From fd3bc57d00bc96f7a921f83962a72461f532c16d Mon Sep 17 00:00:00 2001 From: autoantohaki Date: Wed, 21 Oct 2026 17:44:53 -0300 Subject: [PATCH 1/3] fix(ci): approve the brand image hashes in the privacy scan --- scripts/privacy-scan.ps1 | 2 ++ 1 file changed, 2 insertions(+) diff --git a/scripts/privacy-scan.ps1 b/scripts/privacy-scan.ps1 index 86dffc8..479584a 100644 --- a/scripts/privacy-scan.ps1 +++ b/scripts/privacy-scan.ps1 @@ -16,6 +16,8 @@ $credentialPatterns = @( $safeValue = '(?i)^(?:\$\{[A-Z_][A-Z0-9_]*\}|\$env:[A-Z_][A-Z0-9_]*|<[^>]+>|example|placeholder|dummy|fixture|test|test[-_]?placeholder|change[-_]?me|none|null|redacted|not[-_]?set|x{3,})$' $approvedBinaryHashes = @{ 'docs/assets/impossible-inference-header.png' = '67b92799d4f5348920b6281870ad71a73308aacc374f43501037b1097618126f' + 'docs/assets/impossible-inference-scene.png' = 'd31a7a89de9f65dcda220bd4565a7265a01ac4fa3cc6a08dbaced544a068c6ff' + 'docs/assets/social-preview.png' = 'a2e411c6cd914151370dc913ce5e4339a560129bf0884ca1b6400e3b903cd32b' } Push-Location $repoRoot From 78494e6f571f071e5afe36276513556f9ecad44b Mon Sep 17 00:00:00 2001 From: autoantohaki Date: Wed, 21 Oct 2026 20:02:37 -0300 Subject: [PATCH 2/3] fix(deps): update rustls, rustls-webpki, webpki-roots, and zip for security advisories --- Cargo.lock | 57 ++++++++-------- Cargo.toml | 2 +- THIRD_PARTY_LICENSES.txt | 144 ++++++++++++++++++--------------------- THIRD_PARTY_NOTICES.md | 12 ++-- 4 files changed, 102 insertions(+), 113 deletions(-) diff --git a/Cargo.lock b/Cargo.lock index c4b0563..0939db4 100644 --- a/Cargo.lock +++ b/Cargo.lock @@ -73,15 +73,6 @@ version = "1.0.104" source = "registry+https://github.com/rust-lang/crates.io-index" checksum = "330a5ed07fa54e4702c9d6c4174f74427fc0ef6e214bbd677ae50a5099946470" -[[package]] -name = "arbitrary" -version = "1.4.2" -source = "registry+https://github.com/rust-lang/crates.io-index" -checksum = "c3d036a3c4ab069c7b410a2ce876bd74808d2d0888a82667669f8e783a898bf1" -dependencies = [ - "derive_arbitrary", -] - [[package]] name = "async-trait" version = "0.1.92" @@ -309,17 +300,6 @@ version = "2.11.1" source = "registry+https://github.com/rust-lang/crates.io-index" checksum = "4583a4551df46e2792f82ceeac45e850d2e2d5debba0b91f102385cda5b11f06" -[[package]] -name = "derive_arbitrary" -version = "1.4.2" -source = "registry+https://github.com/rust-lang/crates.io-index" -checksum = "1e567bd82dcff979e4b03460c307b3cdc9e96fde3d73bed1496d2bc75d9dd62a" -dependencies = [ - "proc-macro2", - "quote", - "syn 2.0.119", -] - [[package]] name = "digest" version = "0.10.7" @@ -1021,6 +1001,18 @@ version = "0.10.1" source = "registry+https://github.com/rust-lang/crates.io-index" checksum = "1d87ecb2933e8aeadb3e3a02b828fed80a7528047e68b4f424523a0981a3a084" +[[package]] +name = "nix" +version = "0.31.3" +source = "registry+https://github.com/rust-lang/crates.io-index" +checksum = "cf20d2fde8ff38632c426f1165ed7436270b44f199fc55284c38276f9db47c3d" +dependencies = [ + "bitflags", + "cfg-if", + "cfg_aliases", + "libc", +] + [[package]] name = "once_cell" version = "1.21.4" @@ -1488,9 +1480,9 @@ dependencies = [ [[package]] name = "rustls" -version = "0.23.45" +version = "0.23.46" source = "registry+https://github.com/rust-lang/crates.io-index" -checksum = "0d41d731c7d2f962d1ccc364cec258de3c0e93b38c2fb3ba97ac74513048d634" +checksum = "48e13bd8c0e9365c43cfa5c9e8f9ad49d3c8444926c9aac819e0e4dc503c8fdf" dependencies = [ "once_cell", "ring", @@ -1512,9 +1504,9 @@ dependencies = [ [[package]] name = "rustls-webpki" -version = "0.103.15" +version = "0.103.16" source = "registry+https://github.com/rust-lang/crates.io-index" -checksum = "f3c3cf1d8b1e7d4927e2d154c3fcb02979afb9939629c62cd9048d4f07b60ac2" +checksum = "4443b1b6d39d7c663139942cc4558262562d2c84123bb6282ef177009ca8b281" dependencies = [ "ring", "rustls-pki-types", @@ -2059,6 +2051,12 @@ dependencies = [ "utf-8", ] +[[package]] +name = "typed-path" +version = "0.12.4" +source = "registry+https://github.com/rust-lang/crates.io-index" +checksum = "54ec2755506471f54baf5e4bb5499d8e510cc1caf271270e778a736bd2d7336c" + [[package]] name = "typenum" version = "1.20.1" @@ -2233,9 +2231,9 @@ dependencies = [ [[package]] name = "webpki-roots" -version = "1.0.9" +version = "1.0.10" source = "registry+https://github.com/rust-lang/crates.io-index" -checksum = "7dcd9d09a39985f5344844e66b0c530a33843579125f23e21e9f0f220850f22a" +checksum = "1c1c8e20c8a38fc7d65abfe74eb7280e4aa667e8eec8bc84996d2874810748d9" dependencies = [ "rustls-pki-types", ] @@ -2477,15 +2475,16 @@ dependencies = [ [[package]] name = "zip" -version = "6.0.0" +version = "9.0.5" source = "registry+https://github.com/rust-lang/crates.io-index" -checksum = "eb2a05c7c36fde6c09b08576c9f7fb4cda705990f73b58fe011abf7dfb24168b" +checksum = "6e04976da629d3b04204ba8105b396a193af8ad2583b2c79bfb3ab8af580a11e" dependencies = [ - "arbitrary", "crc32fast", "flate2", "indexmap", "memchr", + "nix", + "typed-path", "zopfli", ] diff --git a/Cargo.toml b/Cargo.toml index 4cc31b4..04e0c71 100644 --- a/Cargo.toml +++ b/Cargo.toml @@ -43,7 +43,7 @@ tonic-health = "=0.14.6" tonic-prost = "=0.14.6" tonic-reflection = "=0.14.6" tower = { version = "=0.5.2", features = ["util"] } -zip = { version = "=6.0.0", default-features = false, features = ["deflate"] } +zip = { version = "=9.0.5", default-features = false, features = ["deflate"] } [workspace.lints.rust] unsafe_code = "forbid" diff --git a/THIRD_PARTY_LICENSES.txt b/THIRD_PARTY_LICENSES.txt index 6123e3b..3dff3d0 100644 --- a/THIRD_PARTY_LICENSES.txt +++ b/THIRD_PARTY_LICENSES.txt @@ -55,12 +55,6 @@ UPSTREAM: https://github.com/dtolnay/anyhow TEXT: 62c7a1e35f56406896d7aa7ca52d0cc0d272ac022b5d2796e7d6905db8a3636a [crate] LICENSE-APACHE TEXT: 23f18e03dc49df91622fe2a76176497404e46ced8a715d9d2b67a7446571cca3 [crate] LICENSE-MIT -PACKAGE: arbitrary 1.4.2 -DECLARED-LICENSE: MIT OR Apache-2.0 -UPSTREAM: https://github.com/rust-fuzz/arbitrary/ -TEXT: a60eea817514531668d7e00765731449fe14d059d3249e0bc93b36de45f759f2 [crate] LICENSE-APACHE -TEXT: 15656cc11a8331f28c0986b8ab97220d3e76f98e60ed388b5ffad37dfac4710c [crate] LICENSE-MIT - PACKAGE: async-trait 0.1.92 DECLARED-LICENSE: MIT OR Apache-2.0 UPSTREAM: https://github.com/dtolnay/async-trait @@ -195,12 +189,6 @@ DECLARED-LICENSE: MIT UPSTREAM: https://github.com/ia0/data-encoding TEXT: b68ad1a3367b825447089e1f8d6829b97f47a89eb78d2f4ebaef4672f5606186 [crate] LICENSE -PACKAGE: derive_arbitrary 1.4.2 -DECLARED-LICENSE: MIT OR Apache-2.0 -UPSTREAM: https://github.com/rust-fuzz/arbitrary -TEXT: a60eea817514531668d7e00765731449fe14d059d3249e0bc93b36de45f759f2 [crate] LICENSE-APACHE -TEXT: 15656cc11a8331f28c0986b8ab97220d3e76f98e60ed388b5ffad37dfac4710c [crate] LICENSE-MIT - PACKAGE: digest 0.10.7 DECLARED-LICENSE: MIT OR Apache-2.0 UPSTREAM: https://github.com/RustCrypto/traits @@ -586,6 +574,11 @@ UPSTREAM: https://github.com/havarnov/multimap TEXT: a60eea817514531668d7e00765731449fe14d059d3249e0bc93b36de45f759f2 [crate] LICENSE-APACHE TEXT: 23ce717d2face34a1ae9af6a8c8fbbf488875afee16374d7a10ce79d41e22f37 [crate] LICENSE-MIT +PACKAGE: nix 0.31.3 +DECLARED-LICENSE: MIT +UPSTREAM: https://github.com/nix-rust/nix +TEXT: 66e3ee1fa7f909ad3c612d556f2a0cdabcd809ad6e66f3b0605015ac64841b70 [crate] LICENSE + PACKAGE: once_cell 1.21.4 DECLARED-LICENSE: MIT OR Apache-2.0 UPSTREAM: https://github.com/matklad/once_cell @@ -847,7 +840,7 @@ TEXT: a60eea817514531668d7e00765731449fe14d059d3249e0bc93b36de45f759f2 [crate] L TEXT: a6c48161a09acc75a0e25503bab66a731eb5fba5392ed4bb4743e4ba5085327a [crate] LICENSE-Apache-2.0_WITH_LLVM-exception TEXT: 23f18e03dc49df91622fe2a76176497404e46ced8a715d9d2b67a7446571cca3 [crate] LICENSE-MIT -PACKAGE: rustls 0.23.45 +PACKAGE: rustls 0.23.46 DECLARED-LICENSE: Apache-2.0 OR ISC OR MIT UPSTREAM: https://github.com/rustls/rustls TEXT: a60eea817514531668d7e00765731449fe14d059d3249e0bc93b36de45f759f2 [crate] LICENSE-APACHE @@ -860,7 +853,7 @@ UPSTREAM: https://github.com/rustls/pki-types TEXT: 45fd05c4865e7c350b98ad7ac50e1b15462d49af4a91e9b0c9dd933dc9a69742 [crate] LICENSE-APACHE TEXT: 9117d922e667125508dde62b02c1f57ed22f5ad21eb536aa2e2d99e1c796e639 [crate] LICENSE-MIT -PACKAGE: rustls-webpki 0.103.15 +PACKAGE: rustls-webpki 0.103.16 DECLARED-LICENSE: ISC UPSTREAM: https://github.com/rustls/webpki TEXT: 5b698ca13897be3afdb7174256fa1574f8c6892b8bea1a66dd6469d3fe27885a [crate] LICENSE @@ -1140,6 +1133,12 @@ UPSTREAM: https://github.com/snapview/tungstenite-rs TEXT: a60eea817514531668d7e00765731449fe14d059d3249e0bc93b36de45f759f2 [crate] LICENSE-APACHE TEXT: 7fea0ee51a4ca5d5cea7464135fd55e8b09caf3a61da3d451ac8a22af95c033f [crate] LICENSE-MIT +PACKAGE: typed-path 0.12.4 +DECLARED-LICENSE: MIT OR Apache-2.0 +UPSTREAM: https://github.com/chipsenkbeil/typed-path +TEXT: 62c7a1e35f56406896d7aa7ca52d0cc0d272ac022b5d2796e7d6905db8a3636a [crate] LICENSE-APACHE +TEXT: 23f18e03dc49df91622fe2a76176497404e46ced8a715d9d2b67a7446571cca3 [crate] LICENSE-MIT + PACKAGE: typenum 1.20.1 DECLARED-LICENSE: MIT OR Apache-2.0 UPSTREAM: https://github.com/paholg/typenum @@ -1263,7 +1262,7 @@ UPSTREAM: https://github.com/daxpedda/web-time TEXT: 54a744942eb3fa63a74d8d359989ed6962c04f3f10ff20cfa08ff8aa7efbe4e6 [crate] LICENSE-APACHE TEXT: f428305bbf2e70fbd807af0f3c7ac1b7acfb95311640f451e9d2e48db6d7e96b [crate] LICENSE-MIT -PACKAGE: webpki-roots 1.0.9 +PACKAGE: webpki-roots 1.0.10 DECLARED-LICENSE: CDLA-Permissive-2.0 UPSTREAM: https://github.com/rustls/webpki-roots TEXT: e271993808fec50ab29350b39539cdec611a9103f827e0aa26d61da70e2d33f8 [crate] LICENSE @@ -1431,10 +1430,10 @@ DECLARED-LICENSE: Unicode-3.0 UPSTREAM: https://github.com/unicode-org/icu4x