nebius/SWE-rebench-V2-PRs huggingface dataset:
Repository: mozilla/cargo-vet
Pull request #636 (2024-10-03 15:48:41)

Bump to 0.10.0


Patch:
diff --git a/Cargo.lock b/Cargo.lock
index 1018358..5c22d9c 100644
--- a/Cargo.lock
+++ b/Cargo.lock
@@ -143,7 +143,7 @@ dependencies = [
 
 [[package]]
 name = "cargo-vet"
-version = "0.9.1"
+version = "0.10.0"
 dependencies = [
  "base64-stream",
  "bytes",
diff --git a/Cargo.toml b/Cargo.toml
index 7515c39..85a16f2 100644
--- a/Cargo.toml
+++ b/Cargo.toml
@@ -1,6 +1,6 @@
 [package]
 name = "cargo-vet"
-version = "0.9.1"
+version = "0.10.0"
 edition = "2021"
 authors = ["Bobby Holley <bobbyholley@gmail.com>"]
 license = "Apache-2.0/MIT"
diff --git a/supply-chain/config.toml b/supply-chain/config.toml
index 1fa6352..ea5e43f 100644
--- a/supply-chain/config.toml
+++ b/supply-chain/config.toml
@@ -2,7 +2,7 @@
 # cargo-vet config file
 
 [cargo-vet]
-version = "0.9"
+version = "0.10"
 
 [imports.bytecodealliance]
 url = "https://raw.githubusercontent.com/bytecodealliance/wasmtime/main/supply-chain/audits.toml"


Test patch:
diff --git a/tests/snapshots/test_cli__long-help.snap b/tests/snapshots/test_cli__long-help.snap
index 921201e..fd46b85 100644
--- a/tests/snapshots/test_cli__long-help.snap
+++ b/tests/snapshots/test_cli__long-help.snap
@@ -3,7 +3,7 @@ source: tests/test-cli.rs
 expression: format_outputs(&output)
 ---
 stdout:
-cargo-vet 0.9.1
+cargo-vet 0.10.0
 Supply-chain security for Rust
 
 When run without a subcommand, `cargo vet` will invoke the `check` subcommand. See `cargo vet help
diff --git a/tests/snapshots/test_cli__markdown-help.snap b/tests/snapshots/test_cli__markdown-help.snap
index f3465fb..ef812ab 100644
--- a/tests/snapshots/test_cli__markdown-help.snap
+++ b/tests/snapshots/test_cli__markdown-help.snap
@@ -7,7 +7,7 @@ stdout:
 
 > This manual can be regenerated with `cargo vet help-markdown`
 
-Version: `cargo-vet 0.9.1`
+Version: `cargo-vet 0.10.0`
 
 Supply-chain security for Rust
 
diff --git a/tests/snapshots/test_cli__short-help.snap b/tests/snapshots/test_cli__short-help.snap
index 8f8c5aa..2c07879 100644
--- a/tests/snapshots/test_cli__short-help.snap
+++ b/tests/snapshots/test_cli__short-help.snap
@@ -3,7 +3,7 @@ source: tests/test-cli.rs
 expression: format_outputs(&output)
 ---
 stdout:
-cargo-vet 0.9.1
+cargo-vet 0.10.0
 Supply-chain security for Rust
 
 USAGE:
diff --git a/tests/test-project/supply-chain/config.toml b/tests/test-project/supply-chain/config.toml
index ee537d7..6e4a074 100644
--- a/tests/test-project/supply-chain/config.toml
+++ b/tests/test-project/supply-chain/config.toml
@@ -2,7 +2,7 @@
 # cargo-vet config file
 
 [cargo-vet]
-version = "0.9"
+version = "0.10"
 
 [policy."clap:3.1.8"]
 dependency-criteria = { atty = "safe-to-run", bitflags = ["audited", "fuzzed"] }
Repository: mozilla/cargo-vet
Pull request #649 (2025-01-20 22:41:46)

Don't automatically renew wildcard audits for inactive crates
This is a follow-up from #648. After that change the `cargo vet renew --expiring` command still would renew audits for inactive crates. This changes that behaviour to also require an `--include-inactive` flag to renew for inactive crates.



