21573bbd5b
Bumps [zip](https://github.com/zip-rs/zip2) from 1.1.4 to 1.2.1. <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/zip-rs/zip2/releases">zip's releases</a>.</em></p> <blockquote> <h2>v1.2.1</h2> <h3><!-- raw HTML omitted -->🐛 Bug Fixes</h3> <ul> <li>Prevent panic when trying to read a file with an unsupported compression method</li> <li>Prevent panic after reading an invalid LZMA file</li> <li>Make <code>Stored</code> the default compression method if <code>Deflated</code> isn't available, so that zip files are readable by as much software as possible</li> <li>version_needed was wrong when e.g. cfg(bzip2) but current file wasn't bzip2 (<a href="https://redirect.github.com/zip-rs/zip2/pull/100">#100</a>)</li> <li>file paths shouldn't start with slashes (<a href="https://redirect.github.com/zip-rs/zip2/pull/102">#102</a>)</li> </ul> <h3><!-- raw HTML omitted -->🚜 Refactor</h3> <ul> <li>Overhaul <code>impl Arbitrary for FileOptions</code></li> <li>Remove unused <code>atomic</code> module</li> </ul> <h2>v1.2.0</h2> <h3><!-- raw HTML omitted -->🚀 Features</h3> <ul> <li>Add method <code>decompressed_size()</code> so non-recursive ZIP bombs can be detected</li> </ul> <h3><!-- raw HTML omitted -->🚜 Refactor</h3> <ul> <li>Make <code>ZipWriter::finish()</code> consume the <code>ZipWriter</code></li> </ul> <h3><!-- raw HTML omitted -->⚙️ Miscellaneous Tasks</h3> <ul> <li>Use panic! rather than abort to ensure the fuzz harness can process the failure</li> <li>Update fuzz_write to use replace_with</li> <li>Remove a drop that can no longer be explicit</li> <li>Add <code>#![allow(unexpected_cfgs)]</code> in nightly</li> </ul> </blockquote> </details> <details> <summary>Changelog</summary> <p><em>Sourced from <a href="https://github.com/zip-rs/zip2/blob/master/CHANGELOG.md">zip's changelog</a>.</em></p> <blockquote> <h2><a href="https://github.com/zip-rs/zip2/compare/v1.2.0...v1.2.1">1.2.1</a> - 2024-05-06</h2> <h3><!-- raw HTML omitted -->🐛 Bug Fixes</h3> <ul> <li>Prevent panic when trying to read a file with an unsupported compression method</li> <li>Prevent panic after reading an invalid LZMA file</li> <li>Make <code>Stored</code> the default compression method if <code>Deflated</code> isn't available, so that zip files are readable by as much software as possible</li> <li>version_needed was wrong when e.g. cfg(bzip2) but current file wasn't bzip2 (<a href="https://redirect.github.com/zip-rs/zip2/pull/100">#100</a>)</li> <li>file paths shouldn't start with slashes (<a href="https://redirect.github.com/zip-rs/zip2/pull/102">#102</a>)</li> </ul> <h3><!-- raw HTML omitted -->🚜 Refactor</h3> <ul> <li>Overhaul <code>impl Arbitrary for FileOptions</code></li> <li>Remove unused <code>atomic</code> module</li> </ul> <h2><a href="https://github.com/zip-rs/zip2/compare/v1.1.4...v1.2.0">1.2.0</a> - 2024-05-06</h2> <h3><!-- raw HTML omitted -->🚀 Features</h3> <ul> <li>Add method <code>decompressed_size()</code> so non-recursive ZIP bombs can be detected</li> </ul> <h3><!-- raw HTML omitted -->🚜 Refactor</h3> <ul> <li>Make <code>ZipWriter::finish()</code> consume the <code>ZipWriter</code></li> </ul> <h3><!