TEXT: f367c1b8e1aa262435251e442901da4607b4650e0e63a026f5044473ecfb90f2 [crate] LICENSE -PACKAGE: zip 6.0.0 +PACKAGE: zip 9.0.5 DECLARED-LICENSE: MIT -UPSTREAM: https://github.com/zip-rs/zip2.git -TEXT: 13f16f8435b4242f494f038d761bd99c5af70395aa39274bd287d22c4d35c3b7 [crate] LICENSE +UPSTREAM: https://github.com/zip-rs/zip2 +TEXT: 58545fed1565e42d687aecec6897d35c6d37ccb71479a137c0deb2203e125c79 [crate] LICENSE PACKAGE: zlib-rs 0.6.8 DECLARED-LICENSE: Zlib @@ -2550,34 +2549,6 @@ OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE SOFTWARE. --------------------------------------------------------------------------------- -TEXT-SHA256: 13f16f8435b4242f494f038d761bd99c5af70395aa39274bd287d22c4d35c3b7 --------------------------------------------------------------------------------- -The MIT License (MIT) - -Copyright (c) 2014 Mathijs van de Nes - -Permission is hereby granted, free of charge, to any person obtaining a copy -of this software and associated documentation files (the "Software"), to deal -in the Software without restriction, including without limitation the rights -to use, copy, modify, merge, publish, distribute, sublicense, and/or sell -copies of the Software, and to permit persons to whom the Software is -furnished to do so, subject to the following conditions: - -The above copyright notice and this permission notice shall be included in all -copies or substantial portions of the Software. - -THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR -IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY, -FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE -AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER -LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, -OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE -SOFTWARE. - -Some files in the "tests/data" subdirectory of this repository are under other -licences; see files named LICENSE.*.txt for details. - -------------------------------------------------------------------------------- TEXT-SHA256: 1466d9b4f3a59bb8997fc8d5fa977ce3f6a24bb2358793c09bfdf007039f6486 -------------------------------------------------------------------------------- @@ -2794,37 +2765,6 @@ TEXT-SHA256: 1520f0253bb05bbfc841b827fe6440172f0513b4a890f720c9de1665a07c21e8 See the License for the specific language governing permissions and limitations under the License. --------------------------------------------------------------------------------- -TEXT-SHA256: 15656cc11a8331f28c0986b8ab97220d3e76f98e60ed388b5ffad37dfac4710c --------------------------------------------------------------------------------- -MIT License - -Copyright (c) 2019 Manish Goregaokar - -Permission is hereby granted, free of charge, to any -person obtaining a copy of this software and associated -documentation files (the "Software"), to deal in the -Software without restriction, including without -limitation the rights to use, copy, modify, merge, -publish, distribute, sublicense, and/or sell copies of -the Software, and to permit persons to whom the Software -is furnished to do so, subject to the following -conditions: - -The above copyright notice and this permission notice -shall be included in all