From 898e14ca8decdf5e6390bf0d6ce4b9d4a12a5a24 Mon Sep 17 00:00:00 2001 From: Kurtis Dinelle Date: Thu, 8 Oct 2026 14:06:50 -0700 Subject: [PATCH 1/2] dev-qemu: Incorporate HID time-alarm --- platform/dev-imxrt/Cargo.lock | 48 +++-- platform/dev-mcxa/Cargo.lock | 54 ++++-- platform/dev-mec/Cargo.lock | 48 +++-- platform/dev-npcx/Cargo.lock | 54 ++++-- platform/dev-qemu/Cargo.lock | 73 +++++--- platform/dev-qemu/Cargo.toml | 18 +- platform/dev-qemu/src/hid.rs | 217 ++++------------------- platform/dev-qemu/src/main.rs | 28 +-- platform/dev-qemu/src/mctp.rs | 15 ++ platform/platform-common/Cargo.lock | 82 ++++++--- platform/platform-common/src/lib.rs | 2 +- platform/platform-common/src/mock/mod.rs | 18 +- 12 files changed, 326 insertions(+), 331 deletions(-) create mode 100644 platform/dev-qemu/src/mctp.rs diff --git a/platform/dev-imxrt/Cargo.lock b/platform/dev-imxrt/Cargo.lock index 5bf45d8..6a2e900 100644 --- a/platform/dev-imxrt/Cargo.lock +++ b/platform/dev-imxrt/Cargo.lock @@ -35,7 +35,7 @@ dependencies = [ [[package]] name = "battery-service" version = "0.1.0" -source = "git+https://github.com/OpenDevicePartnership/embedded-services?branch=main#6d7dbbf71a7e386ae75949fa2b792392df0d857a" +source = "git+https://github.com/OpenDevicePartnership/embedded-services?branch=main#b2914600404371ba150093bec40d4e7e116b3369" dependencies = [ "battery-service-interface", "defmt 0.3.100", @@ -48,7 +48,7 @@ dependencies = [ [[package]] name = "battery-service-interface" version = "0.1.0" -source = "git+https://github.com/OpenDevicePartnership/embedded-services?branch=main#6d7dbbf71a7e386ae75949fa2b792392df0d857a" +source = "git+https://github.com/OpenDevicePartnership/embedded-services?branch=main#b2914600404371ba150093bec40d4e7e116b3369" dependencies = [ "defmt 0.3.100", "embedded-batteries-async", @@ -57,7 +57,7 @@ dependencies = [ [[package]] name = "battery-service-relay" version = "0.1.0" -source = "git+https://github.com/OpenDevicePartnership/embedded-services?branch=main#6d7dbbf71a7e386ae75949fa2b792392df0d857a" +source = "git+https://github.com/OpenDevicePartnership/embedded-services?branch=main#b2914600404371ba150093bec40d4e7e116b3369" dependencies = [ "battery-service-interface", "defmt 0.3.100", @@ -695,7 +695,7 @@ dependencies = [ [[package]] name = "embedded-services" version = "0.1.0" -source = "git+https://github.com/OpenDevicePartnership/embedded-services?branch=main#6d7dbbf71a7e386ae75949fa2b792392df0d857a" +source = "git+https://github.com/OpenDevicePartnership/embedded-services?branch=main#b2914600404371ba150093bec40d4e7e116b3369" dependencies = [ "bitfield 0.17.0", "cortex-m", @@ -703,10 +703,14 @@ dependencies = [ "defmt 0.3.100", "embassy-futures", "embassy-sync", + "generic-array", + "heapless", "mctp-rs", + "num_enum", "paste", "portable-atomic", "serde", + "typenum", ] [[package]] @@ -727,7 +731,7 @@ dependencies = [ [[package]] name = "espi-device" version = "0.1.0" -source = "git+https://github.com/OpenDevicePartnership/haf-ec-service#e2a7c6f4bc8e0259d85f53b4014847eb276c885a" +source = "git+https://github.com/OpenDevicePartnership/haf-ec-service#6166065630a40f7285f883513de33f7b033b2640" dependencies = [ "bit-register 0.1.0 (git+https://github.com/OpenDevicePartnership/odp-utilities?tag=v0.1.0)", "bitflags 2.11.1", @@ -788,6 +792,16 @@ dependencies = [ "windows-result", ] +[[package]] +name = "generic-array" +version = "1.4.2" +source = "registry+https://github.com/rust-lang/crates.io-index" +checksum = "fb130435a959a8d525e6bca66ff6c40981a300ee96d70e3ef56f046556d614a3" +dependencies = [ + "rustversion", + "typenum", +] + [[package]] name = "half" version = "2.7.1" @@ -888,7 +902,7 @@ dependencies = [ [[package]] name = "mctp-rs" version = "0.1.0" -source = "git+https://github.com/OpenDevicePartnership/embedded-services?branch=main#6d7dbbf71a7e386ae75949fa2b792392df0d857a" +source = "git+https://github.com/OpenDevicePartnership/embedded-services?branch=main#b2914600404371ba150093bec40d4e7e116b3369" dependencies = [ "bit-register 0.1.0 (git+https://github.com/OpenDevicePartnership/odp-utilities)", "crc", @@ -998,7 +1012,7 @@ dependencies = [ [[package]] name = "odp-service-common" version = "0.1.0" -source = "git+https://github.com/OpenDevicePartnership/embedded-services?branch=main#6d7dbbf71a7e386ae75949fa2b792392df0d857a" +source = "git+https://github.com/OpenDevicePartnership/embedded-services?branch=main#b2914600404371ba150093bec40d4e7e116b3369" dependencies = [ "embedded-services", "static_cell", @@ -1073,14 +1087,12 @@ checksum = "c33a9471896f1c69cecef8d20cbe2f7accd12527ce60845ff44c153bb2a21b49" [[package]] name = "power-policy-interface" version = "0.1.0" -source = "git+https://github.com/OpenDevicePartnership/embedded-services?branch=main#6d7dbbf71a7e386ae75949fa2b792392df0d857a" +source = "git+https://github.com/OpenDevicePartnership/embedded-services?branch=main#b2914600404371ba150093bec40d4e7e116b3369" dependencies = [ - "bitfield 0.17.0", "defmt 0.3.100", "embassy-sync", "embedded-batteries-async", "embedded-services", - "num_enum", ] [[package]] @@ -1300,7 +1312,7 @@ dependencies = [ [[package]] name = "thermal-service" version = "0.1.0" -source = "git+https://github.com/OpenDevicePartnership/embedded-services?branch=main#6d7dbbf71a7e386ae75949fa2b792392df0d857a" +source = "git+https://github.com/OpenDevicePartnership/embedded-services?branch=main#b2914600404371ba150093bec40d4e7e116b3369" dependencies = [ "defmt 0.3.100", "embassy-futures", @@ -1317,7 +1329,7 @@ dependencies = [ [[package]] name = "thermal-service-interface" version = "0.1.0" -source = "git+https://github.com/OpenDevicePartnership/embedded-services?branch=main#6d7dbbf71a7e386ae75949fa2b792392df0d857a" +source = "git+https://github.com/OpenDevicePartnership/embedded-services?branch=main#b2914600404371ba150093bec40d4e7e116b3369" dependencies = [ "defmt 0.3.100", "embassy-time", @@ -1328,7 +1340,7 @@ dependencies = [ [[package]] name = "thermal-service-relay" version = "0.1.0" -source = "git+https://github.com/OpenDevicePartnership/embedded-services?branch=main#6d7dbbf71a7e386ae75949fa2b792392df0d857a" +source = "git+https://github.com/OpenDevicePartnership/embedded-services?branch=main#b2914600404371ba150093bec40d4e7e116b3369" dependencies = [ "defmt 0.3.100", "embedded-services", @@ -1369,7 +1381,7 @@ dependencies = [ [[package]] name = "time-alarm-service" version = "0.1.0" -source = "git+https://github.com/OpenDevicePartnership/embedded-services?branch=main#6d7dbbf71a7e386ae75949fa2b792392df0d857a" +source = "git+https://github.com/OpenDevicePartnership/embedded-services?branch=main#b2914600404371ba150093bec40d4e7e116b3369" dependencies = [ "defmt 0.3.100", "embassy-futures", @@ -1385,7 +1397,7 @@ dependencies = [ [[package]] name = "time-alarm-service-interface" version = "0.1.0" -source = "git+https://github.com/OpenDevicePartnership/embedded-services?branch=main#6d7dbbf71a7e386ae75949fa2b792392df0d857a" +source = "git+https://github.com/OpenDevicePartnership/embedded-services?branch=main#b2914600404371ba150093bec40d4e7e116b3369" dependencies = [ "bitfield 0.17.0", "defmt 0.3.100", @@ -1397,13 +1409,15 @@ dependencies = [ [[package]] name = "time-alarm-service-relay" version = "0.1.0" -source = "git+https://github.com/OpenDevicePartnership/embedded-services?branch=main#6d7dbbf71a7e386ae75949fa2b792392df0d857a" +source = "git+https://github.com/OpenDevicePartnership/embedded-services?branch=main#b2914600404371ba150093bec40d4e7e116b3369" dependencies = [ + "bitfield 0.17.0", "defmt 0.3.100", "embedded-mcu-hal 0.3.0", "embedded-services", "num_enum", "time-alarm-service-interface", + "typenum", ] [[package]] @@ -1476,7 +1490,7 @@ checksum = "40ce102ab67701b8526c123c1bab5cbe42d7040ccfd0f64af1a385808d2f43de" [[package]] name = "uart-service" version = "0.1.0" -source = "git+https://github.com/OpenDevicePartnership/embedded-services?branch=main#6d7dbbf71a7e386ae75949fa2b792392df0d857a" +source = "git+https://github.com/OpenDevicePartnership/embedded-services?branch=main#b2914600404371ba150093bec40d4e7e116b3369" dependencies = [ "defmt 0.3.100", "embassy-sync", diff --git a/platform/dev-mcxa/Cargo.lock b/platform/dev-mcxa/Cargo.lock index b4979f2..28d3a83 100644 --- a/platform/dev-mcxa/Cargo.lock +++ b/platform/dev-mcxa/Cargo.lock @@ -29,7 +29,7 @@ dependencies = [ [[package]] name = "battery-service" version = "0.1.0" -source = "git+https://github.com/OpenDevicePartnership/embedded-services?branch=main#6d7dbbf71a7e386ae75949fa2b792392df0d857a" +source = "git+https://github.com/OpenDevicePartnership/embedded-services?branch=main#b2914600404371ba150093bec40d4e7e116b3369" dependencies = [ "battery-service-interface", "defmt 0.3.100", @@ -42,7 +42,7 @@ dependencies = [ [[package]] name = "battery-service-interface" version = "0.1.0" -source = "git+https://github.com/OpenDevicePartnership/embedded-services?branch=main#6d7dbbf71a7e386ae75949fa2b792392df0d857a" +source = "git+https://github.com/OpenDevicePartnership/embedded-services?branch=main#b2914600404371ba150093bec40d4e7e116b3369" dependencies = [ "defmt 0.3.100", "embedded-batteries-async", @@ -51,7 +51,7 @@ dependencies = [ [[package]] name = "battery-service-relay" version = "0.1.0" -source = "git+https://github.com/OpenDevicePartnership/embedded-services?branch=main#6d7dbbf71a7e386ae75949fa2b792392df0d857a" +source = "git+https://github.com/OpenDevicePartnership/embedded-services?branch=main#b2914600404371ba150093bec40d4e7e116b3369" dependencies = [ "battery-service-interface", "defmt 0.3.100", @@ -678,7 +678,7 @@ dependencies = [ [[package]] name = "embedded-services" version = "0.1.0" -source = "git+https://github.com/OpenDevicePartnership/embedded-services?branch=main#6d7dbbf71a7e386ae75949fa2b792392df0d857a" +source = "git+https://github.com/OpenDevicePartnership/embedded-services?branch=main#b2914600404371ba150093bec40d4e7e116b3369" dependencies = [ "bitfield 0.17.0", "cortex-m", @@ -686,10 +686,14 @@ dependencies = [ "defmt 0.3.100", "embassy-futures", "embassy-sync", + "generic-array", + "heapless", "mctp-rs", + "num_enum", "paste", "portable-atomic", "serde", + "typenum", ] [[package]] @@ -716,7 +720,7 @@ checksum = "877a4ace8713b0bcf2a4e7eec82529c029f1d0619886d18145fea96c3ffe5c0f" [[package]] name = "espi-device" version = "0.1.0" -source = "git+https://github.com/OpenDevicePartnership/haf-ec-service#e2a7c6f4bc8e0259d85f53b4014847eb276c885a" +source = "git+https://github.com/OpenDevicePartnership/haf-ec-service#6166065630a40f7285f883513de33f7b033b2640" dependencies = [ "bit-register 0.1.0 (git+https://github.com/OpenDevicePartnership/odp-utilities?tag=v0.1.0)", "bitflags 2.11.1", @@ -765,6 +769,16 @@ dependencies = [ "windows-result", ] +[[package]] +name = "generic-array" +version = "1.4.5" +source = "registry+https://github.com/rust-lang/crates.io-index" +checksum = "337d46834ee672ab3e48caca2cb0c78cc174fb12b3a68d0d88f99a0519a5e36e" +dependencies = [ + "rustversion", + "typenum", +] + [[package]] name = "grounded" version = "0.2.1" @@ -886,7 +900,7 @@ dependencies = [ [[package]] name = "mctp-rs" version = "0.1.0" -source = "git+https://github.com/OpenDevicePartnership/embedded-services?branch=main#6d7dbbf71a7e386ae75949fa2b792392df0d857a" +source = "git+https://github.com/OpenDevicePartnership/embedded-services?branch=main#b2914600404371ba150093bec40d4e7e116b3369" dependencies = [ "bit-register 0.1.0 (git+https://github.com/OpenDevicePartnership/odp-utilities)", "crc", @@ -984,7 +998,7 @@ dependencies = [ [[package]] name = "odp-service-common" version = "0.1.0" -source = "git+https://github.com/OpenDevicePartnership/embedded-services?branch=main#6d7dbbf71a7e386ae75949fa2b792392df0d857a" +source = "git+https://github.com/OpenDevicePartnership/embedded-services?branch=main#b2914600404371ba150093bec40d4e7e116b3369" dependencies = [ "embedded-services", "static_cell", @@ -1082,14 +1096,12 @@ dependencies = [ [[package]] name = "power-policy-interface" version = "0.1.0" -source = "git+https://github.com/OpenDevicePartnership/embedded-services?branch=main#6d7dbbf71a7e386ae75949fa2b792392df0d857a" +source = "git+https://github.com/OpenDevicePartnership/embedded-services?branch=main#b2914600404371ba150093bec40d4e7e116b3369" dependencies = [ - "bitfield 0.17.0", "defmt 0.3.100", "embassy-sync", "embedded-batteries-async", "embedded-services", - "num_enum", ] [[package]] @@ -1328,7 +1340,7 @@ dependencies = [ [[package]] name = "thermal-service" version = "0.1.0" -source = "git+https://github.com/OpenDevicePartnership/embedded-services?branch=main#6d7dbbf71a7e386ae75949fa2b792392df0d857a" +source = "git+https://github.com/OpenDevicePartnership/embedded-services?branch=main#b2914600404371ba150093bec40d4e7e116b3369" dependencies = [ "defmt 0.3.100", "embassy-futures", @@ -1345,7 +1357,7 @@ dependencies = [ [[package]] name = "thermal-service-interface" version = "0.1.0" -source = "git+https://github.com/OpenDevicePartnership/embedded-services?branch=main#6d7dbbf71a7e386ae75949fa2b792392df0d857a" +source = "git+https://github.com/OpenDevicePartnership/embedded-services?branch=main#b2914600404371ba150093bec40d4e7e116b3369" dependencies = [ "defmt 0.3.100", "embassy-time", @@ -1356,7 +1368,7 @@ dependencies = [ [[package]] name = "thermal-service-relay" version = "0.1.0" -source = "git+https://github.com/OpenDevicePartnership/embedded-services?branch=main#6d7dbbf71a7e386ae75949fa2b792392df0d857a" +source = "git+https://github.com/OpenDevicePartnership/embedded-services?branch=main#b2914600404371ba150093bec40d4e7e116b3369" dependencies = [ "defmt 0.3.100", "embedded-services", @@ -1397,7 +1409,7 @@ dependencies = [ [[package]] name = "time-alarm-service" version = "0.1.0" -source = "git+https://github.com/OpenDevicePartnership/embedded-services?branch=main#6d7dbbf71a7e386ae75949fa2b792392df0d857a" +source = "git+https://github.com/OpenDevicePartnership/embedded-services?branch=main#b2914600404371ba150093bec40d4e7e116b3369" dependencies = [ "defmt 0.3.100", "embassy-futures", @@ -1413,7 +1425,7 @@ dependencies = [ [[package]] name = "time-alarm-service-interface" version = "0.1.0" -source = "git+https://github.com/OpenDevicePartnership/embedded-services?branch=main#6d7dbbf71a7e386ae75949fa2b792392df0d857a" +source = "git+https://github.com/OpenDevicePartnership/embedded-services?branch=main#b2914600404371ba150093bec40d4e7e116b3369" dependencies = [ "bitfield 0.17.0", "defmt 0.3.100", @@ -1425,13 +1437,15 @@ dependencies = [ [[package]] name = "time-alarm-service-relay" version = "0.1.0" -source = "git+https://github.com/OpenDevicePartnership/embedded-services?branch=main#6d7dbbf71a7e386ae75949fa2b792392df0d857a" +source = "git+https://github.com/OpenDevicePartnership/embedded-services?branch=main#b2914600404371ba150093bec40d4e7e116b3369" dependencies = [ + "bitfield 0.17.0", "defmt 0.3.100", "embedded-mcu-hal 0.3.0", "embedded-services", "num_enum", "time-alarm-service-interface", + "typenum", ] [[package]] @@ -1495,10 +1509,16 @@ dependencies = [ "tracing-log", ] +[[package]] +name = "typenum" +version = "1.20.1" +source = "registry+https://github.com/rust-lang/crates.io-index" +checksum = "b6f5e870be6c3b371b77fe0ee0bafb859fa4964b4404c27de1d380043c4dda20" + [[package]] name = "uart-service" version = "0.1.0" -source = "git+https://github.com/OpenDevicePartnership/embedded-services?branch=main#6d7dbbf71a7e386ae75949fa2b792392df0d857a" +source = "git+https://github.com/OpenDevicePartnership/embedded-services?branch=main#b2914600404371ba150093bec40d4e7e116b3369" dependencies = [ "defmt 0.3.100", "embassy-sync", diff --git a/platform/dev-mec/Cargo.lock b/platform/dev-mec/Cargo.lock index ad61448..92c1020 100644 --- a/platform/dev-mec/Cargo.lock +++ b/platform/dev-mec/Cargo.lock @@ -35,7 +35,7 @@ dependencies = [ [[package]] name = "battery-service" version = "0.1.0" -source = "git+https://github.com/OpenDevicePartnership/embedded-services?branch=main#6d7dbbf71a7e386ae75949fa2b792392df0d857a" +source = "git+https://github.com/OpenDevicePartnership/embedded-services?branch=main#b2914600404371ba150093bec40d4e7e116b3369" dependencies = [ "battery-service-interface", "defmt 0.3.100", @@ -48,7 +48,7 @@ dependencies = [ [[package]] name = "battery-service-interface" version = "0.1.0" -source = "git+https://github.com/OpenDevicePartnership/embedded-services?branch=main#6d7dbbf71a7e386ae75949fa2b792392df0d857a" +source = "git+https://github.com/OpenDevicePartnership/embedded-services?branch=main#b2914600404371ba150093bec40d4e7e116b3369" dependencies = [ "defmt 0.3.100", "embedded-batteries-async", @@ -57,7 +57,7 @@ dependencies = [ [[package]] name = "battery-service-relay" version = "0.1.0" -source = "git+https://github.com/OpenDevicePartnership/embedded-services?branch=main#6d7dbbf71a7e386ae75949fa2b792392df0d857a" +source = "git+https://github.com/OpenDevicePartnership/embedded-services?branch=main#b2914600404371ba150093bec40d4e7e116b3369" dependencies = [ "battery-service-interface", "defmt 0.3.100", @@ -653,7 +653,7 @@ dependencies = [ [[package]] name = "embedded-services" version = "0.1.0" -source = "git+https://github.com/OpenDevicePartnership/embedded-services?branch=main#6d7dbbf71a7e386ae75949fa2b792392df0d857a" +source = "git+https://github.com/OpenDevicePartnership/embedded-services?branch=main#b2914600404371ba150093bec40d4e7e116b3369" dependencies = [ "bitfield 0.17.0", "cortex-m", @@ -661,10 +661,14 @@ dependencies = [ "defmt 0.3.100", "embassy-futures", "embassy-sync", + "generic-array", + "heapless", "mctp-rs", + "num_enum", "paste", "portable-atomic", "serde", + "typenum", ] [[package]] @@ -685,7 +689,7 @@ dependencies = [ [[package]] name = "espi-device" version = "0.1.0" -source = "git+https://github.com/OpenDevicePartnership/haf-ec-service#e2a7c6f4bc8e0259d85f53b4014847eb276c885a" +source = "git+https://github.com/OpenDevicePartnership/haf-ec-service#6166065630a40f7285f883513de33f7b033b2640" dependencies = [ "bit-register 0.1.0 (git+https://github.com/OpenDevicePartnership/odp-utilities?tag=v0.1.0)", "bitflags 2.11.1", @@ -746,6 +750,16 @@ dependencies = [ "windows-result", ] +[[package]] +name = "generic-array" +version = "1.4.2" +source = "registry+https://github.com/rust-lang/crates.io-index" +checksum = "fb130435a959a8d525e6bca66ff6c40981a300ee96d70e3ef56f046556d614a3" +dependencies = [ + "rustversion", + "typenum", +] + [[package]] name = "half" version = "2.7.1" @@ -837,7 +851,7 @@ dependencies = [ [[package]] name = "mctp-rs" version = "0.1.0" -source = "git+https://github.com/OpenDevicePartnership/embedded-services?branch=main#6d7dbbf71a7e386ae75949fa2b792392df0d857a" +source = "git+https://github.com/OpenDevicePartnership/embedded-services?branch=main#b2914600404371ba150093bec40d4e7e116b3369" dependencies = [ "bit-register 0.1.0 (git+https://github.com/OpenDevicePartnership/odp-utilities)", "crc", @@ -923,7 +937,7 @@ dependencies = [ [[package]] name = "odp-service-common" version = "0.1.0" -source = "git+https://github.com/OpenDevicePartnership/embedded-services?branch=main#6d7dbbf71a7e386ae75949fa2b792392df0d857a" +source = "git+https://github.com/OpenDevicePartnership/embedded-services?branch=main#b2914600404371ba150093bec40d4e7e116b3369" dependencies = [ "embedded-services", "static_cell", @@ -998,14 +1012,12 @@ checksum = "c33a9471896f1c69cecef8d20cbe2f7accd12527ce60845ff44c153bb2a21b49" [[package]] name = "power-policy-interface" version = "0.1.0" -source = "git+https://github.com/OpenDevicePartnership/embedded-services?branch=main#6d7dbbf71a7e386ae75949fa2b792392df0d857a" +source = "git+https://github.com/OpenDevicePartnership/embedded-services?branch=main#b2914600404371ba150093bec40d4e7e116b3369" dependencies = [ - "bitfield 0.17.0", "defmt 0.3.100", "embassy-sync", "embedded-batteries-async", "embedded-services", - "num_enum", ] [[package]] @@ -1214,7 +1226,7 @@ dependencies = [ [[package]] name = "thermal-service" version = "0.1.0" -source = "git+https://github.com/OpenDevicePartnership/embedded-services?branch=main#6d7dbbf71a7e386ae75949fa2b792392df0d857a" +source = "git+https://github.com/OpenDevicePartnership/embedded-services?branch=main#b2914600404371ba150093bec40d4e7e116b3369" dependencies = [ "defmt 0.3.100", "embassy-futures", @@ -1231,7 +1243,7 @@ dependencies = [ [[package]] name = "thermal-service-interface" version = "0.1.0" -source = "git+https://github.com/OpenDevicePartnership/embedded-services?branch=main#6d7dbbf71a7e386ae75949fa2b792392df0d857a" +source = "git+https://github.com/OpenDevicePartnership/embedded-services?branch=main#b2914600404371ba150093bec40d4e7e116b3369" dependencies = [ "defmt 0.3.100", "embassy-time", @@ -1242,7 +1254,7 @@ dependencies = [ [[package]] name = "thermal-service-relay" version = "0.1.0" -source = "git+https://github.com/OpenDevicePartnership/embedded-services?branch=main#6d7dbbf71a7e386ae75949fa2b792392df0d857a" +source = "git+https://github.com/OpenDevicePartnership/embedded-services?branch=main#b2914600404371ba150093bec40d4e7e116b3369" dependencies = [ "defmt 0.3.100", "embedded-services", @@ -1283,7 +1295,7 @@ dependencies = [ [[package]] name = "time-alarm-service" version = "0.1.0" -source = "git+https://github.com/OpenDevicePartnership/embedded-services?branch=main#6d7dbbf71a7e386ae75949fa2b792392df0d857a" +source = "git+https://github.com/OpenDevicePartnership/embedded-services?branch=main#b2914600404371ba150093bec40d4e7e116b3369" dependencies = [ "defmt 0.3.100", "embassy-futures", @@ -1299,7 +1311,7 @@ dependencies = [ [[package]] name = "time-alarm-service-interface" version = "0.1.0" -source = "git+https://github.com/OpenDevicePartnership/embedded-services?branch=main#6d7dbbf71a7e386ae75949fa2b792392df0d857a" +source = "git+https://github.com/OpenDevicePartnership/embedded-services?branch=main#b2914600404371ba150093bec40d4e7e116b3369" dependencies = [ "bitfield 0.17.0", "defmt 0.3.100", @@ -1311,13 +1323,15 @@ dependencies = [ [[package]] name = "time-alarm-service-relay" version = "0.1.0" -source = "git+https://github.com/OpenDevicePartnership/embedded-services?branch=main#6d7dbbf71a7e386ae75949fa2b792392df0d857a" +source = "git+https://github.com/OpenDevicePartnership/embedded-services?branch=main#b2914600404371ba150093bec40d4e7e116b3369" dependencies = [ + "bitfield 0.17.0", "defmt 0.3.100", "embedded-mcu-hal 0.3.0", "embedded-services", "num_enum", "time-alarm-service-interface", + "typenum", ] [[package]] @@ -1390,7 +1404,7 @@ checksum = "40ce102ab67701b8526c123c1bab5cbe42d7040ccfd0f64af1a385808d2f43de" [[package]] name = "uart-service" version = "0.1.0" -source = "git+https://github.com/OpenDevicePartnership/embedded-services?branch=main#6d7dbbf71a7e386ae75949fa2b792392df0d857a" +source = "git+https://github.com/OpenDevicePartnership/embedded-services?branch=main#b2914600404371ba150093bec40d4e7e116b3369" dependencies = [ "defmt 0.3.100", "embassy-sync", diff --git a/platform/dev-npcx/Cargo.lock b/platform/dev-npcx/Cargo.lock index 9eb1b8a..66b76d9 100644 --- a/platform/dev-npcx/Cargo.lock +++ b/platform/dev-npcx/Cargo.lock @@ -29,7 +29,7 @@ dependencies = [ [[package]] name = "battery-service" version = "0.1.0" -source = "git+https://github.com/OpenDevicePartnership/embedded-services?branch=main#6d7dbbf71a7e386ae75949fa2b792392df0d857a" +source = "git+https://github.com/OpenDevicePartnership/embedded-services?branch=main#b2914600404371ba150093bec40d4e7e116b3369" dependencies = [ "battery-service-interface", "defmt 0.3.100", @@ -42,7 +42,7 @@ dependencies = [ [[package]] name = "battery-service-interface" version = "0.1.0" -source = "git+https://github.com/OpenDevicePartnership/embedded-services?branch=main#6d7dbbf71a7e386ae75949fa2b792392df0d857a" +source = "git+https://github.com/OpenDevicePartnership/embedded-services?branch=main#b2914600404371ba150093bec40d4e7e116b3369" dependencies = [ "defmt 0.3.100", "embedded-batteries-async", @@ -51,7 +51,7 @@ dependencies = [ [[package]] name = "battery-service-relay" version = "0.1.0" -source = "git+https://github.com/OpenDevicePartnership/embedded-services?branch=main#6d7dbbf71a7e386ae75949fa2b792392df0d857a" +source = "git+https://github.com/OpenDevicePartnership/embedded-services?branch=main#b2914600404371ba150093bec40d4e7e116b3369" dependencies = [ "battery-service-interface", "defmt 0.3.100", @@ -634,7 +634,7 @@ dependencies = [ [[package]] name = "embedded-services" version = "0.1.0" -source = "git+https://github.com/OpenDevicePartnership/embedded-services?branch=main#6d7dbbf71a7e386ae75949fa2b792392df0d857a" +source = "git+https://github.com/OpenDevicePartnership/embedded-services?branch=main#b2914600404371ba150093bec40d4e7e116b3369" dependencies = [ "bitfield 0.17.0", "cortex-m", @@ -642,16 +642,20 @@ dependencies = [ "defmt 0.3.100", "embassy-futures", "embassy-sync 0.8.0 (registry+https://github.com/rust-lang/crates.io-index)", + "generic-array", + "heapless 0.9.3", "mctp-rs", + "num_enum", "paste", "portable-atomic", "serde", + "typenum", ] [[package]] name = "espi-device" version = "0.1.0" -source = "git+https://github.com/OpenDevicePartnership/haf-ec-service#e2a7c6f4bc8e0259d85f53b4014847eb276c885a" +source = "git+https://github.com/OpenDevicePartnership/haf-ec-service#6166065630a40f7285f883513de33f7b033b2640" dependencies = [ "bit-register 0.1.0 (git+https://github.com/OpenDevicePartnership/odp-utilities?tag=v0.1.0)", "bitflags 2.11.1", @@ -700,6 +704,16 @@ dependencies = [ "windows-result", ] +[[package]] +name = "generic-array" +version = "1.4.5" +source = "registry+https://github.com/rust-lang/crates.io-index" +checksum = "337d46834ee672ab3e48caca2cb0c78cc174fb12b3a68d0d88f99a0519a5e36e" +dependencies = [ + "rustversion", + "typenum", +] + [[package]] name = "hash32" version = "0.3.1" @@ -806,7 +820,7 @@ dependencies = [ [[package]] name = "mctp-rs" version = "0.1.0" -source = "git+https://github.com/OpenDevicePartnership/embedded-services?branch=main#6d7dbbf71a7e386ae75949fa2b792392df0d857a" +source = "git+https://github.com/OpenDevicePartnership/embedded-services?branch=main#b2914600404371ba150093bec40d4e7e116b3369" dependencies = [ "bit-register 0.1.0 (git+https://github.com/OpenDevicePartnership/odp-utilities)", "crc", @@ -904,7 +918,7 @@ dependencies = [ [[package]] name = "odp-service-common" version = "0.1.0" -source = "git+https://github.com/OpenDevicePartnership/embedded-services?branch=main#6d7dbbf71a7e386ae75949fa2b792392df0d857a" +source = "git+https://github.com/OpenDevicePartnership/embedded-services?branch=main#b2914600404371ba150093bec40d4e7e116b3369" dependencies = [ "embedded-services", "static_cell", @@ -1002,14 +1016,12 @@ dependencies = [ [[package]] name = "power-policy-interface" version = "0.1.0" -source = "git+https://github.com/OpenDevicePartnership/embedded-services?branch=main#6d7dbbf71a7e386ae75949fa2b792392df0d857a" +source = "git+https://github.com/OpenDevicePartnership/embedded-services?branch=main#b2914600404371ba150093bec40d4e7e116b3369" dependencies = [ - "bitfield 0.17.0", "defmt 0.3.100", "embassy-sync 0.8.0 (registry+https://github.com/rust-lang/crates.io-index)", "embedded-batteries-async", "embedded-services", - "num_enum", ] [[package]] @@ -1218,7 +1230,7 @@ dependencies = [ [[package]] name = "thermal-service" version = "0.1.0" -source = "git+https://github.com/OpenDevicePartnership/embedded-services?branch=main#6d7dbbf71a7e386ae75949fa2b792392df0d857a" +source = "git+https://github.com/OpenDevicePartnership/embedded-services?branch=main#b2914600404371ba150093bec40d4e7e116b3369" dependencies = [ "defmt 0.3.100", "embassy-futures", @@ -1235,7 +1247,7 @@ dependencies = [ [[package]] name = "thermal-service-interface" version = "0.1.0" -source = "git+https://github.com/OpenDevicePartnership/embedded-services?branch=main#6d7dbbf71a7e386ae75949fa2b792392df0d857a" +source = "git+https://github.com/OpenDevicePartnership/embedded-services?branch=main#b2914600404371ba150093bec40d4e7e116b3369" dependencies = [ "defmt 0.3.100", "embassy-time", @@ -1246,7 +1258,7 @@ dependencies = [ [[package]] name = "thermal-service-relay" version = "0.1.0" -source = "git+https://github.com/OpenDevicePartnership/embedded-services?branch=main#6d7dbbf71a7e386ae75949fa2b792392df0d857a" +source = "git+https://github.com/OpenDevicePartnership/embedded-services?branch=main#b2914600404371ba150093bec40d4e7e116b3369" dependencies = [ "defmt 0.3.100", "embedded-services", @@ -1287,7 +1299,7 @@ dependencies = [ [[package]] name = "time-alarm-service" version = "0.1.0" -source = "git+https://github.com/OpenDevicePartnership/embedded-services?branch=main#6d7dbbf71a7e386ae75949fa2b792392df0d857a" +source = "git+https://github.com/OpenDevicePartnership/embedded-services?branch=main#b2914600404371ba150093bec40d4e7e116b3369" dependencies = [ "defmt 0.3.100", "embassy-futures", @@ -1303,7 +1315,7 @@ dependencies = [ [[package]] name = "time-alarm-service-interface" version = "0.1.0" -source = "git+https://github.com/OpenDevicePartnership/embedded-services?branch=main#6d7dbbf71a7e386ae75949fa2b792392df0d857a" +source = "git+https://github.com/OpenDevicePartnership/embedded-services?branch=main#b2914600404371ba150093bec40d4e7e116b3369" dependencies = [ "bitfield 0.17.0", "defmt 0.3.100", @@ -1315,13 +1327,15 @@ dependencies = [ [[package]] name = "time-alarm-service-relay" version = "0.1.0" -source = "git+https://github.com/OpenDevicePartnership/embedded-services?branch=main#6d7dbbf71a7e386ae75949fa2b792392df0d857a" +source = "git+https://github.com/OpenDevicePartnership/embedded-services?branch=main#b2914600404371ba150093bec40d4e7e116b3369" dependencies = [ + "bitfield 0.17.0", "defmt 0.3.100", "embedded-mcu-hal 0.3.0", "embedded-services", "num_enum", "time-alarm-service-interface", + "typenum", ] [[package]] @@ -1385,10 +1399,16 @@ dependencies = [ "tracing-log", ] +[[package]] +name = "typenum" +version = "1.20.1" +source = "registry+https://github.com/rust-lang/crates.io-index" +checksum = "b6f5e870be6c3b371b77fe0ee0bafb859fa4964b4404c27de1d380043c4dda20" + [[package]] name = "uart-service" version = "0.1.0" -source = "git+https://github.com/OpenDevicePartnership/embedded-services?branch=main#6d7dbbf71a7e386ae75949fa2b792392df0d857a" +source = "git+https://github.com/OpenDevicePartnership/embedded-services?branch=main#b2914600404371ba150093bec40d4e7e116b3369" dependencies = [ "defmt 0.3.100", "embassy-sync 0.8.0 (registry+https://github.com/rust-lang/crates.io-index)", diff --git a/platform/dev-qemu/Cargo.lock b/platform/dev-qemu/Cargo.lock index ad3a333..8bb96e2 100644 --- a/platform/dev-qemu/Cargo.lock +++ b/platform/dev-qemu/Cargo.lock @@ -29,7 +29,7 @@ dependencies = [ [[package]] name = "battery-service" version = "0.1.0" -source = "git+https://github.com/OpenDevicePartnership/embedded-services?branch=main#6d7dbbf71a7e386ae75949fa2b792392df0d857a" +source = "git+https://github.com/OpenDevicePartnership/embedded-services?branch=main#b2914600404371ba150093bec40d4e7e116b3369" dependencies = [ "battery-service-interface", "defmt 0.3.100", @@ -42,7 +42,7 @@ dependencies = [ [[package]] name = "battery-service-interface" version = "0.1.0" -source = "git+https://github.com/OpenDevicePartnership/embedded-services?branch=main#6d7dbbf71a7e386ae75949fa2b792392df0d857a" +source = "git+https://github.com/OpenDevicePartnership/embedded-services?branch=main#b2914600404371ba150093bec40d4e7e116b3369" dependencies = [ "defmt 0.3.100", "embedded-batteries-async", @@ -51,7 +51,7 @@ dependencies = [ [[package]] name = "battery-service-relay" version = "0.1.0" -source = "git+https://github.com/OpenDevicePartnership/embedded-services?branch=main#6d7dbbf71a7e386ae75949fa2b792392df0d857a" +source = "git+https://github.com/OpenDevicePartnership/embedded-services?branch=main#b2914600404371ba150093bec40d4e7e116b3369" dependencies = [ "battery-service-interface", "defmt 0.3.100", @@ -284,14 +284,15 @@ dependencies = [ "defmt-semihosting", "embassy-executor 0.10.0", "embassy-qemu-riscv", - "embassy-sync 0.8.0", - "embedded-mcu-hal 0.3.0", "embedded-services", - "hid-service", + "hidi2c-target-service", + "odp-service-common", "platform-common", "riscv-rt", "semihosting", "static_cell", + "time-alarm-service", + "time-alarm-service-relay", "uart-service", ] @@ -629,7 +630,7 @@ dependencies = [ [[package]] name = "embedded-services" version = "0.1.0" -source = "git+https://github.com/OpenDevicePartnership/embedded-services?branch=main#6d7dbbf71a7e386ae75949fa2b792392df0d857a" +source = "git+https://github.com/OpenDevicePartnership/embedded-services?branch=main#b2914600404371ba150093bec40d4e7e116b3369" dependencies = [ "bitfield 0.17.0", "cortex-m", @@ -637,16 +638,20 @@ dependencies = [ "defmt 0.3.100", "embassy-futures", "embassy-sync 0.8.0", + "generic-array", + "heapless 0.9.3", "mctp-rs", + "num_enum", "paste", "portable-atomic", "serde", + "typenum", ] [[package]] name = "espi-device" version = "0.1.0" -source = "git+https://github.com/OpenDevicePartnership/haf-ec-service#e2a7c6f4bc8e0259d85f53b4014847eb276c885a" +source = "git+https://github.com/OpenDevicePartnership/haf-ec-service#6166065630a40f7285f883513de33f7b033b2640" dependencies = [ "bit-register 0.1.0 (git+https://github.com/OpenDevicePartnership/odp-utilities?tag=v0.1.0)", "bitflags 2.11.1", @@ -695,6 +700,16 @@ dependencies = [ "windows-result", ] +[[package]] +name = "generic-array" +version = "1.4.5" +source = "registry+https://github.com/rust-lang/crates.io-index" +checksum = "337d46834ee672ab3e48caca2cb0c78cc174fb12b3a68d0d88f99a0519a5e36e" +dependencies = [ + "rustversion", + "typenum", +] + [[package]] name = "hash32" version = "0.3.1" @@ -731,16 +746,22 @@ source = "registry+https://github.com/rust-lang/crates.io-index" checksum = "2304e00983f87ffb38b55b444b5e3b60a884b5d30c0fca7d82fe33449bbe55ea" [[package]] -name = "hid-service" +name = "hidi2c-target-service" version = "0.1.0" -source = "git+https://github.com/OpenDevicePartnership/embedded-services?branch=main#62d4ea9a87588c6096e1c2f149ac3263064cbde9" +source = "git+https://github.com/OpenDevicePartnership/embedded-services?branch=main#b2914600404371ba150093bec40d4e7e116b3369" dependencies = [ "defmt 0.3.100", + "embassy-futures", "embassy-sync 0.8.0", "embassy-time", "embedded-hal 1.0.0", - "embedded-hal-async", + "embedded-mcu-hal 0.3.0", "embedded-services", + "generic-array", + "num_enum", + "odp-service-common", + "typenum", + "zerocopy", ] [[package]] @@ -798,7 +819,7 @@ dependencies = [ [[package]] name = "mctp-rs" version = "0.1.0" -source = "git+https://github.com/OpenDevicePartnership/embedded-services?branch=main#6d7dbbf71a7e386ae75949fa2b792392df0d857a" +source = "git+https://github.com/OpenDevicePartnership/embedded-services?branch=main#b2914600404371ba150093bec40d4e7e116b3369" dependencies = [ "bit-register 0.1.0 (git+https://github.com/OpenDevicePartnership/odp-utilities)", "crc", @@ -873,7 +894,7 @@ dependencies = [ [[package]] name = "odp-service-common" version = "0.1.0" -source = "git+https://github.com/OpenDevicePartnership/embedded-services?branch=main#6d7dbbf71a7e386ae75949fa2b792392df0d857a" +source = "git+https://github.com/OpenDevicePartnership/embedded-services?branch=main#b2914600404371ba150093bec40d4e7e116b3369" dependencies = [ "embedded-services", "static_cell", @@ -938,14 +959,12 @@ checksum = "c33a9471896f1c69cecef8d20cbe2f7accd12527ce60845ff44c153bb2a21b49" [[package]] name = "power-policy-interface" version = "0.1.0" -source = "git+https://github.com/OpenDevicePartnership/embedded-services?branch=main#6d7dbbf71a7e386ae75949fa2b792392df0d857a" +source = "git+https://github.com/OpenDevicePartnership/embedded-services?branch=main#b2914600404371ba150093bec40d4e7e116b3369" dependencies = [ - "bitfield 0.17.0", "defmt 0.3.100", "embassy-sync 0.8.0", "embedded-batteries-async", "embedded-services", - "num_enum", ] [[package]] @@ -1242,7 +1261,7 @@ dependencies = [ [[package]] name = "thermal-service" version = "0.1.0" -source = "git+https://github.com/OpenDevicePartnership/embedded-services?branch=main#6d7dbbf71a7e386ae75949fa2b792392df0d857a" +source = "git+https://github.com/OpenDevicePartnership/embedded-services?branch=main#b2914600404371ba150093bec40d4e7e116b3369" dependencies = [ "defmt 0.3.100", "embassy-futures", @@ -1259,7 +1278,7 @@ dependencies = [ [[package]] name = "thermal-service-interface" version = "0.1.0" -source = "git+https://github.com/OpenDevicePartnership/embedded-services?branch=main#6d7dbbf71a7e386ae75949fa2b792392df0d857a" +source = "git+https://github.com/OpenDevicePartnership/embedded-services?branch=main#b2914600404371ba150093bec40d4e7e116b3369" dependencies = [ "defmt 0.3.100", "embassy-time", @@ -1270,7 +1289,7 @@ dependencies = [ [[package]] name = "thermal-service-relay" version = "0.1.0" -source = "git+https://github.com/OpenDevicePartnership/embedded-services?branch=main#6d7dbbf71a7e386ae75949fa2b792392df0d857a" +source = "git+https://github.com/OpenDevicePartnership/embedded-services?branch=main#b2914600404371ba150093bec40d4e7e116b3369" dependencies = [ "defmt 0.3.100", "embedded-services", @@ -1311,7 +1330,7 @@ dependencies = [ [[package]] name = "time-alarm-service" version = "0.1.0" -source = "git+https://github.com/OpenDevicePartnership/embedded-services?branch=main#6d7dbbf71a7e386ae75949fa2b792392df0d857a" +source = "git+https://github.com/OpenDevicePartnership/embedded-services?branch=main#b2914600404371ba150093bec40d4e7e116b3369" dependencies = [ "defmt 0.3.100", "embassy-futures", @@ -1327,7 +1346,7 @@ dependencies = [ [[package]] name = "time-alarm-service-interface" version = "0.1.0" -source = "git+https://github.com/OpenDevicePartnership/embedded-services?branch=main#6d7dbbf71a7e386ae75949fa2b792392df0d857a" +source = "git+https://github.com/OpenDevicePartnership/embedded-services?branch=main#b2914600404371ba150093bec40d4e7e116b3369" dependencies = [ "bitfield 0.17.0", "defmt 0.3.100", @@ -1339,13 +1358,15 @@ dependencies = [ [[package]] name = "time-alarm-service-relay" version = "0.1.0" -source = "git+https://github.com/OpenDevicePartnership/embedded-services?branch=main#6d7dbbf71a7e386ae75949fa2b792392df0d857a" +source = "git+https://github.com/OpenDevicePartnership/embedded-services?branch=main#b2914600404371ba150093bec40d4e7e116b3369" dependencies = [ + "bitfield 0.17.0", "defmt 0.3.100", "embedded-mcu-hal 0.3.0", "embedded-services", "num_enum", "time-alarm-service-interface", + "typenum", ] [[package]] @@ -1409,10 +1430,16 @@ dependencies = [ "tracing-log", ] +[[package]] +name = "typenum" +version = "1.20.1" +source = "registry+https://github.com/rust-lang/crates.io-index" +checksum = "b6f5e870be6c3b371b77fe0ee0bafb859fa4964b4404c27de1d380043c4dda20" + [[package]] name = "uart-service" version = "0.1.0" -source = "git+https://github.com/OpenDevicePartnership/embedded-services?branch=main#6d7dbbf71a7e386ae75949fa2b792392df0d857a" +source = "git+https://github.com/OpenDevicePartnership/embedded-services?branch=main#b2914600404371ba150093bec40d4e7e116b3369" dependencies = [ "defmt 0.3.100", "embassy-sync 0.8.0", diff --git a/platform/dev-qemu/Cargo.toml b/platform/dev-qemu/Cargo.toml index 81724c1..0bbda45 100644 --- a/platform/dev-qemu/Cargo.toml +++ b/platform/dev-qemu/Cargo.toml @@ -35,12 +35,9 @@ perf = "deny" suspicious = "deny" style = "deny" -# The `embassy_executor::main` macro expands to code referencing `riscv_rt`, -# and `embedded_services::define_static_buffer!` expands to code referencing -# `embassy_sync`, but cargo-machete cannot see through either macro. Keep the -# direct dependencies and tell machete to ignore them. +# The `embassy_executor::main` macro references `riscv_rt`, which cargo-machete cannot see. [package.metadata.cargo-machete] -ignored = ["riscv-rt", "embassy-sync"] +ignored = ["riscv-rt"] [dependencies] riscv-rt = "0.17.0" @@ -60,14 +57,19 @@ embedded-services = { git = "https://github.com/OpenDevicePartnership/embedded-s uart-service = { git = "https://github.com/OpenDevicePartnership/embedded-services", branch = "main", features = [ "defmt", ] } -hid-service = { git = "https://github.com/OpenDevicePartnership/embedded-services", branch = "main", features = [ +hidi2c-target-service = { git = "https://github.com/OpenDevicePartnership/embedded-services", branch = "main", features = [ "defmt", ] } +time-alarm-service = { git = "https://github.com/OpenDevicePartnership/embedded-services", branch = "main", features = [ + "defmt", +] } +time-alarm-service-relay = { git = "https://github.com/OpenDevicePartnership/embedded-services", branch = "main", features = [ + "defmt", +] } +odp-service-common = { git = "https://github.com/OpenDevicePartnership/embedded-services", branch = "main" } platform-common = { path = "../platform-common", features = ["mock"] } -embedded-mcu-hal = "0.3.0" static_cell = "2.1.0" -embassy-sync = "0.8.0" defmt = "0.3.6" defmt-semihosting = "0.3.0" semihosting = { version = "0.1", features = ["panic-handler"] } diff --git a/platform/dev-qemu/src/hid.rs b/platform/dev-qemu/src/hid.rs index fd96e92..c8ff301 100644 --- a/platform/dev-qemu/src/hid.rs +++ b/platform/dev-qemu/src/hid.rs @@ -1,191 +1,44 @@ -//! Minimal HID-over-I2C device. -//! -//! Just enough to satisfy a host (e.g. Windows) performing the initial -//! HID-over-I2C handshake: serve the HID descriptor and report descriptor, -//! acknowledge `RESET` (asserting the interrupt so the host reads the all-zero -//! reset sentinel), and ack the remaining setup commands. -//! -//! This also demonstrates the basic setup of a HID-over-I2C device on the QEMU EC platform -//! for further development/testing. +//! HID-over-I2C access to the shared time-alarm service. -use core::borrow::BorrowMut; -use defmt::error; +use embassy_executor::Spawner; use embassy_qemu_riscv::gpio::Output; use embassy_qemu_riscv::i2c::target::{Async, I2c}; -use embedded_mcu_hal::i2c::target::Request as TargetRequest; -use embedded_services::hid::{self, Descriptor, DeviceId, RegisterFile, Request, Response}; -use embedded_services::{comms, define_static_buffer}; -use hid_service::i2c::{Command, Host, HostConfig, I2cSlaveAsync}; -use static_cell::StaticCell; +use embedded_services::info; +use hidi2c_target_service::{HardwareVersionInfo, ProductId, TimeoutSettings, VendorId, VersionId}; +use time_alarm_service_relay::hid::TimeAlarmHidRelay; -// HID device ID used to route requests between the I2C host bridge and the device. -const HID_DEVICE_ID: DeviceId = DeviceId(0); - -// Vendor / product / version IDs reported in the HID descriptor. const HID_VID: u16 = 0x045E; // MSFT const HID_PID: u16 = 0x0002; const HID_VERSION: u16 = 0x0100; -// Minimal vendor-defined report descriptor: a single 1-byte input report. -// -// It carries no useful data; it only needs to be a well-formed HID report -// descriptor so the host can parse it and finish enumerating the device. -#[rustfmt::skip] -const REPORT_DESCRIPTOR: &[u8] = &[ - 0x06, 0x00, 0xFF, // Usage Page (Vendor Defined 0xFF00) - 0x09, 0x01, // Usage (0x01) - 0xA1, 0x01, // Collection (Application) - 0x09, 0x01, // Usage (0x01) - 0x15, 0x00, // Logical Minimum (0) - 0x26, 0xFF, 0x00, // Logical Maximum (255) - 0x75, 0x08, // Report Size (8) - 0x95, 0x01, // Report Count (1) - 0x81, 0x02, // Input (Data, Variable, Absolute) - 0xC0, // End Collection -]; - -// Max input report length advertised in the descriptor: 2-byte length prefix + 1 data byte. -const INPUT_MAX_LEN: usize = 3; - -// Build the HID descriptor from the device register layout. -fn descriptor(regs: &RegisterFile) -> Descriptor { - Descriptor { - w_hid_desc_length: hid::DESCRIPTOR_LEN as u16, - bcd_version: HID_VERSION, - w_report_desc_length: REPORT_DESCRIPTOR.len() as u16, - w_report_desc_register: regs.report_desc_reg, - w_input_register: regs.input_reg, - w_max_input_length: INPUT_MAX_LEN as u16, - w_output_register: regs.output_reg, - w_max_output_length: 0, - w_command_register: regs.command_reg, - w_data_register: regs.data_reg, - w_vendor_id: HID_VID, - w_product_id: HID_PID, - w_version_id: HID_VERSION, - } -} - -struct HidI2cSlave(I2c<'static, Async>); -impl I2cSlaveAsync for HidI2cSlave { - type Error = core::convert::Infallible; - - async fn listen(&mut self) -> Result { - loop { - match self.0.listen().await { - TargetRequest::Read(_) => return Ok(Command::Read), - TargetRequest::Write(_) => return Ok(Command::Write), - _ => continue, - } - } - } - - async fn respond_to_write(&mut self, buf: &mut [u8]) -> Result<(), Self::Error> { - let _ = self.0.respond_to_write(buf).await; - Ok(()) - } - - async fn respond_to_read(&mut self, buf: &[u8]) -> Result<(), Self::Error> { - let _ = self.0.respond_to_read(buf).await; - Ok(()) - } -} - -#[embassy_executor::task] -pub async fn host_task(i2c: I2c<'static, Async>) { - define_static_buffer!(host_buf, u8, [0u8; 256]); - let buf = host_buf::get_mut().expect("HID host buffer must not already be borrowed"); - - static HOST: StaticCell> = StaticCell::new(); - let host = HOST.init(Host::new(HID_DEVICE_ID, HidI2cSlave(i2c), buf, HostConfig::default())); - - comms::register_endpoint(host, &host.tp) - .await - .expect("HID host endpoint already registered"); - - loop { - match host.process().await { - Ok(()) => {} - Err(hid_service::Error::Bus(_)) => error!("HID host I2C bus error"), - Err(hid_service::Error::Hid(e)) => error!("HID host error: {:?}", e), - Err(hid_service::Error::Buffer(e)) => error!("HID host buffer error: {:?}", e), - } - } -} - -#[embassy_executor::task] -pub async fn device_task(mut hid_int: Output<'static>) { - let regs = RegisterFile::default(); - - static DEVICE: StaticCell = StaticCell::new(); - let device = DEVICE.init(hid::Device::new(HID_DEVICE_ID, regs)); - hid::register_device(device) - .await - .expect("HID device already registered"); - - // Static response buffers: the encoded HID descriptor, the report descriptor, - // and an always-zero input report (doubles as the reset sentinel). - define_static_buffer!(hid_desc_buf, u8, [0u8; hid::DESCRIPTOR_LEN]); - define_static_buffer!(report_desc_buf, u8, [0u8; REPORT_DESCRIPTOR.len()]); - define_static_buffer!(input_buf, u8, [0u8; INPUT_MAX_LEN]); - - { - let mut owned = hid_desc_buf::get_mut() - .expect("HID descriptor buffer must not already be borrowed") - .borrow_mut() - .expect("HID descriptor buffer borrow"); - let buf: &mut [u8] = owned.borrow_mut(); - descriptor(®s) - .encode_into_slice(buf) - .expect("HID descriptor fits its buffer"); - } - { - let mut owned = report_desc_buf::get_mut() - .expect("report descriptor buffer must not already be borrowed") - .borrow_mut() - .expect("report descriptor buffer borrow"); - let buf: &mut [u8] = owned.borrow_mut(); - buf.copy_from_slice(REPORT_DESCRIPTOR); - } - - loop { - match device.wait_request().await { - Request::Descriptor => { - let _ = device - .send_response(Some(Response::Descriptor(hid_desc_buf::get()))) - .await; - } - Request::ReportDescriptor => { - let _ = device - .send_response(Some(Response::ReportDescriptor(report_desc_buf::get()))) - .await; - } - Request::InputReport => { - // Hand back the empty/reset sentinel and deassert the interrupt - let _ = device - .send_response(Some(Response::InputReport(input_buf::get()))) - .await; - hid_int.set_high(); - } - Request::Command(cmd) => match cmd { - hid::Command::Reset => { - // Ack the reset, then assert the interrupt so the host reads the reset sentinel - let _ = device.send_response(None).await; - hid_int.set_low(); - } - hid::Command::GetReport { .. } => { - let _ = device - .send_response(Some(Response::InputReport(input_buf::get()))) - .await; - } - // Other commands: nothing to do, just ack - _ => { - let _ = device.send_response(None).await; - } - }, - Request::OutputReport(..) => { - let _ = device.send_response(None).await; - } - } - } +type HidI2cService = hidi2c_target_service::Service< + 'static, + I2c<'static, Async>, + Output<'static>, + TimeAlarmHidRelay<'static, time_alarm_service::Service<'static>>, +>; + +pub async fn init( + spawner: Spawner, + i2c: I2c<'static, Async>, + hid_int: Output<'static>, + time_alarm: time_alarm_service::Service<'static>, +) { + info!("Starting HID-I2C time-alarm service"); + let device = TimeAlarmHidRelay::new(time_alarm); + let hwinfo = HardwareVersionInfo { + vendor_id: VendorId::new(HID_VID).expect("HID vendor ID must be nonzero"), + product_id: ProductId(HID_PID), + version_id: VersionId(HID_VERSION), + }; + + odp_service_common::spawn_service!(spawner, HidI2cService, |resources| hidi2c_target_service::Service::new( + resources, + i2c, + hid_int, + device, + hwinfo, + TimeoutSettings::default(), + )) + .expect("Failed to initialize HID-I2C time-alarm service"); } diff --git a/platform/dev-qemu/src/main.rs b/platform/dev-qemu/src/main.rs index c48e504..0457b92 100644 --- a/platform/dev-qemu/src/main.rs +++ b/platform/dev-qemu/src/main.rs @@ -3,38 +3,22 @@ mod board; mod hid; +mod mctp; use board::Board; -use defmt::info; use defmt_semihosting as _; use embassy_executor::Spawner; -use embassy_qemu_riscv::uart::{buffered, Async}; use platform_common::board::BoardIo; -use platform_common::mock::MockOdpRelayHandler; use semihosting as _; // Panic handler -use static_cell::StaticCell; - -#[embassy_executor::task] -async fn uart_service(uart: buffered::Uart<'static, Async>, relay: MockOdpRelayHandler) { - info!("Starting uart service"); - static UART_SERVICE: StaticCell> = StaticCell::new(); - let uart_service = - uart_service::MctpSerialService::default_mctp_serial(relay).expect("failed to init MctpSerial uart-service"); - let uart_service = UART_SERVICE.init(uart_service); - let Err(e) = uart_service::task::uart_service(uart_service, uart).await; - panic!("uart-service error: {:?