aboutsummaryrefslogtreecommitdiffstats
path: root/deny.toml
Commit message (Collapse)AuthorAgeFilesLines
* Ignore RUSTSEC-2024-0436 (crate `paste` is unmaintained) (#35854)Oriol Brufau2025-03-071-0/+3
| | | Signed-off-by: Oriol Brufau <obrufau@igalia.com>
* Remove tinyfiledialogs dependency (#35674)chickenleaf2025-02-271-1/+0
| | | Signed-off-by: L Ashwin B <lashwinib@gmail.com>
* chore: Update wgpu (#35503)Samson2025-02-161-0/+1
| | | | | | | | | | | | | | | | | | * Update wgpu https://github.com/gfx-rs/wgpu/commit/d8833d079833c62b4fd00325d0ba08ec0c8bc309 Signed-off-by: sagudev <16504129+sagudev@users.noreply.github.com> * Update expectations Signed-off-by: sagudev <16504129+sagudev@users.noreply.github.com> * fix tidy Signed-off-by: sagudev <16504129+sagudev@users.noreply.github.com> --------- Signed-off-by: sagudev <16504129+sagudev@users.noreply.github.com>
* deps: Upgrade to `webrender@0.66` (#35325)Martin Robinson2025-02-071-4/+0
| | | | | | | | | In addition to some small API changes, this downstream version of WebRender no longer depends on a very old version of time. This is the last step toward removing the dependency on `time0.1`. The review for this commit should also include: https://github.com/servo/webrender/commit/9f552bebab81a73e62068c42d94be2f9c0586ce4 Signed-off-by: Martin Robinson <mrobinson@igalia.com>
* servoshell: upgrade egui and related depenencies (#35353)Mukilan Thiyagarajan2025-02-071-1/+5
| | | | | | Also fix build errors resulting from the use of the type `egui::Rounding` which is now renamed to `egui::CornerRadius`. Signed-off-by: Mukilan Thiyagarajan <mukilan@igalia.com>
* build(deps): bump string_cache from 0.8.7 to 0.8.8 (#35269)dependabot[bot]2025-02-061-4/+0
| | | | | | | | | | | | | | | | | Bumps [string_cache](https://github.com/servo/string-cache) from 0.8.7 to 0.8.8. - [Release notes](https://github.com/servo/string-cache/releases) - [Commits](https://github.com/servo/string-cache/commits) --- updated-dependencies: - dependency-name: string_cache dependency-type: direct:production update-type: version-update:semver-patch ... Fixes #31516. Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
* servoshell: Migrate to egui-file-dialog from tinyfiledialogs (#34823)chickenleaf2025-02-041-0/+6
| | | | | | This is the first step toward completely replacing tinyfiledialogs with an egui-based solution. Signed-off-by: L Ashwin B <lashwinib@gmail.com>
* Use aws-lc-rs as rust-tls provider (#35106)Jonathan Schwender2025-01-301-12/+3
| | | Signed-off-by: Jonathan Schwender <schwenderjonathan@gmail.com>
* Update all network-related dependencies to the latest versions (#34630)Josh Matthews2025-01-081-0/+8
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | * Update all network-related dependencies to the latest versions: * rustls * hyper * http * headers * tungstenite * async-tungstenite Signed-off-by: Josh Matthews <josh@joshmatthews.net> * net: Fix panics with 1xx responses in WPT tests. Signed-off-by: Josh Matthews <josh@joshmatthews.net> * net: Use reported response length when calculating available ranges. Signed-off-by: Josh Matthews <josh@joshmatthews.net> * net: Remove unreachable match arm. Signed-off-by: Josh Matthews <josh@joshmatthews.net> * net: Clean up commented fragments in blob and file handlers. Signed-off-by: Josh Matthews <josh@joshmatthews.net> * net: Remove unreachable match arm. Signed-off-by: Josh Matthews <josh@joshmatthews.net> * net: Fix clippy warning. Signed-off-by: Josh Matthews <josh@joshmatthews.net> * net: Cleanup. Signed-off-by: Josh Matthews <josh@joshmatthews.net> * net: Fix up unit tests for dependency upgrades. Signed-off-by: Josh Matthews <josh@joshmatthews.net> * Update aws-lc-sys to fix Windows builds. Signed-off-by: Josh Matthews <josh@joshmatthews.net> * net: Use ring instead of aws-lc-sys. Signed-off-by: Josh Matthews <josh@joshmatthews.net> * embedding: Require embedder to initialize a rustls CryptoProvider. Signed-off-by: Josh Matthews <josh@joshmatthews.net> * Disable aws-lc-rs pending OhOS build fixes. Signed-off-by: Josh Matthews <josh@joshmatthews.net> --------- Signed-off-by: Josh Matthews <josh@joshmatthews.net>
* Upgrade lib to 0.20 to fix RUSTSEC-2024-0429 (#34826)Simon Wülker2025-01-031-2/+0
| | | Signed-off-by: Simon Wülker <simon.wuelker@arcor.de>
* chore: Update wgpu (#34795)Samson2025-01-021-0/+4
| | | | | | | | | | | | | | | | | | | | * Update wgpu https://github.com/gfx-rs/wgpu/commit/0f5f0580e4cb2fd2feac0e8ed7e8d3050e4d9c93 Most notable change is https://github.com/gfx-rs/wgpu/pull/6785 Signed-off-by: sagudev <16504129+sagudev@users.noreply.github.com> * Remove silencing of wgpu logs I fixed this in upstream: https://github.com/gfx-rs/wgpu/pull/6817 Signed-off-by: Samson <16504129+sagudev@users.noreply.github.com> --------- Signed-off-by: sagudev <16504129+sagudev@users.noreply.github.com> Signed-off-by: Samson <16504129+sagudev@users.noreply.github.com>
* Whitelist RUSTSEC-2024-0429 to fix CI (#34765)Jonathan Schwender2024-12-231-0/+2
| | | | | Will be addressed in a follow-up issue Signed-off-by: Jonathan Schwender <schwenderjonathan@gmail.com>
* Update wgpu for supporting TextureView.usage (#34721)Samson2024-12-211-1/+0
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | * Update wgpu and add support for TextureView.usage https://github.com/gfx-rs/wgpu/commit/53f40794f275329a48efc7d1c637c91b8e51327d Signed-off-by: sagudev <16504129+sagudev@users.noreply.github.com> * Update expect Signed-off-by: sagudev <16504129+sagudev@users.noreply.github.com> * Disable wgpu logging Signed-off-by: sagudev <16504129+sagudev@users.noreply.github.com> * remove unused wgpu features Signed-off-by: sagudev <16504129+sagudev@users.noreply.github.com> * new expect Signed-off-by: sagudev <16504129+sagudev@users.noreply.github.com> * re Signed-off-by: sagudev <16504129+sagudev@users.noreply.github.com> * Update deny.toml Signed-off-by: Samson <16504129+sagudev@users.noreply.github.com> --------- Signed-off-by: sagudev <16504129+sagudev@users.noreply.github.com> Signed-off-by: Samson <16504129+sagudev@users.noreply.github.com>
* build(deps): bump content-security-policy from 0.5.2 to 0.5.3 (#34723)dependabot[bot]2024-12-211-0/+2
| | | | | | | | | | | | | | | | | | | | | | | | | | | | * build(deps): bump content-security-policy from 0.5.2 to 0.5.3 Bumps [content-security-policy](https://github.com/rust-ammonia/rust-content-security-policy) from 0.5.2 to 0.5.3. - [Release notes](https://github.com/rust-ammonia/rust-content-security-policy/releases) - [Changelog](https://github.com/rust-ammonia/rust-content-security-policy/blob/master/CHANGELOG.md) - [Commits](https://github.com/rust-ammonia/rust-content-security-policy/compare/v0.5.2...v0.5.3) --- updated-dependencies: - dependency-name: content-security-policy dependency-type: direct:production update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] <support@github.com> * Allow duplicate base64. Signed-off-by: Josh Matthews <josh@joshmatthews.net> --------- Signed-off-by: dependabot[bot] <support@github.com> Signed-off-by: Josh Matthews <josh@joshmatthews.net> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> Co-authored-by: Josh Matthews <josh@joshmatthews.net>
