From 483f774787b13ce7a309d91732fc819dea41b4c8 Mon Sep 17 00:00:00 2001 From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com> Date: Thu, 24 Sep 2026 17:03:06 +0000 Subject: [PATCH 1/2] build(deps): Bump cfg-if from 1.0.4 to 1.0.5 Bumps [cfg-if](https://github.com/rust-lang/cfg-if) from 1.0.4 to 1.0.5. - [Release notes](https://github.com/rust-lang/cfg-if/releases) - [Changelog](https://github.com/rust-lang/cfg-if/blob/main/CHANGELOG.md) - [Commits](https://github.com/rust-lang/cfg-if/compare/v1.0.4...v1.0.5) --- updated-dependencies: - dependency-name: cfg-if dependency-version: 1.0.5 dependency-type: direct:production update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] --- Cargo.lock | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/Cargo.lock b/Cargo.lock index e1af63b2..d0f215e9 100644 --- a/Cargo.lock +++ b/Cargo.lock @@ -117,9 +117,9 @@ checksum = "2fff2a6927b3bb87f9595d67196a70493f627687a71d87a0d692242c33f58c11" [[package]] name = "cfg-if" -version = "1.0.4" +version = "1.0.5" source = "registry+https://github.com/rust-lang/crates.io-index" -checksum = "9330f8b2ff13f34540b44e946ef35111825727b38d33286ef986142615121801" +checksum = "4e7648175b45a9a48536d676f68d918270699102aa8dab5496df06904c914600" [[package]] name = "ciborium" From 19750695c4709f982e330dca4e96b6e0c53a1765 Mon Sep 17 00:00:00 2001 From: David Cook Date: Thu, 24 Sep 2026 12:31:45 -0500 Subject: [PATCH 2/2] Record audit --- supply-chain/audits.toml | 5 +++++ 1 file changed, 5 insertions(+) diff --git a/supply-chain/audits.toml b/supply-chain/audits.toml index bb5614bf..73e1c21f 100644 --- a/supply-chain/audits.toml +++ b/supply-chain/audits.toml @@ -118,6 +118,11 @@ who = "J.C. Jones " criteria = "safe-to-deploy" delta = "1.0.1 -> 1.0.3" +[[audits.cfg-if]] +who = "David Cook " +criteria = "safe-to-deploy" +delta = "1.0.4 -> 1.0.5" + [[audits.ciborium-io]] who = "David Cook " criteria = "safe-to-run"