Closed Bug 1800113 Opened 3 years ago Closed 3 years ago

vendor_rust.py should allow changes to supply-chain audits

Categories

(Firefox Build System :: General, defect)

defect

Tracking

(firefox109 fixed)

RESOLVED FIXED
109 Branch
Tracking Status
firefox109 --- fixed

People

(Reporter: rhunt, Assigned: glandium)

Details

Attachments

(1 file)

Ran into this when vendoring new versions of some crates. mach vendor rust may require you to use cargo vet to audit new versions of crates. After you've done this and run vendor rust again, you'll get the following and need to run --ignore-modified.

rhunt@Ryans-MacBook-Pro-2 fx % ./mach vendor rust
 0:04.99 You have uncommitted changes to the following files:

supply-chain/audits.toml
supply-chain/imports.lock

Please commit or stash these changes before vendoring, or re-run with `--ignore-modified`.

I think we should allow these files to be modified when running vendor rust.

Assignee: nobody → mh+mozilla
Status: NEW → ASSIGNED
Pushed by mh@glandium.org: https://hg.mozilla.org/integration/autoland/rev/545a01479226 Avoid supply-chain changes preventing to vendor rust code. r=firefox-build-system-reviewers,nalexander
Status: ASSIGNED → RESOLVED
Closed: 3 years ago
Resolution: --- → FIXED
Target Milestone: --- → 109 Branch
You need to log in before you can comment on or make changes to this bug.

Attachment

General

Created:
Updated:
Size: