commit 58ad13d4c79df829eec9e2cf168e72d563c86732
parent fce72e6749d65400027b15373ba5d33a7742ca97
Author: triesap <tyson@radroots.org>
Date: Thu, 13 Aug 2026 17:46:47 +0000
supply-chain: restore exact release qualification
- format the cargo-vet store with the pinned tool version
- qualify four exact dependency versions in the locked graph
- bind the new upstream unmaintained advisory to Nostr 0.45 removal
- enforce the closed exception set in release qualification
Diffstat:
4 files changed, 253 insertions(+), 220 deletions(-)
diff --git a/contracts/releases/supply_chain.toml b/contracts/releases/supply_chain.toml
@@ -33,6 +33,15 @@ mitigation = "radroots_transport_nostr canonicalizes every relay URL with url >=
remove_when = "nostr >=0.45.0 stable"
[[advisory_exception]]
+id = "RUSTSEC-2026-0243"
+package = "nostr-relay-pool"
+affected_version = "0.44.3"
+introduced_by = "nostr-sdk 0.44.1 and radroots_transport_nostr"
+classification = "unmaintained"
+mitigation = "The advisory reports no vulnerability; retain the locked release line only until the governed Nostr 0.45 migration."
+remove_when = "nostr >=0.45.0 stable"
+
+[[advisory_exception]]
id = "CARGO-YANKED-SPIN-0.9.8"
package = "spin"
affected_version = "0.9.8"
diff --git a/deny.toml b/deny.toml
@@ -16,6 +16,7 @@ all-features = true
ignore = [
"RUSTSEC-2024-0384", # `instant` is an unmaintained, non-vulnerability Nostr 0.44 dependency.
"RUSTSEC-2024-0421",
+ "RUSTSEC-2026-0243", # `nostr-relay-pool` is unmaintained and moves into `nostr-sdk` at 0.45.
]
[licenses]
diff --git a/supply-chain/config.toml b/supply-chain/config.toml
@@ -74,9 +74,9 @@ criteria = "secret-handling-reviewed"
[[exemptions.allocator-api2]]
version = "0.2.21"
criteria = [
- "crypto-reviewed",
- "network-parser-reviewed",
- "secret-handling-reviewed",
+ "crypto-reviewed",
+ "network-parser-reviewed",
+ "secret-handling-reviewed",
]
[[exemptions.android_system_properties]]
@@ -106,9 +106,9 @@ criteria = "safe-to-deploy"
[[exemptions.anyhow]]
version = "1.0.102"
criteria = [
- "crypto-reviewed",
- "network-parser-reviewed",
- "secret-handling-reviewed",
+ "crypto-reviewed",
+ "network-parser-reviewed",
+ "secret-handling-reviewed",
]
[[exemptions.apple-native-keyring-store]]
@@ -167,6 +167,10 @@ criteria = "secret-handling-reviewed"
version = "2.5.0"
criteria = "secret-handling-reviewed"
+[[exemptions.async-compat]]
+version = "0.2.5"
+criteria = "safe-to-deploy"
+
[[exemptions.async-executor]]
version = "1.14.0"
criteria = "secret-handling-reviewed"
@@ -282,17 +286,17 @@ criteria = "safe-to-deploy"
[[exemptions.bitflags]]
version = "2.11.0"
criteria = [
- "crypto-reviewed",
- "network-parser-reviewed",
- "secret-handling-reviewed",
+ "crypto-reviewed",
+ "network-parser-reviewed",
+ "secret-handling-reviewed",
]
[[exemptions.block-buffer]]
version = "0.10.4"
criteria = [
- "crypto-reviewed",
- "network-parser-reviewed",
- "secret-handling-reviewed",
