1807981 - Audit winreg crate and update 0.5.1 -> 0.10.1

Status: RESOLVED FIXED

(Core :: General, task)

Description

[Ray Kraesig [:rkraesig]]

winreg has not been audited. We should do that, and we might as well upgrade to 0.10.1 while we're at it.

Comment 1

[Ray Kraesig [:rkraesig]]

Attachment: Bug 1807981 - Audit winreg 0.10.1 as safe-to-run, and upgrade to it r?whimboo!,#supply-chain-reviewers!

Upgrade winreg (currently used only by mozrunner) to 0.10.1.

As winreg 0.5.1 is currently listed as an exemption in supply-chain,
audit the new version as a blank slate, rather than performing an audit
of the diffs; this is both simpler and allows removing the exemption.

(There are some uses of unsafe that would be concerning in deployment
(more for reasons of stability than security), but the crate does
qualify as safe-to-run.)

winreg 0.5.1 is currently only used by mozrunner, which requires no
source changes for this upgrade.

Comment 2

[Pulsebot]

Pushed by [e-mail]:
https://hg.mozilla.org/integration/autoland/rev/62cc6c00f338
Audit winreg 0.10.1 as safe-to-run, and upgrade to it  r=supply-chain-reviewers,webdriver-reviewers,whimboo

Comment 3

[Noemi Erli[:noemi_erli]]

https://hg.mozilla.org/mozilla-central/rev/62cc6c00f338