- Update to version 0.21.0~git0.78f9859:

* cargo-audit v0.21.0 (#1277)
  * README.md(s): fix crate badges (#1276)
  * rustsec v0.30.0 (#1275)
  * Cargo.lock: bump dependencies (#1274)
  * Cargo.toml: bump `cargo-lock` to v10.0.1 (#1272)
  * cargo-lock v10.0.1 (#1271)
  * cargo-lock: fix issue with v4 lockfiles (#1270)
  * cargo-audit v0.21.0-rc.0 (#1267)
  * rustsec v0.30.0-rc.1 (#1266)
  * Cargo.toml(s): fix `repository` links (#1265)
  * cargo-lock v10.0.0 (#1264)
  * cargo-lock: use `doc_auto_cfg` (#1263)
  * cargo-audit: bump `abscissa` to v0.8 (#1262)
  * Bump auditable-extract in Cargo.lock for the WASM bugfix
  * build(deps): bump actions/cache from 4.1.0 to 4.1.1 (#1259)
  * V4 is supported now (#1260)
  * rustsec v0.30.0-rc.0 (#1258)
  * cargo-lock v10.0.0-rc.0 (#1257)
  * cargo-lock: add support for V4 lockfiles (#1206)
  * Cargo.lock: bump dependencies (#1256)
  * build(deps): bump actions/cache from 4.0.2 to 4.1.0 (#1252)
  * bump gix to 0.66 and fwe others (#1251)
  * .github: install target in release workflow
  * build(deps): bump regex from 1.10.5 to 1.10.6 (#1234)
  * build(deps): bump xml-rs from 0.8.20 to 0.8.21 (#1236)
  * cargo-audit: make `cargo-lock` a hard dependency (#1239)
  * build(deps): bump tame-index from 0.13.0 to 0.13.1
  * cargo-audit v0.21.0-pre.0 (#1233)
  * rustsec v0.30.0-pre.0 (#1232)

OBS-URL: https://build.opensuse.org/package/show/devel:languages:rust/cargo-audit?expand=0&rev=43

.gitattributes

@@ -0,0 +1,23 @@
+## Default LFS
+*.7z filter=lfs diff=lfs merge=lfs -text
+*.bsp filter=lfs diff=lfs merge=lfs -text
+*.bz2 filter=lfs diff=lfs merge=lfs -text
+*.gem filter=lfs diff=lfs merge=lfs -text
+*.gz filter=lfs diff=lfs merge=lfs -text
+*.jar filter=lfs diff=lfs merge=lfs -text
+*.lz filter=lfs diff=lfs merge=lfs -text
+*.lzma filter=lfs diff=lfs merge=lfs -text
+*.obscpio filter=lfs diff=lfs merge=lfs -text
+*.oxt filter=lfs diff=lfs merge=lfs -text
+*.pdf filter=lfs diff=lfs merge=lfs -text
+*.png filter=lfs diff=lfs merge=lfs -text
+*.rpm filter=lfs diff=lfs merge=lfs -text
+*.tbz filter=lfs diff=lfs merge=lfs -text
+*.tbz2 filter=lfs diff=lfs merge=lfs -text
+*.tgz filter=lfs diff=lfs merge=lfs -text
+*.ttf filter=lfs diff=lfs merge=lfs -text
+*.txz filter=lfs diff=lfs merge=lfs -text
+*.whl filter=lfs diff=lfs merge=lfs -text
+*.xz filter=lfs diff=lfs merge=lfs -text
+*.zip filter=lfs diff=lfs merge=lfs -text
+*.zst filter=lfs diff=lfs merge=lfs -text

.gitignore

@@ -0,0 +1 @@
+.osc

_constraints

@@ -0,0 +1,9 @@
+<?xml version="1.0"?>
+<constraints>
+  <hardware>
+    <disk>
+      <!-- Needed because PPC chronically runs out of disk because sigghhh -->
+      <size unit="G">25</size>
+    </disk>
+  </hardware>
+</constraints>

