1991226 - Upgrade/audit most Rust deps. for WGPU revendor and `windows` 0.62, part 1

Status: RESOLVED FIXED

(Core :: General, task, P1)

Comment 1

[Erich Gubler [:ErichDonGubler] (he/him)]

Attachment: Bug 1991226 - chore(rust): audit `serde{,_derive}` 1.0.226 → 1.0.227, `serde_core` 1.0.227, trust releases by @dtolnay until 2026-10-01 r=#supply-chain-reviewers

Comment 2

[Erich Gubler [:ErichDonGubler] (he/him)]

Attachment: Bug 1991226 - chore(rust): audit `indexmap` 2.8.0 → 2.11.4, trust versions released by @cuviper until 2026-09-30 r=#supply-chain-reviewers

Comment 3

[Erich Gubler [:ErichDonGubler] (he/him)]

Attachment: Bug 1991226 - chore(rust): audit `libc` 0.2.171 → 0.2.176, trust versions released by @rust-lang-owner until 2026-09-30 r=#supply-chain-reviewers

Comment 4

[Erich Gubler [:ErichDonGubler] (he/him)]

Attachment: Bug 1991226 - chore(rust): audit `gpu-allocator` 0.27.0 → 0.28.0 r=#supply-chain-reviewers

Comment 5

[Erich Gubler [:ErichDonGubler] (he/him)]

Attachment: Bug 1991226 - chore(rust): audit `iana-time-zone` 0.1.63 → 0.1.64 r=#supply-chain-reviewers

Comment 6

[Erich Gubler [:ErichDonGubler] (he/him)]

Attachment: Bug 1991226 - chore(rust): audit `foldhash` 0.1.5 → 0.2.0 r=#supply-chain-reviewers

Comment 7

[Erich Gubler [:ErichDonGubler] (he/him)]

Attachment: Bug 1991226 - chore(rust): audit `hashbrown` 0.15.2 → 0.15.5 r=#supply-chain-reviewers

Comment 8

[Erich Gubler [:ErichDonGubler] (he/him)]

Attachment: Bug 1991226 - chore(rust): audit `hashbrown` 0.15.5 → 0.16.0 r=#supply-chain-reviewers

Comment 9

[Erich Gubler [:ErichDonGubler] (he/him)]

Attachment: Bug 1991226 - chore(rust): upgrade `serde{,_derive}` 1.0.226 → 1.0.227, `serde_core` 1.0.227 r=#supply-chain-reviewers

Comment 10

[Erich Gubler [:ErichDonGubler] (he/him)]

Attachment: Bug 1991226 - chore(rust): upgrade `indexmap` 2.8.0 → 2.11.4 r=#supply-chain-reviewers

Comment 11

[Erich Gubler [:ErichDonGubler] (he/him)]

Attachment: Bug 1991226 - chore(rust): use `hashlink` fork that accepts `hashbrown` 0.16 r=#supply-chain-reviewers

Comment 12

[Erich Gubler [:ErichDonGubler] (he/him)]

Attachment: Bug 1991226 - upgrade `hashbrown` 0.15.2 → 0.16.0 r=#supply-chain-reviewers,glandium

Comment 13

[Erich Gubler [:ErichDonGubler] (he/him)]

Attachment: Bug 1991226 - chore(rust): upgrade `libc` 0.2.171 → 0.2.176 r=#supply-chain-reviewers

Comment 14

[Erich Gubler [:ErichDonGubler] (he/him)]

Attachment: Bug 1991226 - chore(rust): upgrade `iana-time-zone` 0.1.63 → 0.1.64 r=#supply-chain-reviewers

Comment 15

[Erich Gubler [:ErichDonGubler] (he/him)]

Attachment: Bug 1991226 - chore(rust): trust `hashbrown` versions published by @rust-lang-owner until 2026-09-30 r=#supply-chain-reviewers

Comment 16

[Pulsebot]

Pushed by [e-mail]:
https://github.com/mozilla-firefox/firefox/commit/86b954713928
https://hg.mozilla.org/integration/autoland/rev/b86274a0297a
chore(rust): audit `gpu-allocator` 0.27.0 → 0.28.0 r=supply-chain-reviewers
https://github.com/mozilla-firefox/firefox/commit/1a59f586fc6d
https://hg.mozilla.org/integration/autoland/rev/11a87e789c6d
chore(rust): audit `iana-time-zone` 0.1.63 → 0.1.64 r=supply-chain-reviewers
https://github.com/mozilla-firefox/firefox/commit/2963f900bb62
https://hg.mozilla.org/integration/autoland/rev/b8522d57b4e6
chore(rust): audit `foldhash` 0.1.5 → 0.2.0 r=supply-chain-reviewers

Comment 17

[amarc]

https://hg.mozilla.org/mozilla-central/rev/b86274a0297a
https://hg.mozilla.org/mozilla-central/rev/11a87e789c6d
https://hg.mozilla.org/mozilla-central/rev/b8522d57b4e6