* build(deps): bump the egui-related group with 6 updates (#34647)dependabot[bot]2024-12-171-3/+0
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | * build(deps): bump the egui-related group with 6 updates Bumps the egui-related group with 6 updates: | Package | From | To | | --- | --- | --- | | [egui](https://github.com/emilk/egui) | `0.29.1` | `0.30.0` | | [egui_glow](https://github.com/emilk/egui) | `0.29.1` | `0.30.0` | | [egui-winit](https://github.com/emilk/egui) | `0.29.1` | `0.30.0` | | [ecolor](https://github.com/emilk/egui) | `0.29.1` | `0.30.0` | | [emath](https://github.com/emilk/egui) | `0.29.1` | `0.30.0` | | [epaint](https://github.com/emilk/egui) | `0.29.1` | `0.30.0` | Updates `egui` from 0.29.1 to 0.30.0 - [Release notes](https://github.com/emilk/egui/releases) - [Changelog](https://github.com/emilk/egui/blob/master/CHANGELOG.md) - [Commits](https://github.com/emilk/egui/commits) Updates `egui_glow` from 0.29.1 to 0.30.0 - [Release notes](https://github.com/emilk/egui/releases) - [Changelog](https://github.com/emilk/egui/blob/master/CHANGELOG.md) - [Commits](https://github.com/emilk/egui/commits) Updates `egui-winit` from 0.29.1 to 0.30.0 - [Release notes](https://github.com/emilk/egui/releases) - [Changelog](https://github.com/emilk/egui/blob/master/CHANGELOG.md) - [Commits](https://github.com/emilk/egui/commits) Updates `ecolor` from 0.29.1 to 0.30.0 - [Release notes](https://github.com/emilk/egui/releases) - [Changelog](https://github.com/emilk/egui/blob/master/CHANGELOG.md) - [Commits](https://github.com/emilk/egui/commits) Updates `emath` from 0.29.1 to 0.30.0 - [Release notes](https://github.com/emilk/egui/releases) - [Changelog](https://github.com/emilk/egui/blob/master/CHANGELOG.md) - [Commits](https://github.com/emilk/egui/commits) Updates `epaint` from 0.29.1 to 0.30.0 - [Release notes](https://github.com/emilk/egui/releases) - [Changelog](https://github.com/emilk/egui/blob/master/CHANGELOG.md) - [Commits](https://github.com/emilk/egui/commits) --- updated-dependencies: - dependency-name: egui dependency-type: direct:production update-type: version-update:semver-minor dependency-group: egui-related - dependency-name: egui_glow dependency-type: direct:production update-type: version-update:semver-minor dependency-group: egui-related - dependency-name: egui-winit dependency-type: direct:production update-type: version-update:semver-minor dependency-group: egui-related - dependency-name: ecolor dependency-type: indirect update-type: version-update:semver-minor dependency-group: egui-related - dependency-name: emath dependency-type: indirect update-type: version-update:semver-minor dependency-group: egui-related - dependency-name: epaint dependency-type: indirect update-type: version-update:semver-minor dependency-group: egui-related ... Signed-off-by: dependabot[bot] <support@github.com> * bump glow in servoshell to mach egui_glow Signed-off-by: Mukilan Thiyagarajan <mukilan@igalia.com> * remove glow from deny.toml Signed-off-by: Mukilan Thiyagarajan <mukilan@igalia.com> --------- Signed-off-by: dependabot[bot] <support@github.com> Signed-off-by: Mukilan Thiyagarajan <mukilan@igalia.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> Co-authored-by: Mukilan Thiyagarajan <mukilan@igalia.com>