-- raw HTML omitted -->⚙️ Miscellaneous Tasks</h3> <ul> <li>Use panic! rather than abort to ensure the fuzz harness can process the failure</li> <li>Update fuzz_write to use replace_with</li> <li>Remove a drop that can no longer be explicit</li> <li>Add <code>#![allow(unexpected_cfgs)]</code> in nightly</li> </ul> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="b725303cce"><code>b725303</code></a> Merge pull request <a href="https://redirect.github.com/zip-rs/zip2/issues/103">#103</a> from zip-rs/release-plz-2024-05-06T17-54-03Z</li> <li><a href="a1f239980e"><code>a1f2399</code></a> chore: release</li> <li><a href="f7ab2ae506"><code>f7ab2ae</code></a> fix: Prevent panic when trying to read a file with an unsupported compression...</li> <li><a href="7f46b77da2"><code>7f46b77</code></a> ci: Upload leak reports if fuzz fails</li> <li><a href="d13031cc14"><code>d13031c</code></a> fix: Prevent panic after reading an invalid LZMA file</li> <li><a href="8868a11d23"><code>8868a11</code></a> test(fuzz): Fix a fuzz-read bug when finishing LZMA</li> <li><a href="b277298d7f"><code>b277298</code></a> test(fuzz): Fix: need to accept FileNotFound from abort</li> <li><a href="162c9b7281"><code>162c9b7</code></a> test(fuzz): Fix bugs that were breaking the fuzz test</li> <li><a href="447f9c6e4f"><code>447f9c6</code></a> refactor: Overhaul <code>impl Arbitrary for FileOptions</code></li> <li><a href="845c3ec91f"><code>845c3ec</code></a> refactor: Remove unused <code>atomic</code> module</li> <li>Additional commits viewable in <a href="https://github.com/zip-rs/zip2/compare/v1.1.4...v1.2.1">compare view</a></li> </ul> </details> <br /> [](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) </details> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
64 lines
1.5 KiB
TOML
64 lines
1.5 KiB
TOML
[package]
|
|
name = "ksud"
|
|
version = "0.1.0"
|
|
edition = "2021"
|
|
rust-version = "1.77.2"
|
|
|
|
# See more keys and their definitions at https://doc.rust-lang.org/cargo/reference/manifest.html
|
|
|
|
[dependencies]
|
|
anyhow = "1"
|
|
clap = { version = "4", features = ["derive"] }
|
|
const_format = "0.2"
|
|
zip = { version = "1.2", features = [
|
|
"deflate",
|
|
"deflate64",
|
|
"bzip2",
|
|
"time",
|
|
"zstd",
|
|
], default-features = false }
|
|
zip-extensions = "0.6"
|
|
java-properties = "2"
|
|
log = "0.4"
|
|
env_logger = { version = "0.11", default-features = false }
|
|
serde = { version = "1" }
|
|
serde_json = "1"
|
|
regex = "1"
|
|
encoding_rs = "0.8"
|
|
retry = "2"
|
|
humansize = "2"
|
|
libc = "0.2"
|
|
extattr = "1"
|
|
jwalk = "0.8"
|
|
is_executable = "1"
|
|
nom = "7"
|
|
derive-new = "0.6"
|
|
rust-embed = { version = "8", features = [
|
|
"debug-embed",
|
|
"compression", # must clean build after updating binaries
|
|
] }
|
|
which = "6"
|
|
getopts = "0.2"
|
|
sha256 = "1"
|
|
sha1 = "0.10"
|
|
tempdir = "0.3"
|
|
chrono = "0.4"
|
|
hole-punch = { git = "https://github.com/tiann/hole-punch" }
|
|
|
|
[target.'cfg(any(target_os = "android", target_os = "linux"))'.dependencies]
|
|
rustix = { git = "https://github.com/Kernel-SU/rustix.git", branch = "main", features = [
|
|
"all-apis",
|
|
] }
|
|
# some android specific dependencies which compiles under unix are also listed here for convenience of coding
|
|
android-properties = { version = "0.2", features = ["bionic-deprecated"] }
|
|
procfs = "0.16"
|
|
loopdev = { git = "https://github.com/Kernel-SU/loopdev" }
|
|
|
|
[target.'cfg(target_os = "android")'.dependencies]
|
|
android_logger = "0.13"
|
|
|
|
[profile.release]
|
|
strip = true
|
|
opt-level = "z"
|
|
lto = true
|