+ "crypto-reviewed",
+ "network-parser-reviewed",
+ "secret-handling-reviewed",
]
[[exemptions.block-buffer]]
@@ -302,9 +306,9 @@ criteria = "safe-to-deploy"
[[exemptions.block-padding]]
version = "0.3.3"
criteria = [
- "crypto-reviewed",
- "network-parser-reviewed",
- "secret-handling-reviewed",
+ "crypto-reviewed",
+ "network-parser-reviewed",
+ "secret-handling-reviewed",
]
[[exemptions.blocking]]
@@ -318,9 +322,9 @@ criteria = "safe-to-deploy"
[[exemptions.bumpalo]]
version = "3.20.2"
criteria = [
- "crypto-reviewed",
- "network-parser-reviewed",
- "secret-handling-reviewed",
+ "crypto-reviewed",
+ "network-parser-reviewed",
+ "secret-handling-reviewed",
]
[[exemptions.bytecount]]
@@ -366,9 +370,9 @@ criteria = ["network-parser-reviewed", "secret-handling-reviewed"]
[[exemptions.cc]]
version = "1.2.57"
criteria = [
- "crypto-reviewed",
- "network-parser-reviewed",
- "secret-handling-reviewed",
+ "crypto-reviewed",
+ "network-parser-reviewed",
+ "secret-handling-reviewed",
]
[[exemptions.cexpr]]
@@ -378,9 +382,9 @@ criteria = "safe-to-deploy"
[[exemptions.cfg-if]]
version = "1.0.4"
criteria = [
- "crypto-reviewed",
- "network-parser-reviewed",
- "secret-handling-reviewed",
+ "crypto-reviewed",
+ "network-parser-reviewed",
+ "secret-handling-reviewed",
]
[[exemptions.cfg_aliases]]
@@ -406,9 +410,9 @@ criteria = "safe-to-deploy"
[[exemptions.cipher]]
version = "0.4.4"
criteria = [
- "crypto-reviewed",
- "network-parser-reviewed",
- "secret-handling-reviewed",
+ "crypto-reviewed",
+ "network-parser-reviewed",
+ "secret-handling-reviewed",
]
[[exemptions.clang-sys]]
@@ -474,9 +478,9 @@ criteria = "safe-to-deploy"
[[exemptions.cpufeatures]]
version = "0.2.17"
criteria = [
- "crypto-reviewed",
- "network-parser-reviewed",
- "secret-handling-reviewed",
+ "crypto-reviewed",
+ "network-parser-reviewed",
+ "secret-handling-reviewed",
]
[[exemptions.cpufeatures]]
@@ -518,9 +522,9 @@ criteria = "safe-to-deploy"
[[exemptions.crypto-common]]
version = "0.1.7"
criteria = [
- "crypto-reviewed",
- "network-parser-reviewed",
- "secret-handling-reviewed",
+ "crypto-reviewed",
+ "network-parser-reviewed",
+ "secret-handling-reviewed",
]
[[exemptions.crypto-common]]
@@ -578,9 +582,9 @@ criteria = "safe-to-deploy"
[[exemptions.digest]]
version = "0.10.7"
criteria = [
- "crypto-reviewed",
- "network-parser-reviewed",
- "secret-handling-reviewed",
+ "crypto-reviewed",
+ "network-parser-reviewed",
+ "secret-handling-reviewed",
]
[[exemptions.digest]]
@@ -666,9 +670,9 @@ criteria = "secret-handling-reviewed"
[[exemptions.equivalent]]
version = "1.0.2"
criteria = [
- "crypto-reviewed",
- "network-parser-reviewed",
- "secret-handling-reviewed",
+ "crypto-reviewed",
+ "network-parser-reviewed",
+ "secret-handling-reviewed",
]
[[exemptions.errno]]
@@ -718,9 +722,9 @@ criteria = "safe-to-deploy"
[[exemptions.find-msvc-tools]]
version = "0.1.9"
criteria = [
- "crypto-reviewed",