}", e); -} #[embassy_executor::main] async fn main(spawner: Spawner) { let p = embassy_qemu_riscv::init(); let board = Board::init(p); + let (relay, time_alarm) = platform_common::mock::init_with_time_alarm(spawner).await; - let relay = platform_common::mock::init(spawner).await; - spawner.spawn(uart_service(board.uart, relay).expect("Failed to spawn UART service task")); - - // Bring up a minimal HID-over-I2C device so a host (e.g. Windows) can - // complete its initial HID handshake against the EC - spawner.spawn(hid::host_task(board.i2c).expect("Failed to spawn HID host task")); - spawner.spawn(hid::device_task(board.gpio).expect("Failed to spawn HID device task")); + // This allows thermal and battery to continue receiving requests over uart/mctp, but also allows + // time-alarm to simultaneously receive requests over uart/mctp or hidi2c + spawner.spawn(mctp::uart_service(board.uart, relay).expect("Failed to spawn UART service task")); + hid::init(spawner, board.i2c, board.gpio, time_alarm).await; } diff --git a/platform/dev-qemu/src/mctp.rs b/platform/dev-qemu/src/mctp.rs new file mode 100644 index 0000000..ea42977 --- /dev/null +++ b/platform/dev-qemu/src/mctp.rs @@ -0,0 +1,15 @@ +use defmt::info; +use embassy_qemu_riscv::uart::{buffered, Async}; +use platform_common::mock::MockOdpRelayHandler; +use static_cell::StaticCell; + +#[embassy_executor::task] +pub async fn uart_service(uart: buffered::Uart<'static, Async>, relay: MockOdpRelayHandler) { + info!("Starting uart service"); + static UART_SERVICE: StaticCell> = StaticCell::new(); + let uart_service = + uart_service::MctpSerialService::default_mctp_serial(relay).expect("failed to init MctpSerial uart-service"); + let uart_service = UART_SERVICE.init(uart_service); + let Err(e) = uart_service::task::uart_service(uart_service, uart).await; + panic!("uart-service error: {:?}", e); +} diff --git a/platform/platform-common/Cargo.lock b/platform/platform-common/Cargo.lock index bea829f..c67630f 100644 --- a/platform/platform-common/Cargo.lock +++ b/platform/platform-common/Cargo.lock @@ -90,23 +90,20 @@ dependencies = [ [[package]] name = "battery-service" version = "0.1.0" -source = "git+https://github.com/OpenDevicePartnership/embedded-services?branch=main#62d4ea9a87588c6096e1c2f149ac3263064cbde9" +source = "git+https://github.com/OpenDevicePartnership/embedded-services?branch=main#b2914600404371ba150093bec40d4e7e116b3369" dependencies = [ "battery-service-interface", "defmt 0.3.100", - "embassy-futures", - "embassy-sync", "embassy-time", "embedded-batteries-async", "embedded-services", - "odp-service-common", "power-policy-interface", ] [[package]] name = "battery-service-interface" version = "0.1.0" -source = "git+https://github.com/OpenDevicePartnership/embedded-services?branch=main#62d4ea9a87588c6096e1c2f149ac3263064cbde9" +source = "git+https://github.com/OpenDevicePartnership/embedded-services?branch=main#b2914600404371ba150093bec40d4e7e116b3369" dependencies = [ "defmt 0.3.100", "embedded-batteries-async", @@ -115,7 +112,7 @@ dependencies = [ [[package]] name = "battery-service-relay" version = "0.1.0" -source = "git+https://github.com/OpenDevicePartnership/embedded-services?branch=main#62d4ea9a87588c6096e1c2f149ac3263064cbde9" +source = "git+https://github.com/OpenDevicePartnership/embedded-services?branch=main#b2914600404371ba150093bec40d4e7e116b3369" dependencies = [ "battery-service-interface", "defmt 0.3.100", @@ -134,7 +131,7 @@ dependencies = [ [[package]] name = "bit-register" version = "0.1.0" -source = "git+https://github.com/OpenDevicePartnership/odp-utilities#583015c08ad9855f310bdb25d5cf9abff77b5e08" +source = "git+https://github.com/OpenDevicePartnership/odp-utilities#ff4829bd16c6d9da609c59c98783b474ab9e3d23" dependencies = [ "num-traits", ] @@ -541,6 +538,9 @@ name = "embedded-hal" version = "1.0.0" source = "registry+https://github.com/rust-lang/crates.io-index" checksum = "361a90feb7004eca4019fb28352a9465666b24f840f5c3cddf0ff13920590b89" +dependencies = [ + "defmt 0.3.100", +] [[package]] name = "embedded-hal-async" @@ -548,6 +548,7 @@ version = "1.0.0" source = "registry+https://github.com/rust-lang/crates.io-index" checksum = "0c4c685bbef7fe13c3c6dd4da26841ed3980ef33e841cddfa15ce8a8fb3f1884" dependencies = [ + "defmt 0.3.100", "embedded-hal 1.0.0", ] @@ -591,6 +592,19 @@ dependencies = [ "num_enum", ] +[[package]] +name = "embedded-mcu-hal" +version = "0.3.0" +source = "registry+https://github.com/rust-lang/crates.io-index" +checksum = "0563f27b8ea59eb57e2c5926db6ee311d0a24ab9912adf82b9f418cc9799b0ff" +dependencies = [ + "defmt 1.0.1", + "embedded-hal 1.0.0", + "embedded-hal-async", + "num_enum", + "smbus-pec", +] + [[package]] name = "embedded-sensors-hal" version = "0.1.1" @@ -615,7 +629,7 @@ dependencies = [ [[package]] name = "embedded-services" version = "0.1.0" -source = "git+https://github.com/OpenDevicePartnership/embedded-services?branch=main#62d4ea9a87588c6096e1c2f149ac3263064cbde9" +source = "git+https://github.com/OpenDevicePartnership/embedded-services?branch=main#b2914600404371ba150093bec40d4e7e116b3369" dependencies = [ "bitfield 0.17.0", "cortex-m", @@ -623,10 +637,14 @@ dependencies = [ "defmt 0.3.100", "embassy-futures", "embassy-sync", + "generic-array", + "heapless", "mctp-rs", + "num_enum", "paste", "portable-atomic", "serde", + "typenum", ] [[package]] @@ -641,7 +659,7 @@ dependencies = [ [[package]] name = "espi-device" version = "0.1.0" -source = "git+https://github.com/OpenDevicePartnership/haf-ec-service#290aa80a4c281857f3bed94581200b330119286c" +source = "git+https://github.com/OpenDevicePartnership/haf-ec-service#6166065630a40f7285f883513de33f7b033b2640" dependencies = [ "bit-register 0.1.0 (git+https://github.com/OpenDevicePartnership/odp-utilities?tag=v0.1.0)", "bitflags 2.10.0", @@ -696,6 +714,16 @@ dependencies = [ "windows-result", ] +[[package]] +name = "generic-array" +version = "1.4.5" +source = "registry+https://github.com/rust-lang/crates.io-index" +checksum = "337d46834ee672ab3e48caca2cb0c78cc174fb12b3a68d0d88f99a0519a5e36e" +dependencies = [ + "rustversion", + "typenum", +] + [[package]] name = "hash32" version = "0.3.1" @@ -820,7 +848,7 @@ dependencies = [ [[package]] name = "mctp-rs" version = "0.1.0" -source = "git+https://github.com/OpenDevicePartnership/embedded-services?branch=main#62d4ea9a87588c6096e1c2f149ac3263064cbde9" +source = "git+https://github.com/OpenDevicePartnership/embedded-services?branch=main#b2914600404371ba150093bec40d4e7e116b3369" dependencies = [ "bit-register 0.1.0 (git+https://github.com/OpenDevicePartnership/odp-utilities)", "defmt 0.3.100", @@ -968,7 +996,7 @@ dependencies = [ [[package]] name = "odp-service-common" version = "0.1.0" -source = "git+https://github.com/OpenDevicePartnership/embedded-services?branch=main#62d4ea9a87588c6096e1c2f149ac3263064cbde9" +source = "git+https://github.com/OpenDevicePartnership/embedded-services?branch=main#b2914600404371ba150093bec40d4e7e116b3369" dependencies = [ "embedded-services", "static_cell", @@ -1017,7 +1045,7 @@ dependencies = [ "embedded-hal-async", "embedded-io 0.7.1", "embedded-io-async 0.7.0", - "embedded-mcu-hal", + "embedded-mcu-hal 0.2.0", "embedded-sensors-hal-async", "embedded-services", "odp-service-common", @@ -1039,14 +1067,12 @@ checksum = "c33a9471896f1c69cecef8d20cbe2f7accd12527ce60845ff44c153bb2a21b49" [[package]] name = "power-policy-interface" version = "0.1.0" -source = "git+https://github.com/OpenDevicePartnership/embedded-services?branch=main#62d4ea9a87588c6096e1c2f149ac3263064cbde9" +source = "git+https://github.com/OpenDevicePartnership/embedded-services?branch=main#b2914600404371ba150093bec40d4e7e116b3369" dependencies = [ - "bitfield 0.17.0", "defmt 0.3.100", "embassy-sync", "embedded-batteries-async", "embedded-services", - "num_enum", ] [[package]] @@ -1286,7 +1312,7 @@ checksum = "55937e1799185b12863d447f42597ed69d9928686b8d88a1df17376a097d8369" [[package]] name = "thermal-service" version = "0.1.0" -source = "git+https://github.com/OpenDevicePartnership/embedded-services?branch=main#62d4ea9a87588c6096e1c2f149ac3263064cbde9" +source = "git+https://github.com/OpenDevicePartnership/embedded-services?branch=main#b2914600404371ba150093bec40d4e7e116b3369" dependencies = [ "defmt 0.3.100", "embassy-futures", @@ -1303,7 +1329,7 @@ dependencies = [ [[package]] name = "thermal-service-interface" version = "0.1.0" -source = "git+https://github.com/OpenDevicePartnership/embedded-services?branch=main#62d4ea9a87588c6096e1c2f149ac3263064cbde9" +source = "git+https://github.com/OpenDevicePartnership/embedded-services?branch=main#b2914600404371ba150093bec40d4e7e116b3369" dependencies = [ "defmt 0.3.100", "embassy-time", @@ -1314,7 +1340,7 @@ dependencies = [ [[package]] name = "thermal-service-relay" version = "0.1.0" -source = "git+https://github.com/OpenDevicePartnership/embedded-services?branch=main#62d4ea9a87588c6096e1c2f149ac3263064cbde9" +source = "git+https://github.com/OpenDevicePartnership/embedded-services?branch=main#b2914600404371ba150093bec40d4e7e116b3369" dependencies = [ "defmt 0.3.100", "embedded-services", @@ -1355,13 +1381,13 @@ dependencies = [ [[package]] name = "time-alarm-service" version = "0.1.0" -source = "git+https://github.com/OpenDevicePartnership/embedded-services?branch=main#62d4ea9a87588c6096e1c2f149ac3263064cbde9" +source = "git+https://github.com/OpenDevicePartnership/embedded-services?branch=main#b2914600404371ba150093bec40d4e7e116b3369" dependencies = [ "defmt 0.3.100", "embassy-futures", "embassy-sync", "embassy-time", - "embedded-mcu-hal", + "embedded-mcu-hal 0.3.0", "embedded-services", "odp-service-common", "time-alarm-service-interface", @@ -1371,11 +1397,11 @@ dependencies = [ [[package]] name = "time-alarm-service-interface" version = "0.1.0" -source = "git+https://github.com/OpenDevicePartnership/embedded-services?branch=main#62d4ea9a87588c6096e1c2f149ac3263064cbde9" +source = "git+https://github.com/OpenDevicePartnership/embedded-services?branch=main#b2914600404371ba150093bec40d4e7e116b3369" dependencies = [ "bitfield 0.17.0", "defmt 0.3.100", - "embedded-mcu-hal", + "embedded-mcu-hal 0.3.0", "num_enum", "zerocopy", ] @@ -1383,13 +1409,15 @@ dependencies = [ [[package]] name = "time-alarm-service-relay" version = "0.1.0" -source = "git+https://github.com/OpenDevicePartnership/embedded-services?branch=main#62d4ea9a87588c6096e1c2f149ac3263064cbde9" +source = "git+https://github.com/OpenDevicePartnership/embedded-services?branch=main#b2914600404371ba150093bec40d4e7e116b3369" dependencies = [ + "bitfield 0.17.0", "defmt 0.3.100", - "embedded-mcu-hal", + "embedded-mcu-hal 0.3.0", "embedded-services", "num_enum", "time-alarm-service-interface", + "typenum", ] [[package]] @@ -1453,6 +1481,12 @@ dependencies = [ "tracing-log", ] +[[package]] +name = "typenum" +version = "1.20.1" +source = "registry+https://github.com/rust-lang/crates.io-index" +checksum = "b6f5e870be6c3b371b77fe0ee0bafb859fa4964b4404c27de1d380043c4dda20" + [[package]] name = "unicode-ident" version = "1.0.22" diff --git a/platform/platform-common/src/lib.rs b/platform/platform-common/src/lib.rs index c4c3f9c..f9bd733 100644 --- a/platform/platform-common/src/lib.rs +++ b/platform/platform-common/src/lib.rs @@ -26,7 +26,7 @@ macro_rules! impl_relay_handler { Thermal, 0x09, thermal_service_relay::ThermalServiceRelayHandler<$thermal_service_ty>; TimeAlarm, 0x0B, - time_alarm_service_relay::TimeAlarmServiceRelayHandler>; + time_alarm_service_relay::mctp::TimeAlarmServiceRelayHandler>; ); }; } diff --git a/platform/platform-common/src/mock/mod.rs b/platform/platform-common/src/mock/mod.rs index a9ac63c..f04d673 100644 --- a/platform/platform-common/src/mock/mod.rs +++ b/platform/platform-common/src/mock/mod.rs @@ -14,6 +14,16 @@ crate::impl_relay_handler!( /// Initialize mock embedded services. pub async fn init(spawner: embassy_executor::Spawner) -> MockOdpRelayHandler { + init_with_time_alarm(spawner).await.0 +} + +/// Initialize mock services and expose the shared time-alarm handle. +/// +/// This is primarily used right now so the time-alarm handle can also be used by the hidi2c +/// service on `dev-qemu`. +pub async fn init_with_time_alarm( + spawner: embassy_executor::Spawner, +) -> (MockOdpRelayHandler, time_alarm_service::Service<'static>) { embedded_services::info!("Initializing mock services..."); embedded_services::init().await; @@ -21,9 +31,11 @@ pub async fn init(spawner: embassy_executor::Spawner) -> MockOdpRelayHandler { let battery = battery::init(spawner).await; let tas = time_alarm::init(spawner).await; - MockOdpRelayHandler::new( + let relay = MockOdpRelayHandler::new( battery_service_relay::BatteryServiceRelayHandler::new(battery), thermal_service_relay::ThermalServiceRelayHandler::new(thermal), - time_alarm_service_relay::TimeAlarmServiceRelayHandler::new(tas), - ) + time_alarm_service_relay::mctp::TimeAlarmServiceRelayHandler::new(tas), + ); + + (relay, tas) } From de22288016df21670b3feefba696ac9655abc300 Mon Sep 17 00:00:00 2001 From: Kurtis Dinelle Date: Fri, 9 Oct 2026 11:44:42 -0700 Subject: [PATCH 2/2] Update cargo-vet audit imports --- platform/dev-imxrt/supply-chain/imports.lock | 105 ++++----- platform/dev-mcxa/Cargo.lock | 4 +- platform/dev-mcxa/supply-chain/config.toml | 2 +- platform/dev-mcxa/supply-chain/imports.lock | 214 ++++++++++++++----- platform/dev-npcx/Cargo.lock | 4 +- platform/dev-npcx/supply-chain/imports.lock | 106 +++++---- platform/dev-qemu/Cargo.lock | 4 +- platform/dev-qemu/supply-chain/imports.lock | 107 ++++++---- 8 files changed, 361 insertions(+), 185 deletions(-) diff --git a/platform/dev-imxrt/supply-chain/imports.lock b/platform/dev-imxrt/supply-chain/imports.lock index a273221..69c9f5e 100644 --- a/platform/dev-imxrt/supply-chain/imports.lock +++ b/platform/dev-imxrt/supply-chain/imports.lock @@ -5,7 +5,7 @@ who = "Jerry Xie " criteria = "safe-to-deploy" delta = "1.4.0 -> 1.5.0" -notes = "No unsafe, no build.rs, no network access; delta adds edition-aware rustc probing and best-effort probe-file cleanup only. Assisted-by: copilot-cli:GPT-5.3-Codex cargo-vet" +notes = "No unsafe, no build.rs, no network access; delta adds edition-aware rustc probing and best-effort probe-file cleanup only. Assisted-by: copilot-cli:GPT-5.3-Codex" aggregated-from = "https://raw.githubusercontent.com/OpenDevicePartnership/embedded-services/refs/heads/main/supply-chain/audits.toml" [[audits.OpenDevicePartnership.audits.bare-metal]] @@ -24,21 +24,21 @@ aggregated-from = "https://raw.githubusercontent.com/OpenDevicePartnership/mcxa- who = "Jerry Xie " criteria = "safe-to-deploy" delta = "0.13.2 -> 0.15.0" -notes = "Delta audit: BitRange/Bit traits split into read-only and mutable variants (BitRangeMut/BitMut); added mask constant generation; clippy fixes; MSRV bump. No unsafe, no build script, no proc macros, no powerful imports. Assisted-by: copilot-cli:claude-opus-4.6 cargo-vet" +notes = "Delta audit: BitRange/Bit traits split into read-only and mutable variants (BitRangeMut/BitMut); added mask constant generation; clippy fixes; MSRV bump. No unsafe, no build script, no proc macros, no powerful imports. Assisted-by: copilot-cli:claude-opus-4.6" aggregated-from = "https://raw.githubusercontent.com/OpenDevicePartnership/embedded-services/refs/heads/main/supply-chain/audits.toml" [[audits.OpenDevicePartnership.audits.bitfield]] who = "Jerry Xie " criteria = "safe-to-deploy" delta = "0.15.0 -> 0.17.0" -notes = "Delta: adds bitwise op derives, constructor derives, arbitrary visibility. Pure declarative macros. No unsafe, no build script. Assisted-by: copilot-cli:claude-opus-4.6 cargo-vet" +notes = "Delta: adds bitwise op derives, constructor derives, arbitrary visibility. Pure declarative macros. No unsafe, no build script. Assisted-by: copilot-cli:claude-opus-4.6" aggregated-from = "https://raw.githubusercontent.com/OpenDevicePartnership/embedded-services/refs/heads/main/supply-chain/audits.toml" [[audits.OpenDevicePartnership.audits.bitfield-struct]] who = "Jerry Xie " criteria = "safe-to-deploy" version = "0.10.1" -notes = "Proc-macro crate generating safe bitfield structs. No unsafe, no build script. Standard proc-macro deps only. Assisted-by: copilot-cli:claude-opus-4.6 cargo-vet" +notes = "Proc-macro crate generating safe bitfield structs. No unsafe, no build script. Standard proc-macro deps only. Assisted-by: copilot-cli:claude-opus-4.6" aggregated-from = "https://raw.githubusercontent.com/OpenDevicePartnership/embedded-services/refs/heads/main/supply-chain/audits.toml" [[audits.OpenDevicePartnership.audits.bitfield-struct]] @@ -52,7 +52,7 @@ aggregated-from = "https://raw.githubusercontent.com/OpenDevicePartnership/embed who = "Jerry Xie " criteria = "safe-to-deploy" version = "0.3.4" -notes = "Intrusive data structures crate (no_std). ~115 unsafe blocks, all necessary for intrusive linked list/queue/stack ops. Correct patterns: addr_of_mut, proper atomic orderings, Vyukov MPSC algorithm. No build script, no proc macros, no powerful imports. Assisted-by: copilot-cli:claude-opus-4.6 cargo-vet" +notes = "Intrusive data structures crate (no_std). ~115 unsafe blocks, all necessary for intrusive linked list/queue/stack ops. Correct patterns: addr_of_mut, proper atomic orderings, Vyukov MPSC algorithm. No build script, no proc macros, no powerful imports. Assisted-by: copilot-cli:claude-opus-4.6" aggregated-from = "https://raw.githubusercontent.com/OpenDevicePartnership/embedded-services/refs/heads/main/supply-chain/audits.toml" [[audits.OpenDevicePartnership.audits.cortex-m]] @@ -83,14 +83,14 @@ aggregated-from = "https://raw.githubusercontent.com/OpenDevicePartnership/mcxa- who = "Jerry Xie " criteria = "safe-to-deploy" delta = "0.2.3 -> 0.2.4" -notes = "Tiny diff to use newer core/std features via build.rs env var for path separator; no safety impact. Assisted-by: copilot-cli:GPT-5.3-Codex cargo-vet" +notes = "Tiny diff to use newer core/std features via build.rs env var for path separator; no safety impact. Assisted-by: copilot-cli:GPT-5.3-Codex" aggregated-from = "https://raw.githubusercontent.com/OpenDevicePartnership/embedded-services/refs/heads/main/supply-chain/audits.toml" [[audits.OpenDevicePartnership.audits.defmt]] who = "Jerry Xie " criteria = "safe-to-deploy" version = "0.3.100" -notes = "Compatibility shim: no_std crate that re-exports defmt 1.x items for 0.3 API compatibility. No unsafe code, no build script, no powerful imports, no logic - pure pub-use re-exports. Assisted-by: copilot-cli:claude-opus-4.6 cargo-vet" +notes = "Compatibility shim: no_std crate that re-exports defmt 1.x items for 0.3 API compatibility. No unsafe code, no build script, no powerful imports, no logic - pure pub-use re-exports. Assisted-by: copilot-cli:claude-opus-4.6" aggregated-from = "https://raw.githubusercontent.com/OpenDevicePartnership/embedded-services/refs/heads/main/supply-chain/audits.toml" [[audits.OpenDevicePartnership.audits.defmt-parser]] @@ -103,21 +103,20 @@ aggregated-from = "https://raw.githubusercontent.com/OpenDevicePartnership/mcxa- who = "Felipe Balbi " criteria = "safe-to-deploy" version = "1.0.9" -aggregated-from = "https://raw.githubusercontent.com/OpenDevicePartnership/tps6699x/refs/heads/main/supply-chain/audits.toml" +aggregated-from = "https://raw.githubusercontent.com/OpenDevicePartnership/bq25723/refs/heads/main/supply-chain/audits.toml" [[audits.OpenDevicePartnership.audits.embassy-embedded-hal]] who = "Jerry Xie " criteria = "safe-to-deploy" version = "0.5.0" -notes = "No unsafe, no build script, no proc macros. no_std shared bus/flash partition utilities for embedded-hal traits. Assisted-by: copilot-cli:claude-opus-4.6 cargo-vet" +notes = "No unsafe, no build script, no proc macros. no_std shared bus/flash partition utilities for embedded-hal traits. Assisted-by: copilot-cli:claude-opus-4.6" aggregated-from = "https://raw.githubusercontent.com/OpenDevicePartnership/embedded-services/refs/heads/main/supply-chain/audits.toml" [[audits.OpenDevicePartnership.audits.embassy-embedded-hal]] -who = "Jerry Xie " +who = "Billy Price " criteria = "safe-to-deploy" delta = "0.5.0 -> 0.6.0" -notes = "Edition 2024. Dependency updates (embassy-sync 0.8.0, embassy-hal-internal 0.4.0). Added defmt feature. Shared I2c impl Clone. Code improvements using .any(). Trusted publisher (lulf)." -aggregated-from = "https://raw.githubusercontent.com/OpenDevicePartnership/embassy-imxrt/refs/heads/main/supply-chain/audits.toml" +aggregated-from = "https://raw.githubusercontent.com/OpenDevicePartnership/embedded-services/refs/heads/main/supply-chain/audits.toml" [[audits.OpenDevicePartnership.audits.embassy-executor-timer-queue]] who = "Felipe Balbi " @@ -129,55 +128,55 @@ aggregated-from = "https://raw.githubusercontent.com/OpenDevicePartnership/embas who = "Jerry Xie " criteria = "safe-to-deploy" version = "0.1.2" -notes = "no_std future combinators. All unsafe is pin-projection and no-op RawWaker - reviewed and sound. Assisted-by: copilot-cli:claude-opus-4.6 cargo-vet" +notes = "no_std future combinators. All unsafe is pin-projection and no-op RawWaker - reviewed and sound. Assisted-by: copilot-cli:claude-opus-4.6" aggregated-from = "https://raw.githubusercontent.com/OpenDevicePartnership/embedded-services/refs/heads/main/supply-chain/audits.toml" [[audits.OpenDevicePartnership.audits.embassy-hal-internal]] who = "Jerry Xie " criteria = "safe-to-deploy" version = "0.3.0" -notes = "no_std HAL internals. Unsafe in atomic ring buffer (sound SPSC), peripheral singletons, cortex-m interrupt priority. Build script emits cfg flags only. Assisted-by: copilot-cli:claude-opus-4.6 cargo-vet" +notes = "no_std HAL internals. Unsafe in atomic ring buffer (sound SPSC), peripheral singletons, cortex-m interrupt priority. Build script emits cfg flags only. Assisted-by: copilot-cli:claude-opus-4.6" aggregated-from = "https://raw.githubusercontent.com/OpenDevicePartnership/embedded-services/refs/heads/main/supply-chain/audits.toml" [[audits.OpenDevicePartnership.audits.embassy-hal-internal]] -who = "Jerry Xie " +who = "Billy Price " criteria = "safe-to-deploy" delta = "0.3.0 -> 0.4.0" -notes = "Edition update to 2024. Added defmt/log features and RingBuffer helper methods (available, is_half_full). Safe additions only. Trusted publisher (lulf)." -aggregated-from = "https://raw.githubusercontent.com/OpenDevicePartnership/embassy-imxrt/refs/heads/main/supply-chain/audits.toml" +aggregated-from = "https://raw.githubusercontent.com/OpenDevicePartnership/embedded-services/refs/heads/main/supply-chain/audits.toml" [[audits.OpenDevicePartnership.audits.embassy-sync]] who = "Jerry Xie " criteria = "safe-to-deploy" version = "0.8.0" -notes = "no_std async sync primitives. Substantial unsafe for UnsafeCell-based interiors and Send/Sync impls -- all reviewed and sound, guarded by RawMutex/critical_section. Build script only reads TARGET env var. No proc macros, no powerful imports. Assisted-by: copilot-cli:claude-opus-4.6 cargo-vet" +notes = "no_std async sync primitives. Substantial unsafe for UnsafeCell-based interiors and Send/Sync impls -- all reviewed and sound, guarded by RawMutex/critical_section. Build script only reads TARGET env var. No proc macros, no powerful imports. Assisted-by: copilot-cli:claude-opus-4.6" aggregated-from = "https://raw.githubusercontent.com/OpenDevicePartnership/embedded-services/refs/heads/main/supply-chain/audits.toml" [[audits.OpenDevicePartnership.audits.embassy-time]] who = "Felipe Balbi " criteria = "safe-to-deploy" version = "0.5.0" -aggregated-from = "https://raw.githubusercontent.com/OpenDevicePartnership/tps6699x/refs/heads/main/supply-chain/audits.toml" +aggregated-from = [ + "https://raw.githubusercontent.com/OpenDevicePartnership/tps6699x/refs/heads/main/supply-chain/audits.toml", + "https://raw.githubusercontent.com/OpenDevicePartnership/tps6699x/refs/heads/main/supply-chain/audits.toml", +] [[audits.OpenDevicePartnership.audits.embassy-time]] -who = "Jerry Xie " +who = "Billy Price " criteria = "safe-to-deploy" delta = "0.5.0 -> 0.5.1" -notes = "Edition 2024. Added nanosecond conversion methods, 375kHz tick rate. Dependency updates (embassy-executor 0.10.0, embassy-time-driver 0.2.2). Added log feature. Trusted publisher (lulf)." -aggregated-from = "https://raw.githubusercontent.com/OpenDevicePartnership/embassy-imxrt/refs/heads/main/supply-chain/audits.toml" +aggregated-from = "https://raw.githubusercontent.com/OpenDevicePartnership/embedded-services/refs/heads/main/supply-chain/audits.toml" [[audits.OpenDevicePartnership.audits.embassy-time-driver]] who = "Jerry Xie " criteria = "safe-to-deploy" version = "0.2.1" -notes = "no_std driver trait for embassy-time. Minimal unsafe for extern Rust FFI calls (sound via links key). Empty build.rs. Assisted-by: copilot-cli:claude-opus-4.6 cargo-vet" +notes = "no_std driver trait for embassy-time. Minimal unsafe for extern Rust FFI calls (sound via links key). Empty build.rs. Assisted-by: copilot-cli:claude-opus-4.6" aggregated-from = "https://raw.githubusercontent.com/OpenDevicePartnership/embedded-services/refs/heads/main/supply-chain/audits.toml" [[audits.OpenDevicePartnership.audits.embassy-time-driver]] -who = "Jerry Xie " +who = "Billy Price " criteria = "safe-to-deploy" delta = "0.2.1 -> 0.2.2" -notes = "Rust 2024 edition update with 375kHz tick rate feature. Empty build.rs, no unsafe code, no powerful imports." aggregated-from = "https://raw.githubusercontent.com/OpenDevicePartnership/embedded-services/refs/heads/main/supply-chain/audits.toml" [[audits.OpenDevicePartnership.audits.embassy-time-queue-utils]] @@ -236,21 +235,21 @@ aggregated-from = "https://raw.githubusercontent.com/OpenDevicePartnership/mcxa- who = "Jerry Xie " criteria = "safe-to-deploy" delta = "0.2.7 -> 1.0.0" -notes = "Pure no_std trait crate. Complete API redesign for 1.0: removed nb-based traits, CAN module, all unsafe code. Only defines traits/enums/types for digital, I2C, SPI, PWM, delay. No build script, no proc macros, no powerful imports. Assisted-by: copilot-cli:claude-opus-4.6 cargo-vet" +notes = "Pure no_std trait crate. Complete API redesign for 1.0: removed nb-based traits, CAN module, all unsafe code. Only defines traits/enums/types for digital, I2C, SPI, PWM, delay. No build script, no proc macros, no powerful imports. Assisted-by: copilot-cli:claude-opus-4.6" aggregated-from = "https://raw.githubusercontent.com/OpenDevicePartnership/embedded-services/refs/heads/main/supply-chain/audits.toml" [[audits.OpenDevicePartnership.audits.embedded-hal-async]] who = "Jerry Xie " criteria = "safe-to-deploy" version = "1.0.0" -notes = "no_std async HAL trait definitions. No unsafe in library. Build script only runs rustc --version. Assisted-by: copilot-cli:claude-opus-4.6 cargo-vet" +notes = "no_std async HAL trait definitions. No unsafe in library. Build script only runs rustc --version. Assisted-by: copilot-cli:claude-opus-4.6" aggregated-from = "https://raw.githubusercontent.com/OpenDevicePartnership/embedded-services/refs/heads/main/supply-chain/audits.toml" [[audits.OpenDevicePartnership.audits.embedded-hal-nb]] who = "Jerry Xie " criteria = "safe-to-deploy" version = "1.0.0" -notes = "no_std trait-only crate. No unsafe, no build script, no proc macros, no powerful imports. Assisted-by: copilot-cli:claude-opus-4.6 cargo-vet" +notes = "no_std trait-only crate. No unsafe, no build script, no proc macros, no powerful imports. Assisted-by: copilot-cli:claude-opus-4.6" aggregated-from = "https://raw.githubusercontent.com/OpenDevicePartnership/embedded-services/refs/heads/main/supply-chain/audits.toml" [[audits.OpenDevicePartnership.audits.embedded-io]] @@ -264,14 +263,14 @@ aggregated-from = "https://raw.githubusercontent.com/OpenDevicePartnership/embas who = "Jerry Xie " criteria = "safe-to-deploy" version = "0.6.1" -notes = "No unsafe. Build script only detects nightly via rustc --version. Pure async trait definitions for embedded I/O. Assisted-by: copilot-cli:claude-opus-4.6 cargo-vet" +notes = "No unsafe. Build script only detects nightly via rustc --version. Pure async trait definitions for embedded I/O. Assisted-by: copilot-cli:claude-opus-4.6" aggregated-from = "https://raw.githubusercontent.com/OpenDevicePartnership/embedded-services/refs/heads/main/supply-chain/audits.toml" [[audits.OpenDevicePartnership.audits.embedded-io-async]] who = "Jerry Xie " criteria = "safe-to-deploy" delta = "0.6.1 -> 0.7.0" -notes = "Delta 0.6.1->0.7.0: No unsafe. Build script removed (AFIT now stable). flush() made required, BufRead requires Read, new VecDeque impls. Assisted-by: copilot-cli:claude-opus-4.6 cargo-vet" +notes = "Delta 0.6.1->0.7.0: No unsafe. Build script removed (AFIT now stable). flush() made required, BufRead requires Read, new VecDeque impls. Assisted-by: copilot-cli:claude-opus-4.6" aggregated-from = "https://raw.githubusercontent.com/OpenDevicePartnership/embedded-services/refs/heads/main/supply-chain/audits.toml" [[audits.OpenDevicePartnership.audits.embedded-mcu-hal]] @@ -292,21 +291,27 @@ aggregated-from = "https://raw.githubusercontent.com/OpenDevicePartnership/embed who = "Jerry Xie " criteria = "safe-to-deploy" version = "0.3.1" -notes = "Pure no_std storage abstraction traits. deny(unsafe_code), no build script, no dependencies, no powerful imports. Assisted-by: copilot-cli:claude-opus-4.6 cargo-vet" +notes = "Pure no_std storage abstraction traits. deny(unsafe_code), no build script, no dependencies, no powerful imports. Assisted-by: copilot-cli:claude-opus-4.6" aggregated-from = "https://raw.githubusercontent.com/OpenDevicePartnership/embedded-services/refs/heads/main/supply-chain/audits.toml" [[audits.OpenDevicePartnership.audits.embedded-storage-async]] who = "Jerry Xie " criteria = "safe-to-deploy" version = "0.4.1" -notes = "Pure no_std async trait definitions for NOR flash storage. No unsafe code, no build script, no powerful imports. Only dependency is embedded-storage. Assisted-by: copilot-cli:claude-opus-4.6 cargo-vet" +notes = "Pure no_std async trait definitions for NOR flash storage. No unsafe code, no build script, no powerful imports. Only dependency is embedded-storage. Assisted-by: copilot-cli:claude-opus-4.6" +aggregated-from = "https://raw.githubusercontent.com/OpenDevicePartnership/embedded-services/refs/heads/main/supply-chain/audits.toml" + +[[audits.OpenDevicePartnership.audits.generic-array]] +who = "Billy Price " +criteria = "safe-to-deploy" +version = "1.4.2" aggregated-from = "https://raw.githubusercontent.com/OpenDevicePartnership/embedded-services/refs/heads/main/supply-chain/audits.toml" [[audits.OpenDevicePartnership.audits.hash32]] who = "Jerry Xie " criteria = "safe-to-deploy" version = "0.3.1" -notes = "no_std 32-bit hashing (FNV, MurmurHash3). ~10 unsafe blocks in murmur3.rs for MaybeUninit buffer handling - all sound. Assisted-by: copilot-cli:claude-opus-4.6 cargo-vet" +notes = "no_std 32-bit hashing (FNV, MurmurHash3). ~10 unsafe blocks in murmur3.rs for MaybeUninit buffer handling - all sound. Assisted-by: copilot-cli:claude-opus-4.6" aggregated-from = "https://raw.githubusercontent.com/OpenDevicePartnership/embedded-services/refs/heads/main/supply-chain/audits.toml" [[audits.OpenDevicePartnership.audits.heck]] @@ -332,7 +337,7 @@ aggregated-from = "https://raw.githubusercontent.com/OpenDevicePartnership/embed who = "Jerry Xie " criteria = "safe-to-deploy" version = "0.2.1" -notes = "Pure no_std data-definition crate for MIMXRT600 flash config blocks. No unsafe, no build script. Assisted-by: copilot-cli:claude-opus-4.6 cargo-vet" +notes = "Pure no_std data-definition crate for MIMXRT600 flash config blocks. No unsafe, no build script. Assisted-by: copilot-cli:claude-opus-4.6" aggregated-from = "https://raw.githubusercontent.com/OpenDevicePartnership/embedded-services/refs/heads/main/supply-chain/audits.toml" [[audits.OpenDevicePartnership.audits.mimxrt600-fcb]] @@ -463,7 +468,7 @@ aggregated-from = "https://raw.githubusercontent.com/OpenDevicePartnership/embed who = "Jerry Xie " criteria = "safe-to-deploy" delta = "1.1.4 -> 1.1.9" -notes = "No build script, no FS/net/process capability expansion; unsafe refactor to lock-free insertion and nightly TLS path appears sound on review. Assisted-by: copilot-cli:GPT-5.3-Codex cargo-vet" +notes = "No build script, no FS/net/process capability expansion; unsafe refactor to lock-free insertion and nightly TLS path appears sound on review. Assisted-by: copilot-cli:GPT-5.3-Codex" aggregated-from = "https://raw.githubusercontent.com/OpenDevicePartnership/embedded-services/refs/heads/main/supply-chain/audits.toml" [[audits.OpenDevicePartnership.audits.tracing-log]] @@ -482,7 +487,7 @@ aggregated-from = "https://raw.githubusercontent.com/OpenDevicePartnership/embed who = "Jerry Xie " criteria = "safe-to-deploy" version = "0.1.1" -notes = "No unsafe code; build.rs only sets target atomic cfg via env; no fs/net/process capability use observed; behavior matches value-inspection purpose. Assisted-by: copilot-cli:GPT-5.3-Codex cargo-vet" +notes = "No unsafe code; build.rs only sets target atomic cfg via env; no fs/net/process capability use observed; behavior matches value-inspection purpose. Assisted-by: copilot-cli:GPT-5.3-Codex" aggregated-from = "https://raw.githubusercontent.com/OpenDevicePartnership/embedded-services/refs/heads/main/supply-chain/audits.toml" [[audits.OpenDevicePartnership.audits.vcell]] @@ -980,25 +985,25 @@ who = "Alex Franchuk " criteria = "safe-to-deploy" delta = "1.3.2 -> 2.0.2" notes = "Removal of some unsafe code/methods. No changes to externals, just some refactoring (mostly internal)." -aggregated-from = "https://hg.mozilla.org/mozilla-central/raw-file/tip/supply-chain/audits.toml" +aggregated-from = "https://raw.githubusercontent.com/mozilla-firefox/firefox/main/supply-chain/audits.toml" [[audits.mozilla.audits.bitflags]] who = "Nicolas Silva " criteria = "safe-to-deploy" delta = "2.0.2 -> 2.1.0" -aggregated-from = "https://hg.mozilla.org/mozilla-central/raw-file/tip/supply-chain/audits.toml" +aggregated-from = "https://raw.githubusercontent.com/mozilla-firefox/firefox/main/supply-chain/audits.toml" [[audits.mozilla.audits.bitflags]] who = "Teodor Tanasoaia " criteria = "safe-to-deploy" delta = "2.2.1 -> 2.3.2" -aggregated-from = "https://hg.mozilla.org/mozilla-central/raw-file/tip/supply-chain/audits.toml" +aggregated-from = "https://raw.githubusercontent.com/mozilla-firefox/firefox/main/supply-chain/audits.toml" [[audits.mozilla.audits.bitflags]] who = "Mike Hommey " criteria = "safe-to-deploy" delta = "2.3.3 -> 2.4.0" -aggregated-from = "https://hg.mozilla.org/mozilla-central/raw-file/tip/supply-chain/audits.toml" +aggregated-from = "https://raw.githubusercontent.com/mozilla-firefox/firefox/main/supply-chain/audits.toml" [[audits.mozilla.audits.bitflags]] who = "Jan-Erik Rediger " @@ -1014,32 +1019,32 @@ who = [ ] criteria = "safe-to-deploy" delta = "2.6.0 -> 2.7.0" -aggregated-from = "https://hg.mozilla.org/mozilla-central/raw-file/tip/supply-chain/audits.toml" +aggregated-from = "https://raw.githubusercontent.com/mozilla-firefox/firefox/main/supply-chain/audits.toml" [[audits.mozilla.audits.bitflags]] who = "Benjamin VanderSloot " criteria = "safe-to-deploy" delta = "2.9.4 -> 2.10.0" -aggregated-from = "https://hg.mozilla.org/mozilla-central/raw-file/tip/supply-chain/audits.toml" +aggregated-from = "https://raw.githubusercontent.com/mozilla-firefox/firefox/main/supply-chain/audits.toml" [[audits.mozilla.audits.crunchy]] who = "Erich Gubler " criteria = "safe-to-deploy" version = "0.2.3" -aggregated-from = "https://hg.mozilla.org/mozilla-central/raw-file/tip/supply-chain/audits.toml" +aggregated-from = "https://raw.githubusercontent.com/mozilla-firefox/firefox/main/supply-chain/audits.toml" [[audits.mozilla.audits.fnv]] who = "Bobby Holley " criteria = "safe-to-deploy" version = "1.0.7" notes = "Simple hasher implementation with no unsafe code." -aggregated-from = "https://hg.mozilla.org/mozilla-central/raw-file/tip/supply-chain/audits.toml" +aggregated-from = "https://raw.githubusercontent.com/mozilla-firefox/firefox/main/supply-chain/audits.toml" [[audits.mozilla.audits.log]] who = "Erich Gubler " criteria = "safe-to-deploy" delta = "0.4.26 -> 0.4.29" -aggregated-from = "https://hg.mozilla.org/mozilla-central/raw-file/tip/supply-chain/audits.toml" +aggregated-from = "https://raw.githubusercontent.com/mozilla-firefox/firefox/main/supply-chain/audits.toml" [[audits.mozilla.audits.proc-macro2]] who = "Jan-Erik Rediger " @@ -1057,7 +1062,7 @@ aggregated-from = "https://raw.githubusercontent.com/mozilla/glean/main/supply-c who = "Erich Gubler " criteria = "safe-to-deploy" delta = "1.0.226 -> 1.0.227" -aggregated-from = "https://hg.mozilla.org/mozilla-central/raw-file/tip/supply-chain/audits.toml" +aggregated-from = "https://raw.githubusercontent.com/mozilla-firefox/firefox/main/supply-chain/audits.toml" [[audits.mozilla.audits.serde_core]] who = "Jan-Erik Rediger " @@ -1069,22 +1074,22 @@ aggregated-from = "https://raw.githubusercontent.com/mozilla/glean/main/supply-c who = "Mark Hammond " criteria = "safe-to-deploy" delta = "0.1.4 -> 0.1.7" -aggregated-from = "https://hg.mozilla.org/mozilla-central/raw-file/tip/supply-chain/audits.toml" +aggregated-from = "https://raw.githubusercontent.com/mozilla-firefox/firefox/main/supply-chain/audits.toml" [[audits.mozilla.audits.shlex]] who = "Max Inden " criteria = "safe-to-deploy" delta = "1.1.0 -> 1.3.0" -aggregated-from = "https://hg.mozilla.org/mozilla-central/raw-file/tip/supply-chain/audits.toml" +aggregated-from = "https://raw.githubusercontent.com/mozilla-firefox/firefox/main/supply-chain/audits.toml" [[audits.mozilla.audits.smallvec]] who = "Erich Gubler " criteria = "safe-to-deploy" delta = "1.14.0 -> 1.15.1" -aggregated-from = "https://hg.mozilla.org/mozilla-central/raw-file/tip/supply-chain/audits.toml" +aggregated-from = "https://raw.githubusercontent.com/mozilla-firefox/firefox/main/supply-chain/audits.toml" [[audits.mozilla.audits.strsim]] who = "Ben Dean-Kawamura " criteria = "safe-to-deploy" delta = "0.10.0 -> 0.11.1" -aggregated-from = "https://hg.mozilla.org/mozilla-central/raw-file/tip/supply-chain/audits.toml" +aggregated-from = "https://raw.githubusercontent.com/mozilla-firefox/firefox/main/supply-chain/audits.toml" diff --git a/platform/dev-mcxa/Cargo.lock b/platform/dev-mcxa/Cargo.lock index 28d3a83..3827d23 100644 --- a/platform/dev-mcxa/Cargo.lock +++ b/platform/dev-mcxa/Cargo.lock @@ -771,9 +771,9 @@ dependencies = [ [[package]] name = "generic-array" -version = "1.4.5" +version = "1.4.2" source = "registry+https://github.com/rust-lang/crates.io-index" -checksum = "337d46834ee672ab3e48caca2cb0c78cc174fb12b3a68d0d88f99a0519a5e36e" +checksum = "fb130435a959a8d525e6bca66ff6c40981a300ee96d70e3ef56f046556d614a3" dependencies = [ "rustversion", "typenum", diff --git a/platform/dev-mcxa/supply-chain/config.toml b/platform/dev-mcxa/supply-chain/config.toml index 567b103..0a16995 100644 --- a/platform/dev-mcxa/supply-chain/config.toml +++ b/platform/dev-mcxa/supply-chain/config.toml @@ -14,7 +14,7 @@ url = "https://raw.githubusercontent.com/google/rust-crate-audits/main/audits.to url = "https://raw.githubusercontent.com/mozilla/supply-chain/main/audits.toml" [imports.open-device-partnership] -url = "https://raw.githubusercontent.com/OpenDevicePartnership/embedded-services/main/supply-chain/audits.toml" +url = "https://raw.githubusercontent.com/OpenDevicePartnership/rust-crate-audits/main/audits.toml" [policy.embassy-embedded-hal] audit-as-crates-io = true diff --git a/platform/dev-mcxa/supply-chain/imports.lock b/platform/dev-mcxa/supply-chain/imports.lock index d17cd61..4a2a9be 100644 --- a/platform/dev-mcxa/supply-chain/imports.lock +++ b/platform/dev-mcxa/supply-chain/imports.lock @@ -633,32 +633,32 @@ user-id = 1139 # Manish Goregaokar (Manishearth) start = "2019-05-15" end = "2027-04-23" notes = "All code written or reviewed by Manish" -aggregated-from = "https://hg.mozilla.org/mozilla-central/raw-file/tip/supply-chain/audits.toml" +aggregated-from = "https://raw.githubusercontent.com/mozilla-firefox/firefox/main/supply-chain/audits.toml" [[audits.mozilla.audits.bitflags]] who = "Alex Franchuk " criteria = "safe-to-deploy" delta = "1.3.2 -> 2.0.2" notes = "Removal of some unsafe code/methods. No changes to externals, just some refactoring (mostly internal)." -aggregated-from = "https://hg.mozilla.org/mozilla-central/raw-file/tip/supply-chain/audits.toml" +aggregated-from = "https://raw.githubusercontent.com/mozilla-firefox/firefox/main/supply-chain/audits.toml" [[audits.mozilla.audits.bitflags]] who = "Nicolas Silva " criteria = "safe-to-deploy" delta = "2.0.2 -> 2.1.0" -aggregated-from = "https://hg.mozilla.org/mozilla-central/raw-file/tip/supply-chain/audits.toml" +aggregated-from = "https://raw.githubusercontent.com/mozilla-firefox/firefox/main/supply-chain/audits.toml" [[audits.mozilla.audits.bitflags]] who = "Teodor Tanasoaia " criteria = "safe-to-deploy" delta = "2.2.1 -> 2.3.2" -aggregated-from = "https://hg.mozilla.org/mozilla-central/raw-file/tip/supply-chain/audits.toml" +aggregated-from = "https://raw.githubusercontent.com/mozilla-firefox/firefox/main/supply-chain/audits.toml" [[audits.mozilla.audits.bitflags]] who = "Mike Hommey " criteria = "safe-to-deploy" delta = "2.3.3 -> 2.4.0" -aggregated-from = "https://hg.mozilla.org/mozilla-central/raw-file/tip/supply-chain/audits.toml" +aggregated-from = "https://raw.githubusercontent.com/mozilla-firefox/firefox/main/supply-chain/audits.toml" [[audits.mozilla.audits.bitflags]] who = "Jan-Erik Rediger " @@ -674,118 +674,118 @@ who = [ ] criteria = "safe-to-deploy" delta = "2.6.0 -> 2.7.0" -aggregated-from = "https://hg.mozilla.org/mozilla-central/raw-file/tip/supply-chain/audits.toml" +aggregated-from = "https://raw.githubusercontent.com/mozilla-firefox/firefox/main/supply-chain/audits.toml" [[audits.mozilla.audits.bitflags]] who = "Benjamin VanderSloot " criteria = "safe-to-deploy" delta = "2.9.4 -> 2.10.0" -aggregated-from = "https://hg.mozilla.org/mozilla-central/raw-file/tip/supply-chain/audits.toml" +aggregated-from = "https://raw.githubusercontent.com/mozilla-firefox/firefox/main/supply-chain/audits.toml" [[audits.mozilla.audits.document-features]] who = "Erich Gubler " criteria = "safe-to-deploy" version = "0.2.8" -aggregated-from = "https://hg.mozilla.org/mozilla-central/raw-file/tip/supply-chain/audits.toml" +aggregated-from = "https://raw.githubusercontent.com/mozilla-firefox/firefox/main/supply-chain/audits.toml" [[audits.mozilla.audits.document-features]] who = "Erich Gubler " criteria = "safe-to-deploy" delta = "0.2.8 -> 0.2.9" -aggregated-from = "https://hg.mozilla.org/mozilla-central/raw-file/tip/supply-chain/audits.toml" +aggregated-from = "https://raw.githubusercontent.com/mozilla-firefox/firefox/main/supply-chain/audits.toml" [[audits.mozilla.audits.document-features]] who = "Erich Gubler " criteria = "safe-to-deploy" delta = "0.2.9 -> 0.2.10" -aggregated-from = "https://hg.mozilla.org/mozilla-central/raw-file/tip/supply-chain/audits.toml" +aggregated-from = "https://raw.githubusercontent.com/mozilla-firefox/firefox/main/supply-chain/audits.toml" [[audits.mozilla.audits.document-features]] who = "Teodor Tanasoaia " criteria = "safe-to-deploy" delta = "0.2.10 -> 0.2.11" -aggregated-from = "https://hg.mozilla.org/mozilla-central/raw-file/tip/supply-chain/audits.toml" +aggregated-from = "https://raw.githubusercontent.com/mozilla-firefox/firefox/main/supply-chain/audits.toml" [[audits.mozilla.audits.fnv]] who = "Bobby Holley " criteria = "safe-to-deploy" version = "1.0.7" notes = "Simple hasher implementation with no unsafe code." -aggregated-from = "https://hg.mozilla.org/mozilla-central/raw-file/tip/supply-chain/audits.toml" +aggregated-from = "https://raw.githubusercontent.com/mozilla-firefox/firefox/main/supply-chain/audits.toml" [[audits.mozilla.audits.futures-core]] who = "Mike Hommey " criteria = "safe-to-deploy" delta = "0.3.27 -> 0.3.28" -aggregated-from = "https://hg.mozilla.org/mozilla-central/raw-file/tip/supply-chain/audits.toml" +aggregated-from = "https://raw.githubusercontent.com/mozilla-firefox/firefox/main/supply-chain/audits.toml" [[audits.mozilla.audits.futures-sink]] who = "Mike Hommey " criteria = "safe-to-deploy" delta = "0.3.27 -> 0.3.28" -aggregated-from = "https://hg.mozilla.org/mozilla-central/raw-file/tip/supply-chain/audits.toml" +aggregated-from = "https://raw.githubusercontent.com/mozilla-firefox/firefox/main/supply-chain/audits.toml" [[audits.mozilla.audits.hashbrown]] who = "Mike Hommey " criteria = "safe-to-deploy" version = "0.12.3" notes = "This version is used in rust's libstd, so effectively we're already trusting it" -aggregated-from = "https://hg.mozilla.org/mozilla-central/raw-file/tip/supply-chain/audits.toml" +aggregated-from = "https://raw.githubusercontent.com/mozilla-firefox/firefox/main/supply-chain/audits.toml" [[audits.mozilla.audits.hashbrown]] who = "Erich Gubler " criteria = "safe-to-deploy" delta = "0.15.2 -> 0.15.5" -aggregated-from = "https://hg.mozilla.org/mozilla-central/raw-file/tip/supply-chain/audits.toml" +aggregated-from = "https://raw.githubusercontent.com/mozilla-firefox/firefox/main/supply-chain/audits.toml" [[audits.mozilla.audits.hashbrown]] who = "Erich Gubler " criteria = "safe-to-deploy" delta = "0.15.5 -> 0.16.0" -aggregated-from = "https://hg.mozilla.org/mozilla-central/raw-file/tip/supply-chain/audits.toml" +aggregated-from = "https://raw.githubusercontent.com/mozilla-firefox/firefox/main/supply-chain/audits.toml" [[audits.mozilla.audits.indexmap]] who = "Erich Gubler " criteria = "safe-to-deploy" delta = "2.8.0 -> 2.11.4" -aggregated-from = "https://hg.mozilla.org/mozilla-central/raw-file/tip/supply-chain/audits.toml" +aggregated-from = "https://raw.githubusercontent.com/mozilla-firefox/firefox/main/supply-chain/audits.toml" [[audits.mozilla.audits.litrs]] who = "Erich Gubler " criteria = "safe-to-deploy" version = "0.4.1" -aggregated-from = "https://hg.mozilla.org/mozilla-central/raw-file/tip/supply-chain/audits.toml" +aggregated-from = "https://raw.githubusercontent.com/mozilla-firefox/firefox/main/supply-chain/audits.toml" [[audits.mozilla.audits.log]] who = "Erich Gubler " criteria = "safe-to-deploy" delta = "0.4.26 -> 0.4.29" -aggregated-from = "https://hg.mozilla.org/mozilla-central/raw-file/tip/supply-chain/audits.toml" +aggregated-from = "https://raw.githubusercontent.com/mozilla-firefox/firefox/main/supply-chain/audits.toml" [[audits.mozilla.audits.once_cell]] who = "Erich Gubler " criteria = "safe-to-deploy" delta = "1.20.1 -> 1.20.2" notes = "This update works around a Cargo bug that forces the addition of `portable-atomic` into a lockfile, which we have never needed to use." -aggregated-from = "https://hg.mozilla.org/mozilla-central/raw-file/tip/supply-chain/audits.toml" +aggregated-from = "https://raw.githubusercontent.com/mozilla-firefox/firefox/main/supply-chain/audits.toml" [[audits.mozilla.audits.once_cell]] who = "Erich Gubler " criteria = "safe-to-deploy" delta = "1.20.2 -> 1.20.3" -aggregated-from = "https://hg.mozilla.org/mozilla-central/raw-file/tip/supply-chain/audits.toml" +aggregated-from = "https://raw.githubusercontent.com/mozilla-firefox/firefox/main/supply-chain/audits.toml" [[audits.mozilla.audits.once_cell]] who = "Erich Gubler " criteria = "safe-to-deploy" delta = "1.20.3 -> 1.21.1" -aggregated-from = "https://hg.mozilla.org/mozilla-central/raw-file/tip/supply-chain/audits.toml" +aggregated-from = "https://raw.githubusercontent.com/mozilla-firefox/firefox/main/supply-chain/audits.toml" [[audits.mozilla.audits.once_cell]] who = "Erich Gubler " criteria = "safe-to-deploy" delta = "1.21.1 -> 1.21.3" -aggregated-from = "https://hg.mozilla.org/mozilla-central/raw-file/tip/supply-chain/audits.toml" +aggregated-from = "https://raw.githubusercontent.com/mozilla-firefox/firefox/main/supply-chain/audits.toml" [[audits.mozilla.audits.pin-project-lite]] who = "Nika Layzell " @@ -802,14 +802,14 @@ who = "Kagami Sascha Rosylight " criteria = "safe-to-deploy" version = "2.0.0" notes = "No unsafe block." -aggregated-from = "https://hg.mozilla.org/mozilla-central/raw-file/tip/supply-chain/audits.toml" +aggregated-from = "https://raw.githubusercontent.com/mozilla-firefox/firefox/main/supply-chain/audits.toml" [[audits.mozilla.audits.proc-macro-error2]] who = "Kagami Sascha Rosylight " criteria = "safe-to-deploy" version = "2.0.1" notes = "No unsafe block with a lovely `#![forbid(unsafe_code)]`." -aggregated-from = "https://hg.mozilla.org/mozilla-central/raw-file/tip/supply-chain/audits.toml" +aggregated-from = "https://raw.githubusercontent.com/mozilla-firefox/firefox/main/supply-chain/audits.toml" [[audits.mozilla.audits.proc-macro2]] who = "Jan-Erik Rediger " @@ -827,7 +827,7 @@ aggregated-from = "https://raw.githubusercontent.com/mozilla/glean/main/supply-c who = "Erich Gubler " criteria = "safe-to-deploy" delta = "1.0.226 -> 1.0.227" -aggregated-from = "https://hg.mozilla.org/mozilla-central/raw-file/tip/supply-chain/audits.toml" +aggregated-from = "https://raw.githubusercontent.com/mozilla-firefox/firefox/main/supply-chain/audits.toml" [[audits.mozilla.audits.serde_core]] who = "Jan-Erik Rediger " @@ -839,25 +839,25 @@ aggregated-from = "https://raw.githubusercontent.com/mozilla/glean/main/supply-c who = "Mark Hammond " criteria = "safe-to-deploy" delta = "0.1.4 -> 0.1.7" -aggregated-from = "https://hg.mozilla.org/mozilla-central/raw-file/tip/supply-chain/audits.toml" +aggregated-from = "https://raw.githubusercontent.com/mozilla-firefox/firefox/main/supply-chain/audits.toml" [[audits.mozilla.audits.shlex]] who = "Max Inden " criteria = "safe-to-deploy" delta = "1.1.0 -> 1.3.0" -aggregated-from = "https://hg.mozilla.org/mozilla-central/raw-file/tip/supply-chain/audits.toml" +aggregated-from = "https://raw.githubusercontent.com/mozilla-firefox/firefox/main/supply-chain/audits.toml" [[audits.mozilla.audits.smallvec]] who = "Erich Gubler " criteria = "safe-to-deploy" delta = "1.14.0 -> 1.15.1" -aggregated-from = "https://hg.mozilla.org/mozilla-central/raw-file/tip/supply-chain/audits.toml" +aggregated-from = "https://raw.githubusercontent.com/mozilla-firefox/firefox/main/supply-chain/audits.toml" [[audits.mozilla.audits.strsim]] who = "Ben Dean-Kawamura " criteria = "safe-to-deploy" delta = "0.10.0 -> 0.11.1" -aggregated-from = "https://hg.mozilla.org/mozilla-central/raw-file/tip/supply-chain/audits.toml" +aggregated-from = "https://raw.githubusercontent.com/mozilla-firefox/firefox/main/supply-chain/audits.toml" [[audits.mozilla.audits.tracing]] who = "Alex Franchuk " @@ -868,26 +868,26 @@ There's only one unsafe impl, and its purpose is to ensure correct behavior by creating a non-Send marker type (it has nothing to do with soundness). All dependencies make sense, and no side-effectful std functions are used. """ -aggregated-from = "https://hg.mozilla.org/mozilla-central/raw-file/tip/supply-chain/audits.toml" +aggregated-from = "https://raw.githubusercontent.com/mozilla-firefox/firefox/main/supply-chain/audits.toml" [[audits.mozilla.audits.tracing]] who = "Mark Hammond " criteria = "safe-to-deploy" delta = "0.1.37 -> 0.1.41" -aggregated-from = "https://hg.mozilla.org/mozilla-central/raw-file/tip/supply-chain/audits.toml" +aggregated-from = "https://raw.githubusercontent.com/mozilla-firefox/firefox/main/supply-chain/audits.toml" [[audits.mozilla.audits.tracing-attributes]] who = "Alex Franchuk " criteria = "safe-to-deploy" version = "0.1.24" notes = "No unsafe code, macros extensively tested and produce reasonable code." -aggregated-from = "https://hg.mozilla.org/mozilla-central/raw-file/tip/supply-chain/audits.toml" +aggregated-from = "https://raw.githubusercontent.com/mozilla-firefox/firefox/main/supply-chain/audits.toml" [[audits.mozilla.audits.tracing-attributes]] who = "Mark Hammond " criteria = "safe-to-deploy" delta = "0.1.24 -> 0.1.28" -aggregated-from = "https://hg.mozilla.org/mozilla-central/raw-file/tip/supply-chain/audits.toml" +aggregated-from = "https://raw.githubusercontent.com/mozilla-firefox/firefox/main/supply-chain/audits.toml" [[audits.mozilla.audits.tracing-core]] who = "Alex Franchuk " @@ -898,32 +898,32 @@ Most unsafe code is in implementing non-std sync primitives. Unsafe impls are logically correct and justified in comments, and unsafe code is sound and justified in comments. """ -aggregated-from = "https://hg.mozilla.org/mozilla-central/raw-file/tip/supply-chain/audits.toml" +aggregated-from = "https://raw.githubusercontent.com/mozilla-firefox/firefox/main/supply-chain/audits.toml" [[audits.mozilla.audits.tracing-core]] who = "Mark Hammond " criteria = "safe-to-deploy" delta = "0.1.30 -> 0.1.33" -aggregated-from = "https://hg.mozilla.org/mozilla-central/raw-file/tip/supply-chain/audits.toml" +aggregated-from = "https://raw.githubusercontent.com/mozilla-firefox/firefox/main/supply-chain/audits.toml" [[audits.mozilla.audits.tracing-subscriber]] who = "Mark Hammond " criteria = "safe-to-deploy" delta = "0.3.17 -> 0.3.19" -aggregated-from = "https://hg.mozilla.org/mozilla-central/raw-file/tip/supply-chain/audits.toml" +aggregated-from = "https://raw.githubusercontent.com/mozilla-firefox/firefox/main/supply-chain/audits.toml" [[audits.mozilla.audits.tracing-subscriber]] who = "Mark Hammond " criteria = "safe-to-deploy" delta = "0.3.19 -> 0.3.20" -aggregated-from = "https://hg.mozilla.org/mozilla-central/raw-file/tip/supply-chain/audits.toml" +aggregated-from = "https://raw.githubusercontent.com/mozilla-firefox/firefox/main/supply-chain/audits.toml" [[audits.mozilla.audits.void]] who = "Bobby Holley " criteria = "safe-to-deploy" version = "1.0.2" notes = "Very small crate, just hosts the Void type for easier cross-crate interfacing." -aggregated-from = "https://hg.mozilla.org/mozilla-central/raw-file/tip/supply-chain/audits.toml" +aggregated-from = "https://raw.githubusercontent.com/mozilla-firefox/firefox/main/supply-chain/audits.toml" [[audits.mozilla.audits.zerocopy]] who = "Alex Franchuk " @@ -936,7 +936,7 @@ also has a large, thorough test suite. The project claims to run tests with Miri to have stronger soundness checks, and also claims to use formal verification tools to prove correctness. """ -aggregated-from = "https://hg.mozilla.org/mozilla-central/raw-file/tip/supply-chain/audits.toml" +aggregated-from = "https://raw.githubusercontent.com/mozilla-firefox/firefox/main/supply-chain/audits.toml" [[audits.mozilla.audits.zerocopy]] who = "Alex Franchuk " @@ -948,14 +948,14 @@ comparison. The safety properties of unsafe code blocks, traits, and other types are thoroughly documented. The new build script is safe. All code is very thoroughly tested. I expect their test coverage is quite high. """ -aggregated-from = "https://hg.mozilla.org/mozilla-central/raw-file/tip/supply-chain/audits.toml" +aggregated-from = "https://raw.githubusercontent.com/mozilla-firefox/firefox/main/supply-chain/audits.toml" [[audits.mozilla.audits.zerocopy-derive]] who = "Alex Franchuk " criteria = "safe-to-deploy" version = "0.7.32" notes = "Clean, safe macros for zerocopy." -aggregated-from = "https://hg.mozilla.org/mozilla-central/raw-file/tip/supply-chain/audits.toml" +aggregated-from = "https://raw.githubusercontent.com/mozilla-firefox/firefox/main/supply-chain/audits.toml" [[audits.mozilla.audits.zerocopy-derive]] who = "Alex Franchuk " @@ -965,452 +965,533 @@ notes = """ There are a lot of changes here, however they look reasonable. Unsafe code is heavily documented, and there are extensive tests for the changes. """ -aggregated-from = "https://hg.mozilla.org/mozilla-central/raw-file/tip/supply-chain/audits.toml" +aggregated-from = "https://raw.githubusercontent.com/mozilla-firefox/firefox/main/supply-chain/audits.toml" [[audits.open-device-partnership.audits.autocfg]] who = "Jerry Xie " criteria = "safe-to-deploy" delta = "1.4.0 -> 1.5.0" notes = "No unsafe, no build.rs, no network access; delta adds edition-aware rustc probing and best-effort probe-file cleanup only. Assisted-by: copilot-cli:GPT-5.3-Codex" +aggregated-from = "https://raw.githubusercontent.com/OpenDevicePartnership/embedded-services/refs/heads/main/supply-chain/audits.toml" [[audits.open-device-partnership.audits.bitfield]] who = "Jerry Xie " criteria = "safe-to-deploy" delta = "0.13.2 -> 0.15.0" notes = "Delta audit: BitRange/Bit traits split into read-only and mutable variants (BitRangeMut/BitMut); added mask constant generation; clippy fixes; MSRV bump. No unsafe, no build script, no proc macros, no powerful imports. Assisted-by: copilot-cli:claude-opus-4.6" +aggregated-from = "https://raw.githubusercontent.com/OpenDevicePartnership/embedded-services/refs/heads/main/supply-chain/audits.toml" [[audits.open-device-partnership.audits.bitfield]] who = "Jerry Xie " criteria = "safe-to-deploy" delta = "0.15.0 -> 0.17.0" notes = "Delta: adds bitwise op derives, constructor derives, arbitrary visibility. Pure declarative macros. No unsafe, no build script. Assisted-by: copilot-cli:claude-opus-4.6" +aggregated-from = "https://raw.githubusercontent.com/OpenDevicePartnership/embedded-services/refs/heads/main/supply-chain/audits.toml" [[audits.open-device-partnership.audits.bitfield-struct]] who = "Jerry Xie " criteria = "safe-to-deploy" version = "0.10.1" notes = "Proc-macro crate generating safe bitfield structs. No unsafe, no build script. Standard proc-macro deps only. Assisted-by: copilot-cli:claude-opus-4.6" +aggregated-from = "https://raw.githubusercontent.com/OpenDevicePartnership/embedded-services/refs/heads/main/supply-chain/audits.toml" [[audits.open-device-partnership.audits.bitfield-struct]] who = "matteotullo " criteria = "safe-to-deploy" delta = "0.10.1 -> 0.12.1" notes = "Adds hash and bitenum derives, mostly parsing and refactoring changes. No code execution nor writing to the filesystem." +aggregated-from = "https://raw.githubusercontent.com/OpenDevicePartnership/embedded-services/refs/heads/main/supply-chain/audits.toml" [[audits.open-device-partnership.audits.cfg-if]] who = "Jerry Xie " criteria = "safe-to-deploy" delta = "1.0.0 -> 1.0.3" notes = "Delta 1.0.0->1.0.3: formatting/readability refactor of macro identifiers, removed compiler_builtins dep, updated CI. No unsafe, no build script, no imports. Pure macro_rules crate. Assisted-by: copilot-cli:claude-opus-4.6" +aggregated-from = "https://raw.githubusercontent.com/OpenDevicePartnership/embedded-services/refs/heads/main/supply-chain/audits.toml" [[audits.open-device-partnership.audits.cfg-if]] who = "Jerry Xie " criteria = "safe-to-deploy" delta = "1.0.3 -> 1.0.4" notes = "Delta 1.0.3->1.0.4: macro refactored from two top-level rules to one using optional else syntax, fragment specifiers changed from :meta to :tt to support cfg(true)/cfg(false), internal helper renamed from @__identity to @__temp_group with added comment. MSRV 1.32 declared. No unsafe, no build script, no proc macros, no imports. Pure no_std macro_rules crate. Assisted-by: copilot-cli:claude-opus-4.6" +aggregated-from = "https://raw.githubusercontent.com/OpenDevicePartnership/embedded-services/refs/heads/main/supply-chain/audits.toml" [[audits.open-device-partnership.audits.const-init]] who = "Jerry Xie " criteria = "safe-to-deploy" version = "1.0.0" +aggregated-from = "https://raw.githubusercontent.com/OpenDevicePartnership/embedded-services/refs/heads/main/supply-chain/audits.toml" [[audits.open-device-partnership.audits.cordyceps]] who = "Jerry Xie " criteria = "safe-to-deploy" version = "0.3.4" notes = "Intrusive data structures crate (no_std). ~115 unsafe blocks, all necessary for intrusive linked list/queue/stack ops. Correct patterns: addr_of_mut, proper atomic orderings, Vyukov MPSC algorithm. No build script, no proc macros, no powerful imports. Assisted-by: copilot-cli:claude-opus-4.6" +aggregated-from = "https://raw.githubusercontent.com/OpenDevicePartnership/embedded-services/refs/heads/main/supply-chain/audits.toml" [[audits.open-device-partnership.audits.defmt]] who = "Jerry Xie " criteria = "safe-to-deploy" version = "0.3.100" notes = "Compatibility shim: no_std crate that re-exports defmt 1.x items for 0.3 API compatibility. No unsafe code, no build script, no powerful imports, no logic - pure pub-use re-exports. Assisted-by: copilot-cli:claude-opus-4.6" +aggregated-from = "https://raw.githubusercontent.com/OpenDevicePartnership/embedded-services/refs/heads/main/supply-chain/audits.toml" [[audits.open-device-partnership.audits.defmt]] who = "Jerry Xie " criteria = "safe-to-deploy" delta = "1.0.1 -> 1.1.0" notes = "Delta audit: No new unsafe code. build.rs adds xtensa-esp32s2-none-elf to no_cas list. New Format impls for core::fmt::Error and Wrapping are safe. Assisted-by: GitHub Copilot:claude-opus-4.6" +aggregated-from = "https://raw.githubusercontent.com/OpenDevicePartnership/embedded-services/refs/heads/main/supply-chain/audits.toml" [[audits.open-device-partnership.audits.defmt-macros]] who = "Jerry Xie " criteria = "safe-to-deploy" delta = "1.0.1 -> 1.1.0" -notes = "Proc-macro crate for defmt logging. Delta adds #[defmt(transparent)] and #[defmt(bound(...))] derive attributes, fixes && to || bug in env filter parse, simplifies log expansion. No new unsafe code. Generated unsafe (acquire/release guards) unchanged from prior version. Build script only reads DEFMT_LOG env var. Assisted-by: copilot-cli:claude-opus-4.6" +notes = "Delta: adds transparent/bound derive attrs. No unsafe. Assisted-by: copilot-cli:claude-opus-4.6" +aggregated-from = "https://raw.githubusercontent.com/OpenDevicePartnership/bq40z50/refs/heads/main/supply-chain/audits.toml" [[audits.open-device-partnership.audits.device-driver]] who = "Jerry Xie " criteria = "safe-to-deploy" version = "1.0.7" notes = "no_std device driver toolkit. Unsafe limited to ops.rs bitfield load/store using get_unchecked with documented invariants; fuzz-tested against bitvec. No build script, no proc macros, no filesystem/network/process access. Assisted-by: copilot-chat:claude-opus-4.6" +aggregated-from = "https://raw.githubusercontent.com/OpenDevicePartnership/embedded-services/refs/heads/main/supply-chain/audits.toml" [[audits.open-device-partnership.audits.device-driver]] who = "Adam Sasine " criteria = "safe-to-deploy" delta = "1.0.7 -> 1.0.9" notes = "Fixes compilation bugs for large registers but does not change invariants or testing strategy." +aggregated-from = "https://raw.githubusercontent.com/OpenDevicePartnership/embedded-services/refs/heads/main/supply-chain/audits.toml" [[audits.open-device-partnership.audits.document-features]] who = "Jerry Xie " criteria = "safe-to-deploy" delta = "0.2.11 -> 0.2.12" notes = "Delta audit: litrs dep bump 0.4 to 1.0, MSRV bump, trivial code. No unsafe, no new imports. Assisted-by: GitHub Copilot:claude-opus-4.6" +aggregated-from = "https://raw.githubusercontent.com/OpenDevicePartnership/embedded-services/refs/heads/main/supply-chain/audits.toml" [[audits.open-device-partnership.audits.embassy-embedded-hal]] who = "Jerry Xie " criteria = "safe-to-deploy" version = "0.5.0" notes = "No unsafe, no build script, no proc macros. no_std shared bus/flash partition utilities for embedded-hal traits. Assisted-by: copilot-cli:claude-opus-4.6" +aggregated-from = "https://raw.githubusercontent.com/OpenDevicePartnership/embedded-services/refs/heads/main/supply-chain/audits.toml" [[audits.open-device-partnership.audits.embassy-embedded-hal]] who = "Billy Price " criteria = "safe-to-deploy" delta = "0.5.0 -> 0.6.0" +aggregated-from = "https://raw.githubusercontent.com/OpenDevicePartnership/embedded-services/refs/heads/main/supply-chain/audits.toml" [[audits.open-device-partnership.audits.embassy-futures]] who = "Jerry Xie " criteria = "safe-to-deploy" version = "0.1.2" notes = "no_std future combinators. All unsafe is pin-projection and no-op RawWaker - reviewed and sound. Assisted-by: copilot-cli:claude-opus-4.6" +aggregated-from = "https://raw.githubusercontent.com/OpenDevicePartnership/embedded-services/refs/heads/main/supply-chain/audits.toml" [[audits.open-device-partnership.audits.embassy-sync]] who = "Jerry Xie " criteria = "safe-to-deploy" version = "0.8.0" notes = "no_std async sync primitives. Substantial unsafe for UnsafeCell-based interiors and Send/Sync impls -- all reviewed and sound, guarded by RawMutex/critical_section. Build script only reads TARGET env var. No proc macros, no powerful imports. Assisted-by: copilot-cli:claude-opus-4.6" +aggregated-from = "https://raw.githubusercontent.com/OpenDevicePartnership/embedded-services/refs/heads/main/supply-chain/audits.toml" [[audits.open-device-partnership.audits.embassy-time-driver]] who = "Jerry Xie " criteria = "safe-to-deploy" version = "0.2.1" notes = "no_std driver trait for embassy-time. Minimal unsafe for extern Rust FFI calls (sound via links key). Empty build.rs. Assisted-by: copilot-cli:claude-opus-4.6" +aggregated-from = "https://raw.githubusercontent.com/OpenDevicePartnership/embedded-services/refs/heads/main/supply-chain/audits.toml" [[audits.open-device-partnership.audits.embassy-time-driver]] who = "Billy Price " criteria = "safe-to-deploy" delta = "0.2.1 -> 0.2.2" +aggregated-from = "https://raw.githubusercontent.com/OpenDevicePartnership/embedded-services/refs/heads/main/supply-chain/audits.toml" [[audits.open-device-partnership.audits.embedded-batteries]] who = "matteotullo " criteria = "safe-to-deploy" version = "0.3.4" notes = "ODP crates are always trusted." +aggregated-from = "https://raw.githubusercontent.com/OpenDevicePartnership/embedded-services/refs/heads/main/supply-chain/audits.toml" [[audits.open-device-partnership.audits.embedded-batteries-async]] who = "matteotullo " criteria = "safe-to-deploy" version = "0.3.4" notes = "ODP crates are always trusted." +aggregated-from = "https://raw.githubusercontent.com/OpenDevicePartnership/embedded-services/refs/heads/main/supply-chain/audits.toml" [[audits.open-device-partnership.audits.embedded-crc-macros]] who = "Matteo Tullo " criteria = "safe-to-deploy" version = "1.0.0" +aggregated-from = "https://raw.githubusercontent.com/OpenDevicePartnership/embedded-services/refs/heads/main/supply-chain/audits.toml" [[audits.open-device-partnership.audits.embedded-fans]] who = "Kurtis Dinelle " criteria = "safe-to-deploy" version = "0.1.0" notes = "ODP crates are always trusted." +aggregated-from = "https://raw.githubusercontent.com/OpenDevicePartnership/embedded-services/refs/heads/main/supply-chain/audits.toml" [[audits.open-device-partnership.audits.embedded-fans-async]] who = "Kurtis Dinelle " criteria = "safe-to-deploy" version = "0.2.0" notes = "ODP crates are always trusted." +aggregated-from = "https://raw.githubusercontent.com/OpenDevicePartnership/embedded-services/refs/heads/main/supply-chain/audits.toml" [[audits.open-device-partnership.audits.embedded-hal]] who = "Jerry Xie " criteria = "safe-to-deploy" delta = "0.2.7 -> 1.0.0" notes = "Pure no_std trait crate. Complete API redesign for 1.0: removed nb-based traits, CAN module, all unsafe code. Only defines traits/enums/types for digital, I2C, SPI, PWM, delay. No build script, no proc macros, no powerful imports. Assisted-by: copilot-cli:claude-opus-4.6" +aggregated-from = "https://raw.githubusercontent.com/OpenDevicePartnership/embedded-services/refs/heads/main/supply-chain/audits.toml" [[audits.open-device-partnership.audits.embedded-hal-async]] who = "Jerry Xie " criteria = "safe-to-deploy" version = "1.0.0" notes = "no_std async HAL trait definitions. No unsafe in library. Build script only runs rustc --version. Assisted-by: copilot-cli:claude-opus-4.6" +aggregated-from = "https://raw.githubusercontent.com/OpenDevicePartnership/embedded-services/refs/heads/main/supply-chain/audits.toml" [[audits.open-device-partnership.audits.embedded-hal-nb]] who = "Jerry Xie " criteria = "safe-to-deploy" version = "1.0.0" notes = "no_std trait-only crate. No unsafe, no build script, no proc macros, no powerful imports. Assisted-by: copilot-cli:claude-opus-4.6" +aggregated-from = "https://raw.githubusercontent.com/OpenDevicePartnership/embedded-services/refs/heads/main/supply-chain/audits.toml" [[audits.open-device-partnership.audits.embedded-io]] who = "Jerry Xie " criteria = "safe-to-deploy" delta = "0.6.1 -> 0.7.1" -notes = "No unsafe, no build script, no I/O. Trait evolution: Error requires core::error::Error (MSRV 1.81), BufRead: Read, Seek gains seek_relative, new VecDeque impls, defmt bumped to v1. Assisted-by: copilot-cli:claude-opus-4.6" +notes = "Add core::error::Error trait bound (MSRV 1.81). defmt 0.3->1.0. Implement ReadReady/WriteReady for slices and VecDeque. Add seek_relative(). Fix method forwardings. Trusted publisher (Dirbaio from Embedded WG)." +aggregated-from = "https://raw.githubusercontent.com/OpenDevicePartnership/embassy-imxrt/refs/heads/main/supply-chain/audits.toml" [[audits.open-device-partnership.audits.embedded-io-async]] who = "Jerry Xie " criteria = "safe-to-deploy" version = "0.6.1" notes = "No unsafe. Build script only detects nightly via rustc --version. Pure async trait definitions for embedded I/O. Assisted-by: copilot-cli:claude-opus-4.6" +aggregated-from = "https://raw.githubusercontent.com/OpenDevicePartnership/embedded-services/refs/heads/main/supply-chain/audits.toml" [[audits.open-device-partnership.audits.embedded-io-async]] who = "Jerry Xie " criteria = "safe-to-deploy" delta = "0.6.1 -> 0.7.0" notes = "Delta 0.6.1->0.7.0: No unsafe. Build script removed (AFIT now stable). flush() made required, BufRead requires Read, new VecDeque impls. Assisted-by: copilot-cli:claude-opus-4.6" +aggregated-from = "https://raw.githubusercontent.com/OpenDevicePartnership/embedded-services/refs/heads/main/supply-chain/audits.toml" [[audits.open-device-partnership.audits.embedded-mcu-hal]] -who = "Jerry Xie " +who = "Felipe Balbi " criteria = "safe-to-deploy" version = "0.2.0" -notes = "Trait-based MCU HAL with zero unsafe code. No build script or powerful imports. Pure trait design with optional chrono/defmt features. Ideal for embedded controllers." +notes = " Additionally, this is ODP owned crate." +aggregated-from = "https://raw.githubusercontent.com/OpenDevicePartnership/embedded-mcu/refs/heads/main/supply-chain/audits.toml" [[audits.open-device-partnership.audits.embedded-sensors-hal]] who = "Kurtis Dinelle " criteria = "safe-to-deploy" version = "0.1.0" notes = "ODP crates are always trusted." +aggregated-from = "https://raw.githubusercontent.com/OpenDevicePartnership/embedded-services/refs/heads/main/supply-chain/audits.toml" [[audits.open-device-partnership.audits.embedded-sensors-hal]] who = "Jerry Xie " criteria = "safe-to-deploy" delta = "0.1.0 -> 0.1.1" notes = "Delta audit: #![forbid(unsafe_code)] and #![no_std] remain enforced. No build script (build=false). Changes: defmt dep bumped 0.3.7->1.0.0, added paste dep for identifier concatenation, added assert_approx_eq dev-dep. New decl_threshold_traits! declarative macro generates blocking ThresholdSet/Hysteresis traits (and async ThresholdWait variant). Temperature and humidity modules invoke the macro and add comprehensive tests. Doc example fixes (crate name, struct typo). Typo fixes in ErrorKind Display impl. No unsafe code, no proc macros, no filesystem/network/process access. Assisted-by: GitHub Copilot:claude-opus-4.6" +aggregated-from = "https://raw.githubusercontent.com/OpenDevicePartnership/embedded-services/refs/heads/main/supply-chain/audits.toml" [[audits.open-device-partnership.audits.embedded-sensors-hal-async]] who = "Kurtis Dinelle " criteria = "safe-to-deploy" version = "0.3.0" notes = "ODP crates are always trusted." +aggregated-from = "https://raw.githubusercontent.com/OpenDevicePartnership/embedded-services/refs/heads/main/supply-chain/audits.toml" [[audits.open-device-partnership.audits.embedded-storage]] who = "Jerry Xie " criteria = "safe-to-deploy" version = "0.3.1" notes = "Pure no_std storage abstraction traits. deny(unsafe_code), no build script, no dependencies, no powerful imports. Assisted-by: copilot-cli:claude-opus-4.6" +aggregated-from = "https://raw.githubusercontent.com/OpenDevicePartnership/embedded-services/refs/heads/main/supply-chain/audits.toml" [[audits.open-device-partnership.audits.embedded-storage-async]] who = "Jerry Xie " criteria = "safe-to-deploy" version = "0.4.1" notes = "Pure no_std async trait definitions for NOR flash storage. No unsafe code, no build script, no powerful imports. Only dependency is embedded-storage. Assisted-by: copilot-cli:claude-opus-4.6" +aggregated-from = "https://raw.githubusercontent.com/OpenDevicePartnership/embedded-services/refs/heads/main/supply-chain/audits.toml" [[audits.open-device-partnership.audits.find-msvc-tools]] who = "Jerry Xie " criteria = "safe-to-deploy" version = "0.1.9" notes = "Full audit of find-msvc-tools 0.1.9, extracted from cc-rs. Zero dependencies. Unsafe code is COM/FFI wrappers for Windows registry, VS Setup Configuration COM interfaces, and kernel32 dynamic loading - all sound with proper Drop impls and error checking. Compile-time type check guards transmute_copy for dynamic GetMachineTypeAttributes. No build script, no proc macros, no network access. Only accesses filesystem/registry/COM to locate MSVC tooling as advertised. Assisted-by: GitHub Copilot:claude-opus-4.6" +aggregated-from = "https://raw.githubusercontent.com/OpenDevicePartnership/embedded-services/refs/heads/main/supply-chain/audits.toml" [[audits.open-device-partnership.audits.futures-core]] who = "Jerry Xie " criteria = "safe-to-deploy" delta = "0.3.31 -> 0.3.32" notes = "Delta audit: version bump, Cargo.toml cosmetic reorder, AtomicWaker correctness fix (fetch_and to swap for cleaner state transition), ready! macro doc update. No new unsafe code, no build script, no proc macros, no powerful imports. Assisted-by: GitHub Copilot:claude-opus-4.6" +aggregated-from = "https://raw.githubusercontent.com/OpenDevicePartnership/embedded-services/refs/heads/main/supply-chain/audits.toml" [[audits.open-device-partnership.audits.futures-sink]] who = "Jerry Xie " criteria = "safe-to-deploy" delta = "0.3.31 -> 0.3.32" notes = "No source code changes, only Cargo.toml metadata reordering. Assisted-by: GitHub Copilot:claude-opus-4.6" +aggregated-from = "https://raw.githubusercontent.com/OpenDevicePartnership/embedded-services/refs/heads/main/supply-chain/audits.toml" [[audits.open-device-partnership.audits.generator]] who = "Jerry Xie " criteria = "safe-to-deploy" version = "0.8.7" notes = "Full audit of stackful generator/coroutine library. Pervasively unsafe by nature: register context switching via inline assembly (x86_64, aarch64, arm, loongarch64, riscv64, ppc64), stack allocation via mmap/VirtualAlloc with guard pages, raw pointer-based stack management (StackBox, Context linked list). unsafe impl Send for Generator<'static, A, T> gated on A:Send+T:Send. transmute in scoped_init erases scope lifetime but constrained by 'a on GeneratorImpl. co_* methods bypass Any type-checking for performance. Signal/VEH handlers for stack overflow detection. Build script uses cc for ppc64 assembly and rustversion for nightly detection; no network/filesystem beyond standard. No proc macros. No filesystem, network, or process access in library code. Dependencies: cfg-if, log, libc (unix), windows (windows) — all