Bump the nonbreaking group across 1 directory with 14 updates

Cargo.toml

@@ -25,11 +25,11 @@ wasmtime-wasi = "19"
 wasi-common = "19"
 anyhow = "1.0"
 once_cell = "1.19"
-bitflags = "2.5.0"
+bitflags = "2.6.0"
 javy-config = { path = "crates/config" }
 javy = { path = "crates/javy", version = "3.0.0" }
 tempfile = "3.10.1"
-uuid = { version = "1.8", features = ["v4"] }
+uuid = { version = "1.9", features = ["v4"] }
 
 [profile.release]
 lto = true

crates/cli/Cargo.toml

@@ -18,7 +18,7 @@ experimental_event_loop = []
 wizer = { workspace = true }
 anyhow = { workspace = true }
 brotli = "6.0.0"
-wasmprinter = { version = "0.209.1", optional = true }
+wasmprinter = { version = "0.212.0", optional = true }
 wasmtime = { workspace = true }
 wasmtime-wasi = { workspace = true }
 wasi-common = { workspace = true }
@@ -32,15 +32,15 @@ wit-parser = "0.212.0"
 convert_case = "0.6.0"
 wasm-opt = "0.116.1"
 tempfile = { workspace = true }
-clap = { version = "4.5.7", features = ["derive"] }
+clap = { version = "4.5.8", features = ["derive"] }
 
 [dev-dependencies]
 serde_json = "1.0"
-lazy_static = "1.4"
+lazy_static = "1.5"
 serde = { version = "1.0", default-features = false, features = ["derive"] }
 criterion = "0.5"
 num-format = "0.4.4"
-wasmparser = "0.209.1"
+wasmparser = "0.212.0"
 javy-runner = { path = "../runner/" }
 uuid = { workspace = true }
 

crates/javy/Cargo.toml

@@ -13,7 +13,7 @@ categories = ["wasm"]
 anyhow = { workspace = true }
 rquickjs = { version = "=0.6.1", features = ["array-buffer", "bindgen"] }
 rquickjs-core = "=0.6.1"
-rquickjs-sys = "=0.6.1"
+rquickjs-sys = "=0.6.2"
 serde = { version = "1.0", features = ["derive"] }
 serde_json = { version = "1.0", optional = true }
 serde-transcode = { version = "1.1", optional = true }

crates/quickjs-wasm-rs/Cargo.toml

@@ -17,7 +17,7 @@ once_cell = "1.19"
 
 [dev-dependencies]
 quickcheck = "1"
-serde_bytes = "0.11.14"
+serde_bytes = "0.11.15"
 
 [features]
 # Re-exports the quickjs-wasm-sys module and exposes additional, unstable APIs.

crates/quickjs-wasm-sys/Cargo.toml

@@ -16,9 +16,9 @@ walkdir = "2"
 anyhow.workspace = true
 tokio = { version = "1.38", default-features = false, features = ["rt", "macros"] }
 http-body-util = "0.1.1"
-hyper = "1.3"
+hyper = "1.4"
 hyper-tls = "0.6.0"
-hyper-util = { version = "0.1.5", features = ["http1"] }
+hyper-util = { version = "0.1.6", features = ["http1"] }
 
 [badges]
 maintenance = { status = "deprecated" }

crates/test-macros/Cargo.toml

@@ -12,6 +12,6 @@ doctest = false
 
 [dependencies]
 anyhow = { workspace = true }
-proc-macro2 = "1.0.85"
+proc-macro2 = "1.0.86"
 quote = "1.0.36"
-syn = { version = "2.0.66", features = ["full"] }
+syn = { version = "2.0.68", features = ["full"] }

supply-chain/audits.toml

@@ -105,12 +105,30 @@ user-id = 2915 # Amanieu d'Antras (Amanieu)
 start = "2024-02-20"
 end = "2025-03-01"
 
+[[trusted.clap]]
+criteria = "safe-to-deploy"
+user-id = 6743 # Ed Page (epage)
+start = "2021-12-08"
+end = "2025-07-02"
+
 [[trusted.clap_builder]]
 criteria = "safe-to-run"
 user-id = 6743 # Ed Page (epage)
 start = "2023-03-28"
 end = "2024-10-26"
 
+[[trusted.clap_builder]]
+criteria = "safe-to-deploy"
+user-id = 6743 # Ed Page (epage)
+start = "2023-03-28"
+end = "2025-07-02"
+
+[[trusted.clap_derive]]
+criteria = "safe-to-deploy"
+user-id = 6743 # Ed Page (epage)
+start = "2021-12-08"
+end = "2025-07-02"
+
 [[trusted.clap_lex]]
 criteria = "safe-to-run"
 user-id = 6743 # Ed Page (epage)

supply-chain/config.toml

@@ -110,6 +110,10 @@ criteria = "safe-to-deploy"
 version = "1.3.3"
 criteria = "safe-to-deploy"
 