- "network-parser-reviewed",
- "secret-handling-reviewed",
+ "crypto-reviewed",
+ "network-parser-reviewed",
+ "secret-handling-reviewed",
]
[[exemptions.flatbuffers]]
@@ -742,17 +746,17 @@ criteria = "safe-to-deploy"
[[exemptions.foldhash]]
version = "0.1.5"
criteria = [
- "crypto-reviewed",
- "network-parser-reviewed",
- "secret-handling-reviewed",
+ "crypto-reviewed",
+ "network-parser-reviewed",
+ "secret-handling-reviewed",
]
[[exemptions.foldhash]]
version = "0.2.0"
criteria = [
- "crypto-reviewed",
- "network-parser-reviewed",
- "secret-handling-reviewed",
+ "crypto-reviewed",
+ "network-parser-reviewed",
+ "secret-handling-reviewed",
]
[[exemptions.foreign-types]]
@@ -830,25 +834,25 @@ criteria = ["network-parser-reviewed", "secret-handling-reviewed"]
[[exemptions.generic-array]]
version = "0.14.7"
criteria = [
- "crypto-reviewed",
- "network-parser-reviewed",
- "secret-handling-reviewed",
+ "crypto-reviewed",
+ "network-parser-reviewed",
+ "secret-handling-reviewed",
]
[[exemptions.getrandom]]
version = "0.2.17"
criteria = [
- "crypto-reviewed",
- "network-parser-reviewed",
- "secret-handling-reviewed",
+ "crypto-reviewed",
+ "network-parser-reviewed",
+ "secret-handling-reviewed",
]
[[exemptions.getrandom]]
version = "0.3.4"
criteria = [
- "crypto-reviewed",
- "network-parser-reviewed",
- "secret-handling-reviewed",
+ "crypto-reviewed",
+ "network-parser-reviewed",
+ "secret-handling-reviewed",
]
[[exemptions.getrandom]]
@@ -890,17 +894,17 @@ criteria = "safe-to-deploy"
[[exemptions.hashbrown]]
version = "0.15.5"
criteria = [
- "crypto-reviewed",
- "network-parser-reviewed",
- "secret-handling-reviewed",
+ "crypto-reviewed",
+ "network-parser-reviewed",
+ "secret-handling-reviewed",
]
[[exemptions.hashbrown]]
version = "0.16.1"
criteria = [
- "crypto-reviewed",
- "network-parser-reviewed",
- "secret-handling-reviewed",
+ "crypto-reviewed",
+ "network-parser-reviewed",
+ "secret-handling-reviewed",
]
[[exemptions.hashbrown]]
@@ -914,9 +918,9 @@ criteria = "safe-to-deploy"
[[exemptions.heck]]
version = "0.5.0"
criteria = [
- "crypto-reviewed",
- "network-parser-reviewed",
- "secret-handling-reviewed",
+ "crypto-reviewed",
+ "network-parser-reviewed",
+ "secret-handling-reviewed",
]
[[exemptions.hermit-abi]]
@@ -938,9 +942,9 @@ criteria = "secret-handling-reviewed"
[[exemptions.hmac]]
version = "0.12.1"
criteria = [
- "crypto-reviewed",
- "network-parser-reviewed",
- "secret-handling-reviewed",
+ "crypto-reviewed",
+ "network-parser-reviewed",
+ "secret-handling-reviewed",
]
[[exemptions.home]]
@@ -963,6 +967,10 @@ criteria = "safe-to-deploy"
version = "1.10.1"
criteria = "network-parser-reviewed"
+[[exemptions.httpdate]]
+version = "1.0.3"
+criteria = "safe-to-deploy"
+
[[exemptions.hybrid-array]]
version = "0.4.12"
criteria = "safe-to-deploy"
@@ -1018,9 +1026,9 @@ criteria = "network-parser-reviewed"
[[exemptions.id-arena]]
version = "2.3.0"
criteria = [