copies or substantial portions -of the Software. - -THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF -ANY KIND, EXPRESS OR IMPLIED, INCLUDING BUT NOT LIMITED -TO THE WARRANTIES OF MERCHANTABILITY, FITNESS FOR A -PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT -SHALL THE AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY -CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER IN AN ACTION -OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, OUT OF OR -IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER -DEALINGS IN THE SOFTWARE. - -------------------------------------------------------------------------------- TEXT-SHA256: 1626f2c950cee975b5809748e288468141d09aa420314c7c9b35e6e62b772b2d -------------------------------------------------------------------------------- @@ -5180,6 +5120,31 @@ WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. See the License for the specific language governing permissions and limitations under the License. +-------------------------------------------------------------------------------- +TEXT-SHA256: 58545fed1565e42d687aecec6897d35c6d37ccb71479a137c0deb2203e125c79 +-------------------------------------------------------------------------------- +The MIT License (MIT) + +Copyright (c) 2014 Mathijs van de Nes + +Permission is hereby granted, free of charge, to any person obtaining a copy +of this software and associated documentation files (the "Software"), to deal +in the Software without restriction, including without limitation the rights +to use, copy, modify, merge, publish, distribute, sublicense, and/or sell +copies of the Software, and to permit persons to whom the Software is +furnished to do so, subject to the following conditions: + +The above copyright notice and this permission notice shall be included in all +copies or substantial portions of the Software. + +THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR +IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY, +FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE +AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER +LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, +OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE +SOFTWARE. + -------------------------------------------------------------------------------- TEXT-SHA256: 5b698ca13897be3afdb7174256fa1574f8c6892b8bea1a66dd6469d3fe27885a -------------------------------------------------------------------------------- @@ -5574,6 +5539,31 @@ OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE SOFTWARE. +-------------------------------------------------------------------------------- +TEXT-SHA256: 66e3ee1fa7f909ad3c612d556f2a0cdabcd809ad6e66f3b0605015ac64841b70 +-------------------------------------------------------------------------------- +The MIT License (MIT) + +Copyright (c) 2015 Carl Lerche + nix-rust Authors + +Permission is hereby granted, free of charge, to any person obtaining a copy +of this software and associated documentation files (the "Software"), to deal +in the Software without restriction, including without limitation the rights +to use, copy, modify, merge, publish, distribute, sublicense, and/or sell +copies of the