Bug 1982166 - Update zerovec to 0.11.4. r=TYLin,supply-chain-reviewers

marco-c · marco-c · commit 41d4530c9880 · 2025-08-16T03:08:18.000Z
Although imported ICU4X crates don't use truncated method in zerovec, we would like to update zerovec to fix unicode-org/icu4x#6805 as safety issue. Differential Revision: https://phabricator.services.mozilla.com/D260776 UltraBlame original commit: 1bd477f4b47912ab752a295ffbbc0d2b2eca7946
diff --git a/Cargo.lock b/Cargo.lock
diff --git a/supply-chain/audits.toml b/supply-chain/audits.toml
@@ -65679,6 +65679,56 @@ delta
 audits
 .
 zerovec
+]
+]
+who
+=
+"
+Makoto
+Kato
+<
+m_kato
+ga2
+.
+so
+-
+net
+.
+ne
+.
+jp
+>
+"
+criteria
+=
+"
+safe
+-
+to
+-
+deploy
+"
+delta
+=
+"
+0
+.
+11
+.
+3
+-
+>
+0
+.
+11
+.
+4
+"
+[
+[
+audits
+.
+zerovec
 -
 derive
 ]
diff --git a/third_party/rust/zerovec/.cargo-checksum.json b/third_party/rust/zerovec/.cargo-checksum.json
@@ -11,7 +11,7 @@ lock
 "
 :
 "
-988424429fb2a89e8dcb5286ee7a131a5f19ec1109e2150e955459c6ca964f0d
+63c5442c7d7f53cf8bee1d61b5e14e1c9340fad5790816f751e066f0bd95de7e
 "
 "
 Cargo
@@ -20,7 +20,7 @@ toml
 "
 :
 "
-94d8df18dd2a0ee5096f1657045bef7ee21d710fa05e8031bf65e491f687a76a
+5f8a2d1effdf130d7f9dbee2224af5d1f13d7872ecaa117e825d627ce29a07ee
 "
 "
 LICENSE
@@ -703,7 +703,7 @@ rs
 "
 :
 "
-8ad419017f59284429520ec5125cf737ddbb3ad89ced3e686859816932bdfbeb
+a38275ff8ee3a81e8ff8e6f3802fc46b4765ad6651a444f12ce034e5eb2b80f4
 "
 "
 src
@@ -737,6 +737,6 @@ package
 "
 :
 "
-bdbb9122ea75b11bf96e7492afb723e8a7fbe12c67417aa95e7e3d18144d37cd
+e7aa2bd55086f1ab526693ecbe444205da57e25f4489879da80635a46d90e73b
 "
 }
diff --git a/third_party/rust/zerovec/Cargo.lock b/third_party/rust/zerovec/Cargo.lock
diff --git a/third_party/rust/zerovec/Cargo.toml b/third_party/rust/zerovec/Cargo.toml
@@ -123,7 +123,7 @@ version
 .
 11
 .
-3
+4
 "
 authors
 =
diff --git a/third_party/rust/zerovec/src/zerovec/mod.rs b/third_party/rust/zerovec/src/zerovec/mod.rs
@@ -560,7 +560,7 @@ core
 cmp
 :
 :
-max
+min
 (
 max
 self

-Original file line number
+Diff line change
 audits
+.
 zerovec
 +]
 +]
 +who
 +=
 +"
 +Makoto
 +Kato
 +<
 +m_kato
 +ga2
 +.
 +so
 +-
 +net
 +.
 +ne
 +.
 +jp
 +>
 +"
 +criteria
 +=
 +"
 +safe
 +-
 +to
 +-
 +deploy
 +"
 +delta
 +=
 +"
 +0
 +.
 +11
 +.
 +3
 +-
 +>
 +0
 +.
 +11
 +.
 +4
 +"
 +[
 +[
 +audits
 +.
 +zerovec
+-
 derive
+]
Original file line number	Diff line number	Diff line change
`@@ -11,7 +11,7 @@ lock`
`11`	`11`	`"`
`12`	`12`	`:`
`13`	`13`	`"`
`14`		`-988424429fb2a89e8dcb5286ee7a131a5f19ec1109e2150e955459c6ca964f0d`
	`14`	`+63c5442c7d7f53cf8bee1d61b5e14e1c9340fad5790816f751e066f0bd95de7e`
`15`	`15`	`"`
`16`	`16`	`"`
`17`	`17`	`Cargo`
`@@ -20,7 +20,7 @@ toml`
`20`	`20`	`"`
`21`	`21`	`:`
`22`	`22`	`"`
`23`		`-94d8df18dd2a0ee5096f1657045bef7ee21d710fa05e8031bf65e491f687a76a`
	`23`	`+5f8a2d1effdf130d7f9dbee2224af5d1f13d7872ecaa117e825d627ce29a07ee`
`24`	`24`	`"`
`25`	`25`	`"`
`26`	`26`	`LICENSE`
`@@ -703,7 +703,7 @@ rs`
`703`	`703`	`"`
`704`	`704`	`:`
`705`	`705`	`"`
`706`		`-8ad419017f59284429520ec5125cf737ddbb3ad89ced3e686859816932bdfbeb`
	`706`	`+a38275ff8ee3a81e8ff8e6f3802fc46b4765ad6651a444f12ce034e5eb2b80f4`
`707`	`707`	`"`
`708`	`708`	`"`
`709`	`709`	`src`
`@@ -737,6 +737,6 @@ package`
`737`	`737`	`"`
`738`	`738`	`:`
`739`	`739`	`"`
`740`		`-bdbb9122ea75b11bf96e7492afb723e8a7fbe12c67417aa95e7e3d18144d37cd`
	`740`	`+e7aa2bd55086f1ab526693ecbe444205da57e25f4489879da80635a46d90e73b`
`741`	`741`	`"`
`742`	`742`	`}`
Original file line number	Diff line number	Diff line change
`@@ -123,7 +123,7 @@ version`
`123`	`123`	`.`
`124`	`124`	`11`
`125`	`125`	`.`
`126`		`-3`
	`126`	`+4`
`127`	`127`	`"`
`128`	`128`	`authors`
`129`	`129`	`=`
Original file line number	Diff line number	Diff line change
`@@ -560,7 +560,7 @@ core`
`560`	`560`	`cmp`
`561`	`561`	`:`
`562`	`562`	`:`
`563`		`-max`
	`563`	`+min`
`564`	`564`	`(`
`565`	`565`	`max`
`566`	`566`	`self`