Skip to content

chore: migrate embedded-services pins from v0.2.0 to main #23

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Open
dymk wants to merge 1 commit into
base: main
Choose a base branch
from
Open

chore: migrate embedded-services pins from v0.2.0 to main #23

Show file tree
Hide file tree
Changes from all commits
Commits
Show all changes
1 commit
Select commit
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
42 changes: 25 additions & 17 deletions platform/dev-imxrt/Cargo.lock
View file
Open in desktop

Some generated files are not rendered by default. Learn more about how customized files appear on GitHub.

2 changes: 1 addition & 1 deletion platform/dev-imxrt/Cargo.toml
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -55,7 +55,7 @@ embassy-imxrt = { git = "https://github.com/OpenDevicePartnership/embassy-imxrt"
"time",
"mimxrt685s",
] }
uart-service = { git = "https://github.com/OpenDevicePartnership/embedded-services", branch = "v0.2.0", features = [
uart-service = { git = "https://github.com/OpenDevicePartnership/embedded-services", branch = "main", features = [
"defmt",
] }
static_cell = "2.1.0"
Expand Down
24 changes: 0 additions & 24 deletions platform/dev-imxrt/supply-chain/config.toml
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -35,10 +35,6 @@ criteria = "safe-to-deploy"
version = "1.25.0"
criteria = "safe-to-deploy"

[[exemptions.cc]]
version = "1.2.59"
criteria = "safe-to-deploy"

[[exemptions.cc]]
version = "1.2.62"
criteria = "safe-to-deploy"
Expand Down Expand Up @@ -71,14 +67,6 @@ criteria = "safe-to-deploy"
version = "0.4.2"
criteria = "safe-to-deploy"

[[exemptions.device-driver]]
version = "1.0.8"
criteria = "safe-to-deploy"

[[exemptions.device-driver]]
version = "1.0.9"
criteria = "safe-to-deploy"

[[exemptions.document-features]]
version = "0.2.12"
criteria = "safe-to-deploy"
Expand Down Expand Up @@ -135,10 +123,6 @@ criteria = "safe-to-deploy"
version = "1.0.1"
criteria = "safe-to-deploy"

[[exemptions.libc]]
version = "0.2.184"
criteria = "safe-to-deploy"

[[exemptions.libc]]
version = "0.2.186"
criteria = "safe-to-deploy"
Expand Down Expand Up @@ -191,10 +175,6 @@ criteria = "safe-to-deploy"
version = "1.2.1"
criteria = "safe-to-deploy"

[[exemptions.subenum]]
version = "1.1.3"
criteria = "safe-to-deploy"

[[exemptions.subenum]]
version = "1.2.0"
criteria = "safe-to-deploy"
Expand Down Expand Up @@ -227,10 +207,6 @@ criteria = "safe-to-deploy"
version = "0.3.23"
criteria = "safe-to-deploy"

[[exemptions.typenum]]
version = "1.19.0"
criteria = "safe-to-deploy"

[[exemptions.typenum]]
version = "1.20.0"
criteria = "safe-to-deploy"
Expand Down
60 changes: 6 additions & 54 deletions platform/dev-imxrt/supply-chain/imports.lock
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -93,24 +93,18 @@ version = "0.3.100"
notes = "Compatibility shim: no_std crate that re-exports defmt 1.x items for 0.3 API compatibility. No unsafe code, no build script, no powerful imports, no logic - pure pub-use re-exports. Assisted-by: copilot-cli:claude-opus-4.6 cargo-vet"
aggregated-from = "https://raw.githubusercontent.com/OpenDevicePartnership/embedded-services/refs/heads/main/supply-chain/audits.toml"

[[audits.OpenDevicePartnership.audits.defmt]]
who = "Felipe Balbi <felipe.balbi@microsoft.com>"
criteria = "safe-to-deploy"
version = "1.0.1"
aggregated-from = "https://raw.githubusercontent.com/OpenDevicePartnership/mcxa-pac/refs/heads/main/supply-chain/audits.toml"

[[audits.OpenDevicePartnership.audits.defmt-macros]]
who = "Felipe Balbi <felipe.balbi@microsoft.com>"
criteria = "safe-to-deploy"
version = "1.0.1"
aggregated-from = "https://raw.githubusercontent.com/OpenDevicePartnership/mcxa-pac/refs/heads/main/supply-chain/audits.toml"

[[audits.OpenDevicePartnership.audits.defmt-parser]]
who = "Felipe Balbi <felipe.balbi@microsoft.com>"
criteria = "safe-to-deploy"
version = "1.0.0"
aggregated-from = "https://raw.githubusercontent.com/OpenDevicePartnership/mcxa-pac/refs/heads/main/supply-chain/audits.toml"

