lohr/Cargo.toml

[package]
name = "lohr"
version = "0.3.1"
authors = ["Antoine Martin <antoine@alarsyo.net>"]
edition = "2018"
license = "Apache-2.0 OR MIT"
description = "A Git mirroring daemon"
homepage = "https://github.com/alarsyo/lohr"
repository = "https://github.com/alarsyo/lohr"

# See more keys and their definitions at https://doc.rust-lang.org/cargo/reference/manifest.html

[dependencies]
anyhow = "1.0.40"
hex = "0.4.3"
hmac = "0.10.1"
log = "0.4.14"
regex = "1"
serde = { version = "1.0.125", features = [ "derive" ] }
serde_json = "1.0.64"
serde_regex = "1.1.0"
serde_yaml = "0.8.17"
sha2 = "0.9.3"

[dependencies.rocket]
version = "0.5.0-dev"
# don't need private-cookies
default-features = false

[dependencies.clap]
version = "2.33.3"
# no need for suggestions or color with only one argument
default-features = false

[patch.crates-io]
rocket = { git = "https://github.com/SergioBenitez/Rocket", rev = "2893ce754d6535e0a752586e60d7e292343016c0" }
Initial commit 2021-03-27 10:42:49 +01:00			`[package]`
			`name = "lohr"`
lohr: v0.3.1 2021-03-30 23:02:32 +02:00			`version = "0.3.1"`
Initial commit 2021-03-27 10:42:49 +01:00			`authors = ["Antoine Martin <antoine@alarsyo.net>"]`
			`edition = "2018"`
			`license = "Apache-2.0 OR MIT"`
			`description = "A Git mirroring daemon"`
cargo: add repo and homepage metadata 2021-03-30 01:08:55 +02:00			`homepage = "https://github.com/alarsyo/lohr"`
			`repository = "https://github.com/alarsyo/lohr"`
Initial commit 2021-03-27 10:42:49 +01:00
			`# See more keys and their definitions at https://doc.rust-lang.org/cargo/reference/manifest.html`

			`[dependencies]`
setup basic app 2021-03-29 02:01:53 +02:00			`anyhow = "1.0.40"`
lohr: validate webhook signature Previously lohr was unusable in a production setting, anyone could forge a malicious webhook and either: - mirror a private repo of yours to another remote they own - wipe a repo of yours by forcing mirroring from an empty mirror This is no longer the case! 2021-03-30 11:23:09 +02:00			`hex = "0.4.3"`
			`hmac = "0.10.1"`
setup basic app 2021-03-29 02:01:53 +02:00			`log = "0.4.14"`
job: add processing blacklist to global config 2021-03-30 18:11:36 +02:00			`regex = "1"`
setup basic app 2021-03-29 02:01:53 +02:00			`serde = { version = "1.0.125", features = [ "derive" ] }`
lohr: validate webhook signature Previously lohr was unusable in a production setting, anyone could forge a malicious webhook and either: - mirror a private repo of yours to another remote they own - wipe a repo of yours by forcing mirroring from an empty mirror This is no longer the case! 2021-03-30 11:23:09 +02:00			`serde_json = "1.0.64"`
job: add processing blacklist to global config 2021-03-30 18:11:36 +02:00			`serde_regex = "1.1.0"`
lohr: add default and additional remotes Co-authored-by: Antoine Martin <antoine@alarsyo.net> 2021-03-29 20:52:04 +02:00			`serde_yaml = "0.8.17"`
lohr: validate webhook signature Previously lohr was unusable in a production setting, anyone could forge a malicious webhook and either: - mirror a private repo of yours to another remote they own - wipe a repo of yours by forcing mirroring from an empty mirror This is no longer the case! 2021-03-30 11:23:09 +02:00			`sha2 = "0.9.3"`
cargo: try to reduce number of dependencies serde_regex unconditionally uses all features of the regex crate, which prevents optimizing the dependency graph further 2021-03-30 23:32:07 +02:00
			`[dependencies.rocket]`
lohr: build on rust stable Switching to Rocket's master branch (soon to be 0.5.0) allows building with a stable Rust compiler, yay! 2021-03-31 13:46:03 +02:00			`version = "0.5.0-dev"`
cargo: try to reduce number of dependencies serde_regex unconditionally uses all features of the regex crate, which prevents optimizing the dependency graph further 2021-03-30 23:32:07 +02:00			`# don't need private-cookies`
			`default-features = false`

			`[dependencies.clap]`
			`version = "2.33.3"`
			`# no need for suggestions or color with only one argument`
			`default-features = false`
lohr: build on rust stable Switching to Rocket's master branch (soon to be 0.5.0) allows building with a stable Rust compiler, yay! 2021-03-31 13:46:03 +02:00
			`[patch.crates-io]`
			`rocket = { git = "https://github.com/SergioBenitez/Rocket", rev = "2893ce754d6535e0a752586e60d7e292343016c0" }`