diff --git a/Cargo.lock b/Cargo.lock index cb2d289bd..883a7b410 100644 --- a/Cargo.lock +++ b/Cargo.lock @@ -4828,9 +4828,9 @@ checksum = "b6c140620e7ffbb22c2dee59cafe6084a59b5ffc27a8859a5f0d494b5d52b6be" [[package]] name = "uuid" -version = "1.23.1" +version = "1.23.4" source = "registry+https://github.com/rust-lang/crates.io-index" -checksum = "ddd74a9687298c6858e9b88ec8935ec45d22e8fd5e6394fa1bd4e99a87789c76" +checksum = "bf80a72845275afea99e7f2b434723d3bc7e38470fcd1c7ed39a599c73319a53" dependencies = [ "getrandom 0.4.2", "js-sys", diff --git a/Cargo.toml b/Cargo.toml index 8cada7d04..e68c5957e 100644 --- a/Cargo.toml +++ b/Cargo.toml @@ -182,7 +182,7 @@ toml = "=1.1.2" tokio = { version = "=1.52.1", features = ["rt", "rt-multi-thread", "process", "io-util", "time", "net", "macros", "sync"] } axum = { version = "=0.8.9", features = ["ws"] } tower-http = { version = "=0.6.8", features = ["cors", "auth"] } -uuid = { version = "=1.23.1", features = ["v4", "v7"] } +uuid = { version = "=1.23.4", features = ["v4", "v7"] } chrono = "=0.4.44" # Issue #2727: the dashboard header renders the deployment/build timestamp in # US Pacific time with the date-correct PST/PDT abbreviation. chrono-tz is the diff --git a/docs/atlas/compile-deps/README.md b/docs/atlas/compile-deps/README.md index cd6e2c54a..b7e1cb626 100644 --- a/docs/atlas/compile-deps/README.md +++ b/docs/atlas/compile-deps/README.md @@ -45,7 +45,7 @@ This layer maps Simard's direct Cargo dependencies and a one-hop view of the lar | `tokio` | `=1.52.1`, features `rt`, `rt-multi-thread`, `process`, `io-util`, `time`, `net`, `macros`, `sync` | Async runtime, subprocess, networking, and synchronization foundation. | | `axum` | `=0.8.9`, feature `ws` | HTTP and websocket dashboard or operator services. | | `tower-http` | `=0.6.8`, features `cors`, `auth` | HTTP middleware for CORS and auth layers. | -| `uuid` | `=1.23.1`, features `v4`, `v7` | Stable identifiers for sessions, facts, and domain records. | +| `uuid` | `=1.23.4`, features `v4`, `v7` | Stable identifiers for sessions, facts, and domain records. | | `chrono` | `=0.4.44` | Date and time handling in runtime code. | | `chrono-tz` | `=0.10.4` | Time-zone aware dashboard timestamp formatting. | | `dirs` | `=6.0.0` | User directory discovery for state and configuration paths. | @@ -67,7 +67,7 @@ This layer maps Simard's direct Cargo dependencies and a one-hop view of the lar | `url` | `=2.5.8`, optional | URL parsing behind `dashboard-audit`. | | `base64` | `=0.22.1` | SMTP AUTH LOGIN payload encoding. | | `rustls` | `=0.23.38`, feature `ring` | TLS for authenticated SMTP relay and network clients. | -| `rustls-native-certs` | `=0.8.3` | Native trust roots for TLS. | +| `rustls-native-certs` | `=0.8.4` | Native trust roots for TLS. | | `webpki-roots` | `=1.0.7` | WebPKI trust roots for TLS fallback. | | `libc` | `=0.2.185`, Unix target dependency | Unix FFI bindings. | | `chrono` build dependency | `=0.4.44` | Build-time timestamp formatting in `build.rs`. | diff --git a/docs/atlas/compile-deps/compile-deps-external-runtime-dot.svg b/docs/atlas/compile-deps/compile-deps-external-runtime-dot.svg index b25a92c1e..df9447140 100644 --- a/docs/atlas/compile-deps/compile-deps-external-runtime-dot.svg +++ b/docs/atlas/compile-deps/compile-deps-external-runtime-dot.svg @@ -198,7 +198,7 @@ uuid -uuid =1.23.1 +uuid =1.23.4 v4 v7 @@ -471,7 +471,7 @@ rustls_native_certs -rustls-native-certs =0.8.3 +rustls-native-certs =0.8.4 diff --git a/docs/atlas/compile-deps/compile-deps-external-runtime-mermaid.svg b/docs/atlas/compile-deps/compile-deps-external-runtime-mermaid.svg index 66d7c1905..6ff505483 100644 --- a/docs/atlas/compile-deps/compile-deps-external-runtime-mermaid.svg +++ b/docs/atlas/compile-deps/compile-deps-external-runtime-mermaid.svg @@ -1 +1 @@ -

