head	1.18;
access;
symbols
	pkgsrc-2026Q1:1.17.0.2
	pkgsrc-2026Q1-base:1.17
	pkgsrc-2025Q4:1.16.0.2
	pkgsrc-2025Q4-base:1.16
	pkgsrc-2025Q3:1.15.0.4
	pkgsrc-2025Q3-base:1.15
	pkgsrc-2025Q2:1.15.0.2
	pkgsrc-2025Q2-base:1.15
	pkgsrc-2025Q1:1.12.0.2
	pkgsrc-2025Q1-base:1.12
	pkgsrc-2024Q4:1.11.0.2
	pkgsrc-2024Q4-base:1.11
	pkgsrc-2024Q3:1.9.0.6
	pkgsrc-2024Q3-base:1.9
	pkgsrc-2024Q2:1.9.0.4
	pkgsrc-2024Q2-base:1.9
	pkgsrc-2024Q1:1.9.0.2
	pkgsrc-2024Q1-base:1.9
	pkgsrc-2023Q4:1.8.0.2
	pkgsrc-2023Q4-base:1.8
	pkgsrc-2023Q3:1.6.0.4
	pkgsrc-2023Q3-base:1.6
	pkgsrc-2023Q2:1.6.0.2
	pkgsrc-2023Q2-base:1.6
	pkgsrc-2023Q1:1.4.0.8
	pkgsrc-2023Q1-base:1.4
	pkgsrc-2022Q4:1.4.0.6
	pkgsrc-2022Q4-base:1.4
	pkgsrc-2022Q3:1.4.0.4
	pkgsrc-2022Q3-base:1.4
	pkgsrc-2022Q2:1.4.0.2
	pkgsrc-2022Q2-base:1.4;
locks; strict;
comment	@# @;


1.18
date	2026.06.06.04.57.20;	author adam;	state Exp;
branches;
next	1.17;
commitid	6zNo5AHK47scaHIG;

1.17
date	2026.02.05.07.54.34;	author adam;	state Exp;
branches;
next	1.16;
commitid	BQs638r6KAf32atG;

1.16
date	2025.11.23.16.31.19;	author pin;	state Exp;
branches;
next	1.15;
commitid	tR8G7Iz9QcE0hHjG;

1.15
date	2025.04.11.08.57.24;	author pin;	state Exp;
branches;
next	1.14;
commitid	49E7xAREi7kD1CQF;

1.14
date	2025.04.02.11.07.26;	author pin;	state Exp;
branches;
next	1.13;
commitid	6bpYYe7gzNYa2tPF;

1.13
date	2025.04.01.12.10.15;	author adam;	state Exp;
branches;
next	1.12;
commitid	DjfpOb7wA5oGplPF;

1.12
date	2025.01.24.21.21.20;	author pin;	state Exp;
branches;
next	1.11;
commitid	Z7s9BN8e7MKlCMGF;

1.11
date	2024.11.21.09.39.06;	author pin;	state Exp;
branches;
next	1.10;
commitid	13g7jf6KYCrNMuyF;

1.10
date	2024.10.15.03.39.30;	author pin;	state Exp;
branches;
next	1.9;
commitid	tsiI0uIr7abmZHtF;

1.9
date	2024.03.22.12.06.44;	author pin;	state Exp;
branches;
next	1.8;
commitid	3sMo4aIN8wcUr93F;

1.8
date	2023.10.26.08.02.21;	author pin;	state Exp;
branches;
next	1.7;
commitid	kRUqVQ9wZZM0R6KE;

1.7
date	2023.10.24.22.10.45;	author wiz;	state Exp;
branches;
next	1.6;
commitid	MTsrqKm6aGrQAVJE;

1.6
date	2023.05.16.19.40.53;	author wiz;	state Exp;
branches;
next	1.5;
commitid	VoOnoUNVDJnuXdpE;

1.5
date	2023.04.27.11.58.19;	author wiz;	state Exp;
branches;
next	1.4;
commitid	4HE6rqydkfZC0KmE;