- "crypto-reviewed",
- "network-parser-reviewed",
- "secret-handling-reviewed",
+ "crypto-reviewed",
+ "network-parser-reviewed",
+ "secret-handling-reviewed",
]
[[exemptions.idna]]
@@ -1038,17 +1046,17 @@ criteria = "network-parser-reviewed"
[[exemptions.indexmap]]
version = "2.13.0"
criteria = [
- "crypto-reviewed",
- "network-parser-reviewed",
- "secret-handling-reviewed",
+ "crypto-reviewed",
+ "network-parser-reviewed",
+ "secret-handling-reviewed",
]
[[exemptions.inout]]
version = "0.1.4"
criteria = [
- "crypto-reviewed",
- "network-parser-reviewed",
- "secret-handling-reviewed",
+ "crypto-reviewed",
+ "network-parser-reviewed",
+ "secret-handling-reviewed",
]
[[exemptions.instant]]
@@ -1074,9 +1082,9 @@ criteria = "safe-to-deploy"
[[exemptions.itoa]]
version = "1.0.18"
criteria = [
- "crypto-reviewed",
- "network-parser-reviewed",
- "secret-handling-reviewed",
+ "crypto-reviewed",
+ "network-parser-reviewed",
+ "secret-handling-reviewed",
]
[[exemptions.jiff-tzdb]]
@@ -1086,17 +1094,17 @@ criteria = "safe-to-deploy"
[[exemptions.jobserver]]
version = "0.1.34"
criteria = [
- "crypto-reviewed",
- "network-parser-reviewed",
- "secret-handling-reviewed",
+ "crypto-reviewed",
+ "network-parser-reviewed",
+ "secret-handling-reviewed",
]
[[exemptions.js-sys]]
version = "0.3.91"
criteria = [
- "crypto-reviewed",
- "network-parser-reviewed",
- "secret-handling-reviewed",
+ "crypto-reviewed",
+ "network-parser-reviewed",
+ "secret-handling-reviewed",
]
[[exemptions.jsonschema]]
@@ -1142,17 +1150,17 @@ criteria = "safe-to-deploy"
[[exemptions.leb128fmt]]
version = "0.1.0"
criteria = [
- "crypto-reviewed",
- "network-parser-reviewed",
- "secret-handling-reviewed",
+ "crypto-reviewed",
+ "network-parser-reviewed",
+ "secret-handling-reviewed",
]
[[exemptions.libc]]
version = "0.2.183"
criteria = [
- "crypto-reviewed",
- "network-parser-reviewed",
- "secret-handling-reviewed",
+ "crypto-reviewed",
+ "network-parser-reviewed",
+ "secret-handling-reviewed",
]
[[exemptions.libdbus-sys]]
@@ -1210,9 +1218,9 @@ criteria = "safe-to-deploy"
[[exemptions.log]]
version = "0.4.29"
criteria = [
- "crypto-reviewed",
- "network-parser-reviewed",
- "secret-handling-reviewed",
+ "crypto-reviewed",
+ "network-parser-reviewed",
+ "secret-handling-reviewed",
]
[[exemptions.lru]]
@@ -1230,9 +1238,9 @@ criteria = "safe-to-deploy"
[[exemptions.memchr]]
version = "2.8.0"
criteria = [
- "crypto-reviewed",
- "network-parser-reviewed",
- "secret-handling-reviewed",
+ "crypto-reviewed",
+ "network-parser-reviewed",
+ "secret-handling-reviewed",
]
[[exemptions.memoffset]]
@@ -1362,9 +1370,9 @@ criteria = "safe-to-deploy"
[[exemptions.once_cell]]
version = "1.21.4"
criteria = [
- "crypto-reviewed",
- "network-parser-reviewed",
- "secret-handling-reviewed",
+ "crypto-reviewed",
+ "network-parser-reviewed",
+ "secret-handling-reviewed",
]
[[exemptions.once_cell_polyfill]]
@@ -1486,9 +1494,9 @@ criteria = "network-parser-reviewed"