simard

amplihack-memory git c266e15 persistent

rustyclawd-core git dcccad8

rustyclawd-tools git dcccad8

amplihack-agent-eval git 14dc30b

lbug git 5a2c107

rusqlite =0.31.0 backup bundled

serde =1.0.228 derive

serde_json =1.0.149

semver =1.0.28

ureq =3.3.0

toml =1.1.2

tokio =1.52.1 rt process net macros sync

axum =0.8.9 ws

tower-http =0.6.8 cors auth

uuid =1.23.1 v4 v7

chrono =0.4.44

chrono-tz =0.10.4

dirs =6.0.0

crc32fast =1.5.0

sha2 =0.10.9

tracing =0.1.44

tracing-subscriber =0.3.23 json env-filter

ctrlc =3.5.2 termination

nix =0.29.0 signal fs

opentelemetry =0.27.1

opentelemetry-otlp =0.27.0

tracing-opentelemetry =0.28.0

opentelemetry_sdk =0.27.1 rt-tokio

tempfile =3.27.0

ratatui =0.29.0

crossterm =0.28.1

headless_chrome =1.0.21 optional

regex =1.12.3 optional

url =2.5.8 optional

base64 =0.22.1

rustls =0.23.38 ring

rustls-native-certs =0.8.3

webpki-roots =1.0.7

libc =0.2.185 unix target

 \ No newline at end of file +

simard

amplihack-memory git c266e15 persistent

rustyclawd-core git dcccad8

rustyclawd-tools git dcccad8

amplihack-agent-eval git 14dc30b

lbug git 5a2c107

rusqlite =0.31.0 backup bundled

serde =1.0.228 derive

serde_json =1.0.149

semver =1.0.28

ureq =3.3.0

toml =1.1.2

tokio =1.52.1 rt process net macros sync

axum =0.8.9 ws

tower-http =0.6.8 cors auth

uuid =1.23.4 v4 v7

chrono =0.4.44

chrono-tz =0.10.4

dirs =6.0.0

crc32fast =1.5.0

sha2 =0.10.9

tracing =0.1.44

tracing-subscriber =0.3.23 json env-filter

ctrlc =3.5.2 termination

nix =0.29.0 signal fs

opentelemetry =0.27.1

opentelemetry-otlp =0.27.0

tracing-opentelemetry =0.28.0

opentelemetry_sdk =0.27.1 rt-tokio

tempfile =3.27.0

ratatui =0.29.0

crossterm =0.28.1

headless_chrome =1.0.21 optional

regex =1.12.3 optional

url =2.5.8 optional

base64 =0.22.1

rustls =0.23.38 ring

rustls-native-certs =0.8.4

webpki-roots =1.0.7

libc =0.2.185 unix target

 \ No newline at end of file diff --git a/docs/atlas/compile-deps/compile-deps-external-runtime.dot b/docs/atlas/compile-deps/compile-deps-external-runtime.dot index e806deabf..162d78740 100644 --- a/docs/atlas/compile-deps/compile-deps-external-runtime.dot +++ b/docs/atlas/compile-deps/compile-deps-external-runtime.dot @@ -20,7 +20,7 @@ digraph compile_deps_external_runtime { tokio [label="tokio =1.52.1\nrt process net macros sync"]; axum [label="axum =0.8.9\nws"]; tower_http [label="tower-http =0.6.8\ncors auth"]; - uuid [label="uuid =1.23.1\nv4 v7"]; + uuid [label="uuid =1.23.4\nv4 v7"]; chrono [label="chrono =0.4.44"]; chrono_tz [label="chrono-tz =0.10.4"]; dirs [label="dirs =6.0.0"]; @@ -42,7 +42,7 @@ digraph compile_deps_external_runtime { url [label="url =2.5.8\noptional"]; base64 [label="base64 =0.22.1"]; rustls [label="rustls =0.23.38\nring"]; - rustls_native_certs [label="rustls-native-certs =0.8.3"]; + rustls_native_certs [label="rustls-native-certs =0.8.4"]; webpki_roots [label="webpki-roots =1.0.7"]; libc [label="libc =0.2.185\nunix target"]; diff --git a/docs/atlas/compile-deps/compile-deps-external-runtime.mmd b/docs/atlas/compile-deps/compile-deps-external-runtime.mmd index 77798073e..9398a835c 100644 --- a/docs/atlas/compile-deps/compile-deps-external-runtime.mmd +++ b/docs/atlas/compile-deps/compile-deps-external-runtime.mmd @@ -13,7 +13,7 @@ flowchart LR simard --> tokio["tokio =1.52.1 rt process net macros sync"] simard --> axum["axum =0.8.9 ws"] simard --> tower_http["tower-http =0.6.8 cors auth"] - simard --> uuid["uuid =1.23.1 v4 v7"] + simard --> uuid["uuid =1.23.4 v4 v7"] simard --> chrono["chrono =0.4.44"] simard --> chrono_tz["chrono-tz =0.10.4"] simard --> dirs["dirs =6.0.0"] @@ -35,7 +35,7 @@ flowchart LR simard --> url["url =2.5.8 optional"] simard --> base64["base64 =0.22.1"] simard --> rustls["rustls =0.23.38 ring"] - simard --> rustls_native_certs["rustls-native-certs =0.8.3"] + simard --> rustls_native_certs["rustls-native-certs =0.8.4"] simard --> webpki_roots["webpki-roots =1.0.7"] simard --> libc["libc =0.2.185 unix target"] amplihack_memory --> lbug diff --git a/docs/reference/overseer-operator-notifications.md b/docs/reference/overseer-operator-notifications.md index 11eab9e5b..ff12e6334 100644 --- a/docs/reference/overseer-operator-notifications.md +++ b/docs/reference/overseer-operator-notifications.md @@ -461,7 +461,7 @@ The STARTTLS sender promotes these to direct dependencies, pinned to `Cargo.lock `--no-default-features` still building: - `rustls` `0.23.38` (with the `ring` crypto provider enabled explicitly) -- `rustls-native-certs` `0.8.3` (OS trust store) +- `rustls-native-certs` `0.8.4` (OS trust store) - `webpki-roots` `1.0.7` (compiled root fallback when the OS store is empty) - `base64` `0.22.1` (AUTH LOGIN payload encoding, inside TLS only) diff --git a/supply-chain/audits.toml b/supply-chain/audits.toml index 6a814d78d..1062cb0f0 100644 --- a/supply-chain/audits.toml +++ b/supply-chain/audits.toml @@ -12,3 +12,9 @@ who = "Simard operator (rysweet)" criteria = "safe-to-deploy" delta = "0.8.3 -> 0.8.4" notes = "Reviewed 0.8.3 -> 0.8.4: filters empty certificate-directory paths; no new unsafe code, process execution, network behavior, or dependencies." + +[[audits.uuid]] +who = "Simard operator (rysweet)" +criteria = "safe-to-deploy" +delta = "1.23.1 -> 1.23.4" +notes = "Reviewed 1.23.1 -> 1.23.4: parser diagnostics and empty-input panic fix; no new unsafe code, build scripts, process execution, network behavior, or dependencies."