarez <emilio@crisal.io>"
criteria = "safe-to-deploy"
delta = "0.33.0 -> 0.33.0@git:aaa966d9d6ae70c4b8a62bb5e3a14c068bb7dff0"
notes = "Only one minimal change exposing a previously-private enumeration."
[[audits.cssparser-color]]
who = "Emilio Cobos Álvarez <emilio@crisal.io>"
criteria = "safe-to-deploy"
@ -1027,6 +1033,12 @@ who = "Mike Hommey <mh+mozilla@glandium.org>"
criteria = "safe-to-deploy"
delta = "0.6.0 -> 0.6.1"
[[audits.cssparser-macros]]
who = "Emilio Cobos Álvarez <emilio@crisal.io>"
criteria = "safe-to-deploy"
delta = "0.6.1 -> 0.6.1@git:aaa966d9d6ae70c4b8a62bb5e3a14c068bb7dff0"
notes = "No changes from already-certified upstream, but needed because it lives in the same git repo as the cssparser crate."
[[audits.cstr]]
who = "Emilio Cobos Álvarez <emilio@crisal.io>"
criteria = "safe-to-deploy"

8
supply-chain/config.toml
View File

@ -39,6 +39,14 @@ notes = "This is a pinned version of the upstream code, presumably to get a fix
audit-as-crates-io = true
notes = "This is upstream plus a warning fix from bug 1823866."
[policy.cssparser]
audit-as-crates-io = true
notes = "Upstream release plus a couple unpublished changes"
[policy.cssparser-macros]
audit-as-crates-io = true
notes = "Upstream release plus a couple unpublished changes"
[policy.d3d12]
audit-as-crates-io = true
notes = "Part of the wgpu repository, pinned as the rest of wgpu crates."