Software, and to permit persons to whom the Software is +furnished to do so, subject to the following conditions: + +The above copyright notice and this permission notice shall be included in +all copies or substantial portions of the Software. + +THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR +IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY, +FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE +AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER +LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, +OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN +THE SOFTWARE. + -------------------------------------------------------------------------------- TEXT-SHA256: 6a13bc24a100a6812f053879ec51b126b103af7cda6dbf48c4188722da44da9f -------------------------------------------------------------------------------- diff --git a/THIRD_PARTY_NOTICES.md b/THIRD_PARTY_NOTICES.md index 1777bcf..fdc444e 100644 --- a/THIRD_PARTY_NOTICES.md +++ b/THIRD_PARTY_NOTICES.md @@ -14,7 +14,6 @@ Impossible Inference is distributed under MIT OR Apache-2.0. The inventory below | `anstyle-query` | 1.1.5 | `MIT OR Apache-2.0` | crates.io | | `anstyle-wincon` | 3.0.11 | `MIT OR Apache-2.0` | crates.io | | `anyhow` | 1.0.104 | `MIT OR Apache-2.0` | crates.io | -| `arbitrary` | 1.4.2 | `MIT OR Apache-2.0` | crates.io | | `async-trait` | 0.1.92 | `MIT OR Apache-2.0` | crates.io | | `atomic-waker` | 1.1.2 | `Apache-2.0 OR MIT` | crates.io | | `axum` | 0.8.6 | `MIT` | crates.io | @@ -38,7 +37,6 @@ Impossible Inference is distributed under MIT OR Apache-2.0. The inventory below | `crc32fast` | 1.5.2 | `MIT OR Apache-2.0` | crates.io | | `crypto-common` | 0.1.7 | `MIT OR Apache-2.0` | crates.io | | `data-encoding` | 2.11.1 | `MIT` | crates.io | -| `derive_arbitrary` | 1.4.2 | `MIT OR Apache-2.0` | crates.io | | `digest` | 0.10.7 | `MIT OR Apache-2.0` | crates.io | | `displaydoc` | 0.2.7 | `MIT OR Apache-2.0` | crates.io | | `either` | 1.18.0 | `MIT OR Apache-2.0` | crates.io | @@ -105,6 +103,7 @@ Impossible Inference is distributed under MIT OR Apache-2.0. The inventory below | `miniz_oxide` | 0.8.9 | `MIT OR Zlib OR Apache-2.0` | crates.io | | `mio` | 1.2.3 | `MIT` | crates.io | | `multimap` | 0.10.1 | `MIT OR Apache-2.0` | crates.io | +| `nix` | 0.31.3 | `MIT` | crates.io | | `once_cell` | 1.21.4 | `MIT OR Apache-2.0` | crates.io | | `once_cell_polyfill` | 1.70.2 | `MIT OR Apache-2.0` | crates.io | | `percent-encoding` | 2.3.2 | `MIT OR Apache-2.0` | crates.io | @@ -150,9 +149,9 @@ Impossible Inference is distributed under MIT OR Apache-2.0. The inventory below | `ring` | 0.17.14 | `Apache-2.0 AND ISC` | crates.io | | `rustc-hash` | 2.1.3 | `Apache-2.0 OR MIT` | crates.io | | `rustix` | 1.1.5 | `Apache-2.0 WITH LLVM-exception OR Apache-2.0 OR MIT` | crates.io | -| `rustls` | 0.23.45 | `Apache-2.0 OR ISC OR MIT` | crates.io | +| `rustls` | 0.23.46 | `Apache-2.0 OR ISC OR MIT` | crates.io | | `rustls-pki-types` | 1.15.1 | `MIT OR Apache-2.0` | crates.io | -| `rustls-webpki` | 0.103.15 | `ISC` | crates.io | +| `rustls-webpki` | 0.103.16 | `ISC` | crates.io | | `rustversion` | 1.0.23 | `MIT OR Apache-2.0` | crates.io | | `ryu` | 1.0.23 | `Apache-2.0 OR