1.4
date	2022.05.29.07.36.34;	author wiz;	state Exp;
branches;
next	1.3;
commitid	bXPHoeQXkt7vgVFD;

1.3
date	2022.04.21.07.57.30;	author wiz;	state Exp;
branches;
next	1.2;
commitid	r1QngxDtaNupB2BD;

1.2
date	2022.04.20.19.35.08;	author nikita;	state Exp;
branches;
next	1.1;
commitid	G7UWXD0O6LiIuYAD;

1.1
date	2022.04.20.19.22.23;	author nikita;	state Exp;
branches;
next	;
commitid	sSyf1snKeviVpYAD;


desc
@@


1.18
log
@cargo-audit: updated to 0.22.2

0.22.2

Disable embedded file timestamps in rust-embed
rustsec: avoid warning about packages that are not from crates.io
cargo-audit: add CLI option to skip checking for yanked crates
cargo-audit: cap input size for audit bin
Show affected functions in binaries
cargo-audit: when run with -q, suppress dependency trees
build(deps): bump object from 0.38.1 to 0.39.0
Affected binary tweaks
@
text
@# $NetBSD: Makefile,v 1.17 2026/02/05 07:54:34 adam Exp $

DISTNAME=	cargo-audit-0.22.2
CATEGORIES=	security
MASTER_SITES=	${MASTER_SITE_GITHUB:=rustsec/}
GITHUB_TAG=	cargo-audit/v${PKGVERSION_NOREV}

MAINTAINER=	pkgsrc-users@@NetBSD.org
HOMEPAGE=	https://github.com/rustsec/rustsec
COMMENT=	Audit Cargo.lock files for crates with security vulnerabilities
LICENSE=	apache-2.0 # or MIT

# See, https://github.com/briansmith/ring/issues/1999
.include "../../mk/compiler/i386-sse2.mk"

WRKSRC=		${WRKDIR}/rustsec-cargo-audit-v${PKGVERSION_NOREV}/cargo-audit
USE_LANGUAGES=	c
MAKE_ENV+=	OPENSSL_DIR=${BUILDLINK_PREFIX.openssl}
RUST_REQ=	1.88.0

.include "cargo-depends.mk"

.include "../../lang/rust/cargo.mk"
.include "../../security/openssl/buildlink3.mk"
.include "../../mk/bsd.pkg.mk"
@


1.17
log
@cargo-audit: updated to 0.22.1

cargo-audit 0.22.1

Release Apple Silicon cargo-audit binary
cargo-audit: Put a newline character at the end of json reports
cargo-audit: disable colors by default if stdout it not a terminal
@
text
@d1 1
a1 1
# $NetBSD: Makefile,v 1.16 2025/11/23 16:31:19 pin Exp $
d3 1
a3 1
DISTNAME=	cargo-audit-0.22.1
d19 1
a19 1
RUST_REQ=	1.85.0
@


1.16
log
@security/cargo-audit: update to 0.22.0

See also changes in:

    cvss 2.2.0
    cargo-lock 11.0.0
    rustsec 0.31.0

What's Changed

    OSV tweaks by @@djc in #1363
    cargo-audit: remove non-functional ignore source option by @@djc in #1376
    feat(cargo-audit): add SARIF output format support by @@cosmir17 in #1385
    Enable LTO and strip symbols in release builds by @@AMS21 in #1395
    SARIF API tweaks by @@djc in #1409
@
text
@d1 1
a1 1
# $NetBSD: Makefile,v 1.15 2025/04/11 08:57:24 pin Exp $
d3 1
a3 1
DISTNAME=	cargo-audit-0.22.0
@


1.15
log
@security/cargo-audit: needs sse2
@
text
@d1 1
a1 1
# $NetBSD: Makefile,v 1.14 2025/04/02 11:07:26 pin Exp $
d3 1
a3 1
DISTNAME=	cargo-audit-0.21.2
d19 1
a19 1
RUST_REQ=	1.81.0
@