Comment 18

[Erich Gubler [:ErichDonGubler] (he/him)]

Attachment: Bug 1991226 - chore(rust): audit `midir` 0.10.1 → 0.10.2 r=#supply-chain-reviewers

Comment 19

[Erich Gubler [:ErichDonGubler] (he/him)]

Attachment: Bug 1991226 - chore(rust): audit `ron` 0.10.1 → 0.11.0 r=#supply-chain-reviewers

Comment 20

[Erich Gubler [:ErichDonGubler] (he/him)]

Attachment: Bug 1991226 - chore(rust): upgrade `smallvec` 1.14.0 → 1.15.1 r=#supply-chain-reviewers

Comment 21

[Pulsebot]

Pushed by [e-mail]:
https://github.com/mozilla-firefox/firefox/commit/c0215045f313
https://hg.mozilla.org/integration/autoland/rev/a8626a012b5c
chore(rust): audit `midir` 0.10.1 → 0.10.2 r=supply-chain-reviewers
https://github.com/mozilla-firefox/firefox/commit/f162335877ea
https://hg.mozilla.org/integration/autoland/rev/ce4ed9ad421f
chore(rust): audit `serde{,_derive}` 1.0.226 → 1.0.227, `serde_core` 1.0.227, trust releases by @dtolnay until 2026-10-01 r=supply-chain-reviewers
https://github.com/mozilla-firefox/firefox/commit/3440a3686e68
https://hg.mozilla.org/integration/autoland/rev/6306c3d81000
chore(rust): audit `indexmap` 2.8.0 → 2.11.4, trust versions released by @cuviper until 2026-09-30 r=supply-chain-reviewers
https://github.com/mozilla-firefox/firefox/commit/061674813353
https://hg.mozilla.org/integration/autoland/rev/99e9b05c3e2c
chore(rust): audit `libc` 0.2.171 → 0.2.176, trust versions released by @rust-lang-owner until 2026-09-30 r=supply-chain-reviewers
https://github.com/mozilla-firefox/firefox/commit/781ef15c9fc9
https://hg.mozilla.org/integration/autoland/rev/fd6168a88dd9
chore(rust): audit `hashbrown` 0.15.2 → 0.15.5 r=supply-chain-reviewers
https://github.com/mozilla-firefox/firefox/commit/5540285e8600
https://hg.mozilla.org/integration/autoland/rev/08f1251b787e
chore(rust): audit `hashbrown` 0.15.5 → 0.16.0 r=supply-chain-reviewers
https://github.com/mozilla-firefox/firefox/commit/f2d1a1a54258
https://hg.mozilla.org/integration/autoland/rev/ab758e7ac3a9
chore(rust): trust `hashbrown` versions published by @rust-lang-owner until 2026-09-30 r=supply-chain-reviewers
https://github.com/mozilla-firefox/firefox/commit/a34c4e449fb0
https://hg.mozilla.org/integration/autoland/rev/4e921b1e03c7
chore(rust): audit `ron` 0.10.1 → 0.11.0 r=supply-chain-reviewers
https://github.com/mozilla-firefox/firefox/commit/37681103ded8
https://hg.mozilla.org/integration/autoland/rev/6cbbe915e61a
chore(rust): upgrade `serde{,_derive}` 1.0.226 → 1.0.227, `serde_core` 1.0.227 r=supply-chain-reviewers

Comment 22

[Pulsebot]

Pushed by [e-mail]:
https://github.com/mozilla-firefox/firefox/commit/4af564fd1d4e
https://hg.mozilla.org/integration/autoland/rev/53c7d3e74dff
Revert "Bug 1991226 - chore(rust): upgrade `serde{,_derive}` 1.0.226 → 1.0.227, `serde_core` 1.0.227 r=supply-chain-reviewers" for causing rust vendor lint failures

Comment 23

[Sandor Molnar[:smolnar]]

Backed out for causing rust vendor lint failures

Backout link: https://hg.mozilla.org/integration/autoland/rev/53c7d3e74dff59640aac03a269d618d108b7a935

Push with failures

Failure log -> Errors occurred; new rust crates were not vendored.

Comment 24

[Pulsebot]