_service

@@ -0,0 +1,30 @@
+<services>
+  <service mode="disabled" name="obs_scm">
+    <param name="url">https://github.com/RustSec/rustsec.git</param>
+    <param name="versionformat">@PARENT_TAG@~git@TAG_OFFSET@.%h</param>
+    <param name="scm">git</param>
+    <param name="revision">cargo-audit/v0.21.0</param>
+    <!-- <param name="revision">main</param> -->
+    <param name="match-tag">cargo-audit/v*</param>
+    <param name="versionrewrite-pattern">.*v(\d+\.\d+\.\d+)</param>
+    <param name="versionrewrite-replacement">\1</param>
+    <param name="changesgenerate">enable</param>
+    <param name="changesauthor">william.brown@suse.com</param>
+  </service>
+  <service mode="disabled" name="set_version"/>
+  <service mode="disabled" name="tar" />
+  <service mode="disabled" name="recompress">
+    <param name="file">*.tar</param>
+    <param name="compression">zst</param>
+  </service>
+  <service name="cargo_vendor" mode="disabled">
+     <param name="srcdir">rustsec</param>
+     <param name="compression">zst</param>
+     <param name="update">false</param>
+     <param name="i-accept-the-risk">RUSTSEC-2024-0019</param>
+  </service>
+  <service name="cargo_audit" mode="disabled">
+     <param name="srcdir">rustsec</param>
+     <param name="lockfile">Cargo.lock</param>
+  </service>
+</services>

_servicedata

@@ -0,0 +1,4 @@
+<servicedata>
+<service name="tar_scm">
+                <param name="url">https://github.com/RustSec/rustsec.git</param>
+              <param name="changesrevision">78f9859ef6a78bc4a7c7219dac1d0b250446c84c</param></service></servicedata>

cargo-audit.spec

@@ -0,0 +1,58 @@
+#
+# spec file for package cargo-audit
+#
+# Copyright (c) 2024 SUSE LLC
+#
+# All modifications and additions to the file contributed by third parties
+# remain the property of their copyright owners, unless otherwise agreed
+# upon. The license for this file, and modifications and additions to the
+# file, is the same license as for the pristine package itself (unless the
+# license for the pristine package is not an Open Source License, in which
+# case the license is the MIT License). An "Open Source License" is a
+# license that conforms to the Open Source Definition (Version 1.9)
+# published by the Open Source Initiative.
+
+# Please submit bugfixes or comments via https://bugs.opensuse.org/
+#
+
+
+%global rustflags -Clink-arg=-Wl,-z,relro,-z,now -C debuginfo=2
+%global workspace_name rustsec
+
+Name:           cargo-audit
+Version:        0.21.0~git0.78f9859
+Release:        0
+Summary:        Audit rust sources for known security vulnerabilities
+License:        ( 0BSD OR MIT OR Apache-2.0 ) AND ( Apache-2.0 OR BSL-1.0 ) AND ( Apache-2.0 OR MIT ) AND ( MIT OR Zlib OR Apache-2.0 ) AND ( Unlicense OR MIT ) AND ( Zlib OR Apache-2.0 OR MIT ) AND Apache-2.0 AND BSD-2-Clause AND BSD-3-Clause AND CC0-1.0 AND MIT AND MPL-2.0 AND MPL-2.0+
+Group:          Development/Languages/Rust
+URL:            https://github.com/RustSec/cargo-audit
+Source0:        %{workspace_name}-%{version}.tar.zst
+Source1:        vendor.tar.zst
+Source2:        cargo_config
+
+BuildRequires:  cargo
+BuildRequires:  cargo-packaging
+BuildRequires:  pkgconfig(openssl)
+ExclusiveArch:  %{rust_tier1_arches}
+
+%description
+Audit Cargo.lock files for crates with security vulnerabilities reported to the RustSec Advisory Database.
+
+%prep
+%setup -q -n %{workspace_name}-%{version}
+%setup -qa1 -n %{workspace_name}-%{version}
+mkdir -p .cargo
+cp %{SOURCE2} .cargo/config
+
+%build
+%{cargo_build}
+
+%install
+install -D -d -m 0755 %{buildroot}%{_bindir}
+
+install -m 0755 %{_builddir}/%{workspace_name}-%{version}/target/release/cargo-audit %{buildroot}%{_bindir}/cargo-audit
+
+%files
+%{_bindir}/cargo-audit
+
+%changelog

cargo_config

@@ -0,0 +1,5 @@
+[source.crates-io]
+replace-with = "vendored-sources"
+
+[source.vendored-sources]
+directory = "vendor"

rustsec-0.20.0~git66.972ac93.tar.zst

@@ -0,0 +1,3 @@
+version https://git-lfs.github.com/spec/v1
+oid sha256:b2aa891ed289a8b0ec3165b52722186d5898a5316e022a8da22476b0cf2d2c76
+size 656733

rustsec-0.21.0~git0.78f9859.tar.zst

@@ -0,0 +1,3 @@
+version https://git-lfs.github.com/spec/v1
+oid sha256:b6b63ddf92f0be13845b839ca3e2c697da9d1c05a9a1cd3869186269e67f93ab
+size 701261

vendor.tar.zst

@@ -0,0 +1,3 @@
+version https://git-lfs.github.com/spec/v1
+oid sha256:959c93c9f61cbace4d2a267819fdba74e162974c7c367e39b04425bce240cd38
+size 30609982