1.14
log
@security/cargo-audit: not for i386
@
text
@d1 1
a1 1
# $NetBSD: Makefile,v 1.13 2025/04/01 12:10:15 adam Exp $
d14 1
a14 1
NOT_FOR_PLATFORM+=	*-*-i386
@


1.13
log
@cargo-audit: updated to 0.21.2

0.21.2 (2025-02-28)

Fixed
- Upgraded to `rustsec` v0.30.2 to fix an incompatibility with Rust v1.85 and later
@
text
@d1 1
a1 1
# $NetBSD: Makefile,v 1.12 2025/01/24 21:21:20 pin Exp $
d13 3
@


1.12
log
@devel/cargo-audit: update to 0.21.1

 - Merge pull request #1320 from rustsec/ship-it-oops
 - bump cargo-audit version in cargo toml, I forgot
@
text
@d1 1
a1 1
# $NetBSD: Makefile,v 1.11 2024/11/21 09:39:06 pin Exp $
d3 1
a3 1
DISTNAME=	cargo-audit-0.21.1
d9 1
a9 1
HOMEPAGE=	https://github.com/rustsec/cargo-audit/
d13 5
a19 10
RUST_REQ=		1.74.0
WRKSRC=			${WRKDIR}/rustsec-cargo-audit-v${PKGVERSION_NOREV}
USE_LANGUAGES=		c
INSTALLATION_DIRS=	bin
MAKE_ENV+=		OPENSSL_DIR=${BUILDLINK_PREFIX.openssl}

# error: found a virtual manifest at `.../rustsec-cargo-audit-v0.17.6/Cargo.toml` instead of a package manifest
do-install:
	${INSTALL_PROGRAM} ${WRKSRC}/target/release/cargo-audit ${DESTDIR}${PREFIX}/bin

a20 1
.include "../../lang/rust/buildlink3.mk"
@


1.11
log
@security/cargo-audit: update to 0.21.0

No changelog provided.
@
text
@d1 1
a1 1
# $NetBSD: Makefile,v 1.10 2024/10/15 03:39:30 pin Exp $
d3 1
a3 1
DISTNAME=	cargo-audit-0.21.0
@


1.10
log
@security/cargo-audit: update to 0.20.1

No ChangeLog provided, but should fix:
http://shadow.netbsd.org/pub/pkgsrc/packages/reports/HEAD/NetBSD-10.0-x86_64/20241014.0745/cargo-audit-0.20.0/build.log
@
text
@d1 1
a1 1
# $NetBSD: Makefile,v 1.9 2024/03/22 12:06:44 pin Exp $
d3 1
a3 1
DISTNAME=	cargo-audit-0.20.1
d15 1
a15 1
RUST_REQ=		1.70.0
@


1.9
log
@security/cargo-audit: update to 0.20.0

v0.20.0
 - New breaking releases of `cargo audit` v0.20 and `rustsec` v0.29

v0.19.0
 - Release `cargo audit` 0.19.0
@
text
@d1 1
a1 1
# $NetBSD: Makefile,v 1.8 2023/10/26 08:02:21 pin Exp $
d3 1
a3 1
DISTNAME=	cargo-audit-0.20.0
d15 1
@


1.8
log
@security/cargo-audit: update to 0.18.3

Bring it up-to-date, v0.17.6 -> v0.18.3

No ChangeLogs provided.
@
text
@d1 1
a1 1
# $NetBSD: Makefile,v 1.7 2023/10/24 22:10:45 wiz Exp $
d3 1
a3 1
DISTNAME=	cargo-audit-0.18.3
@


1.7
log
@*: bump for openssl 3
@
text
@d1 1
a1 1
# $NetBSD: Makefile,v 1.6 2023/05/16 19:40:53 wiz Exp $
d3 1
a3 2
DISTNAME=	cargo-audit-0.17.6
PKGREVISION=	1
@


1.6
log
@cargo-audit: update to 0.17.6.

