From f3291fdab6282051a687874062616323ff376e98 Mon Sep 17 00:00:00 2001 From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com> Date: Mon, 14 Sep 2026 09:37:19 +0000 Subject: [PATCH 1/2] chore(deps): bump turso_core from 0.8.0-pre.8 to 0.8.0-pre.10 Bumps [turso_core](https://github.com/tursodatabase/turso) from 0.8.0-pre.8 to 0.8.0-pre.10. - [Release notes](https://github.com/tursodatabase/turso/releases) - [Changelog](https://github.com/tursodatabase/turso/blob/main/CHANGELOG.md) - [Commits](https://github.com/tursodatabase/turso/compare/v0.8.0-pre.8...v0.8.0-pre.10) --- updated-dependencies: - dependency-name: turso_core dependency-version: 0.8.0-pre.10 dependency-type: direct:production update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] --- Cargo.lock | 28 ++++++++++++++-------------- 1 file changed, 14 insertions(+), 14 deletions(-) diff --git a/Cargo.lock b/Cargo.lock index 87423b39..41d7b3ee 100644 --- a/Cargo.lock +++ b/Cargo.lock @@ -911,7 +911,7 @@ version = "3.1.1" source = "registry+https://github.com/rust-lang/crates.io-index" checksum = "faf9468729b8cbcea668e36183cb69d317348c2e08e994829fb56ebfdfbaac34" dependencies = [ - "windows-sys 0.61.2", + "windows-sys 0.52.0", ] [[package]] @@ -1475,7 +1475,7 @@ source = "registry+https://github.com/rust-lang/crates.io-index" checksum = "39cab71617ae0d63f51a36d69f866391735b51691dbda63cf6f96d042b63efeb" dependencies = [ "libc", - "windows-sys 0.61.2", + "windows-sys 0.52.0", ] [[package]] @@ -4468,7 +4468,7 @@ dependencies = [ "errno", "libc", "linux-raw-sys", - "windows-sys 0.61.2", + "windows-sys 0.52.0", ] [[package]] @@ -4526,7 +4526,7 @@ dependencies = [ "security-framework", "security-framework-sys", "webpki-root-certs", - "windows-sys 0.61.2", + "windows-sys 0.52.0", ] [[package]] @@ -5256,7 +5256,7 @@ dependencies = [ "getrandom 0.4.3", "once_cell", "rustix", - "windows-sys 0.61.2", + "windows-sys 0.52.0", ] [[package]] @@ -5585,9 +5585,9 @@ checksum = "e421abadd41a4225275504ea4d6566923418b7f05506fbc9c0fe86ba7396114b" [[package]] name = "turso_core" -version = "0.8.0-pre.8" +version = "0.8.0-pre.11" source = "registry+https://github.com/rust-lang/crates.io-index" -checksum = "8aa9df0e2dd9894ddc61cf6c35e0726f4fc26dd08c584afebd319c1969aaf504" +checksum = "6bf193fe886c15bb3466800b159e80e558b06e44fab96d796c2584334d80f679" dependencies = [ "aegis", "aes 0.8.4", @@ -5657,9 +5657,9 @@ dependencies = [ [[package]] name = "turso_ext" -version = "0.8.0-pre.8" +version = "0.8.0-pre.11" source = "registry+https://github.com/rust-lang/crates.io-index" -checksum = "a27e351e5f30b21d186a62895761a59a944e209111ea7ba84bf8c611068d87fc" +checksum = "f01dfa5cc29747c04cae1f76257d1252b5631b4160dd905481abd0aef70dd42f" dependencies = [ "chrono", "getrandom 0.4.3", @@ -5668,9 +5668,9 @@ dependencies = [ [[package]] name = "turso_macros" -version = "0.8.0-pre.8" +version = "0.8.0-pre.11" source = "registry+https://github.com/rust-lang/crates.io-index" -checksum = "f5c30032b9cd45798d5ed012a3728d9cf4e39a8dbb7d820d82908facb4b665dc" +checksum = "a7d4b454ff6b89682e5e539ab554c1ead3037e898add8a7a339cce5219019f59" dependencies = [ "proc-macro2", "quote", @@ -5679,9 +5679,9 @@ dependencies = [ [[package]] name = "turso_parser" -version = "0.8.0-pre.8" +version = "0.8.0-pre.11" source = "registry+https://github.com/rust-lang/crates.io-index" -checksum = "6823c91624d12ae67d6c6dfc819406a279265ca8879307f92c12d7de77bc6846" +checksum = "fd21798abc4af80114f4da13e5684e2a0c1a50feec3c55e115886701d4e9d3d1" dependencies = [ "bitflags 2.13.1", "memchr", @@ -6067,7 +6067,7 @@ version = "0.1.11" source = "registry+https://github.com/rust-lang/crates.io-index" checksum = "c2a7b1c03c876122aa43f3020e6c3c3ee5c05081c9a00739faf7503aeba10d22" dependencies = [ - "windows-sys 0.61.2", + "windows-sys 0.52.0", ] [[package]] From a6e9a2121878d20cd08c3dcb050779c33d40680e Mon Sep 17 00:00:00 2001 From: Mykhailo Chalyi Date: Tue, 15 Sep 2026 09:59:37 +0000 Subject: [PATCH 2/2] chore(deps): regenerate cargo-vet exemptions for turso 0.8.0-pre.11 The bump moved the four turso crates to versions with no cargo-vet entry, so `cargo vet --locked` failed the Audit job with 4 unvetted dependencies. Regenerate the exemption set to match the lockfile; this also prunes the stale internal-russh-num-bigint exemption for a crate no longer in the tree. --- supply-chain/config.toml | 12 ++++-------- supply-chain/imports.lock | 14 -------------- 2 files changed, 4 insertions(+), 22 deletions(-) diff --git a/supply-chain/config.toml b/supply-chain/config.toml index 379ceff9..34bb415e 100644 --- a/supply-chain/config.toml +++ b/supply-chain/config.toml @@ -885,10 +885,6 @@ criteria = "safe-to-deploy" version = "1.48.0" criteria = "safe-to-run" -[[exemptions.internal-russh-num-bigint]] -version = "0.5.0" -criteria = "safe-to-deploy" - [[exemptions.interpolator]] version = "0.5.0" criteria = "safe-to-deploy" @@ -2057,19 +2053,19 @@ version = "0.2.5" criteria = "safe-to-deploy" [[exemptions.turso_core]] -version = "0.8.0-pre.7" +version = "0.8.0-pre.11" criteria = "safe-to-deploy" [[exemptions.turso_ext]] -version = "0.8.0-pre.7" +version = "0.8.0-pre.11" criteria = "safe-to-deploy" [[exemptions.turso_macros]] -version = "0.8.0-pre.7" +version = "0.8.0-pre.11" criteria = "safe-to-deploy" [[exemptions.turso_parser]] -version = "0.8.0-pre.7" +version = "0.8.0-pre.11" criteria = "safe-to-deploy" [[exemptions.twox-hash]] diff --git a/supply-chain/imports.lock b/supply-chain/imports.lock index 905c2778..00a9330d 100644 --- a/supply-chain/imports.lock +++ b/supply-chain/imports.lock @@ -252,20 +252,6 @@ version = "11.1.5" notes = "Small random number generator, explicitly not cryptographically secure, no use of unsafe code, no dependencies" aggregated-from = "https://raw.githubusercontent.com/mozilla/glean/main/supply-chain/audits.toml" -[[audits.mozilla.audits.proc-macro-error-attr2]] -who = "Kagami Sascha Rosylight " -criteria = "safe-to-deploy" -version = "2.0.0" -notes = "No unsafe block." -aggregated-from = "https://hg.mozilla.org/mozilla-central/raw-file/tip/supply-chain/audits.toml" - -[[audits.mozilla.audits.proc-macro-error2]] -who = "Kagami Sascha Rosylight " -criteria = "safe-to-deploy" -version = "2.0.1" -notes = "No unsafe block with a lovely `#![forbid(unsafe_code)]`." -aggregated-from = "https://hg.mozilla.org/mozilla-central/raw-file/tip/supply-chain/audits.toml" - [[audits.mozilla.audits.simdutf8]] who = "Henri Sivonen " criteria = "safe-to-deploy"