alarsyo
/
lohr
1
0
Fork 0
Code Issues Pull Requests Projects Releases Wiki Activity
lohr/Cargo.toml

35 lines
831 B
TOML
Raw Normal View History

Initial commit
2021-03-27 10:42:49 +01:00
[package]
name = "lohr"
lohr: v0.4.5
2023-12-12 15:46:33 +01:00
version = "0.4.5"
Initial commit
2021-03-27 10:42:49 +01:00
authors = ["Antoine Martin <antoine@alarsyo.net>"]
edition = "2018"
license = "Apache-2.0 OR MIT"
description = "A Git mirroring daemon"
cargo: add repo and homepage metadata
2021-03-30 01:08:55 +02:00
homepage = "https://github.com/alarsyo/lohr"
repository = "https://github.com/alarsyo/lohr"
lohr: upgrade to Rocket v0.5.0-rc.1
2021-06-10 05:36:39 +02:00
resolver = "2"
Initial commit
2021-03-27 10:42:49 +01:00
# See more keys and their definitions at https://doc.rust-lang.org/cargo/reference/manifest.html
[dependencies]
setup basic app
2021-03-29 02:01:53 +02:00
anyhow = "1.0.40"
lohr: validate webhook signature Previously lohr was unusable in a production setting, anyone could forge a malicious webhook and either: - mirror a private repo of yours to another remote they own - wipe a repo of yours by forcing mirroring from an empty mirror This is no longer the case!
2021-03-30 11:23:09 +02:00
hex = "0.4.3"
hmac = "0.10.1"
setup basic app
2021-03-29 02:01:53 +02:00
log = "0.4.14"
job: add processing blacklist to global config
2021-03-30 18:11:36 +02:00
regex = "1"
setup basic app
2021-03-29 02:01:53 +02:00
serde = { version = "1.0.125", features = [ "derive" ] }
lohr: validate webhook signature Previously lohr was unusable in a production setting, anyone could forge a malicious webhook and either: - mirror a private repo of yours to another remote they own - wipe a repo of yours by forcing mirroring from an empty mirror This is no longer the case!
2021-03-30 11:23:09 +02:00
serde_json = "1.0.64"
job: add processing blacklist to global config
2021-03-30 18:11:36 +02:00
serde_regex = "1.1.0"
lohr: add default and additional remotes Co-authored-by: Antoine Martin <antoine@alarsyo.net>
2021-03-29 20:52:04 +02:00
serde_yaml = "0.8.17"
lohr: validate webhook signature Previously lohr was unusable in a production setting, anyone could forge a malicious webhook and either: - mirror a private repo of yours to another remote they own - wipe a repo of yours by forcing mirroring from an empty mirror This is no longer the case!
2021-03-30 11:23:09 +02:00
sha2 = "0.9.3"
cargo: try to reduce number of dependencies serde_regex unconditionally uses all features of the regex crate, which prevents optimizing the dependency graph further
2021-03-30 23:32:07 +02:00
[dependencies.rocket]
cargo: bump rocket to v0.5
2023-12-12 15:36:56 +01:00
version = "0.5.0"
cargo: try to reduce number of dependencies serde_regex unconditionally uses all features of the regex crate, which prevents optimizing the dependency graph further
2021-03-30 23:32:07 +02:00
# don't need private-cookies
default-features = false
[dependencies.clap]
version = "2.33.3"
# no need for suggestions or color with only one argument
default-features = false