* Bump bindgen to 0.71.1 (#34562)Jonathan Schwender2024-12-161-0/+3
| | | | | | | | | | | | | | | | | | | * Bump bindgen to 0.71.1 Signed-off-by: Jonathan Schwender <schwenderjonathan@gmail.com> * Set SCCACHE_GHA_VERSION to allow purging cache changing the version allows us to purge the cache. Signed-off-by: Jonathan Schwender <schwenderjonathan@gmail.com> * android CI: Enable sccache again Signed-off-by: Jonathan Schwender <schwenderjonathan@gmail.com> --------- Signed-off-by: Jonathan Schwender <schwenderjonathan@gmail.com>
* Update wgpu to trunk (#34607)Samson2024-12-131-1/+1
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | * Update wgpu https://github.com/gfx-rs/wgpu/commit/8f82992b9fa0fd71c19a4f5c2d8e2512ef22c010 Signed-off-by: sagudev <16504129+sagudev@users.noreply.github.com> * fix warnings Signed-off-by: sagudev <16504129+sagudev@users.noreply.github.com> * Update expectations Signed-off-by: sagudev <16504129+sagudev@users.noreply.github.com> * re Signed-off-by: sagudev <16504129+sagudev@users.noreply.github.com> * re Signed-off-by: sagudev <16504129+sagudev@users.noreply.github.com> * Allow git source for gfx-rs Signed-off-by: sagudev <16504129+sagudev@users.noreply.github.com> --------- Signed-off-by: sagudev <16504129+sagudev@users.noreply.github.com>
* tidy: Use more `cargo-deny` features (#34447)Martin Robinson2024-12-131-21/+85
| | | | | | | | | | | | Instead of parsing the `Cargo.lock` file directly in `tidy.py`. Use `cargo-deny`, which we already use to detect unapproved licenses in the dependency chain to detect duplicate and banned crates. In addition, enable all other `cargo-deny` checks and add exceptions where necessary for them. This depends on the latest release of `cargo-deny` which depends on a recent verison of `rust`. Fixes #34393. Signed-off-by: Martin Robinson <mrobinson@igalia.com>
* Upgrade to `egui@0.29.1` and `winit@0.30.5` (#33751)Gae242024-10-101-0/+2
| | | | | | | | | | | | | | | | | | | | | | | | | | | * update egui dependencies Signed-off-by: Gae24 <96017547+Gae24@users.noreply.github.com> * update glow to 0.14.1 Signed-off-by: Gae24 <96017547+Gae24@users.noreply.github.com> * update winit to 0.30.5 Signed-off-by: Gae24 <96017547+Gae24@users.noreply.github.com> * update servo-tidy.toml Signed-off-by: Gae24 <96017547+Gae24@users.noreply.github.com> * Use more imports to avoid qualified usage, fix build, and silence warnings about deprecated methods Signed-off-by: Martin Robinson <mrobinson@igalia.com> --------- Signed-off-by: Gae24 <96017547+Gae24@users.noreply.github.com> Signed-off-by: Martin Robinson <mrobinson@igalia.com> Co-authored-by: Martin Robinson <mrobinson@igalia.com>
* Add cargo-deny to mach-tidy to check license compliance. (#32465)Jonathan Schwender2024-06-121-0/+91
* Use cargo-deny to check license compliance. All licenses should be MPL-2.0 or weaker. * Run cargo-deny check licenses in mach tidy * fmt * Fix inverted boolean * Move cargo deny to tidy.py * Add quotes around license in error message * Integrate `cargo-deny` into tidy fully * Fix script tests --------- Co-authored-by: Martin Robinson <mrobinson@igalia.com>
generated by cgit v1.2.3 (git 2.25.1) at 2025-04-22 18:18:42 +0000