Yihau Chen
37887d487c
ci: remove --ignore RUSTSEC-2022-0093 ( #33019 )
...
ci: remove --ignore RUSTSEC-2023-0052
2023-08-29 05:58:50 +00:00
Yihau Chen
e4a2d14c4e
ci: fix audit ( #32932 )
...
* ci: bump rustls-webpki to 0.101.4
* ci: ignore RUSTSEC-2023-0052
2023-08-23 01:23:18 +08:00
behzad nouri
52616cf7aa
removes repair socket from gossip ContactInfo ( #32831 )
...
Repair responses are sent back to the address the repair request came
from and there is no need to gossip repair socket address.
https://github.com/solana-labs/solana/blob/9212ac347/core/src/repair/serve_repair.rs#L519
2023-08-14 20:01:18 +00:00
Yihau Chen
f8abc8df8d
ci: fix do-audit don't report error ( #30728 )
...
* ci: fix do-audit don't retport error
* Update ci/do-audit.sh
Co-authored-by: Trent Nelson <trent.a.b.nelson@gmail.com>
* use the latest suggestion
* lint
* redirect stderr to stdout
* another solution
---------
Co-authored-by: Trent Nelson <trent.a.b.nelson@gmail.com>
2023-03-16 11:58:08 +08:00
Trent Nelson
85af23613e
ci: suppress dep trees by default in `ci/do-audit.sh` ( #30255 )
...
get them back by passing `--display-dependency-trees`
2023-02-10 21:47:48 -07:00
kirill lykov
8daed75df9
Add toolchain file usage ( #29370 )
...
* use cargo in cargo-for-all-lock-files.sh
* replace ./cargo with cargo in ci shell scripts
* remove ./cargo from test-stable.sh
2023-01-17 20:55:41 +01:00
Will Hickey
3aa0a005f9
Add exception for RUSTSEC-2023-0001 to unblock CI. ( #29585 )
...
* Add exception for RUSTSEC-2023-0001 to unblock CI. This Tokio issue only affects windows.
2023-01-09 12:23:18 -06:00
Jon Cinque
feb5ab4ba0
ci: Remove unneeded ignores in audit ( #28594 )
2022-10-26 10:39:17 -04:00
Jon Cinque
c43afe2d7f
spl: Bump token to v3.3.0 and ATA to v1.0.5 ( #22649 )
...
* Bump spl-token and ATA to v3.3.0
* Add parsers for new token instructions
* Update parser for modified associated-token-account instruction
* Update to use 1.0.5 once it's released
* Update Cargo.lock in programs/bpf
2022-04-20 19:13:42 +02:00
Tyera Eulberg
d3ebe8d8f5
Remove unneeded jsonrpc dependencies/features; update do-audit ( #23436 )
...
* Update generic-array note
* Remove unneeded jsonrpc deps
* Remove unneeded jsonrpc features
* Rewrite slot-update test without websocket crate
* Rewrite rpc-subscription test without websocket crate, and remove jsonrpc deps
* Update expected balance to accommodate rent-exempt minimum transfer amount
* Remove obsolete audit ignores
2022-03-02 01:42:01 -07:00
Tyera Eulberg
2a17a661e6
Remove failure audit ignore ( #23431 )
2022-03-01 17:02:55 -07:00
Brooks Prumo
7baeb04f26
Ignore RUSTSEC-2020-0159
2021-10-18 13:38:06 -07:00
Justin Starry
0c62a6fe3f
Resolve zeroize_derive audit warning by bumping version ( #20182 )
...
* Revert "temporarily disable new audit"
This reverts commit 3dfbd95ddc
.
* Bump version of zeroize_derive from v1.0.0 to v1.2.0
2021-09-24 22:51:53 +00:00
Justin Starry
3dfbd95ddc
temporarily disable new audit
2021-09-24 16:42:40 -04:00
Tyera Eulberg
17978c2ff4
Remove tar-rs audit ignore ( #19344 )
2021-08-20 14:34:48 -06:00
Tyera Eulberg
db40cb41b2
Handle new security advisories ( #19126 )
...
* Update hyper 0.14
* Add audit ignores
* Bump assert_cmd and remove audit ignore
* Remove unnecessary unmaintained dependency
* Remove pin-project-lite warning
2021-08-09 19:36:03 +00:00
Tyera Eulberg
761de8b1a3
Bump prost, prost-types, and tonic ( #18537 )
...
* Bump prost+tonic and accommodate generated service changes
* Unignore advisory
* Fixup .proto error list
2021-07-09 17:31:26 +00:00
Tyera Eulberg
6188283ba6
Temporarily ignore prost-types audit ( #18525 )
2021-07-08 13:03:37 -06:00
Justin Starry
6cd4bc5e60
Speed up net.sh builds ( #16360 )
...
* Speed up net.sh builds
* feedback
* Update net/net.sh
Co-authored-by: Tyera Eulberg <teulberg@gmail.com>
* feedback
* fix
Co-authored-by: Trent Nelson <trent.a.b.nelson@gmail.com>
Co-authored-by: Tyera Eulberg <teulberg@gmail.com>
2021-04-07 14:45:03 +08:00
Trent Nelson
4f63afce32
ci: drop redundant programs/bpf audit
2021-03-01 21:24:57 -07:00
Trent Nelson
3c1dd891af
ci: checks - factor out audit so it can run independently
2021-03-01 21:24:57 -07:00