[[exemptions.prettyplease]]
version = "0.2.37"
criteria = [
- "crypto-reviewed",
- "network-parser-reviewed",
- "secret-handling-reviewed",
+ "crypto-reviewed",
+ "network-parser-reviewed",
+ "secret-handling-reviewed",
]
[[exemptions.proc-macro-crate]]
@@ -1498,10 +1506,10 @@ criteria = "secret-handling-reviewed"
[[exemptions.proc-macro2]]
version = "1.0.106"
criteria = [
- "build-execution-reviewed",
- "crypto-reviewed",
- "network-parser-reviewed",
- "secret-handling-reviewed",
+ "build-execution-reviewed",
+ "crypto-reviewed",
+ "network-parser-reviewed",
+ "secret-handling-reviewed",
]
[[exemptions.quinn]]
@@ -1519,18 +1527,18 @@ criteria = "safe-to-deploy"
[[exemptions.quote]]
version = "1.0.45"
criteria = [
- "build-execution-reviewed",
- "crypto-reviewed",
- "network-parser-reviewed",
- "secret-handling-reviewed",
+ "build-execution-reviewed",
+ "crypto-reviewed",
+ "network-parser-reviewed",
+ "secret-handling-reviewed",
]
[[exemptions.r-efi]]
version = "5.3.0"
criteria = [
- "crypto-reviewed",
- "network-parser-reviewed",
- "secret-handling-reviewed",
+ "crypto-reviewed",
+ "network-parser-reviewed",
+ "secret-handling-reviewed",
]
[[exemptions.r-efi]]
@@ -1564,9 +1572,9 @@ criteria = "safe-to-deploy"
[[exemptions.rand_core]]
version = "0.6.4"
criteria = [
- "crypto-reviewed",
- "network-parser-reviewed",
- "secret-handling-reviewed",
+ "crypto-reviewed",
+ "network-parser-reviewed",
+ "secret-handling-reviewed",
]
[[exemptions.rand_core]]
@@ -1700,9 +1708,9 @@ criteria = "network-parser-reviewed"
[[exemptions.rustversion]]
version = "1.0.22"
criteria = [
- "crypto-reviewed",
- "network-parser-reviewed",
- "secret-handling-reviewed",
+ "crypto-reviewed",
+ "network-parser-reviewed",
+ "secret-handling-reviewed",
]
[[exemptions.ryu]]
@@ -1772,17 +1780,17 @@ criteria = "secret-handling-reviewed"
[[exemptions.semver]]
version = "1.0.27"
criteria = [
- "crypto-reviewed",
- "network-parser-reviewed",
- "secret-handling-reviewed",
+ "crypto-reviewed",
+ "network-parser-reviewed",
+ "secret-handling-reviewed",
]
[[exemptions.serde]]
version = "1.0.228"
criteria = [
- "crypto-reviewed",
- "network-parser-reviewed",
- "secret-handling-reviewed",
+ "crypto-reviewed",
+ "network-parser-reviewed",
+ "secret-handling-reviewed",
]
[[exemptions.serde-wasm-bindgen]]
@@ -1792,25 +1800,25 @@ criteria = "safe-to-deploy"
[[exemptions.serde_core]]
version = "1.0.228"
criteria = [
- "crypto-reviewed",
- "network-parser-reviewed",
- "secret-handling-reviewed",
+ "crypto-reviewed",
+ "network-parser-reviewed",
+ "secret-handling-reviewed",
]
[[exemptions.serde_derive]]
version = "1.0.228"
criteria = [
- "crypto-reviewed",
- "network-parser-reviewed",
- "secret-handling-reviewed",
+ "crypto-reviewed",
+ "network-parser-reviewed",
+ "secret-handling-reviewed",
]
[[exemptions.serde_json]]
version = "1.0.149"
criteria = [
- "crypto-reviewed",