+[[exemptions.bitflags]]
+version = "2.6.0"
+criteria = "safe-to-deploy"
+
 [[exemptions.bitvec]]
 version = "1.0.1"
 criteria = "safe-to-deploy"
@@ -143,7 +147,7 @@ version = "0.1.8"
 criteria = "safe-to-deploy"
 
 [[exemptions.cc]]
-version = "1.0.99"
+version = "1.0.104"
 criteria = "safe-to-deploy"
 
 [[exemptions.ciborium]]
@@ -162,18 +166,6 @@ criteria = "safe-to-run"
 version = "1.8.1"
 criteria = "safe-to-deploy"
 
-[[exemptions.clap]]
-version = "4.5.7"
-criteria = "safe-to-deploy"
-
-[[exemptions.clap_builder]]
-version = "4.5.7"
-criteria = "safe-to-deploy"
-
-[[exemptions.clap_derive]]
-version = "4.5.5"
-criteria = "safe-to-deploy"
-
 [[exemptions.clap_lex]]
 version = "0.7.1"
 criteria = "safe-to-deploy"
@@ -603,7 +595,7 @@ version = "0.6.1"
 criteria = "safe-to-deploy"
 
 [[exemptions.rquickjs-sys]]
-version = "0.6.1"
+version = "0.6.2"
 criteria = "safe-to-deploy"
 
 [[exemptions.rustc-demangle]]
@@ -827,7 +819,7 @@ version = "0.2.2"
 criteria = "safe-to-deploy"
 
 [[exemptions.uuid]]
-version = "1.8.0"
+version = "1.9.1"
 criteria = "safe-to-deploy"
 
 [[exemptions.value-trait]]

supply-chain/imports.lock

@@ -85,6 +85,27 @@ user-id = 3788
 user-login = "emilio"
 user-name = "Emilio Cobos Álvarez"
 
+[[publisher.clap]]
+version = "4.5.8"
+when = "2024-06-28"
+user-id = 6743
+user-login = "epage"
+user-name = "Ed Page"
+
+[[publisher.clap_builder]]
+version = "4.5.8"
+when = "2024-06-28"
+user-id = 6743
+user-login = "epage"
+user-name = "Ed Page"
+
+[[publisher.clap_derive]]
+version = "4.5.8"
+when = "2024-06-28"
+user-id = 6743
+user-login = "epage"
+user-name = "Ed Page"
+
 [[publisher.core-foundation]]
 version = "0.9.3"
 when = "2022-02-07"
@@ -251,8 +272,8 @@ user-login = "seanmonstar"
 user-name = "Sean McArthur"
 
 [[publisher.hyper]]
-version = "1.3.1"
-when = "2024-04-16"
+version = "1.4.0"
+when = "2024-07-01"
 user-id = 359
 user-login = "seanmonstar"
 user-name = "Sean McArthur"
@@ -265,8 +286,8 @@ user-login = "seanmonstar"
 user-name = "Sean McArthur"
 
 [[publisher.hyper-util]]
-version = "0.1.5"
-when = "2024-05-28"
+version = "0.1.6"
+when = "2024-07-01"
 user-id = 359
 user-login = "seanmonstar"
 user-name = "Sean McArthur"
@@ -349,8 +370,8 @@ user-login = "dtolnay"
 user-name = "David Tolnay"
 
 [[publisher.proc-macro2]]
-version = "1.0.85"
-when = "2024-06-02"
+version = "1.0.86"
+when = "2024-06-21"
 user-id = 3618
 user-login = "dtolnay"
 user-name = "David Tolnay"
@@ -447,8 +468,8 @@ user-login = "dtolnay"
 user-name = "David Tolnay"
 
 [[publisher.serde_bytes]]
-version = "0.11.14"
-when = "2024-01-02"
+version = "0.11.15"
+when = "2024-06-25"
 user-id = 3618
 user-login = "dtolnay"
 user-name = "David Tolnay"
@@ -461,8 +482,8 @@ user-login = "dtolnay"
 user-name = "David Tolnay"
 
 [[publisher.serde_json]]
-version = "1.0.117"
-when = "2024-05-08"
+version = "1.0.120"
+when = "2024-07-01"
 user-id = 3618
 user-login = "dtolnay"
 user-name = "David Tolnay"
@@ -489,8 +510,8 @@ user-login = "dtolnay"
 user-name = "David Tolnay"
 
 [[publisher.syn]]
-version = "2.0.66"
-when = "2024-05-23"
+version = "2.0.68"
+when = "2024-06-23"
 user-id = 3618
 user-login = "dtolnay"
 user-name = "David Tolnay"
@@ -685,12 +706,6 @@ when = "2024-03-26"
 user-id = 73222
 user-login = "wasmtime-publish"
 
