Skip to content
Draft
Show file tree
Hide file tree
Changes from all commits
Commits
File filter

Filter by extension

Filter by extension


Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
12 changes: 12 additions & 0 deletions common/supply-chain/config.toml
Original file line number Diff line number Diff line change
Expand Up @@ -54,6 +54,14 @@ criteria = "safe-to-deploy"
version = "0.3.76"
criteria = "safe-to-deploy"

[[exemptions.bitfield]]
version = "0.19.5"
criteria = "safe-to-deploy"

[[exemptions.bitfield-macros]]
version = "0.19.5"
criteria = "safe-to-deploy"

[[exemptions.bitflags]]
version = "2.11.0"
criteria = "safe-to-deploy"
Expand Down Expand Up @@ -302,6 +310,10 @@ criteria = "safe-to-deploy"
version = "2.0.117"
criteria = "safe-to-deploy"

[[exemptions.syn]]
version = "3.0.3"
criteria = "safe-to-deploy"

[[exemptions.sysinfo]]
version = "0.33.1"
criteria = "safe-to-deploy"
Expand Down
22 changes: 19 additions & 3 deletions common/supply-chain/imports.lock
Original file line number Diff line number Diff line change
Expand Up @@ -28,6 +28,13 @@ criteria = "safe-to-deploy"
version = "0.2.5"
aggregated-from = "https://raw.githubusercontent.com/OpenDevicePartnership/mcxa-pac/refs/heads/main/supply-chain/audits.toml"

[[audits.OpenDevicePartnership.audits.bincode]]
who = "Jerry Xie <jerryxie@microsoft.com>"
criteria = "safe-to-deploy"
version = "2.0.1"
notes = "no_std binary serialization library. ~15 unsafe blocks for u8 type-specialization guarded by unty::type_equal and MaybeUninit patterns. No build script, no proc macros. std imports only for Encode/Decode trait impls. Assisted-by: copilot-cli:claude-opus-4.6"
aggregated-from = "https://raw.githubusercontent.com/OpenDevicePartnership/embedded-services/refs/heads/main/supply-chain/audits.toml"

[[audits.OpenDevicePartnership.audits.bitfield]]
who = "Felipe Balbi <felipe.balbi@microsoft.com>"
criteria = "safe-to-deploy"
Expand Down Expand Up @@ -112,7 +119,10 @@ aggregated-from = "https://raw.githubusercontent.com/OpenDevicePartnership/embed
who = "Felipe Balbi <febalbi@microsoft.com>"
criteria = "safe-to-deploy"
version = "0.5.0"
aggregated-from = "https://raw.githubusercontent.com/OpenDevicePartnership/tps6699x/refs/heads/main/supply-chain/audits.toml"
aggregated-from = [
"https://raw.githubusercontent.com/OpenDevicePartnership/tps6699x/refs/heads/main/supply-chain/audits.toml",
"https://raw.githubusercontent.com/OpenDevicePartnership/tps6699x/refs/heads/main/supply-chain/audits.toml",
]

[[audits.OpenDevicePartnership.audits.embassy-time]]
who = "Billy Price <williamp@microsoft.com>"
Expand Down Expand Up @@ -365,8 +375,7 @@ aggregated-from = "https://raw.githubusercontent.com/OpenDevicePartnership/embed
who = "Jerry Xie <jerryxie@microsoft.com>"
criteria = "safe-to-deploy"
delta = "1.21.3 -> 1.21.4"
notes = "Delta: soundness fix for OnceCell::wait under parking_lot feature. The wait() in imp_pl.rs now wraps parking_lot_core::park in a while loop re-checking COMPLETE state, preventing uninitialized memory observation when concurrent get_or_try_init panics. Remaining changes: doc cfg guards, doc typo fix, new tests. No new unsafe, no build script, no proc macros, no new imports. Assisted-by: copilot-chat:claude-opus-4.6"
aggregated-from = "https://raw.githubusercontent.com/OpenDevicePartnership/embedded-services/refs/heads/main/supply-chain/audits.toml"
aggregated-from = "https://raw.githubusercontent.com/OpenDevicePartnership/bq25723/refs/heads/main/supply-chain/audits.toml"

[[audits.OpenDevicePartnership.audits.pin-project-lite]]
who = "Jerry Xie <jerryxie@microsoft.com>"
Expand Down Expand Up @@ -511,6 +520,13 @@ delta = "1.0.18 -> 1.0.24"
notes = "Delta: Unicode 16->17 table data update only. No unsafe, no build.rs, no new deps. Assisted-by: GitHub Copilot:claude-opus-4.6"
aggregated-from = "https://raw.githubusercontent.com/OpenDevicePartnership/embedded-services/refs/heads/main/supply-chain/audits.toml"

[[audits.OpenDevicePartnership.audits.unty]]
who = "Jerry Xie <jerryxie@microsoft.com>"
criteria = "safe-to-deploy"
version = "0.0.4"
notes = "Tiny no_std crate (1 file, ~120 LOC, zero deps). Two unsafe blocks: transmute_copy guarded by TypeId check in unty(), and a dtolnay-pattern transmute in non_static_type_id(). Both documented; no build script, no powerful imports. Assisted-by: copilot-cli:claude-opus-4.6"
aggregated-from = "https://raw.githubusercontent.com/OpenDevicePartnership/embedded-services/refs/heads/main/supply-chain/audits.toml"

[[audits.OpenDevicePartnership.audits.uuid]]
who = "Jerry Xie <jerryxie@microsoft.com>"
criteria = "safe-to-deploy"
Expand Down
94 changes: 76 additions & 18 deletions ec/Cargo.lock

Some generated files are not rendered by default. Learn more about how customized files appear on GitHub.

4 changes: 4 additions & 0 deletions ec/Cargo.toml
Original file line number Diff line number Diff line change
Expand Up @@ -27,6 +27,10 @@ battery-service-relay = { git = "https://github.com/OpenDevicePartnership/embedd
thermal-service-relay = { git = "https://github.com/OpenDevicePartnership/embedded-services", branch = "main" }
embedded-services = { git = "https://github.com/OpenDevicePartnership/embedded-services", branch = "main" }
mctp-rs = { git = "https://github.com/OpenDevicePartnership/embedded-services", branch = "main", features = ["serial"] }
embedded-usb-pd = { git = "https://github.com/OpenDevicePartnership/embedded-usb-pd", rev = "bc8c582395ee4861be95110d4097a0b39de01717", default-features = false, features = [
"ucsi-v1_2",
] }
bincode = { version = "2.0.1", default-features = false }
embedded-mcu-hal = "0.3.0"
clap = { version = "4.6.0", features = ["derive"] }

Expand Down
4 changes: 4 additions & 0 deletions ec/test-lib/Cargo.toml
Original file line number Diff line number Diff line change
Expand Up @@ -16,6 +16,10 @@ battery-service-relay.workspace = true

embedded-mcu-hal = { workspace = true }

# UCSI wire types (host-side decode + fixtures)
embedded-usb-pd.workspace = true
bincode.workspace = true

# ACPI specific
num_enum = { version = "0.7.5", default-features = false }
windows = { version = "0.58", features = [
Expand Down
Loading
Loading