Changes not found.
@
text
@d1 1
a1 1
# $NetBSD: Makefile,v 1.5 2023/04/27 11:58:19 wiz Exp $
d4 1
@


1.5
log
@cargo-audit: update to 0.17.5.

0.17.5 (2023-03-23)

Added

    Vulnerability severity is now included in the cargo audit output, if known (#825)

Changed

    Advisories marked informational = unsound are now reported by default, but only as warnings (#819). They do not cause the audit to fail, i.e. the exit code of the process is still 0. This behavior can be suppressed through the configuration file.

Fixed

    The help text now correctly refers to the command as cargo audit instead of cargo audit audit (#824)
    The --version argument now works correctly, reporting the current version (#838)

0.17.4 (2022-11-08)

Fixed

    Checks for yanked crates were broken since 0.17.0. This release restores them and adds tests to prevent future regressions.

Changed

    Binary scanning is enabled by default and documented as such. It can still be disabled by disabling the binary-scanning feature.

0.17.3 (2022-11-01)

Added

    cargo audit bin now attempts to detect dependencies in binaries not built with cargo auditable by parsing the panic messages (#729). This only detects about a half of the dependency list and never detects C code such as OpenSSL, but works on any Rust binaries built with cargo.
    Added integration tests for the --deny=warnings flag.

Fixed

    cargo audit bin --deny=warnings no longer exits after finding the first binary with warnings.

Changed

    Up to 5x faster cargo audit bin when scanning multiple files thanks to caching crates.io index lookups (implemented in rustsec crate).
    Notices about cargo audit or rustsec will now result in a scanning error being reported (exit code 2) as opposed to reporting them as vulnerabilities in the scanned binary (exit code 1). They are treated as warnings by default, so --deny=warnings is required to observe the new behavior.
    The binary-scanning feature that adds the cargo audit bin subcommand is now enabled by default, but is not documented as such.

0.17.2 (2022-10-07)

Changed

    Fixed the screenshot URL in README.md

0.17.1 (2022-10-07)

Added

    Initial support for scanning binaries built with cargo auditable
@
text
@d1 1
a1 1
# $NetBSD: Makefile,v 1.4 2022/05/29 07:36:34 wiz Exp $
d3 1
a3 1
DISTNAME=	cargo-audit-0.17.5
d20 1
@


1.4
log
@cargo-audit: update to 0.17.0.

Changes not found.
@
text
@d1 1
a1 1
# $NetBSD: Makefile,v 1.3 2022/04/21 07:57:30 wiz Exp $
d3 1
a3 1
DISTNAME=	cargo-audit-0.17.0
@


1.3
log
@cargo-audit: simplify, and fix download
@
text
@d1 1
a1 1
# $NetBSD: Makefile,v 1.2 2022/04/20 19:35:08 nikita Exp $
d3 1
a3 1
DISTNAME=	cargo-audit-0.16.0
@


1.2
log
@cargo-audit: Fix pkgname.
@
text
@d1 1
a1 1
# $NetBSD: Makefile,v 1.1 2022/04/20 19:22:23 nikita Exp $
d3 1
a3 4
GITHUB_PROJECT=	cargo-audit
DISTNAME=	v0.16.0
GITHUB_TAG=	${GITHUB_PROJECT}/${PKGVERSION_NOREV}
PKGNAME=	${GITHUB_PROJECT}-${DISTNAME:S,v,,}
d6 1
a6 1
DIST_SUBDIR=	${GITHUB_PROJECT}
d15 1
a15 1
WRKSRC=			${WRKDIR}/rustsec-cargo-audit-${DISTNAME}
@


1.1
log
@security/cargo-audit: import cargo-audit 0.16.0

Cargo-audit allows you to audit Cargo.lock files for crates with
security vulnerabilities reported to the RustSec Advisory Database.

Cargo-audit is provided as the cargo subcommand "audit".
@
text
@d1 1
a1 1
# $NetBSD$
d6 1
a6 1
PKGNAME=	${GITHUB_PROJECT}-${DISTNAME}
@