-[[publisher.wasmparser]]
-version = "0.209.1"
-when = "2024-05-29"
-user-id = 73222
-user-login = "wasmtime-publish"
-
 [[publisher.wasmparser]]
 version = "0.212.0"
 when = "2024-06-27"
@@ -704,8 +719,8 @@ user-id = 73222
 user-login = "wasmtime-publish"
 
 [[publisher.wasmprinter]]
-version = "0.209.1"
-when = "2024-05-29"
+version = "0.212.0"
+when = "2024-06-27"
 user-id = 73222
 user-login = "wasmtime-publish"
 
@@ -1750,29 +1765,6 @@ criteria = "safe-to-run"
 version = "0.7.4"
 aggregated-from = "https://chromium.googlesource.com/chromiumos/third_party/rust_crates/+/refs/heads/main/cargo-vet/audits.toml?format=TEXT"
 
-[[audits.google.audits.bitflags]]
-who = "Lukasz Anforowicz <[email protected]>"
-criteria = "safe-to-deploy"
-version = "2.4.2"
-notes = """
-Audit notes:
-
-* I've checked for any discussion in Google-internal cl/546819168 (where audit
-  of version 2.3.3 happened)
-* `src/lib.rs` contains `#![cfg_attr(not(test), forbid(unsafe_code))]`
-* There are 2 cases of `unsafe` in `src/external.rs` but they seem to be
-  correct in a straightforward way - they just propagate the marker trait's
-  impl (e.g. `impl bytemuck::Pod`) from the inner to the outer type
-* Additional discussion and/or notes may be found in https://crrev.com/c/5238056
-"""
-aggregated-from = "https://chromium.googlesource.com/chromium/src/+/main/third_party/rust/chromium_crates_io/supply-chain/audits.toml?format=TEXT"
-
-[[audits.google.audits.bitflags]]
-who = "Adrian Taylor <[email protected]>"
-criteria = "safe-to-deploy"
-delta = "2.4.2 -> 2.5.0"
-aggregated-from = "https://chromium.googlesource.com/chromium/src/+/main/third_party/rust/chromium_crates_io/supply-chain/audits.toml?format=TEXT"
-
 [[audits.google.audits.cast]]
 who = "George Burgess IV <[email protected]>"
 criteria = "safe-to-run"
@@ -1811,6 +1803,27 @@ criteria = "safe-to-run"
 version = "0.10.5"
 aggregated-from = "https://chromium.googlesource.com/chromiumos/third_party/rust_crates/+/refs/heads/main/cargo-vet/audits.toml?format=TEXT"
 
+[[audits.google.audits.lazy_static]]
+who = "Lukasz Anforowicz <[email protected]>"
+criteria = "safe-to-deploy"
+version = "1.4.0"
+notes = '''
+I grepped for \"crypt\", \"cipher\", \"fs\", \"net\" - there were no hits.
+
+There are two places where `unsafe` is used.  Unsafe review notes can be found
+in https://crrev.com/c/5347418.
+
+This crate has been added to Chromium in https://crrev.com/c/3321895.
+'''
+aggregated-from = "https://chromium.googlesource.com/chromium/src/+/main/third_party/rust/chromium_crates_io/supply-chain/audits.toml?format=TEXT"
+
+[[audits.google.audits.lazy_static]]
+who = "Lukasz Anforowicz <[email protected]>"
+criteria = "safe-to-deploy"
+delta = "1.4.0 -> 1.5.0"
+notes = "Unsafe review notes: https://crrev.com/c/5650836"
+aggregated-from = "https://chromium.googlesource.com/chromium/src/+/main/third_party/rust/chromium_crates_io/supply-chain/audits.toml?format=TEXT"
+
 [[audits.google.audits.link-cplusplus]]
 who = "George Burgess IV <[email protected]>"
 criteria = "safe-to-deploy"
@@ -2258,13 +2271,6 @@ criteria = "safe-to-deploy"
 delta = "0.10.3 -> 0.10.5"
 aggregated-from = "https://hg.mozilla.org/mozilla-central/raw-file/tip/supply-chain/audits.toml"
 
-[[audits.mozilla.audits.lazy_static]]
-who = "Nika Layzell <[email protected]>"
-criteria = "safe-to-deploy"
-version = "1.4.0"
-notes = "I have read over the macros, and audited the unsafe code."
-aggregated-from = "https://raw.githubusercontent.com/mozilla/cargo-vet/main/supply-chain/audits.toml"
-
 [[audits.mozilla.audits.litemap]]
 who = "Makoto Kato <[email protected]>"
 criteria = "safe-to-deploy"