Patch:
diff --git a/src/cli.rs b/src/cli.rs
index a12b3fe..7326b8e 100644
--- a/src/cli.rs
+++ b/src/cli.rs
@@ -750,6 +750,11 @@ pub struct RenewArgs {
     #[clap(long, action, conflicts_with("crate-name"))]
     pub expiring: bool,
 
+    /// Renew wildcard audits for inactive crates which have not been updated
+    /// in 4 months.
+    #[clap(long, action, requires("expiring"))]
+    pub include_inactive: bool,
+
     /// The name of a crate to renew.
     #[clap(value_name("CRATE"), action, required_unless_present("expiring"))]
     pub crate_name: Option<String>,
diff --git a/src/main.rs b/src/main.rs
index d908a1a..4ad654f 100644
--- a/src/main.rs
+++ b/src/main.rs
@@ -1848,7 +1848,8 @@ fn cmd_regenerate_unpublished(
 
 fn cmd_renew(out: &Arc<dyn Out>, cfg: &Config, sub_args: &RenewArgs) -> Result<(), miette::Report> {
     trace!("renewing wildcard audits");
-    let mut store = Store::acquire_offline(cfg)?;
+    let network = Network::acquire(cfg);
+    let mut store = Store::acquire(cfg, network.as_ref(), false)?;
     do_cmd_renew(out, cfg, &mut store, sub_args);
     store.commit()?;
     Ok(())
@@ -1882,7 +1883,7 @@ fn do_cmd_renew(out: &Arc<dyn Out>, cfg: &Config, store: &mut Store, sub_args: &
     } else {
         // Find and update all expiring crates.
         assert!(sub_args.expiring);
-        renewing = WildcardAuditRenewal::expiring(cfg, store, false);
+        renewing = WildcardAuditRenewal::expiring(cfg, store, !sub_args.include_inactive);
 
         if renewing.is_empty() {
             info!("no wildcard audits that are eligible for renewal have expired or are expiring in the next {WILDCARD_AUDIT_EXPIRATION_STRING}");


Test patch:
diff --git a/tests/snapshots/test_cli__markdown-help.snap b/tests/snapshots/test_cli__markdown-help.snap
index ef812ab..51f84c6 100644
--- a/tests/snapshots/test_cli__markdown-help.snap
+++ b/tests/snapshots/test_cli__markdown-help.snap
@@ -906,6 +906,9 @@ The name of a crate to renew
 #### `--expiring`
 Renew all wildcard audits which will have expired six weeks from now
 
+#### `--include-inactive`
+Renew wildcard audits for inactive crates which have not been updated in 4 months
+
 #### `-h, --help`
 Print help information
Repository: bytecodealliance/wasm-tools
Pull request #1509 (2024-04-19 19:17:50)

Fix allowing numerals in package names
This fixes a mistake in #1505 where numerals were disallowed in package names.


Patch:
diff --git a/crates/wasmparser/src/validator/names.rs b/crates/wasmparser/src/validator/names.rs
index 940deb62..52d61ecb 100644
--- a/crates/wasmparser/src/validator/names.rs
+++ b/crates/wasmparser/src/validator/names.rs
@@ -825,7 +825,10 @@ impl<'a> ComponentNameParser<'a> {
 
     fn take_lowercase_kebab(&mut self) -> Result<&'a KebabStr> {
         let kebab = self.take_kebab()?;
-        if let Some(c) = kebab.chars().find(|c| *c != '-' && !c.is_lowercase()) {
+        if let Some(c) = kebab
+            .chars()
+            .find(|c| c.is_alphabetic() && !c.is_lowercase())
+        {
             bail!(
                 self.offset,
                 "character `{c}` is not lowercase in package name/namespace"


Test patch:
diff --git a/tests/local/component-model/naming.wast b/tests/local/component-model/naming.wast
index c4b42243..34756d29 100644
--- a/tests/local/component-model/naming.wast
+++ b/tests/local/component-model/naming.wast
@@ -112,4 +112,5 @@
 )
 (component
   (instance (import "a:b/c"))
+  (instance (import "a1:b1/c"))
 )
diff --git a/tests/snapshots/local/component-model/naming.wast/16.print b/tests/snapshots/local/component-model/naming.wast/16.print
index 30c0b0ad..bf4c7d12 100644
--- a/tests/snapshots/local/component-model/naming.wast/16.print
+++ b/tests/snapshots/local/component-model/naming.wast/16.print
@@ -3,4 +3,8 @@
     (instance)
   )
   (import "a:b/c" (instance (;0;) (type 0)))
+  (type (;1;)
+    (instance)
+  )
+  (import "a1:b1/c" (instance (;1;) (type 1)))
 )