Pushed by [e-mail]:
https://github.com/mozilla-firefox/firefox/commit/0a52c894392c
https://hg.mozilla.org/integration/autoland/rev/38da88cee9b8
chore(rust): audit `midir` 0.10.1 → 0.10.2 r=supply-chain-reviewers
https://github.com/mozilla-firefox/firefox/commit/e7266b9d5d55
https://hg.mozilla.org/integration/autoland/rev/512d31147456
chore(rust): audit `serde{,_derive}` 1.0.226 → 1.0.227, `serde_core` 1.0.227, trust releases by @dtolnay until 2026-10-01 r=supply-chain-reviewers
https://github.com/mozilla-firefox/firefox/commit/c8c12daba792
https://hg.mozilla.org/integration/autoland/rev/d4a30b49de70
chore(rust): audit `indexmap` 2.8.0 → 2.11.4, trust versions released by @cuviper until 2026-09-30 r=supply-chain-reviewers
https://github.com/mozilla-firefox/firefox/commit/5fb029b1413e
https://hg.mozilla.org/integration/autoland/rev/efeacf516507
chore(rust): audit `libc` 0.2.171 → 0.2.176, trust versions released by @rust-lang-owner until 2026-09-30 r=supply-chain-reviewers
https://github.com/mozilla-firefox/firefox/commit/6b1090c5d05d
https://hg.mozilla.org/integration/autoland/rev/8b2e16fa937b
chore(rust): audit `hashbrown` 0.15.2 → 0.15.5 r=supply-chain-reviewers
https://github.com/mozilla-firefox/firefox/commit/f1a716449e64
https://hg.mozilla.org/integration/autoland/rev/68964fb1c4ba
chore(rust): audit `hashbrown` 0.15.5 → 0.16.0 r=supply-chain-reviewers
https://github.com/mozilla-firefox/firefox/commit/0e2028570b55
https://hg.mozilla.org/integration/autoland/rev/743f8e65387f
chore(rust): trust `hashbrown` versions published by @rust-lang-owner until 2026-09-30 r=supply-chain-reviewers
https://github.com/mozilla-firefox/firefox/commit/8c0ff4f977b3
https://hg.mozilla.org/integration/autoland/rev/23edf8f1fbd0
chore(rust): audit `ron` 0.10.1 → 0.11.0 r=supply-chain-reviewers

Comment 25

[Atila Butkovits]

https://hg.mozilla.org/mozilla-central/rev/38da88cee9b8
https://hg.mozilla.org/mozilla-central/rev/512d31147456
https://hg.mozilla.org/mozilla-central/rev/d4a30b49de70
https://hg.mozilla.org/mozilla-central/rev/efeacf516507
https://hg.mozilla.org/mozilla-central/rev/8b2e16fa937b
https://hg.mozilla.org/mozilla-central/rev/68964fb1c4ba
https://hg.mozilla.org/mozilla-central/rev/743f8e65387f
https://hg.mozilla.org/mozilla-central/rev/23edf8f1fbd0

Comment 26

[Pulsebot]

Pushed by [e-mail]:
https://github.com/mozilla-firefox/firefox/commit/e3fddbb624b6
https://hg.mozilla.org/integration/autoland/rev/b2b70231e660
chore(rust): upgrade `serde{,_derive}` 1.0.226 → 1.0.227, `serde_core` 1.0.227 r=supply-chain-reviewers
https://github.com/mozilla-firefox/firefox/commit/4e386236cecc
https://hg.mozilla.org/integration/autoland/rev/dd39710dbe0e
chore(rust): upgrade `indexmap` 2.8.0 → 2.11.4 r=supply-chain-reviewers
https://github.com/mozilla-firefox/firefox/commit/b781ce704ed8
https://hg.mozilla.org/integration/autoland/rev/8df4bbbb3281
chore(rust): use `hashlink` fork that accepts `hashbrown` 0.16 r=supply-chain-reviewers
https://github.com/mozilla-firefox/firefox/commit/a0a2f954aae3
https://hg.mozilla.org/integration/autoland/rev/0576f91e37e8
upgrade `hashbrown` 0.15.2 → 0.16.0 r=glandium
https://github.com/mozilla-firefox/firefox/commit/1124e606bed0
https://hg.mozilla.org/integration/autoland/rev/8e62444315e7
chore(rust): upgrade `libc` 0.2.171 → 0.2.176 r=supply-chain-reviewers
https://github.com/mozilla-firefox/firefox/commit/4ed1688c9296
https://hg.mozilla.org/integration/autoland/rev/b1327c2895d5
chore(rust): upgrade `iana-time-zone` 0.1.63 → 0.1.64 r=supply-chain-reviewers
https://github.com/mozilla-firefox/firefox/commit/a87c66f07e06
https://hg.mozilla.org/integration/autoland/rev/dec5d55a59a5
chore(rust): upgrade `smallvec` 1.14.0 → 1.15.1 r=supply-chain-reviewers

Comment 27

[agoloman]

https://hg.mozilla.org/mozilla-central/rev/b2b70231e660
https://hg.mozilla.org/mozilla-central/rev/dd39710dbe0e
https://hg.mozilla.org/mozilla-central/rev/8df4bbbb3281
https://hg.mozilla.org/mozilla-central/rev/0576f91e37e8
https://hg.mozilla.org/mozilla-central/rev/8e62444315e7
https://hg.mozilla.org/mozilla-central/rev/b1327c2895d5
https://hg.mozilla.org/mozilla-central/rev/dec5d55a59a5

Comment 28

[Erich Gubler [:ErichDonGubler] (he/him)]

I hereby declare victory over this row of data in the bug database, asserting dominance by changing its field(s) on my whim.