- "network-parser-reviewed",
- "secret-handling-reviewed",
+ "crypto-reviewed",
+ "network-parser-reviewed",
+ "secret-handling-reviewed",
]
[[exemptions.serde_repr]]
@@ -1836,17 +1844,17 @@ criteria = "network-parser-reviewed"
[[exemptions.sha2]]
version = "0.10.9"
criteria = [
- "crypto-reviewed",
- "network-parser-reviewed",
- "secret-handling-reviewed",
+ "crypto-reviewed",
+ "network-parser-reviewed",
+ "secret-handling-reviewed",
]
[[exemptions.sha2-asm]]
version = "0.6.4"
criteria = [
- "crypto-reviewed",
- "network-parser-reviewed",
- "secret-handling-reviewed",
+ "crypto-reviewed",
+ "network-parser-reviewed",
+ "secret-handling-reviewed",
]
[[exemptions.sha3]]
@@ -1864,9 +1872,9 @@ criteria = "safe-to-deploy"
[[exemptions.shlex]]
version = "1.3.0"
criteria = [
- "crypto-reviewed",
- "network-parser-reviewed",
- "secret-handling-reviewed",
+ "crypto-reviewed",
+ "network-parser-reviewed",
+ "secret-handling-reviewed",
]
[[exemptions.signal-hook-registry]]
@@ -1964,9 +1972,9 @@ criteria = "safe-to-deploy"
[[exemptions.subtle]]
version = "2.6.1"
criteria = [
- "crypto-reviewed",
- "network-parser-reviewed",
- "secret-handling-reviewed",
+ "crypto-reviewed",
+ "network-parser-reviewed",
+ "secret-handling-reviewed",
]
[[exemptions.symlink]]
@@ -1976,10 +1984,10 @@ criteria = "safe-to-deploy"
[[exemptions.syn]]
version = "2.0.117"
criteria = [
- "build-execution-reviewed",
- "crypto-reviewed",
- "network-parser-reviewed",
- "secret-handling-reviewed",
+ "build-execution-reviewed",
+ "crypto-reviewed",
+ "network-parser-reviewed",
+ "secret-handling-reviewed",
]
[[exemptions.syn]]
@@ -2074,6 +2082,10 @@ criteria = "safe-to-deploy"
version = "0.26.2"
criteria = "network-parser-reviewed"
+[[exemptions.tokio-util]]
+version = "0.7.19"
+criteria = "safe-to-deploy"
+
[[exemptions.toml]]
version = "0.5.11"
criteria = "safe-to-deploy"
@@ -2169,9 +2181,9 @@ criteria = "safe-to-deploy"
[[exemptions.typenum]]
version = "1.20.1"
criteria = [
- "crypto-reviewed",
- "network-parser-reviewed",
- "secret-handling-reviewed",
+ "crypto-reviewed",
+ "network-parser-reviewed",
+ "secret-handling-reviewed",
]
[[exemptions.uds_windows]]
@@ -2189,10 +2201,10 @@ criteria = "safe-to-deploy"
[[exemptions.unicode-ident]]
version = "1.0.24"
criteria = [
- "build-execution-reviewed",
- "crypto-reviewed",
- "network-parser-reviewed",
- "secret-handling-reviewed",
+ "build-execution-reviewed",
+ "crypto-reviewed",
+ "network-parser-reviewed",
+ "secret-handling-reviewed",
]
[[exemptions.unicode-normalization]]
@@ -2202,9 +2214,9 @@ criteria = "network-parser-reviewed"
[[exemptions.unicode-xid]]
version = "0.2.6"
criteria = [
- "crypto-reviewed",
- "network-parser-reviewed",
- "secret-handling-reviewed",
+ "crypto-reviewed",
+ "network-parser-reviewed",
+ "secret-handling-reviewed",
]
[[exemptions.uniffi]]
@@ -2326,9 +2338,9 @@ criteria = "secret-handling-reviewed"
[[exemptions.version_check]]