appropriate. Assisted-by: GitHub Copilot:claude-opus-4.6" +aggregated-from = "https://raw.githubusercontent.com/OpenDevicePartnership/embedded-services/refs/heads/main/supply-chain/audits.toml" [[audits.open-device-partnership.audits.generator]] who = "Jerry Xie " criteria = "safe-to-deploy" delta = "0.8.7 -> 0.8.8" notes = "Delta audit: replaces heavy windows crate with lighter windows-link/windows-result + auto-generated bindings (windows-bindgen 0.65.0). Fixes fn-ptr-to-int casts for strict provenance. Improves TLS optimization bug workaround on macOS/Windows (compiler_fence + black_box replacing double thread::current hack). No new unsafe patterns; all changes consistent with stackful coroutine purpose. Assisted-by: GitHub Copilot:claude-opus-4.6" +aggregated-from = "https://raw.githubusercontent.com/OpenDevicePartnership/embedded-services/refs/heads/main/supply-chain/audits.toml" + +[[audits.open-device-partnership.audits.generic-array]] +who = "Billy Price " +criteria = "safe-to-deploy" +version = "1.4.2" +aggregated-from = "https://raw.githubusercontent.com/OpenDevicePartnership/embedded-services/refs/heads/main/supply-chain/audits.toml" [[audits.open-device-partnership.audits.hash32]] who = "Jerry Xie " criteria = "safe-to-deploy" version = "0.3.1" notes = "no_std 32-bit hashing (FNV, MurmurHash3). ~10 unsafe blocks in murmur3.rs for MaybeUninit buffer handling - all sound. Assisted-by: copilot-cli:claude-opus-4.6" +aggregated-from = "https://raw.githubusercontent.com/OpenDevicePartnership/embedded-services/refs/heads/main/supply-chain/audits.toml" [[audits.open-device-partnership.audits.hashbrown]] who = "Jerry Xie " criteria = "safe-to-deploy" delta = "0.13.2 -> 0.14.5" notes = "SwissTable hash map delta. Major changes: allocator refactored out of RawTableInner, new InsertSlot type, NEON SIMD for aarch64, allocator-api2 integration, new HashTable API, strict provenance. Extensive unsafe reviewed for soundness. No build script, no proc macros, no powerful imports. Assisted-by: copilot-cli:claude-opus-4.6" +aggregated-from = "https://raw.githubusercontent.com/OpenDevicePartnership/embedded-services/refs/heads/main/supply-chain/audits.toml" [[audits.open-device-partnership.audits.hashbrown]] who = "Jerry Xie " criteria = "safe-to-deploy" delta = "0.16.0 -> 0.17.0" notes = "Delta 0.16.0->0.17.0. Edition 2024, MSRV 1.85. Alloc module extracted from raw/. InsertSlot replaced with usize. Renames: buckets->num_buckets, get_many_mut->get_disjoint_mut. Serde->serde_core. Unsafe wrapped in blocks for unsafe_op_in_unsafe_fn - mechanical only. Over-sized alloc utilization. Bug fix 710: rehash panic guard. Fix 692 fallible_with_capacity. New bucket-index APIs. TryReserveError: Error+Display. No build script, no proc macros, no new powerful imports. Assisted-by: copilot-cli:claude-opus-4.6" +aggregated-from = "https://raw.githubusercontent.com/OpenDevicePartnership/embedded-services/refs/heads/main/supply-chain/audits.toml" [[audits.open-device-partnership.audits.hashbrown]] who = "Jerry Xie " criteria = "safe-to-deploy" delta = "0.17.0 -> 0.17.1" notes = "Patch release adding HashMap::rustc_try_insert (safe code using existing RawTable find/insert_entry). LSX SIMD optimization in control/group/lsx.rs replaces two intrinsics with immediate-operand equivalents (functionally equivalent, existing unsafe block). README formatting only. No build script, no proc macros, no new powerful imports. Assisted-by: copilot-cli:claude-opus-4.6" +aggregated-from = "https://raw.githubusercontent.com/OpenDevicePartnership/embedded-services/refs/heads/main/supply-chain/audits.toml" [[audits.open-device-partnership.audits.heapless]] who = "Jerry Xie " criteria = "safe-to-deploy" version = "0.9.2" notes = "no_std fixed-capacity data structures. Extensive unsafe for MaybeUninit buffers, lock-free queues (Vyukov MPMC, SPSC), Treiber stack pools with ABA prevention (CAS tagged pointers + ARM LLSC). All Send/Sync bounds verified correct. Build script probes for ARM LLSC. Assisted-by: copilot-cli:claude-opus-4.6" +aggregated-from = "https://raw.githubusercontent.com/OpenDevicePartnership/embedded-services/refs/heads/main/supply-chain/audits.toml" [[audits.open-device-partnership.audits.heapless]] who = "Jerry Xie " criteria = "safe-to-deploy" delta = "0.9.2 -> 0.9.3" notes = "Delta 0.9.2->0.9.3: Fixes unsoundness in Deque/HistoryBuf/IndexMap::clear when Drop panics (Guard pattern). Adds CString conversions (into_string, into_bytes, from_bytes_truncating_at_nul), Deque::pop_front_if/pop_back_if, const Vec::from_array. New transmute_copy in as_len_type is sound (closed type enum). Pointer-cast cleanups. Assisted-by: copilot-cli:claude-opus-4.6" +aggregated-from = "https://raw.githubusercontent.com/OpenDevicePartnership/embedded-services/refs/heads/main/supply-chain/audits.toml" [[audits.open-device-partnership.audits.ident_case]] who = "matteotullo " criteria = "safe-to-deploy" version = "1.0.1" +aggregated-from = "https://raw.githubusercontent.com/OpenDevicePartnership/embedded-services/refs/heads/main/supply-chain/audits.toml" [[audits.open-device-partnership.audits.indexmap]] who = "Jerry Xie " criteria = "safe-to-deploy" delta = "2.11.4 -> 2.14.0" notes = "Delta 2.11.4->2.14.0: Large internal refactor - IndexMapCore renamed to Core and moved to inner module, RefMut indirection eliminated. Entry types restructured across inner/map modules. Edition 2024, MSRV 1.85, hashbrown bumped to 0.17. No new unsafe code; existing unsafe in extract.rs (#![allow(unsafe_code)] for vec drain) and slice.rs (DST casts with repr(transparent)) unchanged and sound. New MaybeUninit usage in IntoKeys/IntoValues Clone impls is safe (uninit values created but never read). No build script, no proc macros, no filesystem/network/process access. New APIs: pop_if, split_at_checked, split_at_mut_checked, Clone for IntoKeys/IntoValues. Many methods made const. Error types use core::error::Error. Uses hash_one() and get_disjoint_mut (std API renames). Assisted-by: copilot-cli:claude-opus-4.6" +aggregated-from = "https://raw.githubusercontent.com/OpenDevicePartnership/embedded-services/refs/heads/main/supply-chain/audits.toml" [[audits.open-device-partnership.audits.litrs]] who = "Jerry Xie " criteria = "safe-to-deploy" delta = "0.4.1 -> 0.4.2" notes = "Delta 0.4.1->0.4.2: Bug fixes for non-ASCII byte string escapes, removes CR LF normalization to align with spec, fixes error span for out-of-range Unicode escapes. No unsafe code, no build script, no powerful imports. Assisted-by: copilot-cli:claude-opus-4.6" +aggregated-from = "https://raw.githubusercontent.com/OpenDevicePartnership/embedded-services/refs/heads/main/supply-chain/audits.toml" [[audits.open-device-partnership.audits.litrs]] who = "Jerry Xie " criteria = "safe-to-deploy" delta = "0.4.2 -> 1.0.0" notes = "Delta 0.4.2->1.0.0: Adds C string literal support (CStringLit), marks Literal enum #[non_exhaustive], removes proc-macro2 from default features, bumps MSRV to 1.56, changes num_hashes from u32 to u8 with 256 max, changes Buffer::Cow/ByteCow for String to owned types (String/Vec) instead of Cow<'static,...>. Refactors escape internals: replaces Escapee trait with Unescape enum and EscapeContainer trait, moves span offset responsibility to callers. Adds nul byte checking for C strings. No unsafe code, no build script, no proc macros, no powerful imports. Pure parsing library. Assisted-by: GitHub Copilot:claude-opus-4.6" +aggregated-from = "https://raw.githubusercontent.com/OpenDevicePartnership/embedded-services/refs/heads/main/supply-chain/audits.toml" [[audits.open-device-partnership.audits.mutex-traits]] who = "Jerry Xie " criteria = "safe-to-deploy" version = "1.0.1" +aggregated-from = "https://raw.githubusercontent.com/OpenDevicePartnership/embedded-services/refs/heads/main/supply-chain/audits.toml" [[audits.open-device-partnership.audits.mycelium-bitfield]] who = "Jerry Xie " criteria = "safe-to-deploy" version = "0.1.5" notes = "Pure safe no_std bitfield macro crate. No unsafe code, no build script, no proc macros, no dependencies, no powerful imports. Only core:: types used. Assisted-by: copilot-chat:claude-opus-4.6" +aggregated-from = "https://raw.githubusercontent.com/OpenDevicePartnership/embedded-services/refs/heads/main/supply-chain/audits.toml" [[audits.open-device-partnership.audits.num_enum]] who = "Matteo Tullo " criteria = "safe-to-deploy" version = "0.7.4" +aggregated-from = "https://raw.githubusercontent.com/OpenDevicePartnership/embedded-services/refs/heads/main/supply-chain/audits.toml" [[audits.open-device-partnership.audits.num_enum]] who = "Billy Price " criteria = "safe-to-deploy" delta = "0.7.4 -> 0.7.5" notes = "Looks like this is just uptaking a new version of num_enum_derive" +aggregated-from = "https://raw.githubusercontent.com/OpenDevicePartnership/embedded-services/refs/heads/main/supply-chain/audits.toml" [[audits.open-device-partnership.audits.num_enum]] who = "Jerry Xie " criteria = "safe-to-deploy" delta = "0.7.5 -> 0.7.6" notes = "Version bump with test infrastructure updates. No unsafe code, no build script, no powerful imports. Purely additive test changes." +aggregated-from = "https://raw.githubusercontent.com/OpenDevicePartnership/embedded-services/refs/heads/main/supply-chain/audits.toml" [[audits.open-device-partnership.audits.num_enum_derive]] who = "Billy Price " criteria = "safe-to-deploy" version = "0.7.4" notes = "Looks like mostly improvements to error messaging" +aggregated-from = "https://raw.githubusercontent.com/OpenDevicePartnership/embedded-services/refs/heads/main/supply-chain/audits.toml" [[audits.open-device-partnership.audits.num_enum_derive]] who = "Billy Price " criteria = "safe-to-deploy" delta = "0.7.4 -> 0.7.5" notes = "Looks like this is just uptaking a new version of num_enum_derive" +aggregated-from = "https://raw.githubusercontent.com/OpenDevicePartnership/embedded-services/refs/heads/main/supply-chain/audits.toml" [[audits.open-device-partnership.audits.num_enum_derive]] who = "Jerry Xie " criteria = "safe-to-deploy" delta = "0.7.5 -> 0.7.6" notes = "Minor update adding byte literal support for enum discriminants. No unsafe code, no build script, no powerful imports." +aggregated-from = "https://raw.githubusercontent.com/OpenDevicePartnership/embedded-services/refs/heads/main/supply-chain/audits.toml" [[audits.open-device-partnership.audits.once_cell]] who = "Jerry Xie " criteria = "safe-to-deploy" version = "1.20.1" notes = "Single-assignment cells and lazy values. All unsafe reviewed: UnsafeCell access, Send/Sync impls, atomic waiter queue, strict provenance polyfill - all sound with correct bounds. No build script, no proc macros, no powerful imports beyond std::thread/atomic. Assisted-by: copilot-chat:claude-opus-4.6" +aggregated-from = "https://raw.githubusercontent.com/OpenDevicePartnership/embedded-services/refs/heads/main/supply-chain/audits.toml" [[audits.open-device-partnership.audits.once_cell]] who = "Jerry Xie " criteria = "safe-to-deploy" delta = "1.21.3 -> 1.21.4" -notes = "Delta: soundness fix for OnceCell::wait under parking_lot feature. The wait() in imp_pl.rs now wraps parking_lot_core::park in a while loop re-checking COMPLETE state, preventing uninitialized memory observation when concurrent get_or_try_init panics. Remaining changes: doc cfg guards, doc typo fix, new tests. No new unsafe, no build script, no proc macros, no new imports. Assisted-by: copilot-chat:claude-opus-4.6" +aggregated-from = "https://raw.githubusercontent.com/OpenDevicePartnership/bq25723/refs/heads/main/supply-chain/audits.toml" [[audits.open-device-partnership.audits.pin-project]] who = "Jerry Xie " criteria = "safe-to-deploy" version = "1.1.10" notes = "no_std pin-projection helper. Re-exports proc macros from pin-project-internal. Minimal unsafe in __private module (drop guards, UnsafeUnpin forwarding) -- all sound with SAFETY comments. No build script, no powerful imports. Assisted-by: copilot-cli:claude-opus-4.6" +aggregated-from = "https://raw.githubusercontent.com/OpenDevicePartnership/embedded-services/refs/heads/main/supply-chain/audits.toml" [[audits.open-device-partnership.audits.pin-project]] who = "Jerry Xie " criteria = "safe-to-deploy" delta = "1.1.10 -> 1.1.13" notes = "Delta audit: changes are exclusively test UI .stderr expectation files updated for newer Rust compiler diagnostic formatting (line number alignment, error message wording changes). Removed obsolete overlapping_marker_traits test files for a feature removed from nightly. Zero source code changes - no changes to src/, build.rs, Cargo.toml, or proc macro logic. No new unsafe, no new imports, no behavioral changes. Assisted-by: GitHub Copilot:claude-opus-4.6" +aggregated-from = "https://raw.githubusercontent.com/OpenDevicePartnership/embedded-services/refs/heads/main/supply-chain/audits.toml" [[audits.open-device-partnership.audits.pin-project-internal]] who = "Jerry Xie " criteria = "safe-to-deploy" version = "1.1.10" notes = "Proc-macro for pin projection. forbid(unsafe_code) in macro itself. Generated unsafe is sound pin projection (Pin::new_unchecked, get_unchecked_mut) with compile-time safety enforced via trait tricks. No build script, no I/O. Deps: proc-macro2, quote, syn only. Assisted-by: copilot-chat:claude-opus-4.6" +aggregated-from = "https://raw.githubusercontent.com/OpenDevicePartnership/embedded-services/refs/heads/main/supply-chain/audits.toml" [[audits.open-device-partnership.audits.pin-project-internal]] who = "Jerry Xie " criteria = "safe-to-deploy" delta = "1.1.10 -> 1.1.13" notes = "Delta audit: proc macro crate with #![forbid(unsafe_code)]. Changes are idiomatic Rust refactoring (let-else, is_some_and), clippy lint config adjustments, doc comment fixes, and MSRV bump 1.56->1.71. No new unsafe code, no filesystem/network/process access, no behavioral changes. Generated code adds #[allow(clippy::missing_trait_methods)] to Drop impl. Assisted-by: GitHub Copilot:claude-opus-4.6" +aggregated-from = "https://raw.githubusercontent.com/OpenDevicePartnership/embedded-services/refs/heads/main/supply-chain/audits.toml" [[audits.open-device-partnership.audits.pin-project-lite]] who = "Jerry Xie " criteria = "safe-to-deploy" delta = "0.2.16 -> 0.2.17" notes = "Delta audit: no unsafe code, no build script, no proc macros, no powerful imports. Changes are cosmetic only: updated clippy lint suppressions, doc comment formatting, test stderr updates for newer compiler messages. No functional changes to macro logic. Assisted-by: GitHub Copilot:claude-opus-4.6" +aggregated-from = "https://raw.githubusercontent.com/OpenDevicePartnership/embedded-services/refs/heads/main/supply-chain/audits.toml" [[audits.open-device-partnership.audits.portable-atomic]] who = "Robert Zieba " criteria = "safe-to-deploy" version = "1.11.1" +aggregated-from = "https://raw.githubusercontent.com/OpenDevicePartnership/embedded-services/refs/heads/main/supply-chain/audits.toml" [[audits.open-device-partnership.audits.portable-atomic]] who = "Jerry Xie " criteria = "safe-to-deploy" delta = "1.11.1 -> 1.13.1" notes = "Delta audit: three minor releases (1.12.0, 1.13.0, 1.13.1). New unsafe-assume-privileged feature for multi-core interrupt-disable fallback. SeqCst sequential consistency fix in lock-based fallback. x86_64 VMOVDQA detection simplified to AVX check. Arm support expanded to all 32-bit targets. PowerPC64 asm stabilized. Major interrupt module refactoring to RAII guard pattern. All unsafe changes reviewed: sound. No new ambient capabilities. Assisted-by: copilot:claude-opus-4.6" +aggregated-from = "https://raw.githubusercontent.com/OpenDevicePartnership/embedded-services/refs/heads/main/supply-chain/audits.toml" [[audits.open-device-partnership.audits.rand_core]] who = "Billy Price " criteria = "safe-to-deploy" delta = "0.6.4 -> 0.9.5" +aggregated-from = "https://raw.githubusercontent.com/OpenDevicePartnership/embedded-services/refs/heads/main/supply-chain/audits.toml" [[audits.open-device-partnership.audits.regex-syntax]] who = "Jerry Xie " criteria = "safe-to-deploy" delta = "0.8.5 -> 0.8.10" notes = "Delta audit: crate uses #![forbid(unsafe_code)], no build.rs, no proc macros, no powerful imports. Changes are cosmetic: inline format args migration, typo fixes in comments/docs, switched docsrs cfg to docsrs_regex, added Cargo include list, deleted shell test script, minor test additions for negated unicode property classes. No security-relevant changes. Assisted-by: GitHub Copilot:claude-opus-4.6" +aggregated-from = "https://raw.githubusercontent.com/OpenDevicePartnership/embedded-services/refs/heads/main/supply-chain/audits.toml" [[audits.open-device-partnership.audits.serde]] who = "Robert Zieba " criteria = "safe-to-deploy" version = "1.0.228" notes = "Changes are mostly a reorganization of the internal module structure" +aggregated-from = "https://raw.githubusercontent.com/OpenDevicePartnership/embedded-services/refs/heads/main/supply-chain/audits.toml" [[audits.open-device-partnership.audits.serde_core]] who = "Robert Zieba " criteria = "safe-to-deploy" version = "1.0.226" +aggregated-from = "https://raw.githubusercontent.com/OpenDevicePartnership/embedded-services/refs/heads/main/supply-chain/audits.toml" [[audits.open-device-partnership.audits.serde_derive]] who = "Robert Zieba " criteria = "safe-to-deploy" version = "1.0.228" notes = "Diff is clean-up in proc macros" +aggregated-from = "https://raw.githubusercontent.com/OpenDevicePartnership/embedded-services/refs/heads/main/supply-chain/audits.toml" [[audits.open-device-partnership.audits.smbus-pec]] who = "Matteo Tullo " criteria = "safe-to-deploy" version = "1.0.1" +aggregated-from = "https://raw.githubusercontent.com/OpenDevicePartnership/embedded-services/refs/heads/main/supply-chain/audits.toml" [[audits.open-device-partnership.audits.stable_deref_trait]] who = "Jerry Xie " @@ -1423,78 +1504,113 @@ returns a stable heap or borrowed address across moves. Arc import and impls now gated behind target_has_atomic=ptr. No build script, no proc macros, no powerful imports. Assisted-by: copilot-chat:claude-opus-4.6 """ +aggregated-from = "https://raw.githubusercontent.com/OpenDevicePartnership/embedded-services/refs/heads/main/supply-chain/audits.toml" [[audits.open-device-partnership.audits.static_cell]] who = "Robert Zieba " criteria = "safe-to-deploy" version = "2.1.1" +aggregated-from = "https://raw.githubusercontent.com/OpenDevicePartnership/embedded-services/refs/heads/main/supply-chain/audits.toml" [[audits.open-device-partnership.audits.subenum]] who = "Matteo Tullo " criteria = "safe-to-deploy" version = "1.1.2" +aggregated-from = "https://raw.githubusercontent.com/OpenDevicePartnership/embedded-services/refs/heads/main/supply-chain/audits.toml" [[audits.open-device-partnership.audits.subenum]] who = "Jerry Xie " criteria = "safe-to-deploy" delta = "1.1.2 -> 1.2.0" notes = "Delta audit 1.1.2->1.2.0. Proc-macro crate only. No unsafe code. syn 1->2 migration, replaced Extractor with syn Visit trait. Added const generics, associated type, parent-specific attr support. Generated code safe. No fs/net/process access. Assisted-by: GitHub Copilot:claude-opus-4.6" +aggregated-from = "https://raw.githubusercontent.com/OpenDevicePartnership/embedded-services/refs/heads/main/supply-chain/audits.toml" [[audits.open-device-partnership.audits.thread_local]] who = "Jerry Xie " criteria = "safe-to-deploy" delta = "1.1.4 -> 1.1.9" notes = "No build script, no FS/net/process capability expansion; unsafe refactor to lock-free insertion and nightly TLS path appears sound on review. Assisted-by: copilot-cli:GPT-5.3-Codex" +aggregated-from = "https://raw.githubusercontent.com/OpenDevicePartnership/embedded-services/refs/heads/main/supply-chain/audits.toml" [[audits.open-device-partnership.audits.tracing]] who = "Jerry Xie " criteria = "safe-to-deploy" delta = "0.1.41 -> 0.1.44" notes = "Delta audit: one new unsafe (FieldName::as_str using str::from_utf8_unchecked) — sound because private field is only constructed from const fn new() which processes &str input by removing r#, preserving UTF-8 validity; compile-time assert guards N. No build script (build=false). No proc macros. No powerful imports (fs/net/process). Key changes: valueset! macro split into valueset!/valueset_all! to fix record_all panic (#3432); FieldName added for raw identifier support; stdlib.rs removed in favor of #![no_std] + extern crate std; lifetime elision cleanup; doc fixes; MSRV 1.63→1.65. Assisted-by: GitHub Copilot:claude-opus-4.6" +aggregated-from = "https://raw.githubusercontent.com/OpenDevicePartnership/embedded-services/refs/heads/main/supply-chain/audits.toml" [[audits.open-device-partnership.audits.tracing-attributes]] who = "Jerry Xie " criteria = "safe-to-deploy" delta = "0.1.30 -> 0.1.31" notes = "Delta audit 0.1.30->0.1.31: Proc macro crate. Adds support for constant expression field names in #[instrument(fields(...))] via new FieldName::Expr variant. No unsafe code. No build script. No new dependencies. No filesystem/network/process access. Removes dead code (AsyncTraitBlockReplacer). Generated code is safe - wraps user expressions in braces for tracing span fields. Comprehensive tests added. Assisted-by: copilot:claude-opus-4.6" +aggregated-from = "https://raw.githubusercontent.com/OpenDevicePartnership/embedded-services/refs/heads/main/supply-chain/audits.toml" [[audits.open-device-partnership.audits.tracing-core]] who = "Jerry Xie " criteria = "safe-to-deploy" delta = "0.1.34 -> 0.1.36" notes = "Delta audit: major refactor replacing crate::stdlib shim with direct alloc::/core::/std:: imports and unconditional #![no_std]. Removed stdlib.rs, added sync.rs (extracted Mutex wrapper). New Values::All enum variant for efficient ValueSet construction (value_set_all, #[doc(hidden)]). Two downcast_raw calls wrapped in unsafe blocks (sound - type ID checked first). No new unsafe patterns, no build script, no proc macros, no filesystem/network access. No new dependencies. Assisted-by: GitHub Copilot:claude-opus-4.6" +aggregated-from = "https://raw.githubusercontent.com/OpenDevicePartnership/embedded-services/refs/heads/main/supply-chain/audits.toml" [[audits.open-device-partnership.audits.tracing-subscriber]] who = "Jerry Xie " criteria = "safe-to-deploy" delta = "0.3.20 -> 0.3.23" notes = "Delta audit of tracing-subscriber 0.3.20->0.3.23. Changes: (1) no_std support refactoring - imports moved from std to alloc/core, unconditional #![no_std] with extern crate std gated on feature; (2) ANSI sanitization made configurable via with_ansi_sanitization(bool), defaulting to true (secure default preserved); (3) Escape renamed to EscapeGuard with conditional sanitize flag; (4) downcast_raw calls wrapped in unsafe blocks to match trait signature change in tracing-core 0.1.35 - all call sites forward to existing safe implementations; (5) Registry enter/exit simplified - removes clone_span on enter and try_close on exit for performance; (6) Layered now propagates on_register_dispatch to inner+layer; (7) Doc fixes and test improvements. No new filesystem/network/process access. No build script. No proc macros. Unsafe changes are mechanical wrapping of existing downcast_raw calls. Assisted-by: GitHub Copilot:claude-opus-4.6" +aggregated-from = "https://raw.githubusercontent.com/OpenDevicePartnership/embedded-services/refs/heads/main/supply-chain/audits.toml" + +[[audits.open-device-partnership.audits.typenum]] +who = "Jerry Xie " +criteria = "safe-to-deploy" +version = "1.18.0" +notes = "Pure no_std type-level numbers crate. forbid(unsafe_code) -- zero unsafe anywhere. Build script only writes generated test code to OUT_DIR. No proc macros, no FFI, no network/filesystem/process access in library. Assisted-by: copilot-cli:claude-opus-4.6" +aggregated-from = "https://raw.githubusercontent.com/OpenDevicePartnership/embedded-services/refs/heads/main/supply-chain/audits.toml" + +[[audits.open-device-partnership.audits.typenum]] +who = "Jerry Xie " +criteria = "safe-to-deploy" +delta = "1.18.0 -> 1.20.0" +notes = "Delta audit. build.rs removed (improvement). Adds tuple indexing, Binary fmt, ToInt for isize/i128/u128, 2^N-1 constants. No unsafe code (forbid). No build script, no proc macros, no powerful imports. Assisted-by: GitHub Copilot:claude-opus-4.6" +aggregated-from = "https://raw.githubusercontent.com/OpenDevicePartnership/embedded-services/refs/heads/main/supply-chain/audits.toml" + +[[audits.open-device-partnership.audits.typenum]] +who = "Felipe Balbi " +criteria = "safe-to-deploy" +delta = "1.20.0 -> 1.20.1" +notes = "Macro hygiene fix: the recursive expansion of `tarr!` now uses `$crate::tarr![...]` instead of a naked `tarr![...]