From ecf7d6499779932ccf06293f65a2f5a79b1a09ec Mon Sep 17 00:00:00 2001 From: Claude Date: Wed, 7 Oct 2026 15:32:18 +0000 Subject: [PATCH 1/2] release: v0.4.0 MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit Lockstep bump workspace crates and language SDKs to 0.4.0. Minor bump because the lifecycle overhaul (#109) changes the JSON envelope to schema_version 2 (secret_ref outputs), requires --allow-host-execution for host commands, and removes the shared-database fleet backend. CHANGELOG also covers Stripe Projects plugin 0.35.0 → 0.40.0 and the new herenow, perplexity, and churnkey catalog integrations. Co-Authored-By: Claude Opus 5.5 Claude-Session: https://claude.ai/code/session_015Ems9j3X569RjZWeVnRG65 --- CHANGELOG.md | 69 ++++++++++++++++++++++++++++++ Cargo.lock | 46 ++++++++++---------- Cargo.toml | 40 ++++++++--------- README.md | 2 +- crates/stackless-render/Cargo.toml | 2 +- crates/stackless-vercel/Cargo.toml | 2 +- docs/PUBLISHING.md | 18 ++++---- sdks/go/README.md | 2 +- sdks/python/pyproject.toml | 2 +- sdks/typescript/package-lock.json | 4 +- sdks/typescript/package.json | 2 +- web/public/llms.txt | 2 +- web/public/start.md | 2 +- 13 files changed, 131 insertions(+), 62 deletions(-) diff --git a/CHANGELOG.md b/CHANGELOG.md index 1bebefb..c9653eb 100644 --- a/CHANGELOG.md +++ b/CHANGELOG.md @@ -15,6 +15,75 @@ Generate with: ## Unreleased +## v0.4.0 — 2026-10-07 + +Lifecycle overhaul: a single controller owns every operation, with durable +recovery, explicit ownership, and a broader execution model (workers, jobs, +endpoints, TCP health, mixed placement). Stripe Projects plugin 0.40.0 pin. + +### Breaking + +- Lifecycle JSON envelopes are `schema_version: 2`. Integration outputs are + instance-scoped `secret_ref` objects instead of plaintext credentials; the + controller resolves `${integrations..}` inside workload and + verify environments (#109). +- Host commands (local workloads without `image`, operator-side cloud hooks, + native verification) require an explicit `--allow-host-execution` grant + (`allowHostExecution` / `allow_host_execution` / `AllowHostExecution` in the + SDKs). The application file cannot grant it (#109). +- The shared-database fleet backend is removed. `STACKLESS_STATE_URL` fails + with `state.remote.disabled`; use `--controller ssh://host` and migrate + legacy exports per `docs/AGENT-FLEETS.md` (#109). +- HuggingFace catalog integrations removed after the plugin catalog dropped + them (#110). + +### Added + +- Controller-owned operations: `up --no-wait`, `down --no-wait`, and + `stackless operation get|wait|cancel|list` with durable IDs, reconnectable + progress, and restart recovery; remote controllers over SSH and a systemd + user service (#109). +- Execution model: `kind = "worker"` and `[jobs.*]`, `depends_on` with + `started` / `ready` / `completed`, `[endpoints.*]`, TCP health, `source.root`, + per-workload `on` placement for mixed stacks, and verify `timeout_secs` (#109). +- Resource inventory with owned / borrowed / shared ownership; teardown + verifies absence and never removes a sibling's resources (#109). +- Catalog integrations: `herenow/hosting`, `perplexity/api` (#108), and + `churnkey/retention` (#112). + +### Changed + +- CLI, SDKs, MCP, and the lease reaper all submit to the same controller + operation service (#109). +- Stackless no longer writes the Stripe project ID into `stackless.toml`; + Stripe files live in private per-instance runtime directories (#109). +- Stripe Projects plugin pin 0.35.0 → 0.40.0; catalog snapshot re-blessed and + `ServiceDetail.provider` follows the 0.40.0 wire rename (#108, #110, #112). +- README includes a complete `stackless.toml` example; PROVIDERS.md synced + with the registries (#111). + +### Fixed + +- With paid consent, a paid parent plan required by a free child option is + confirmed instead of failing; without consent it is still blocked (#108). +- GitLab Pages deploys no longer make a private repository public (#109). + +### Commits + +- [e94437d](https://github.com/snowmead/stackless/commit/e94437d61fe814afe76e2627835f4b00749e2bfc) docs: add stackless.toml example +- [a4ff500](https://github.com/snowmead/stackless/commit/a4ff5001459f140ab0bed02961e2e3dba49ce73c) feat(stripe-projects): integrate plugin 0.35.0 → 0.36.0 (#108) +- [45e8c87](https://github.com/snowmead/stackless/commit/45e8c872745dbe029cab7d8118e12f1d43d685c4) Overhaul lifecycle ownership, recovery, and execution (#109) +- [46d34e1](https://github.com/snowmead/stackless/commit/46d34e1cd04839364496831d95adc0fde6365752) feat(stripe-projects): integrate plugin 0.37.0 → 0.39.1 (#110) +- [20bbc2e](https://github.com/snowmead/stackless/commit/20bbc2eb984aae6a0714b4b5e596d7057caa4f86) feat(stripe-projects): integrate plugin 0.39.1 → 0.40.0 (#112) +- [07ce0d5](https://github.com/snowmead/stackless/commit/07ce0d524f60cda68ee6d4b112fbb4bde1c7d4c0) sync provider docs with registries (#111) + +### Install + +```sh +curl --proto '=https' --tlsv1.2 -LsSf https://github.com/snowmead/stackless/releases/download/v0.4.0/stackless-installer.sh | sh +stackless --version +``` + ## v0.3.3 — 2026-08-26 Stripe Projects plugin 0.35.0 pin and provider docs synced with registries. diff --git a/Cargo.lock b/Cargo.lock index 2d34686..10a0393 100644 --- a/Cargo.lock +++ b/Cargo.lock @@ -1881,7 +1881,7 @@ dependencies = [ [[package]] name = "render-client" -version = "0.3.3" +version = "0.4.0" dependencies = [ "bytes", "chrono", @@ -2357,7 +2357,7 @@ checksum = "6ce2be8dc25455e1f91df71bfa12ad37d7af1092ae736f3a6cd0e37bc7810596" [[package]] name = "stackless" -version = "0.3.3" +version = "0.4.0" dependencies = [ "async-trait", "axoupdater", @@ -2392,7 +2392,7 @@ dependencies = [ [[package]] name = "stackless-bindgen" -version = "0.3.3" +version = "0.4.0" dependencies = [ "serde_json", "stackless-idl", @@ -2402,7 +2402,7 @@ dependencies = [ [[package]] name = "stackless-cloud" -version = "0.3.3" +version = "0.4.0" dependencies = [ "reqwest", "serde", @@ -2417,7 +2417,7 @@ dependencies = [ [[package]] name = "stackless-cloudflare" -version = "0.3.3" +version = "0.4.0" dependencies = [ "async-trait", "base64", @@ -2438,7 +2438,7 @@ dependencies = [ [[package]] name = "stackless-core" -version = "0.3.3" +version = "0.4.0" dependencies = [ "async-trait", "base64", @@ -2460,7 +2460,7 @@ dependencies = [ [[package]] name = "stackless-daemon" -version = "0.3.3" +version = "0.4.0" dependencies = [ "http-body-util", "hyper", @@ -2475,7 +2475,7 @@ dependencies = [ [[package]] name = "stackless-fly" -version = "0.3.3" +version = "0.4.0" dependencies = [ "async-trait", "reqwest", @@ -2496,7 +2496,7 @@ dependencies = [ [[package]] name = "stackless-git" -version = "0.3.3" +version = "0.4.0" dependencies = [ "grit-lib", "secrecy", @@ -2506,7 +2506,7 @@ dependencies = [ [[package]] name = "stackless-gitlab" -version = "0.3.3" +version = "0.4.0" dependencies = [ "async-trait", "base64", @@ -2527,7 +2527,7 @@ dependencies = [ [[package]] name = "stackless-idl" -version = "0.3.3" +version = "0.4.0" dependencies = [ "serde", "serde_json", @@ -2539,7 +2539,7 @@ dependencies = [ [[package]] name = "stackless-integrations" -version = "0.3.3" +version = "0.4.0" dependencies = [ "async-trait", "reqwest", @@ -2557,7 +2557,7 @@ dependencies = [ [[package]] name = "stackless-laravel-cloud" -version = "0.3.3" +version = "0.4.0" dependencies = [ "async-trait", "reqwest", @@ -2577,7 +2577,7 @@ dependencies = [ [[package]] name = "stackless-local" -version = "0.3.3" +version = "0.4.0" dependencies = [ "async-trait", "bollard", @@ -2598,7 +2598,7 @@ dependencies = [ [[package]] name = "stackless-netlify" -version = "0.3.3" +version = "0.4.0" dependencies = [ "async-trait", "base64", @@ -2621,7 +2621,7 @@ dependencies = [ [[package]] name = "stackless-provider-sdk" -version = "0.3.3" +version = "0.4.0" dependencies = [ "async-trait", "serde", @@ -2634,7 +2634,7 @@ dependencies = [ [[package]] name = "stackless-railway" -version = "0.3.3" +version = "0.4.0" dependencies = [ "async-trait", "chrono", @@ -2655,7 +2655,7 @@ dependencies = [ [[package]] name = "stackless-render" -version = "0.3.3" +version = "0.4.0" dependencies = [ "async-trait", "chrono", @@ -2678,7 +2678,7 @@ dependencies = [ [[package]] name = "stackless-stripe-projects" -version = "0.3.3" +version = "0.4.0" dependencies = [ "async-trait", "serde", @@ -2692,7 +2692,7 @@ dependencies = [ [[package]] name = "stackless-vercel" -version = "0.3.3" +version = "0.4.0" dependencies = [ "async-trait", "base64", @@ -2714,7 +2714,7 @@ dependencies = [ [[package]] name = "stackless-wordpress" -version = "0.3.3" +version = "0.4.0" dependencies = [ "async-trait", "base64", @@ -3176,7 +3176,7 @@ checksum = "accd4ea62f7bb7a82fe23066fb0957d48ef677f6eeb8215f372f52e48bb32426" [[package]] name = "vercel-client" -version = "0.3.3" +version = "0.4.0" dependencies = [ "bytes", "chrono", @@ -3919,7 +3919,7 @@ checksum = "1ffae5123b2d3fc086436f8834ae3ab053a283cfac8fe0a0b8eaae044768a4c4" [[package]] name = "xtask" -version = "0.3.3" +version = "0.4.0" dependencies = [ "clap", "serde", diff --git a/Cargo.toml b/Cargo.toml index 0a833fc..3df3f1e 100644 --- a/Cargo.toml +++ b/Cargo.toml @@ -28,7 +28,7 @@ members = [ [workspace.package] edition = "2024" -version = "0.3.3" +version = "0.4.0" license = "MIT OR Apache-2.0" repository = "https://github.com/snowmead/stackless" @@ -44,25 +44,25 @@ dbg_macro = "deny" [workspace.dependencies] # `version` is required for crates.io; `path` keeps the workspace linked locally. -stackless-core = { path = "crates/stackless-core", version = "0.3.3" } -stackless-cloud = { path = "crates/stackless-cloud", version = "0.3.3" } -stackless-daemon = { path = "crates/stackless-daemon", version = "0.3.3" } -stackless-local = { path = "crates/stackless-local", version = "0.3.3" } -stackless-git = { path = "crates/stackless-git", version = "0.3.3" } -stackless-render = { path = "crates/stackless-render", version = "0.3.3" } -stackless-vercel = { path = "crates/stackless-vercel", version = "0.3.3" } -stackless-fly = { path = "crates/stackless-fly", version = "0.3.3" } -stackless-netlify = { path = "crates/stackless-netlify", version = "0.3.3" } -stackless-railway = { path = "crates/stackless-railway", version = "0.3.3" } -stackless-laravel-cloud = { path = "crates/stackless-laravel-cloud", version = "0.3.3" } -stackless-gitlab = { path = "crates/stackless-gitlab", version = "0.3.3" } -stackless-wordpress = { path = "crates/stackless-wordpress", version = "0.3.3" } -stackless-cloudflare = { path = "crates/stackless-cloudflare", version = "0.3.3" } -stackless-integrations = { path = "crates/stackless-integrations", version = "0.3.3" } -stackless-provider-sdk = { path = "crates/stackless-provider-sdk", version = "0.3.3" } -stackless-stripe-projects = { path = "crates/stackless-stripe-projects", version = "0.3.3" } -stackless-idl = { path = "crates/stackless-idl", version = "0.3.3" } -stackless-bindgen = { path = "crates/stackless-bindgen", version = "0.3.3" } +stackless-core = { path = "crates/stackless-core", version = "0.4.0" } +stackless-cloud = { path = "crates/stackless-cloud", version = "0.4.0" } +stackless-daemon = { path = "crates/stackless-daemon", version = "0.4.0" } +stackless-local = { path = "crates/stackless-local", version = "0.4.0" } +stackless-git = { path = "crates/stackless-git", version = "0.4.0" } +stackless-render = { path = "crates/stackless-render", version = "0.4.0" } +stackless-vercel = { path = "crates/stackless-vercel", version = "0.4.0" } +stackless-fly = { path = "crates/stackless-fly", version = "0.4.0" } +stackless-netlify = { path = "crates/stackless-netlify", version = "0.4.0" } +stackless-railway = { path = "crates/stackless-railway", version = "0.4.0" } +stackless-laravel-cloud = { path = "crates/stackless-laravel-cloud", version = "0.4.0" } +stackless-gitlab = { path = "crates/stackless-gitlab", version = "0.4.0" } +stackless-wordpress = { path = "crates/stackless-wordpress", version = "0.4.0" } +stackless-cloudflare = { path = "crates/stackless-cloudflare", version = "0.4.0" } +stackless-integrations = { path = "crates/stackless-integrations", version = "0.4.0" } +stackless-provider-sdk = { path = "crates/stackless-provider-sdk", version = "0.4.0" } +stackless-stripe-projects = { path = "crates/stackless-stripe-projects", version = "0.4.0" } +stackless-idl = { path = "crates/stackless-idl", version = "0.4.0" } +stackless-bindgen = { path = "crates/stackless-bindgen", version = "0.4.0" } # The profile that 'dist' will build with [profile.dist] diff --git a/README.md b/README.md index 6d8d3cb..28199e3 100644 --- a/README.md +++ b/README.md @@ -213,7 +213,7 @@ npm i stackless-sdk pip install stackless-sdk # Go -go get github.com/snowmead/stackless/sdks/go@v0.3.3 +go get github.com/snowmead/stackless/sdks/go@v0.4.0 ``` All clients need the `stackless` CLI on `PATH` (or `STACKLESS_BIN`) for the diff --git a/crates/stackless-render/Cargo.toml b/crates/stackless-render/Cargo.toml index b8e1360..50fb7f2 100644 --- a/crates/stackless-render/Cargo.toml +++ b/crates/stackless-render/Cargo.toml @@ -15,7 +15,7 @@ async-trait = "0.1.89" # DateTime that render-client returns (its own chrono dep omits `alloc`). # Load-bearing via feature unification even though no chrono path is named here. chrono = { version = "0.4.45", default-features = false, features = ["alloc"] } -render-client = { path = "../render-client", version = "0.3.3" } +render-client = { path = "../render-client", version = "0.4.0" } reqwest = { version = "0.13.4", default-features = false, features = [ "rustls", "charset", diff --git a/crates/stackless-vercel/Cargo.toml b/crates/stackless-vercel/Cargo.toml index 67331ce..47fb392 100644 --- a/crates/stackless-vercel/Cargo.toml +++ b/crates/stackless-vercel/Cargo.toml @@ -12,7 +12,7 @@ workspace = true [dependencies] async-trait = "0.1.89" base64 = "0.22.1" -vercel-client = { path = "../vercel-client", version = "0.3.3" } +vercel-client = { path = "../vercel-client", version = "0.4.0" } reqwest = { version = "0.13.4", default-features = false, features = [ "rustls", "charset", diff --git a/docs/PUBLISHING.md b/docs/PUBLISHING.md index 02713f6..7693e68 100644 --- a/docs/PUBLISHING.md +++ b/docs/PUBLISHING.md @@ -1,7 +1,7 @@ # Publishing stackless packages Release surfaces, lockstep with `[workspace.package].version` (today -`0.3.3`): +`0.4.0`): | Surface | Package | How it ships | | --- | --- | --- | @@ -58,16 +58,16 @@ consume the environment SDK, but it is published in the crates wave below. 4. Open a PR; wait for CI including the `sdk` job (`mise run sdk-test` locally). 5. Merge, then from the release commit: ```bash - git tag v0.3.3 - git tag sdks/go/v0.3.3 - git push origin v0.3.3 sdks/go/v0.3.3 + git tag v0.4.0 + git tag sdks/go/v0.4.0 + git push origin v0.4.0 sdks/go/v0.4.0 ``` - `v0.3.3` triggers cargo-dist + `publish-packages`. `sdks/go/v0.3.3` is for + `v0.4.0` triggers cargo-dist + `publish-packages`. `sdks/go/v0.4.0` is for the Go module proxy only (not a GitHub Release). 6. Confirm: - GitHub Release + installer (cargo-dist on `v*`) - `publish-packages` workflow green (crates.io, npm, PyPI) - - `go list -m github.com/snowmead/stackless/sdks/go@v0.3.3` resolves + - `go list -m github.com/snowmead/stackless/sdks/go@v0.4.0` resolves Manual re-publish of an existing tag (e.g. language SDKs after crates.io already shipped): @@ -75,7 +75,7 @@ already shipped): ```bash # Use --ref main so the latest publish scripts run; pypi env must allow main # (or dispatch from a v* tag that contains the fixed workflow). -gh workflow run publish-packages.yml --ref main -f tag=v0.3.3 +gh workflow run publish-packages.yml --ref main -f tag=v0.4.0 ``` --- @@ -128,8 +128,8 @@ Later waves only need a version bump + tag. && python -m twine upload dist/*) # Go (tag only) -git tag sdks/go/v0.3.3 -git push origin sdks/go/v0.3.3 +git tag sdks/go/v0.4.0 +git push origin sdks/go/v0.4.0 ``` --- diff --git a/sdks/go/README.md b/sdks/go/README.md index d568d26..57328e4 100644 --- a/sdks/go/README.md +++ b/sdks/go/README.md @@ -9,7 +9,7 @@ protocol ([`../PROTOCOL.md`](../PROTOCOL.md)) via the `stackless` CLI. github.com/snowmead/stackless/sdks/go ``` -Publish tags use the subdirectory prefix, e.g. `sdks/go/v0.3.3` (lockstep with +Publish tags use the subdirectory prefix, e.g. `sdks/go/v0.4.0` (lockstep with the workspace version). ## Usage diff --git a/sdks/python/pyproject.toml b/sdks/python/pyproject.toml index c552439..0236683 100644 --- a/sdks/python/pyproject.toml +++ b/sdks/python/pyproject.toml @@ -4,7 +4,7 @@ build-backend = "hatchling.build" [project] name = "stackless-sdk" -version = "0.3.3" +version = "0.4.0" description = "CLI-backed Python SDK for stackless lifecycle verbs" readme = "README.md" requires-python = ">=3.10" diff --git a/sdks/typescript/package-lock.json b/sdks/typescript/package-lock.json index 054becc..80a40e2 100644 --- a/sdks/typescript/package-lock.json +++ b/sdks/typescript/package-lock.json @@ -1,12 +1,12 @@ { "name": "stackless-sdk", - "version": "0.3.3", + "version": "0.4.0", "lockfileVersion": 3, "requires": true, "packages": { "": { "name": "stackless-sdk", - "version": "0.3.3", + "version": "0.4.0", "license": "(MIT OR Apache-2.0)", "devDependencies": { "@types/node": "^22.10.0", diff --git a/sdks/typescript/package.json b/sdks/typescript/package.json index 620734e..a48a78b 100644 --- a/sdks/typescript/package.json +++ b/sdks/typescript/package.json @@ -1,6 +1,6 @@ { "name": "stackless-sdk", - "version": "0.3.3", + "version": "0.4.0", "description": "CLI-backed Stackless client for Node and Bun", "type": "module", "license": "(MIT OR Apache-2.0)", diff --git a/web/public/llms.txt b/web/public/llms.txt index 8e2d950..d5e505c 100644 --- a/web/public/llms.txt +++ b/web/public/llms.txt @@ -15,7 +15,7 @@ ``` curl --proto '=https' --tlsv1.2 -LsSf https://github.com/snowmead/stackless/releases/latest/download/stackless-installer.sh | sh -stackless --version # expect 0.2.1 or newer +stackless --version # expect 0.4.0 or newer ``` From source: `cargo build --release` → `target/release/stackless`. diff --git a/web/public/start.md b/web/public/start.md index 5a0362b..7ea2d23 100644 --- a/web/public/start.md +++ b/web/public/start.md @@ -18,7 +18,7 @@ curl --proto '=https' --tlsv1.2 -LsSf https://github.com/snowmead/stackless/rele stackless --version ``` -Expect `0.3.3` or newer. If `stackless` is not on `PATH` after install, refresh the shell environment and retry `--version` before continuing. +Expect `0.4.0` or newer. If `stackless` is not on `PATH` after install, refresh the shell environment and retry `--version` before continuing. ## Step 3: Add the agent skill From 2e81adc766eab0b0784b3941fa3b76cf5e01c641 Mon Sep 17 00:00:00 2001 From: Claude Date: Wed, 7 Oct 2026 15:56:52 +0000 Subject: [PATCH 2/2] fix(supply-chain): bump rustls to 0.23.45 for RUSTSEC-2026-0285 cargo audit fails on rustls 0.23.40 (TLS 1.3 handshake messages accepted across encryption-level boundaries). Bump to 0.23.45, which pulls rustls-webpki 0.103.15, aws-lc-rs 1.18.1, and aws-lc-sys 0.45.0, and move the existing cargo-vet safe-to-deploy exemptions to those versions. Licenses are unchanged and no new crates enter the graph. Co-Authored-By: Claude Opus 5.5 Claude-Session: https://claude.ai/code/session_015Ems9j3X569RjZWeVnRG65 --- CHANGELOG.md | 7 +++++++ Cargo.lock | 27 ++++++++++++++------------- supply-chain/config.toml | 8 ++++---- 3 files changed, 25 insertions(+), 17 deletions(-) diff --git a/CHANGELOG.md b/CHANGELOG.md index c9653eb..12c3601 100644 --- a/CHANGELOG.md +++ b/CHANGELOG.md @@ -68,6 +68,13 @@ endpoints, TCP health, mixed placement). Stripe Projects plugin 0.40.0 pin. confirmed instead of failing; without consent it is still blocked (#108). - GitLab Pages deploys no longer make a private repository public (#109). +### Security + +- rustls 0.23.40 → 0.23.45 for [RUSTSEC-2026-0285](https://rustsec.org/advisories/RUSTSEC-2026-0285) + (TLS 1.3 handshake messages accepted across encryption levels), with + rustls-webpki, aws-lc-rs, and aws-lc-sys updates; cargo-vet exemptions move + to the new versions. + ### Commits - [e94437d](https://github.com/snowmead/stackless/commit/e94437d61fe814afe76e2627835f4b00749e2bfc) docs: add stackless.toml example diff --git a/Cargo.lock b/Cargo.lock index 10a0393..c152508 100644 --- a/Cargo.lock +++ b/Cargo.lock @@ -123,9 +123,9 @@ checksum = "f2032f911046de80f0a198e0901378627c33f59ea0ac00e363d481118bd70a53" [[package]] name = "aws-lc-rs" -version = "1.17.0" +version = "1.18.1" source = "registry+https://github.com/rust-lang/crates.io-index" -checksum = "5ec2f1fc3ec205783a5da9a7e6c1509cc69dedf09a1949e412c1e18469326d00" +checksum = "b281d307588d634de920874890732659e2e7672f72b5e10e81badc1a8a83621e" dependencies = [ "aws-lc-sys", "zeroize", @@ -133,14 +133,15 @@ dependencies = [ [[package]] name = "aws-lc-sys" -version = "0.41.0" +version = "0.45.0" source = "registry+https://github.com/rust-lang/crates.io-index" -checksum = "1a2f9779ce85b93ab6170dd940ad0169b5766ff848247aff13bb788b832fe3f4" +checksum = "9bff6c3b54fad79a2e60b8102caf565819711497c1f5f092f49508e2f5c31b27" dependencies = [ "cc", "cmake", "dunce", "fs_extra", + "pkg-config", ] [[package]] @@ -550,7 +551,7 @@ source = "registry+https://github.com/rust-lang/crates.io-index" checksum = "39cab71617ae0d63f51a36d69f866391735b51691dbda63cf6f96d042b63efeb" dependencies = [ "libc", - "windows-sys 0.52.0", + "windows-sys 0.60.2", ] [[package]] @@ -2003,14 +2004,14 @@ dependencies = [ "errno", "libc", "linux-raw-sys", - "windows-sys 0.52.0", + "windows-sys 0.60.2", ] [[package]] name = "rustls" -version = "0.23.40" +version = "0.23.45" source = "registry+https://github.com/rust-lang/crates.io-index" -checksum = "ef86cd5876211988985292b91c96a8f2d298df24e75989a43a3c73f2d4d8168b" +checksum = "0d41d731c7d2f962d1ccc364cec258de3c0e93b38c2fb3ba97ac74513048d634" dependencies = [ "aws-lc-rs", "log", @@ -2062,7 +2063,7 @@ dependencies = [ "security-framework", "security-framework-sys", "webpki-root-certs", - "windows-sys 0.52.0", + "windows-sys 0.60.2", ] [[package]] @@ -2073,9 +2074,9 @@ checksum = "f87165f0995f63a9fbeea62b64d10b4d9d8e78ec6d7d51fb2125fda7bb36788f" [[package]] name = "rustls-webpki" -version = "0.103.13" +version = "0.103.15" source = "registry+https://github.com/rust-lang/crates.io-index" -checksum = "61c429a8649f110dddef65e2a5ad240f747e85f7758a6bccc7e5777bd33f756e" +checksum = "f3c3cf1d8b1e7d4927e2d154c3fcb02979afb9939629c62cd9048d4f07b60ac2" dependencies = [ "aws-lc-rs", "ring", @@ -2800,7 +2801,7 @@ dependencies = [ "getrandom 0.4.2", "once_cell", "rustix", - "windows-sys 0.52.0", + "windows-sys 0.60.2", ] [[package]] @@ -3415,7 +3416,7 @@ version = "0.1.11" source = "registry+https://github.com/rust-lang/crates.io-index" checksum = "c2a7b1c03c876122aa43f3020e6c3c3ee5c05081c9a00739faf7503aeba10d22" dependencies = [ - "windows-sys 0.52.0", + "windows-sys 0.60.2", ] [[package]] diff --git a/supply-chain/config.toml b/supply-chain/config.toml index 7d45334..fb88e7e 100644 --- a/supply-chain/config.toml +++ b/supply-chain/config.toml @@ -135,11 +135,11 @@ version = "1.5.1" criteria = "safe-to-deploy" [[exemptions.aws-lc-rs]] -version = "1.17.0" +version = "1.18.1" criteria = "safe-to-deploy" [[exemptions.aws-lc-sys]] -version = "0.41.0" +version = "0.45.0" criteria = "safe-to-deploy" [[exemptions.axoasset]] @@ -1039,7 +1039,7 @@ version = "0.22.4" criteria = "safe-to-deploy" [[exemptions.rustls]] -version = "0.23.40" +version = "0.23.45" criteria = "safe-to-deploy" [[exemptions.rustls-native-certs]] @@ -1071,7 +1071,7 @@ version = "0.102.8" criteria = "safe-to-deploy" [[exemptions.rustls-webpki]] -version = "0.103.13" +version = "0.103.15" criteria = "safe-to-deploy" [[exemptions.rustversion]]