version = "0.9.5"
criteria = [
- "crypto-reviewed",
- "network-parser-reviewed",
- "secret-handling-reviewed",
+ "crypto-reviewed",
+ "network-parser-reviewed",
+ "secret-handling-reviewed",
]
[[exemptions.vsimd]]
@@ -2346,17 +2358,17 @@ criteria = "safe-to-deploy"
[[exemptions.wasi]]
version = "0.11.1+wasi-snapshot-preview1"
criteria = [
- "crypto-reviewed",
- "network-parser-reviewed",
- "secret-handling-reviewed",
+ "crypto-reviewed",
+ "network-parser-reviewed",
+ "secret-handling-reviewed",
]
[[exemptions.wasip2]]
version = "1.0.2+wasi-0.2.9"
criteria = [
- "crypto-reviewed",
- "network-parser-reviewed",
- "secret-handling-reviewed",
+ "crypto-reviewed",
+ "network-parser-reviewed",
+ "secret-handling-reviewed",
]
[[exemptions.wasip3]]
@@ -2366,9 +2378,9 @@ criteria = "secret-handling-reviewed"
[[exemptions.wasm-bindgen]]
version = "0.2.114"
criteria = [
- "crypto-reviewed",
- "network-parser-reviewed",
- "secret-handling-reviewed",
+ "crypto-reviewed",
+ "network-parser-reviewed",
+ "secret-handling-reviewed",
]
[[exemptions.wasm-bindgen-futures]]
@@ -2378,25 +2390,25 @@ criteria = "network-parser-reviewed"
[[exemptions.wasm-bindgen-macro]]
version = "0.2.114"
criteria = [
- "crypto-reviewed",
- "network-parser-reviewed",
- "secret-handling-reviewed",
+ "crypto-reviewed",
+ "network-parser-reviewed",
+ "secret-handling-reviewed",
]
[[exemptions.wasm-bindgen-macro-support]]
version = "0.2.114"
criteria = [
- "crypto-reviewed",
- "network-parser-reviewed",
- "secret-handling-reviewed",
+ "crypto-reviewed",
+ "network-parser-reviewed",
+ "secret-handling-reviewed",
]
[[exemptions.wasm-bindgen-shared]]
version = "0.2.114"
criteria = [
- "crypto-reviewed",
- "network-parser-reviewed",
- "secret-handling-reviewed",
+ "crypto-reviewed",
+ "network-parser-reviewed",
+ "secret-handling-reviewed",
]
[[exemptions.wasm-bindgen-test]]
@@ -2414,25 +2426,29 @@ criteria = "safe-to-run"
[[exemptions.wasm-encoder]]
version = "0.244.0"
criteria = [
- "crypto-reviewed",
- "network-parser-reviewed",
- "secret-handling-reviewed",
+ "crypto-reviewed",
+ "network-parser-reviewed",
+ "secret-handling-reviewed",
]
[[exemptions.wasm-metadata]]
version = "0.244.0"
criteria = [
- "crypto-reviewed",
- "network-parser-reviewed",
- "secret-handling-reviewed",
+ "crypto-reviewed",
+ "network-parser-reviewed",
+ "secret-handling-reviewed",
]
+[[exemptions.wasm-streams]]
+version = "0.4.2"
+criteria = "safe-to-deploy"
+
[[exemptions.wasmparser]]
version = "0.244.0"
criteria = [
- "crypto-reviewed",
- "network-parser-reviewed",
- "secret-handling-reviewed",
+ "crypto-reviewed",
+ "network-parser-reviewed",
+ "secret-handling-reviewed",
]
[[exemptions.web-sys]]
@@ -2602,49 +2618,49 @@ criteria = "secret-handling-reviewed"
[[exemptions.wit-bindgen]]
version = "0.51.0"
criteria = [
- "crypto-reviewed",
- "network-parser-reviewed",
- "secret-handling-reviewed",
+ "crypto-reviewed",
+ "network-parser-reviewed",