`, so the caller no longer needs `tarr` in scope. Plus a doc_root URL bump for the new version. No runtime behaviour changes." +aggregated-from = "https://raw.githubusercontent.com/OpenDevicePartnership/embassy-imxrt/refs/heads/main/supply-chain/audits.toml" [[audits.open-device-partnership.audits.unicode-ident]] who = "Jerry Xie " criteria = "safe-to-deploy" delta = "1.0.18 -> 1.0.24" notes = "Delta: Unicode 16->17 table data update only. No unsafe, no build.rs, no new deps. Assisted-by: GitHub Copilot:claude-opus-4.6" +aggregated-from = "https://raw.githubusercontent.com/OpenDevicePartnership/embedded-services/refs/heads/main/supply-chain/audits.toml" [[audits.open-device-partnership.audits.uuid]] who = "Jerry Xie " criteria = "safe-to-deploy" version = "1.17.0" +aggregated-from = "https://raw.githubusercontent.com/OpenDevicePartnership/embedded-services/refs/heads/main/supply-chain/audits.toml" [[audits.open-device-partnership.audits.valuable]] who = "Jerry Xie " criteria = "safe-to-deploy" version = "0.1.1" notes = "No unsafe code; build.rs only sets target atomic cfg via env; no fs/net/process capability use observed; behavior matches value-inspection purpose. Assisted-by: copilot-cli:GPT-5.3-Codex" +aggregated-from = "https://raw.githubusercontent.com/OpenDevicePartnership/embedded-services/refs/heads/main/supply-chain/audits.toml" [[audits.open-device-partnership.audits.zerocopy]] who = "Jerry Xie " criteria = "safe-to-deploy" delta = "0.8.27 -> 0.8.48" notes = "Delta audit 0.8.27->0.8.48. Large refactor (34K lines, 648 files) but bulk is benchmarks, agent docs, UI test stderr, and CI scripts. Core changes: (1) build.rs inverted cfg logic (emit cfg if version < threshold) with new cfgs for x86 AVX-512 and aarch64 big-endian SIMD - still only reads env vars and emits cargo:rustc-cfg, no I/O. (2) Pointer module refactored cast system from ad-hoc PtrInner::cast into trait-based Project/Cast/CastExact with thorough SAFETY comments. (3) impls.rs simplified atomic/Cell/UnsafeCell transmute patterns, added tuple trait impls up to 26 elements with HasField/ProjectField. (4) Error types gained Clone/PartialEq/Eq impls, field renames. (5) Macros updated for Sized->unsized transmute_ref!/transmute_mut! support. (6) New ReadOnly wrapper type. No new ambient capabilities, no proc macros in this crate. All unsafe code has SAFETY comments citing specific Rust documentation versions. No build script I/O beyond cargo:rustc-cfg. Assisted-by: GitHub Copilot:claude-opus-4.6" +aggregated-from = "https://raw.githubusercontent.com/OpenDevicePartnership/embedded-services/refs/heads/main/supply-chain/audits.toml" [[audits.open-device-partnership.audits.zerocopy-derive]] who = "Jerry Xie " criteria = "safe-to-deploy" delta = "0.8.27 -> 0.8.48" notes = "Delta audit. Major refactor into derive/ modules and util.rs. No build.rs. No fs/net in proc-macro. All unsafe in generated code with SAFETY docs. Assisted-by: GitHub Copilot:claude-opus-4.6" +aggregated-from = "https://raw.githubusercontent.com/OpenDevicePartnership/embedded-services/refs/heads/main/supply-chain/audits.toml" diff --git a/platform/dev-npcx/Cargo.lock b/platform/dev-npcx/Cargo.lock index 66b76d9..6386ba3 100644 --- a/platform/dev-npcx/Cargo.lock +++ b/platform/dev-npcx/Cargo.lock @@ -706,9 +706,9 @@ dependencies = [ [[package]] name = "generic-array" -version = "1.4.5" +version = "1.4.2" source = "registry+https://github.com/rust-lang/crates.io-index" -checksum = "337d46834ee672ab3e48caca2cb0c78cc174fb12b3a68d0d88f99a0519a5e36e" +checksum = "fb130435a959a8d525e6bca66ff6c40981a300ee96d70e3ef56f046556d614a3" dependencies = [ "rustversion", "typenum", diff --git a/platform/dev-npcx/supply-chain/imports.lock b/platform/dev-npcx/supply-chain/imports.lock index 7c9e35b..7be8479 100644 --- a/platform/dev-npcx/supply-chain/imports.lock +++ b/platform/dev-npcx/supply-chain/imports.lock @@ -5,7 +5,7 @@ who = "Jerry Xie " criteria = "safe-to-deploy" delta = "1.4.0 -> 1.5.0" -notes = "No unsafe, no build.rs, no network access; delta adds edition-aware rustc probing and best-effort probe-file cleanup only. Assisted-by: copilot-cli:GPT-5.3-Codex cargo-vet" +notes = "No unsafe, no build.rs, no network access; delta adds edition-aware rustc probing and best-effort probe-file cleanup only. Assisted-by: copilot-cli:GPT-5.3-Codex" aggregated-from = "https://raw.githubusercontent.com/OpenDevicePartnership/embedded-services/refs/heads/main/supply-chain/audits.toml" [[audits.OpenDevicePartnership.audits.bare-metal]] @@ -24,21 +24,21 @@ aggregated-from = "https://raw.githubusercontent.com/OpenDevicePartnership/mcxa- who = "Jerry Xie " criteria = "safe-to-deploy" delta = "0.13.2 -> 0.15.0" -notes = "Delta audit: BitRange/Bit traits split into read-only and mutable variants (BitRangeMut/BitMut); added mask constant generation; clippy fixes; MSRV bump. No unsafe, no build script, no proc macros, no powerful imports. Assisted-by: copilot-cli:claude-opus-4.6 cargo-vet" +notes = "Delta audit: BitRange/Bit traits split into read-only and mutable variants (BitRangeMut/BitMut); added mask constant generation; clippy fixes; MSRV bump. No unsafe, no build script, no proc macros, no powerful imports. Assisted-by: copilot-cli:claude-opus-4.6" aggregated-from = "https://raw.githubusercontent.com/OpenDevicePartnership/embedded-services/refs/heads/main/supply-chain/audits.toml" [[audits.OpenDevicePartnership.audits.bitfield]] who = "Jerry Xie " criteria = "safe-to-deploy" delta = "0.15.0 -> 0.17.0" -notes = "Delta: adds bitwise op derives, constructor derives, arbitrary visibility. Pure declarative macros. No unsafe, no build script. Assisted-by: copilot-cli:claude-opus-4.6 cargo-vet" +notes = "Delta: adds bitwise op derives, constructor derives, arbitrary visibility. Pure declarative macros. No unsafe, no build script. Assisted-by: copilot-cli:claude-opus-4.6" aggregated-from = "https://raw.githubusercontent.com/OpenDevicePartnership/embedded-services/refs/heads/main/supply-chain/audits.toml" [[audits.OpenDevicePartnership.audits.bitfield-struct]] who = "Jerry Xie " criteria = "safe-to-deploy" version = "0.10.1" -notes = "Proc-macro crate generating safe bitfield structs. No unsafe, no build script. Standard proc-macro deps only. Assisted-by: copilot-cli:claude-opus-4.6 cargo-vet" +notes = "Proc-macro crate generating safe bitfield structs. No unsafe, no build script. Standard proc-macro deps only. Assisted-by: copilot-cli:claude-opus-4.6" aggregated-from = "https://raw.githubusercontent.com/OpenDevicePartnership/embedded-services/refs/heads/main/supply-chain/audits.toml" [[audits.OpenDevicePartnership.audits.bitfield-struct]] @@ -52,7 +52,7 @@ aggregated-from = "https://raw.githubusercontent.com/OpenDevicePartnership/embed who = "Jerry Xie " criteria = "safe-to-deploy" version = "0.3.4" -notes = "Intrusive data structures crate (no_std). ~115 unsafe blocks, all necessary for intrusive linked list/queue/stack ops. Correct patterns: addr_of_mut, proper atomic orderings, Vyukov MPSC algorithm. No build script, no proc macros, no powerful imports. Assisted-by: copilot-cli:claude-opus-4.6 cargo-vet" +notes = "Intrusive data structures crate (no_std). ~115 unsafe blocks, all necessary for intrusive linked list/queue/stack ops. Correct patterns: addr_of_mut, proper atomic orderings, Vyukov MPSC algorithm. No build script, no proc macros, no powerful imports. Assisted-by: copilot-cli:claude-opus-4.6" aggregated-from = "https://raw.githubusercontent.com/OpenDevicePartnership/embedded-services/refs/heads/main/supply-chain/audits.toml" [[audits.OpenDevicePartnership.audits.cortex-m]] @@ -83,7 +83,7 @@ aggregated-from = "https://raw.githubusercontent.com/OpenDevicePartnership/mcxa- who = "Jerry Xie " criteria = "safe-to-deploy" version = "0.3.100" -notes = "Compatibility shim: no_std crate that re-exports defmt 1.x items for 0.3 API compatibility. No unsafe code, no build script, no powerful imports, no logic - pure pub-use re-exports. Assisted-by: copilot-cli:claude-opus-4.6 cargo-vet" +notes = "Compatibility shim: no_std crate that re-exports defmt 1.x items for 0.3 API compatibility. No unsafe code, no build script, no powerful imports, no logic - pure pub-use re-exports. Assisted-by: copilot-cli:claude-opus-4.6" aggregated-from = "https://raw.githubusercontent.com/OpenDevicePartnership/embedded-services/refs/heads/main/supply-chain/audits.toml" [[audits.OpenDevicePartnership.audits.defmt-parser]] @@ -96,7 +96,7 @@ aggregated-from = "https://raw.githubusercontent.com/OpenDevicePartnership/mcxa- who = "Felipe Balbi " criteria = "safe-to-deploy" version = "1.0.9" -aggregated-from = "https://raw.githubusercontent.com/OpenDevicePartnership/tps6699x/refs/heads/main/supply-chain/audits.toml" +aggregated-from = "https://raw.githubusercontent.com/OpenDevicePartnership/bq25723/refs/heads/main/supply-chain/audits.toml" [[audits.OpenDevicePartnership.audits.embassy-executor-timer-queue]] who = "Felipe Balbi " @@ -108,41 +108,42 @@ aggregated-from = "https://raw.githubusercontent.com/OpenDevicePartnership/embas who = "Jerry Xie " criteria = "safe-to-deploy" version = "0.1.2" -notes = "no_std future combinators. All unsafe is pin-projection and no-op RawWaker - reviewed and sound. Assisted-by: copilot-cli:claude-opus-4.6 cargo-vet" +notes = "no_std future combinators. All unsafe is pin-projection and no-op RawWaker - reviewed and sound. Assisted-by: copilot-cli:claude-opus-4.6" aggregated-from = "https://raw.githubusercontent.com/OpenDevicePartnership/embedded-services/refs/heads/main/supply-chain/audits.toml" [[audits.OpenDevicePartnership.audits.embassy-sync]] who = "Jerry Xie " criteria = "safe-to-deploy" version = "0.8.0" -notes = "no_std async sync primitives. Substantial unsafe for UnsafeCell-based interiors and Send/Sync impls -- all reviewed and sound, guarded by RawMutex/critical_section. Build script only reads TARGET env var. No proc macros, no powerful imports. Assisted-by: copilot-cli:claude-opus-4.6 cargo-vet" +notes = "no_std async sync primitives. Substantial unsafe for UnsafeCell-based interiors and Send/Sync impls -- all reviewed and sound, guarded by RawMutex/critical_section. Build script only reads TARGET env var. No proc macros, no powerful imports. Assisted-by: copilot-cli:claude-opus-4.6" aggregated-from = "https://raw.githubusercontent.com/OpenDevicePartnership/embedded-services/refs/heads/main/supply-chain/audits.toml" [[audits.OpenDevicePartnership.audits.embassy-time]] who = "Felipe Balbi " criteria = "safe-to-deploy" version = "0.5.0" -aggregated-from = "https://raw.githubusercontent.com/OpenDevicePartnership/tps6699x/refs/heads/main/supply-chain/audits.toml" +aggregated-from = [ + "https://raw.githubusercontent.com/OpenDevicePartnership/tps6699x/refs/heads/main/supply-chain/audits.toml", + "https://raw.githubusercontent.com/OpenDevicePartnership/tps6699x/refs/heads/main/supply-chain/audits.toml", +] [[audits.OpenDevicePartnership.audits.embassy-time]] -who = "Jerry Xie " +who = "Billy Price " criteria = "safe-to-deploy" delta = "0.5.0 -> 0.5.1" -notes = "Edition 2024. Added nanosecond conversion methods, 375kHz tick rate. Dependency updates (embassy-executor 0.10.0, embassy-time-driver 0.2.2). Added log feature. Trusted publisher (lulf)." -aggregated-from = "https://raw.githubusercontent.com/OpenDevicePartnership/embassy-imxrt/refs/heads/main/supply-chain/audits.toml" +aggregated-from = "https://raw.githubusercontent.com/OpenDevicePartnership/embedded-services/refs/heads/main/supply-chain/audits.toml" [[audits.OpenDevicePartnership.audits.embassy-time-driver]] who = "Jerry Xie " criteria = "safe-to-deploy" version = "0.2.1" -notes = "no_std driver trait for embassy-time. Minimal unsafe for extern Rust FFI calls (sound via links key). Empty build.rs. Assisted-by: copilot-cli:claude-opus-4.6 cargo-vet" +notes = "no_std driver trait for embassy-time. Minimal unsafe for extern Rust FFI calls (sound via links key). Empty build.rs. Assisted-by: copilot-cli:claude-opus-4.6" aggregated-from = "https://raw.githubusercontent.com/OpenDevicePartnership/embedded-services/refs/heads/main/supply-chain/audits.toml" [[audits.OpenDevicePartnership.audits.embassy-time-driver]] -who = "Jerry Xie " +who = "Billy Price " criteria = "safe-to-deploy" delta = "0.2.1 -> 0.2.2" -notes = "Rust 2024 edition update with 375kHz tick rate feature. Empty build.rs, no unsafe code, no powerful imports." aggregated-from = "https://raw.githubusercontent.com/OpenDevicePartnership/embedded-services/refs/heads/main/supply-chain/audits.toml" [[audits.OpenDevicePartnership.audits.embassy-time-queue-utils]] @@ -195,14 +196,14 @@ aggregated-from = "https://raw.githubusercontent.com/OpenDevicePartnership/mcxa- who = "Jerry Xie " criteria = "safe-to-deploy" delta = "0.2.7 -> 1.0.0" -notes = "Pure no_std trait crate. Complete API redesign for 1.0: removed nb-based traits, CAN module, all unsafe code. Only defines traits/enums/types for digital, I2C, SPI, PWM, delay. No build script, no proc macros, no powerful imports. Assisted-by: copilot-cli:claude-opus-4.6 cargo-vet" +notes = "Pure no_std trait crate. Complete API redesign for 1.0: removed nb-based traits, CAN module, all unsafe code. Only defines traits/enums/types for digital, I2C, SPI, PWM, delay. No build script, no proc macros, no powerful imports. Assisted-by: copilot-cli:claude-opus-4.6" aggregated-from = "https://raw.githubusercontent.com/OpenDevicePartnership/embedded-services/refs/heads/main/supply-chain/audits.toml" [[audits.OpenDevicePartnership.audits.embedded-hal-async]] who = "Jerry Xie " criteria = "safe-to-deploy" version = "1.0.0" -notes = "no_std async HAL trait definitions. No unsafe in library. Build script only runs rustc --version. Assisted-by: copilot-cli:claude-opus-4.6 cargo-vet" +notes = "no_std async HAL trait definitions. No unsafe in library. Build script only runs rustc --version. Assisted-by: copilot-cli:claude-opus-4.6" aggregated-from = "https://raw.githubusercontent.com/OpenDevicePartnership/embedded-services/refs/heads/main/supply-chain/audits.toml" [[audits.OpenDevicePartnership.audits.embedded-io]] @@ -216,14 +217,14 @@ aggregated-from = "https://raw.githubusercontent.com/OpenDevicePartnership/embas who = "Jerry Xie " criteria = "safe-to-deploy" version = "0.6.1" -notes = "No unsafe. Build script only detects nightly via rustc --version. Pure async trait definitions for embedded I/O. Assisted-by: copilot-cli:claude-opus-4.6 cargo-vet" +notes = "No unsafe. Build script only detects nightly via rustc --version. Pure async trait definitions for embedded I/O. Assisted-by: copilot-cli:claude-opus-4.6" aggregated-from = "https://raw.githubusercontent.com/OpenDevicePartnership/embedded-services/refs/heads/main/supply-chain/audits.toml" [[audits.OpenDevicePartnership.audits.embedded-io-async]] who = "Jerry Xie " criteria = "safe-to-deploy" delta = "0.6.1 -> 0.7.0" -notes = "Delta 0.6.1->0.7.0: No unsafe. Build script removed (AFIT now stable). flush() made required, BufRead requires Read, new VecDeque impls. Assisted-by: copilot-cli:claude-opus-4.6 cargo-vet" +notes = "Delta 0.6.1->0.7.0: No unsafe. Build script removed (AFIT now stable). flush() made required, BufRead requires Read, new VecDeque impls. Assisted-by: copilot-cli:claude-opus-4.6" aggregated-from = "https://raw.githubusercontent.com/OpenDevicePartnership/embedded-services/refs/heads/main/supply-chain/audits.toml" [[audits.OpenDevicePartnership.audits.embedded-mcu-hal]] @@ -240,18 +241,24 @@ version = "0.3.0" notes = "ODP crates are always trusted." aggregated-from = "https://raw.githubusercontent.com/OpenDevicePartnership/embedded-services/refs/heads/main/supply-chain/audits.toml" +[[audits.OpenDevicePartnership.audits.generic-array]] +who = "Billy Price " +criteria = "safe-to-deploy" +version = "1.4.2" +aggregated-from = "https://raw.githubusercontent.com/OpenDevicePartnership/embedded-services/refs/heads/main/supply-chain/audits.toml" + [[audits.OpenDevicePartnership.audits.hash32]] who = "Jerry Xie " criteria = "safe-to-deploy" version = "0.3.1" -notes = "no_std 32-bit hashing (FNV, MurmurHash3). ~10 unsafe blocks in murmur3.rs for MaybeUninit buffer handling - all sound. Assisted-by: copilot-cli:claude-opus-4.6 cargo-vet" +notes = "no_std 32-bit hashing (FNV, MurmurHash3). ~10 unsafe blocks in murmur3.rs for MaybeUninit buffer handling - all sound. Assisted-by: copilot-cli:claude-opus-4.6" aggregated-from = "https://raw.githubusercontent.com/OpenDevicePartnership/embedded-services/refs/heads/main/supply-chain/audits.toml" [[audits.OpenDevicePartnership.audits.heapless]] who = "Jerry Xie " criteria = "safe-to-deploy" version = "0.8.0" -notes = "no_std fixed-capacity data structures. Extensive unsafe for MaybeUninit buffer management, lock-free queues (Vyukov MPMC, SPSC), and Treiber stack memory pools with ABA prevention. Patterns mirror std or published algorithms. Build script probes for atomic/LLSC support. Assisted-by: copilot-cli:claude-opus-4.6 cargo-vet" +notes = "no_std fixed-capacity data structures. Extensive unsafe for MaybeUninit buffer management, lock-free queues (Vyukov MPMC, SPSC), and Treiber stack memory pools with ABA prevention. Patterns mirror std or published algorithms. Build script probes for atomic/LLSC support. Assisted-by: copilot-cli:claude-opus-4.6" aggregated-from = "https://raw.githubusercontent.com/OpenDevicePartnership/embedded-services/refs/heads/main/supply-chain/audits.toml" [[audits.OpenDevicePartnership.audits.heck]] @@ -264,7 +271,7 @@ aggregated-from = "https://raw.githubusercontent.com/OpenDevicePartnership/embed who = "Jerry Xie " criteria = "safe-to-deploy" version = "0.2.2" -notes = "No-std async sync primitives. Extensive unsafe for Send/Sync impls, UnsafeCell access under locks/atomics, intrusive linked list nodes, spinlocks -- all follow standard patterns. Uses unreachable_unchecked! macro (panics in debug). No build script, no proc macros. Loom-tested. Assisted-by: copilot-cli:claude-opus-4.6 cargo-vet" +notes = "No-std async sync primitives. Extensive unsafe for Send/Sync impls, UnsafeCell access under locks/atomics, intrusive linked list nodes, spinlocks -- all follow standard patterns. Uses unreachable_unchecked! macro (panics in debug). No build script, no proc macros. Loom-tested. Assisted-by: copilot-cli:claude-opus-4.6" aggregated-from = "https://raw.githubusercontent.com/OpenDevicePartnership/embedded-services/refs/heads/main/supply-chain/audits.toml" [[audits.OpenDevicePartnership.audits.matchers]] @@ -283,7 +290,7 @@ aggregated-from = "https://raw.githubusercontent.com/OpenDevicePartnership/embed who = "Jerry Xie " criteria = "safe-to-deploy" version = "0.1.5" -notes = "Pure safe no_std bitfield macro crate. No unsafe code, no build script, no proc macros, no dependencies, no powerful imports. Only core:: types used. Assisted-by: copilot-chat:claude-opus-4.6 cargo-vet" +notes = "Pure safe no_std bitfield macro crate. No unsafe code, no build script, no proc macros, no dependencies, no powerful imports. Only core:: types used. Assisted-by: copilot-chat:claude-opus-4.6" aggregated-from = "https://raw.githubusercontent.com/OpenDevicePartnership/embedded-services/refs/heads/main/supply-chain/audits.toml" [[audits.OpenDevicePartnership.audits.nu-ansi-term]] @@ -390,7 +397,7 @@ aggregated-from = "https://raw.githubusercontent.com/OpenDevicePartnership/embed who = "Jerry Xie " criteria = "safe-to-deploy" delta = "1.1.4 -> 1.1.9" -notes = "No build script, no FS/net/process capability expansion; unsafe refactor to lock-free insertion and nightly TLS path appears sound on review. Assisted-by: copilot-cli:GPT-5.3-Codex cargo-vet" +notes = "No build script, no FS/net/process capability expansion; unsafe refactor to lock-free insertion and nightly TLS path appears sound on review. Assisted-by: copilot-cli:GPT-5.3-Codex" aggregated-from = "https://raw.githubusercontent.com/OpenDevicePartnership/embedded-services/refs/heads/main/supply-chain/audits.toml" [[audits.OpenDevicePartnership.audits.tracing-log]] @@ -399,6 +406,27 @@ criteria = "safe-to-deploy" delta = "0.1.3 -> 0.2.0" aggregated-from = "https://raw.githubusercontent.com/OpenDevicePartnership/embedded-services/refs/heads/main/supply-chain/audits.toml" +[[audits.OpenDevicePartnership.audits.typenum]] +who = "Jerry Xie " +criteria = "safe-to-deploy" +version = "1.18.0" +notes = "Pure no_std type-level numbers crate. forbid(unsafe_code) -- zero unsafe anywhere. Build script only writes generated test code to OUT_DIR. No proc macros, no FFI, no network/filesystem/process access in library. Assisted-by: copilot-cli:claude-opus-4.6" +aggregated-from = "https://raw.githubusercontent.com/OpenDevicePartnership/embedded-services/refs/heads/main/supply-chain/audits.toml" + +[[audits.OpenDevicePartnership.audits.typenum]] +who = "Jerry Xie " +criteria = "safe-to-deploy" +delta = "1.18.0 -> 1.20.0" +notes = "Delta audit. build.rs removed (improvement). Adds tuple indexing, Binary fmt, ToInt for isize/i128/u128, 2^N-1 constants. No unsafe code (forbid). No build script, no proc macros, no powerful imports. Assisted-by: GitHub Copilot:claude-opus-4.6" +aggregated-from = "https://raw.githubusercontent.com/OpenDevicePartnership/embedded-services/refs/heads/main/supply-chain/audits.toml" + +[[audits.OpenDevicePartnership.audits.typenum]] +who = "Felipe Balbi " +criteria = "safe-to-deploy" +delta = "1.20.0 -> 1.20.1" +notes = "Macro hygiene fix: the recursive expansion of `tarr!` now uses `$crate::tarr![...]` instead of a naked `tarr![...]