[[audits.OpenDevicePartnership.audits.device-driver]]
who = "Felipe Balbi <febalbi@microsoft.com>"
criteria = "safe-to-deploy"
version = "1.0.9"
aggregated-from = "https://raw.githubusercontent.com/OpenDevicePartnership/tps6699x/refs/heads/main/supply-chain/audits.toml"

[[audits.OpenDevicePartnership.audits.embassy-embedded-hal]]
who = "Jerry Xie <jerryxie@microsoft.com>"
criteria = "safe-to-deploy"
Expand Down Expand Up @@ -315,20 +309,6 @@ version = "0.3.1"
notes = "no_std 32-bit hashing (FNV, MurmurHash3). ~10 unsafe blocks in murmur3.rs for MaybeUninit buffer handling - all sound. Assisted-by: copilot-cli:claude-opus-4.6 cargo-vet"
aggregated-from = "https://raw.githubusercontent.com/OpenDevicePartnership/embedded-services/refs/heads/main/supply-chain/audits.toml"

[[audits.OpenDevicePartnership.audits.heapless]]
who = "Jerry Xie <jerryxie@microsoft.com>"
criteria = "safe-to-deploy"
version = "0.8.0"
notes = "no_std fixed-capacity data structures. Extensive unsafe for MaybeUninit buffer management, lock-free queues (Vyukov MPMC, SPSC), and Treiber stack memory pools with ABA prevention. Patterns mirror std or published algorithms. Build script probes for atomic/LLSC support. Assisted-by: copilot-cli:claude-opus-4.6 cargo-vet"
aggregated-from = "https://raw.githubusercontent.com/OpenDevicePartnership/embedded-services/refs/heads/main/supply-chain/audits.toml"

[[audits.OpenDevicePartnership.audits.heapless]]
who = "Jerry Xie <jerryxie@microsoft.com>"
criteria = "safe-to-deploy"
version = "0.9.2"
notes = "no_std fixed-capacity data structures. Extensive unsafe for MaybeUninit buffers, lock-free queues (Vyukov MPMC, SPSC), Treiber stack pools with ABA prevention (CAS tagged pointers + ARM LLSC). All Send/Sync bounds verified correct. Build script probes for ARM LLSC. Assisted-by: copilot-cli:claude-opus-4.6 cargo-vet"
aggregated-from = "https://raw.githubusercontent.com/OpenDevicePartnership/embedded-services/refs/heads/main/supply-chain/audits.toml"

[[audits.OpenDevicePartnership.audits.heck]]
who = "Matteo Tullo <matteotullo@microsoft.com>"
criteria = "safe-to-deploy"
Expand Down Expand Up @@ -667,34 +647,6 @@ version = "1.5.0"
notes = "Unsafe review in https://crrev.com/c/5838022"
aggregated-from = "https://chromium.googlesource.com/chromium/src/+/main/third_party/rust/chromium_crates_io/supply-chain/audits.toml?format=TEXT"

[[audits.google.audits.either]]
who = "Manish Goregaokar <manishearth@google.com>"
criteria = "safe-to-deploy"
version = "1.13.0"
notes = "Unsafe code pertaining to wrapping Pin APIs. Mostly passes invariants down."
aggregated-from = "https://chromium.googlesource.com/chromium/src/+/main/third_party/rust/chromium_crates_io/supply-chain/audits.toml?format=TEXT"

[[audits.google.audits.either]]
who = "Daniel Cheng <dcheng@chromium.org>"
criteria = "safe-to-deploy"
delta = "1.13.0 -> 1.14.0"
notes = """
Inheriting ub-risk-1 from the baseline review of 1.13.0. While the delta has some diffs in unsafe code, they are either:
- migrating code to use helper macros
- migrating match patterns to take advantage of default bindings mode from RFC 2005
Either way, the result is code that does exactly the same thing and does not change the risk of UB.

See https://crrev.com/c/6323164 for more audit details.
"""
aggregated-from = "https://chromium.googlesource.com/chromium/src/+/main/third_party/rust/chromium_crates_io/supply-chain/audits.toml?format=TEXT"

[[audits.google.audits.either]]
who = "Lukasz Anforowicz <lukasza@chromium.org>"
criteria = "safe-to-deploy"
delta = "1.14.0 -> 1.15.0"
notes = 'The delta in `lib.rs` only tweaks doc comments and `#[cfg(feature = "std")]`.'
aggregated-from = "https://chromium.googlesource.com/chromium/src/+/main/third_party/rust/chromium_crates_io/supply-chain/audits.toml?format=TEXT"

[[audits.google.audits.lazy_static]]
who = "Lukasz Anforowicz <lukasza@chromium.org>"
criteria = "safe-to-deploy"
Expand Down
Loading
Loading