+ "secret-handling-reviewed",
]
[[exemptions.wit-bindgen-core]]
version = "0.51.0"
criteria = [
- "crypto-reviewed",
- "network-parser-reviewed",
- "secret-handling-reviewed",
+ "crypto-reviewed",
+ "network-parser-reviewed",
+ "secret-handling-reviewed",
]
[[exemptions.wit-bindgen-rust]]
version = "0.51.0"
criteria = [
- "crypto-reviewed",
- "network-parser-reviewed",
- "secret-handling-reviewed",
+ "crypto-reviewed",
+ "network-parser-reviewed",
+ "secret-handling-reviewed",
]
[[exemptions.wit-bindgen-rust-macro]]
version = "0.51.0"
criteria = [
- "crypto-reviewed",
- "network-parser-reviewed",
- "secret-handling-reviewed",
+ "crypto-reviewed",
+ "network-parser-reviewed",
+ "secret-handling-reviewed",
]
[[exemptions.wit-component]]
version = "0.244.0"
criteria = [
- "crypto-reviewed",
- "network-parser-reviewed",
- "secret-handling-reviewed",
+ "crypto-reviewed",
+ "network-parser-reviewed",
+ "secret-handling-reviewed",
]
[[exemptions.wit-parser]]
version = "0.244.0"
criteria = [
- "crypto-reviewed",
- "network-parser-reviewed",
- "secret-handling-reviewed",
+ "crypto-reviewed",
+ "network-parser-reviewed",
+ "secret-handling-reviewed",
]
[[exemptions.writeable]]
@@ -2718,17 +2734,17 @@ criteria = "network-parser-reviewed"
[[exemptions.zeroize]]
version = "1.9.0"
criteria = [
- "crypto-reviewed",
- "network-parser-reviewed",
- "secret-handling-reviewed",
+ "crypto-reviewed",
+ "network-parser-reviewed",
+ "secret-handling-reviewed",
]
[[exemptions.zeroize_derive]]
version = "1.5.0"
criteria = [
- "crypto-reviewed",
- "network-parser-reviewed",
- "secret-handling-reviewed",
+ "crypto-reviewed",
+ "network-parser-reviewed",
+ "secret-handling-reviewed",
]
[[exemptions.zerotrie]]
@@ -2754,9 +2770,9 @@ criteria = "safe-to-deploy"
[[exemptions.zmij]]
version = "1.0.21"
criteria = [
- "crypto-reviewed",
- "network-parser-reviewed",
- "secret-handling-reviewed",
+ "crypto-reviewed",
+ "network-parser-reviewed",
+ "secret-handling-reviewed",
]
[[exemptions.zopfli]]
diff --git a/tools/xtask/src/supply_chain_qualification.rs b/tools/xtask/src/supply_chain_qualification.rs
@@ -303,6 +303,7 @@ fn validate_exceptions(root: &Path, contract: &Contract) -> Result<(), String> {
"CARGO-YANKED-SPIN-0.9.8".to_owned(),
"RUSTSEC-2024-0384".to_owned(),
"RUSTSEC-2024-0421".to_owned(),
+ "RUSTSEC-2026-0243".to_owned(),
]);
let actual = contract
.advisory_exception
@@ -335,6 +336,12 @@ fn validate_exceptions(root: &Path, contract: &Contract) -> Result<(), String> {
&& exception.classification == "vulnerability"
&& exception.remove_when == "nostr >=0.45.0 stable"
}
+ "RUSTSEC-2026-0243" => {
+ exception.package == "nostr-relay-pool"
+ && exception.affected_version == "0.44.3"
+ && exception.classification == "unmaintained"
+ && exception.remove_when == "nostr >=0.45.0 stable"
+ }
"CARGO-YANKED-SPIN-0.9.8" => {
exception.package == "spin"
&& exception.affected_version == "0.9.8"