`, so the caller no longer needs `tarr` in scope. Plus a doc_root URL bump for the new version. No runtime behaviour changes." +aggregated-from = "https://raw.githubusercontent.com/OpenDevicePartnership/embassy-imxrt/refs/heads/main/supply-chain/audits.toml" + [[audits.OpenDevicePartnership.audits.uuid]] who = "Jerry Xie " criteria = "safe-to-deploy" @@ -409,7 +437,7 @@ aggregated-from = "https://raw.githubusercontent.com/OpenDevicePartnership/embed who = "Jerry Xie " criteria = "safe-to-deploy" version = "0.1.1" -notes = "No unsafe code; build.rs only sets target atomic cfg via env; no fs/net/process capability use observed; behavior matches value-inspection purpose. Assisted-by: copilot-cli:GPT-5.3-Codex cargo-vet" +notes = "No unsafe code; build.rs only sets target atomic cfg via env; no fs/net/process capability use observed; behavior matches value-inspection purpose. Assisted-by: copilot-cli:GPT-5.3-Codex" aggregated-from = "https://raw.githubusercontent.com/OpenDevicePartnership/embedded-services/refs/heads/main/supply-chain/audits.toml" [[audits.OpenDevicePartnership.audits.vcell]] @@ -898,25 +926,25 @@ who = "Alex Franchuk " criteria = "safe-to-deploy" delta = "1.3.2 -> 2.0.2" notes = "Removal of some unsafe code/methods. No changes to externals, just some refactoring (mostly internal)." -aggregated-from = "https://hg.mozilla.org/mozilla-central/raw-file/tip/supply-chain/audits.toml" +aggregated-from = "https://raw.githubusercontent.com/mozilla-firefox/firefox/main/supply-chain/audits.toml" [[audits.mozilla.audits.bitflags]] who = "Nicolas Silva " criteria = "safe-to-deploy" delta = "2.0.2 -> 2.1.0" -aggregated-from = "https://hg.mozilla.org/mozilla-central/raw-file/tip/supply-chain/audits.toml" +aggregated-from = "https://raw.githubusercontent.com/mozilla-firefox/firefox/main/supply-chain/audits.toml" [[audits.mozilla.audits.bitflags]] who = "Teodor Tanasoaia " criteria = "safe-to-deploy" delta = "2.2.1 -> 2.3.2" -aggregated-from = "https://hg.mozilla.org/mozilla-central/raw-file/tip/supply-chain/audits.toml" +aggregated-from = "https://raw.githubusercontent.com/mozilla-firefox/firefox/main/supply-chain/audits.toml" [[audits.mozilla.audits.bitflags]] who = "Mike Hommey " criteria = "safe-to-deploy" delta = "2.3.3 -> 2.4.0" -aggregated-from = "https://hg.mozilla.org/mozilla-central/raw-file/tip/supply-chain/audits.toml" +aggregated-from = "https://raw.githubusercontent.com/mozilla-firefox/firefox/main/supply-chain/audits.toml" [[audits.mozilla.audits.bitflags]] who = "Jan-Erik Rediger " @@ -932,26 +960,26 @@ who = [ ] criteria = "safe-to-deploy" delta = "2.6.0 -> 2.7.0" -aggregated-from = "https://hg.mozilla.org/mozilla-central/raw-file/tip/supply-chain/audits.toml" +aggregated-from = "https://raw.githubusercontent.com/mozilla-firefox/firefox/main/supply-chain/audits.toml" [[audits.mozilla.audits.bitflags]] who = "Benjamin VanderSloot " criteria = "safe-to-deploy" delta = "2.9.4 -> 2.10.0" -aggregated-from = "https://hg.mozilla.org/mozilla-central/raw-file/tip/supply-chain/audits.toml" +aggregated-from = "https://raw.githubusercontent.com/mozilla-firefox/firefox/main/supply-chain/audits.toml" [[audits.mozilla.audits.fnv]] who = "Bobby Holley " criteria = "safe-to-deploy" version = "1.0.7" notes = "Simple hasher implementation with no unsafe code." -aggregated-from = "https://hg.mozilla.org/mozilla-central/raw-file/tip/supply-chain/audits.toml" +aggregated-from = "https://raw.githubusercontent.com/mozilla-firefox/firefox/main/supply-chain/audits.toml" [[audits.mozilla.audits.log]] who = "Erich Gubler " criteria = "safe-to-deploy" delta = "0.4.26 -> 0.4.29" -aggregated-from = "https://hg.mozilla.org/mozilla-central/raw-file/tip/supply-chain/audits.toml" +aggregated-from = "https://raw.githubusercontent.com/mozilla-firefox/firefox/main/supply-chain/audits.toml" [[audits.mozilla.audits.proc-macro2]] who = "Jan-Erik Rediger " @@ -969,7 +997,7 @@ aggregated-from = "https://raw.githubusercontent.com/mozilla/glean/main/supply-c who = "Erich Gubler " criteria = "safe-to-deploy" delta = "1.0.226 -> 1.0.227" -aggregated-from = "https://hg.mozilla.org/mozilla-central/raw-file/tip/supply-chain/audits.toml" +aggregated-from = "https://raw.githubusercontent.com/mozilla-firefox/firefox/main/supply-chain/audits.toml" [[audits.mozilla.audits.serde_core]] who = "Jan-Erik Rediger " @@ -981,22 +1009,22 @@ aggregated-from = "https://raw.githubusercontent.com/mozilla/glean/main/supply-c who = "Mark Hammond " criteria = "safe-to-deploy" delta = "0.1.4 -> 0.1.7" -aggregated-from = "https://hg.mozilla.org/mozilla-central/raw-file/tip/supply-chain/audits.toml" +aggregated-from = "https://raw.githubusercontent.com/mozilla-firefox/firefox/main/supply-chain/audits.toml" [[audits.mozilla.audits.shlex]] who = "Max Inden " criteria = "safe-to-deploy" delta = "1.1.0 -> 1.3.0" -aggregated-from = "https://hg.mozilla.org/mozilla-central/raw-file/tip/supply-chain/audits.toml" +aggregated-from = "https://raw.githubusercontent.com/mozilla-firefox/firefox/main/supply-chain/audits.toml" [[audits.mozilla.audits.smallvec]] who = "Erich Gubler " criteria = "safe-to-deploy" delta = "1.14.0 -> 1.15.1" -aggregated-from = "https://hg.mozilla.org/mozilla-central/raw-file/tip/supply-chain/audits.toml" +aggregated-from = "https://raw.githubusercontent.com/mozilla-firefox/firefox/main/supply-chain/audits.toml" [[audits.mozilla.audits.strsim]] who = "Ben Dean-Kawamura " criteria = "safe-to-deploy" delta = "0.10.0 -> 0.11.1" -aggregated-from = "https://hg.mozilla.org/mozilla-central/raw-file/tip/supply-chain/audits.toml" +aggregated-from = "https://raw.githubusercontent.com/mozilla-firefox/firefox/main/supply-chain/audits.toml" diff --git a/platform/dev-qemu/Cargo.lock b/platform/dev-qemu/Cargo.lock index 8bb96e2..03e2b6c 100644 --- a/platform/dev-qemu/Cargo.lock +++ b/platform/dev-qemu/Cargo.lock @@ -702,9 +702,9 @@ dependencies = [ [[package]] name = "generic-array" -version = "1.4.5" +version = "1.4.2" source = "registry+https://github.com/rust-lang/crates.io-index" -checksum = "337d46834ee672ab3e48caca2cb0c78cc174fb12b3a68d0d88f99a0519a5e36e" +checksum = "fb130435a959a8d525e6bca66ff6c40981a300ee96d70e3ef56f046556d614a3" dependencies = [ "rustversion", "typenum", diff --git a/platform/dev-qemu/supply-chain/imports.lock b/platform/dev-qemu/supply-chain/imports.lock index 8441147..bd93511 100644 --- a/platform/dev-qemu/supply-chain/imports.lock +++ b/platform/dev-qemu/supply-chain/imports.lock @@ -17,21 +17,21 @@ aggregated-from = "https://raw.githubusercontent.com/OpenDevicePartnership/mcxa- who = "Jerry Xie " criteria = "safe-to-deploy" delta = "0.13.2 -> 0.15.0" -notes = "Delta audit: BitRange/Bit traits split into read-only and mutable variants (BitRangeMut/BitMut); added mask constant generation; clippy fixes; MSRV bump. No unsafe, no build script, no proc macros, no powerful imports. Assisted-by: copilot-cli:claude-opus-4.6 cargo-vet" +notes = "Delta audit: BitRange/Bit traits split into read-only and mutable variants (BitRangeMut/BitMut); added mask constant generation; clippy fixes; MSRV bump. No unsafe, no build script, no proc macros, no powerful imports. Assisted-by: copilot-cli:claude-opus-4.6" aggregated-from = "https://raw.githubusercontent.com/OpenDevicePartnership/embedded-services/refs/heads/main/supply-chain/audits.toml" [[audits.OpenDevicePartnership.audits.bitfield]] who = "Jerry Xie " criteria = "safe-to-deploy" delta = "0.15.0 -> 0.17.0" -notes = "Delta: adds bitwise op derives, constructor derives, arbitrary visibility. Pure declarative macros. No unsafe, no build script. Assisted-by: copilot-cli:claude-opus-4.6 cargo-vet" +notes = "Delta: adds bitwise op derives, constructor derives, arbitrary visibility. Pure declarative macros. No unsafe, no build script. Assisted-by: copilot-cli:claude-opus-4.6" aggregated-from = "https://raw.githubusercontent.com/OpenDevicePartnership/embedded-services/refs/heads/main/supply-chain/audits.toml" [[audits.OpenDevicePartnership.audits.bitfield-struct]] who = "Jerry Xie " criteria = "safe-to-deploy" version = "0.10.1" -notes = "Proc-macro crate generating safe bitfield structs. No unsafe, no build script. Standard proc-macro deps only. Assisted-by: copilot-cli:claude-opus-4.6 cargo-vet" +notes = "Proc-macro crate generating safe bitfield structs. No unsafe, no build script. Standard proc-macro deps only. Assisted-by: copilot-cli:claude-opus-4.6" aggregated-from = "https://raw.githubusercontent.com/OpenDevicePartnership/embedded-services/refs/heads/main/supply-chain/audits.toml" [[audits.OpenDevicePartnership.audits.bitfield-struct]] @@ -45,7 +45,7 @@ aggregated-from = "https://raw.githubusercontent.com/OpenDevicePartnership/embed who = "Jerry Xie " criteria = "safe-to-deploy" version = "0.3.4" -notes = "Intrusive data structures crate (no_std). ~115 unsafe blocks, all necessary for intrusive linked list/queue/stack ops. Correct patterns: addr_of_mut, proper atomic orderings, Vyukov MPSC algorithm. No build script, no proc macros, no powerful imports. Assisted-by: copilot-cli:claude-opus-4.6 cargo-vet" +notes = "Intrusive data structures crate (no_std). ~115 unsafe blocks, all necessary for intrusive linked list/queue/stack ops. Correct patterns: addr_of_mut, proper atomic orderings, Vyukov MPSC algorithm. No build script, no proc macros, no powerful imports. Assisted-by: copilot-cli:claude-opus-4.6" aggregated-from = "https://raw.githubusercontent.com/OpenDevicePartnership/embedded-services/refs/heads/main/supply-chain/audits.toml" [[audits.OpenDevicePartnership.audits.cortex-m]] @@ -64,7 +64,7 @@ aggregated-from = "https://raw.githubusercontent.com/OpenDevicePartnership/mcxa- who = "Jerry Xie " criteria = "safe-to-deploy" version = "0.3.100" -notes = "Compatibility shim: no_std crate that re-exports defmt 1.x items for 0.3 API compatibility. No unsafe code, no build script, no powerful imports, no logic - pure pub-use re-exports. Assisted-by: copilot-cli:claude-opus-4.6 cargo-vet" +notes = "Compatibility shim: no_std crate that re-exports defmt 1.x items for 0.3 API compatibility. No unsafe code, no build script, no powerful imports, no logic - pure pub-use re-exports. Assisted-by: copilot-cli:claude-opus-4.6" aggregated-from = "https://raw.githubusercontent.com/OpenDevicePartnership/embedded-services/refs/heads/main/supply-chain/audits.toml" [[audits.OpenDevicePartnership.audits.defmt-parser]] @@ -77,7 +77,7 @@ aggregated-from = "https://raw.githubusercontent.com/OpenDevicePartnership/mcxa- who = "Felipe Balbi " criteria = "safe-to-deploy" version = "1.0.9" -aggregated-from = "https://raw.githubusercontent.com/OpenDevicePartnership/tps6699x/refs/heads/main/supply-chain/audits.toml" +aggregated-from = "https://raw.githubusercontent.com/OpenDevicePartnership/bq25723/refs/heads/main/supply-chain/audits.toml" [[audits.OpenDevicePartnership.audits.embassy-executor-timer-queue]] who = "Felipe Balbi " @@ -89,55 +89,55 @@ aggregated-from = "https://raw.githubusercontent.com/OpenDevicePartnership/embas who = "Jerry Xie " criteria = "safe-to-deploy" version = "0.1.2" -notes = "no_std future combinators. All unsafe is pin-projection and no-op RawWaker - reviewed and sound. Assisted-by: copilot-cli:claude-opus-4.6 cargo-vet" +notes = "no_std future combinators. All unsafe is pin-projection and no-op RawWaker - reviewed and sound. Assisted-by: copilot-cli:claude-opus-4.6" aggregated-from = "https://raw.githubusercontent.com/OpenDevicePartnership/embedded-services/refs/heads/main/supply-chain/audits.toml" [[audits.OpenDevicePartnership.audits.embassy-hal-internal]] who = "Jerry Xie " criteria = "safe-to-deploy" version = "0.3.0" -notes = "no_std HAL internals. Unsafe in atomic ring buffer (sound SPSC), peripheral singletons, cortex-m interrupt priority. Build script emits cfg flags only. Assisted-by: copilot-cli:claude-opus-4.6 cargo-vet" +notes = "no_std HAL internals. Unsafe in atomic ring buffer (sound SPSC), peripheral singletons, cortex-m interrupt priority. Build script emits cfg flags only. Assisted-by: copilot-cli:claude-opus-4.6" aggregated-from = "https://raw.githubusercontent.com/OpenDevicePartnership/embedded-services/refs/heads/main/supply-chain/audits.toml" [[audits.OpenDevicePartnership.audits.embassy-hal-internal]] -who = "Jerry Xie " +who = "Billy Price " criteria = "safe-to-deploy" delta = "0.3.0 -> 0.4.0" -notes = "Edition update to 2024. Added defmt/log features and RingBuffer helper methods (available, is_half_full). Safe additions only. Trusted publisher (lulf)." -aggregated-from = "https://raw.githubusercontent.com/OpenDevicePartnership/embassy-imxrt/refs/heads/main/supply-chain/audits.toml" +aggregated-from = "https://raw.githubusercontent.com/OpenDevicePartnership/embedded-services/refs/heads/main/supply-chain/audits.toml" [[audits.OpenDevicePartnership.audits.embassy-sync]] who = "Jerry Xie " criteria = "safe-to-deploy" version = "0.8.0" -notes = "no_std async sync primitives. Substantial unsafe for UnsafeCell-based interiors and Send/Sync impls -- all reviewed and sound, guarded by RawMutex/critical_section. Build script only reads TARGET env var. No proc macros, no powerful imports. Assisted-by: copilot-cli:claude-opus-4.6 cargo-vet" +notes = "no_std async sync primitives. Substantial unsafe for UnsafeCell-based interiors and Send/Sync impls -- all reviewed and sound, guarded by RawMutex/critical_section. Build script only reads TARGET env var. No proc macros, no powerful imports. Assisted-by: copilot-cli:claude-opus-4.6" aggregated-from = "https://raw.githubusercontent.com/OpenDevicePartnership/embedded-services/refs/heads/main/supply-chain/audits.toml" [[audits.OpenDevicePartnership.audits.embassy-time]] who = "Felipe Balbi " criteria = "safe-to-deploy" version = "0.5.0" -aggregated-from = "https://raw.githubusercontent.com/OpenDevicePartnership/tps6699x/refs/heads/main/supply-chain/audits.toml" +aggregated-from = [ + "https://raw.githubusercontent.com/OpenDevicePartnership/tps6699x/refs/heads/main/supply-chain/audits.toml", + "https://raw.githubusercontent.com/OpenDevicePartnership/tps6699x/refs/heads/main/supply-chain/audits.toml", +] [[audits.OpenDevicePartnership.audits.embassy-time]] -who = "Jerry Xie " +who = "Billy Price " criteria = "safe-to-deploy" delta = "0.5.0 -> 0.5.1" -notes = "Edition 2024. Added nanosecond conversion methods, 375kHz tick rate. Dependency updates (embassy-executor 0.10.0, embassy-time-driver 0.2.2). Added log feature. Trusted publisher (lulf)." -aggregated-from = "https://raw.githubusercontent.com/OpenDevicePartnership/embassy-imxrt/refs/heads/main/supply-chain/audits.toml" +aggregated-from = "https://raw.githubusercontent.com/OpenDevicePartnership/embedded-services/refs/heads/main/supply-chain/audits.toml" [[audits.OpenDevicePartnership.audits.embassy-time-driver]] who = "Jerry Xie " criteria = "safe-to-deploy" version = "0.2.1" -notes = "no_std driver trait for embassy-time. Minimal unsafe for extern Rust FFI calls (sound via links key). Empty build.rs. Assisted-by: copilot-cli:claude-opus-4.6 cargo-vet" +notes = "no_std driver trait for embassy-time. Minimal unsafe for extern Rust FFI calls (sound via links key). Empty build.rs. Assisted-by: copilot-cli:claude-opus-4.6" aggregated-from = "https://raw.githubusercontent.com/OpenDevicePartnership/embedded-services/refs/heads/main/supply-chain/audits.toml" [[audits.OpenDevicePartnership.audits.embassy-time-driver]] -who = "Jerry Xie " +who = "Billy Price " criteria = "safe-to-deploy" delta = "0.2.1 -> 0.2.2" -notes = "Rust 2024 edition update with 375kHz tick rate feature. Empty build.rs, no unsafe code, no powerful imports." aggregated-from = "https://raw.githubusercontent.com/OpenDevicePartnership/embedded-services/refs/heads/main/supply-chain/audits.toml" [[audits.OpenDevicePartnership.audits.embassy-time-queue-utils]] @@ -196,14 +196,14 @@ aggregated-from = "https://raw.githubusercontent.com/OpenDevicePartnership/mcxa- who = "Jerry Xie " criteria = "safe-to-deploy" delta = "0.2.7 -> 1.0.0" -notes = "Pure no_std trait crate. Complete API redesign for 1.0: removed nb-based traits, CAN module, all unsafe code. Only defines traits/enums/types for digital, I2C, SPI, PWM, delay. No build script, no proc macros, no powerful imports. Assisted-by: copilot-cli:claude-opus-4.6 cargo-vet" +notes = "Pure no_std trait crate. Complete API redesign for 1.0: removed nb-based traits, CAN module, all unsafe code. Only defines traits/enums/types for digital, I2C, SPI, PWM, delay. No build script, no proc macros, no powerful imports. Assisted-by: copilot-cli:claude-opus-4.6" aggregated-from = "https://raw.githubusercontent.com/OpenDevicePartnership/embedded-services/refs/heads/main/supply-chain/audits.toml" [[audits.OpenDevicePartnership.audits.embedded-hal-async]] who = "Jerry Xie " criteria = "safe-to-deploy" version = "1.0.0" -notes = "no_std async HAL trait definitions. No unsafe in library. Build script only runs rustc --version. Assisted-by: copilot-cli:claude-opus-4.6 cargo-vet" +notes = "no_std async HAL trait definitions. No unsafe in library. Build script only runs rustc --version. Assisted-by: copilot-cli:claude-opus-4.6" aggregated-from = "https://raw.githubusercontent.com/OpenDevicePartnership/embedded-services/refs/heads/main/supply-chain/audits.toml" [[audits.OpenDevicePartnership.audits.embedded-io]] @@ -217,14 +217,14 @@ aggregated-from = "https://raw.githubusercontent.com/OpenDevicePartnership/embas who = "Jerry Xie " criteria = "safe-to-deploy" version = "0.6.1" -notes = "No unsafe. Build script only detects nightly via rustc --version. Pure async trait definitions for embedded I/O. Assisted-by: copilot-cli:claude-opus-4.6 cargo-vet" +notes = "No unsafe. Build script only detects nightly via rustc --version. Pure async trait definitions for embedded I/O. Assisted-by: copilot-cli:claude-opus-4.6" aggregated-from = "https://raw.githubusercontent.com/OpenDevicePartnership/embedded-services/refs/heads/main/supply-chain/audits.toml" [[audits.OpenDevicePartnership.audits.embedded-io-async]] who = "Jerry Xie " criteria = "safe-to-deploy" delta = "0.6.1 -> 0.7.0" -notes = "Delta 0.6.1->0.7.0: No unsafe. Build script removed (AFIT now stable). flush() made required, BufRead requires Read, new VecDeque impls. Assisted-by: copilot-cli:claude-opus-4.6 cargo-vet" +notes = "Delta 0.6.1->0.7.0: No unsafe. Build script removed (AFIT now stable). flush() made required, BufRead requires Read, new VecDeque impls. Assisted-by: copilot-cli:claude-opus-4.6" aggregated-from = "https://raw.githubusercontent.com/OpenDevicePartnership/embedded-services/refs/heads/main/supply-chain/audits.toml" [[audits.OpenDevicePartnership.audits.embedded-mcu-hal]] @@ -241,18 +241,24 @@ version = "0.3.0" notes = "ODP crates are always trusted." aggregated-from = "https://raw.githubusercontent.com/OpenDevicePartnership/embedded-services/refs/heads/main/supply-chain/audits.toml" +[[audits.OpenDevicePartnership.audits.generic-array]] +who = "Billy Price " +criteria = "safe-to-deploy" +version = "1.4.2" +aggregated-from = "https://raw.githubusercontent.com/OpenDevicePartnership/embedded-services/refs/heads/main/supply-chain/audits.toml" + [[audits.OpenDevicePartnership.audits.hash32]] who = "Jerry Xie " criteria = "safe-to-deploy" version = "0.3.1" -notes = "no_std 32-bit hashing (FNV, MurmurHash3). ~10 unsafe blocks in murmur3.rs for MaybeUninit buffer handling - all sound. Assisted-by: copilot-cli:claude-opus-4.6 cargo-vet" +notes = "no_std 32-bit hashing (FNV, MurmurHash3). ~10 unsafe blocks in murmur3.rs for MaybeUninit buffer handling - all sound. Assisted-by: copilot-cli:claude-opus-4.6" aggregated-from = "https://raw.githubusercontent.com/OpenDevicePartnership/embedded-services/refs/heads/main/supply-chain/audits.toml" [[audits.OpenDevicePartnership.audits.heapless]] who = "Jerry Xie " criteria = "safe-to-deploy" version = "0.8.0" -notes = "no_std fixed-capacity data structures. Extensive unsafe for MaybeUninit buffer management, lock-free queues (Vyukov MPMC, SPSC), and Treiber stack memory pools with ABA prevention. Patterns mirror std or published algorithms. Build script probes for atomic/LLSC support. Assisted-by: copilot-cli:claude-opus-4.6 cargo-vet" +notes = "no_std fixed-capacity data structures. Extensive unsafe for MaybeUninit buffer management, lock-free queues (Vyukov MPMC, SPSC), and Treiber stack memory pools with ABA prevention. Patterns mirror std or published algorithms. Build script probes for atomic/LLSC support. Assisted-by: copilot-cli:claude-opus-4.6" aggregated-from = "https://raw.githubusercontent.com/OpenDevicePartnership/embedded-services/refs/heads/main/supply-chain/audits.toml" [[audits.OpenDevicePartnership.audits.heck]] @@ -371,7 +377,7 @@ aggregated-from = "https://raw.githubusercontent.com/OpenDevicePartnership/embed who = "Jerry Xie " criteria = "safe-to-deploy" delta = "1.1.4 -> 1.1.9" -notes = "No build script, no FS/net/process capability expansion; unsafe refactor to lock-free insertion and nightly TLS path appears sound on review. Assisted-by: copilot-cli:GPT-5.3-Codex cargo-vet" +notes = "No build script, no FS/net/process capability expansion; unsafe refactor to lock-free insertion and nightly TLS path appears sound on review. Assisted-by: copilot-cli:GPT-5.3-Codex" aggregated-from = "https://raw.githubusercontent.com/OpenDevicePartnership/embedded-services/refs/heads/main/supply-chain/audits.toml" [[audits.OpenDevicePartnership.audits.tracing-log]] @@ -380,6 +386,27 @@ criteria = "safe-to-deploy" delta = "0.1.3 -> 0.2.0" aggregated-from = "https://raw.githubusercontent.com/OpenDevicePartnership/embedded-services/refs/heads/main/supply-chain/audits.toml" +[[audits.OpenDevicePartnership.audits.typenum]] +who = "Jerry Xie " +criteria = "safe-to-deploy" +version = "1.18.0" +notes = "Pure no_std type-level numbers crate. forbid(unsafe_code) -- zero unsafe anywhere. Build script only writes generated test code to OUT_DIR. No proc macros, no FFI, no network/filesystem/process access in library. Assisted-by: copilot-cli:claude-opus-4.6" +aggregated-from = "https://raw.githubusercontent.com/OpenDevicePartnership/embedded-services/refs/heads/main/supply-chain/audits.toml" + +[[audits.OpenDevicePartnership.audits.typenum]] +who = "Jerry Xie " +criteria = "safe-to-deploy" +delta = "1.18.0 -> 1.20.0" +notes = "Delta audit. build.rs removed (improvement). Adds tuple indexing, Binary fmt, ToInt for isize/i128/u128, 2^N-1 constants. No unsafe code (forbid). No build script, no proc macros, no powerful imports. Assisted-by: GitHub Copilot:claude-opus-4.6" +aggregated-from = "https://raw.githubusercontent.com/OpenDevicePartnership/embedded-services/refs/heads/main/supply-chain/audits.toml" + +[[audits.OpenDevicePartnership.audits.typenum]] +who = "Felipe Balbi " +criteria = "safe-to-deploy" +delta = "1.20.0 -> 1.20.1" +notes = "Macro hygiene fix: the recursive expansion of `tarr!` now uses `$crate::tarr![...]` instead of a naked `tarr![...]`, so the caller no longer needs `tarr` in scope. Plus a doc_root URL bump for the new version. No runtime behaviour changes." +aggregated-from = "https://raw.githubusercontent.com/OpenDevicePartnership/embassy-imxrt/refs/heads/main/supply-chain/audits.toml" + [[audits.OpenDevicePartnership.audits.uuid]] who = "Jerry Xie " criteria = "safe-to-deploy" @@ -390,7 +417,7 @@ aggregated-from = "https://raw.githubusercontent.com/OpenDevicePartnership/embed who = "Jerry Xie " criteria = "safe-to-deploy" version = "0.1.1" -notes = "No unsafe code; build.rs only sets target atomic cfg via env; no fs/net/process capability use observed; behavior matches value-inspection purpose. Assisted-by: copilot-cli:GPT-5.3-Codex cargo-vet" +notes = "No unsafe code; build.rs only sets target atomic cfg via env; no fs/net/process capability use observed; behavior matches value-inspection purpose. Assisted-by: copilot-cli:GPT-5.3-Codex" aggregated-from = "https://raw.githubusercontent.com/OpenDevicePartnership/embedded-services/refs/heads/main/supply-chain/audits.toml" [[audits.OpenDevicePartnership.audits.vcell]] @@ -872,25 +899,25 @@ who = "Alex Franchuk " criteria = "safe-to-deploy" delta = "1.3.2 -> 2.0.2" notes = "Removal of some unsafe code/methods. No changes to externals, just some refactoring (mostly internal)." -aggregated-from = "https://hg.mozilla.org/mozilla-central/raw-file/tip/supply-chain/audits.toml" +aggregated-from = "https://raw.githubusercontent.com/mozilla-firefox/firefox/main/supply-chain/audits.toml" [[audits.mozilla.audits.bitflags]] who = "Nicolas Silva " criteria = "safe-to-deploy" delta = "2.0.2 -> 2.1.0" -aggregated-from = "https://hg.mozilla.org/mozilla-central/raw-file/tip/supply-chain/audits.toml" +aggregated-from = "https://raw.githubusercontent.com/mozilla-firefox/firefox/main/supply-chain/audits.toml" [[audits.mozilla.audits.bitflags]] who = "Teodor Tanasoaia " criteria = "safe-to-deploy" delta = "2.2.1 -> 2.3.2" -aggregated-from = "https://hg.mozilla.org/mozilla-central/raw-file/tip/supply-chain/audits.toml" +aggregated-from = "https://raw.githubusercontent.com/mozilla-firefox/firefox/main/supply-chain/audits.toml" [[audits.mozilla.audits.bitflags]] who = "Mike Hommey " criteria = "safe-to-deploy" delta = "2.3.3 -> 2.4.0" -aggregated-from = "https://hg.mozilla.org/mozilla-central/raw-file/tip/supply-chain/audits.toml" +aggregated-from = "https://raw.githubusercontent.com/mozilla-firefox/firefox/main/supply-chain/audits.toml" [[audits.mozilla.audits.bitflags]] who = "Jan-Erik Rediger " @@ -906,26 +933,26 @@ who = [ ] criteria = "safe-to-deploy" delta = "2.6.0 -> 2.7.0" -aggregated-from = "https://hg.mozilla.org/mozilla-central/raw-file/tip/supply-chain/audits.toml" +aggregated-from = "https://raw.githubusercontent.com/mozilla-firefox/firefox/main/supply-chain/audits.toml" [[audits.mozilla.audits.bitflags]] who = "Benjamin VanderSloot " criteria = "safe-to-deploy" delta = "2.9.4 -> 2.10.0" -aggregated-from = "https://hg.mozilla.org/mozilla-central/raw-file/tip/supply-chain/audits.toml" +aggregated-from = "https://raw.githubusercontent.com/mozilla-firefox/firefox/main/supply-chain/audits.toml" [[audits.mozilla.audits.fnv]] who = "Bobby Holley " criteria = "safe-to-deploy" version = "1.0.7" notes = "Simple hasher implementation with no unsafe code." -aggregated-from = "https://hg.mozilla.org/mozilla-central/raw-file/tip/supply-chain/audits.toml" +aggregated-from = "https://raw.githubusercontent.com/mozilla-firefox/firefox/main/supply-chain/audits.toml" [[audits.mozilla.audits.log]] who = "Erich Gubler " criteria = "safe-to-deploy" delta = "0.4.26 -> 0.4.29" -aggregated-from = "https://hg.mozilla.org/mozilla-central/raw-file/tip/supply-chain/audits.toml" +aggregated-from = "https://raw.githubusercontent.com/mozilla-firefox/firefox/main/supply-chain/audits.toml" [[audits.mozilla.audits.proc-macro2]] who = "Jan-Erik Rediger " @@ -943,7 +970,7 @@ aggregated-from = "https://raw.githubusercontent.com/mozilla/glean/main/supply-c who = "Erich Gubler " criteria = "safe-to-deploy" delta = "1.0.226 -> 1.0.227" -aggregated-from = "https://hg.mozilla.org/mozilla-central/raw-file/tip/supply-chain/audits.toml" +aggregated-from = "https://raw.githubusercontent.com/mozilla-firefox/firefox/main/supply-chain/audits.toml" [[audits.mozilla.audits.serde_core]] who = "Jan-Erik Rediger " @@ -955,22 +982,22 @@ aggregated-from = "https://raw.githubusercontent.com/mozilla/glean/main/supply-c who = "Mark Hammond " criteria = "safe-to-deploy" delta = "0.1.4 -> 0.1.7" -aggregated-from = "https://hg.mozilla.org/mozilla-central/raw-file/tip/supply-chain/audits.toml" +aggregated-from = "https://raw.githubusercontent.com/mozilla-firefox/firefox/main/supply-chain/audits.toml" [[audits.mozilla.audits.shlex]] who = "Max Inden " criteria = "safe-to-deploy" delta = "1.1.0 -> 1.3.0" -aggregated-from = "https://hg.mozilla.org/mozilla-central/raw-file/tip/supply-chain/audits.toml" +aggregated-from = "https://raw.githubusercontent.com/mozilla-firefox/firefox/main/supply-chain/audits.toml" [[audits.mozilla.audits.smallvec]] who = "Erich Gubler " criteria = "safe-to-deploy" delta = "1.14.0 -> 1.15.1" -aggregated-from = "https://hg.mozilla.org/mozilla-central/raw-file/tip/supply-chain/audits.toml" +aggregated-from = "https://raw.githubusercontent.com/mozilla-firefox/firefox/main/supply-chain/audits.toml" [[audits.mozilla.audits.strsim]] who = "Ben Dean-Kawamura " criteria = "safe-to-deploy" delta = "0.10.0 -> 0.11.1" -aggregated-from = "https://hg.mozilla.org/mozilla-central/raw-file/tip/supply-chain/audits.toml" +aggregated-from = "https://raw.githubusercontent.com/mozilla-firefox/firefox/main/supply-chain/audits.toml"