BSL-1.0` | crates.io | | `serde` | 1.0.228 | `MIT OR Apache-2.0` | crates.io | @@ -203,6 +202,7 @@ Impossible Inference is distributed under MIT OR Apache-2.0. The inventory below | `tracing-core` | 0.1.36 | `MIT` | crates.io | | `try-lock` | 0.2.5 | `MIT` | crates.io | | `tungstenite` | 0.28.0 | `MIT OR Apache-2.0` | crates.io | +| `typed-path` | 0.12.4 | `MIT OR Apache-2.0` | crates.io | | `typenum` | 1.20.1 | `MIT OR Apache-2.0` | crates.io | | `unicase` | 2.9.0 | `MIT OR Apache-2.0` | crates.io | | `unicode-ident` | 1.0.26 | `(MIT OR Apache-2.0) AND Unicode-3.0` | crates.io | @@ -223,7 +223,7 @@ Impossible Inference is distributed under MIT OR Apache-2.0. The inventory below | `wasm-streams` | 0.4.2 | `MIT OR Apache-2.0` | crates.io | | `web-sys` | 0.3.105 | `MIT OR Apache-2.0` | crates.io | | `web-time` | 1.1.0 | `MIT OR Apache-2.0` | crates.io | -| `webpki-roots` | 1.0.9 | `CDLA-Permissive-2.0` | crates.io | +| `webpki-roots` | 1.0.10 | `CDLA-Permissive-2.0` | crates.io | | `winapi` | 0.3.9 | `MIT/Apache-2.0` | crates.io | | `winapi-i686-pc-windows-gnu` | 0.4.0 | `MIT/Apache-2.0` | crates.io | | `winapi-x86_64-pc-windows-gnu` | 0.4.0 | `MIT/Apache-2.0` | crates.io | @@ -252,6 +252,6 @@ Impossible Inference is distributed under MIT OR Apache-2.0. The inventory below | `zerotrie` | 0.2.5 | `Unicode-3.0` | crates.io | | `zerovec` | 0.11.8 | `Unicode-3.0` | crates.io | | `zerovec-derive` | 0.11.6 | `Unicode-3.0` | crates.io | -| `zip` | 6.0.0 | `MIT` | crates.io | +| `zip` | 9.0.5 | `MIT` | crates.io | | `zlib-rs` | 0.6.8 | `Zlib` | crates.io | | `zopfli` | 0.8.3 | `Apache-2.0` | crates.io | From 561f0d26903f12bd04dd9a5715bda28e1ca7ed83 Mon Sep 17 00:00:00 2001 From: autoantohaki Date: Wed, 21 Oct 2026 21:05:34 -0300 Subject: [PATCH 3/3] fix(ci): do not report expected native exit codes as script failures --- scripts/privacy-scan.ps1 | 3 +++ scripts/verify-foundation-snapshot.tests.ps1 | 2 ++ 2 files changed, 5 insertions(+) diff --git a/scripts/privacy-scan.ps1 b/scripts/privacy-scan.ps1 index 479584a..f465701 100644 --- a/scripts/privacy-scan.ps1 +++ b/scripts/privacy-scan.ps1 @@ -31,6 +31,9 @@ try { $env:USERPROFILE, $env:HOME ) | Where-Object { -not [string]::IsNullOrWhiteSpace([string]$_) -and ([string]$_).Length -ge 4 } + # `git config --get` exits 1 when a key is unset (as on CI runners). That is an expected empty + # marker, not a scan failure, so it must not leak out as this script's exit code. + $global:LASTEXITCODE = 0 $findings = [Collections.Generic.List[string]]::new() foreach ($file in $files) { $normalized = $file.Replace('\', '/') diff --git a/scripts/verify-foundation-snapshot.tests.ps1 b/scripts/verify-foundation-snapshot.tests.ps1 index 282750c..95c5b02 100644 --- a/scripts/verify-foundation-snapshot.tests.ps1 +++ b/scripts/verify-foundation-snapshot.tests.ps1 @@ -31,6 +31,8 @@ try { if ($LASTEXITCODE -eq 0) { throw "foundation verifier accepted altered entries under the old aggregate tree claim" } + # The rejection above is the expected result; do not report it as this script's exit code. + $global:LASTEXITCODE = 0 Write-Output "Foundation snapshot adversarial mutation was rejected." } finally { if (Test-Path -LiteralPath $fixture) {