mirror of
https://github.com/astral-sh/uv.git
synced 2025-08-04 02:48:17 +00:00
50057cd5f2
## Summary This ensures that (like Cargo) we don't suffer from https://github.com/advisories/GHSA-r5w3-xm58-jv6j, by way of checking known hosts when fetching via `libgit2`. The implementation is taken from Cargo itself, modified to remove all configuration, since we don't yet support configuration for known hosts, etc. Closes #285.
38 lines
995 B
TOML
38 lines
995 B
TOML
[package]
|
|
name = "puffin-git"
|
|
version = "0.0.1"
|
|
edition = { workspace = true }
|
|
rust-version = { workspace = true }
|
|
homepage = { workspace = true }
|
|
documentation = { workspace = true }
|
|
repository = { workspace = true }
|
|
authors = { workspace = true }
|
|
license = { workspace = true }
|
|
|
|
[lints]
|
|
workspace = true
|
|
|
|
[dependencies]
|
|
cache-key = { path = "../cache-key" }
|
|
puffin-fs = { path = "../puffin-fs" }
|
|
|
|
anyhow = { workspace = true }
|
|
base64 = { workspace = true }
|
|
cargo-util = { workspace = true }
|
|
git2 = { workspace = true }
|
|
glob = { workspace = true }
|
|
hex = { workspace = true }
|
|
hmac = { workspace = true }
|
|
home = { workspace = true }
|
|
once_cell = { workspace = true }
|
|
rand = { workspace = true }
|
|
reqwest = { workspace = true, features = ["blocking"] }
|
|
serde = { workspace = true }
|
|
sha1 = { workspace = true }
|
|
tokio = { workspace = true }
|
|
tracing = { workspace = true }
|
|
url = { workspace = true }
|
|
|
|
[features]
|
|
vendored-libgit2 = ["git2/vendored-libgit2"]
|
|
vendored-openssl = ["git2/vendored-openssl"]
|