mirror of
https://github.com/outbackdingo/firezone.git
synced 2026-01-27 10:18:54 +00:00
9b85034b0c
Bumps [etherparse](https://github.com/JulianSchmid/etherparse) from 0.17.0 to 0.19.0. <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/JulianSchmid/etherparse/releases">etherparse's releases</a>.</em></p> <blockquote> <h2>v0.19.0 Add basic ICMPv6 Neighbor Discovery Support</h2> <h2>What's Changed</h2> <ul> <li>feat: add ICMPv6 neighbour solicitation by <a href="https://github.com/thomaseizinger"><code>@thomaseizinger</code></a> in <a href="https://redirect.github.com/JulianSchmid/etherparse/pull/129">JulianSchmid/etherparse#129</a></li> <li>Minor fixups for ICMPv6 NeighborSolicitation & NeighborAdvertisement & Add RouterSolicitation & RouterAdvertisement & Redirect by <a href="https://github.com/JulianSchmid"><code>@JulianSchmid</code></a> in <a href="https://redirect.github.com/JulianSchmid/etherparse/pull/130">JulianSchmid/etherparse#130</a></li> </ul> <h2>New Contributors</h2> <ul> <li><a href="https://github.com/thomaseizinger"><code>@thomaseizinger</code></a> made their first contribution in <a href="https://redirect.github.com/JulianSchmid/etherparse/pull/129">JulianSchmid/etherparse#129</a></li> </ul> <p><strong>Full Changelog</strong>: <a href="https://github.com/JulianSchmid/etherparse/compare/v0.18.2...v0.19.0">https://github.com/JulianSchmid/etherparse/compare/v0.18.2...v0.19.0</a></p> <h2>v0.18.2 Add core::error::Error implementation to non_std build</h2> <h2>What's Changed</h2> <ul> <li>Implement core::error::Error for the error types by <a href="https://github.com/xyzzyz"><code>@xyzzyz</code></a> in <a href="https://redirect.github.com/JulianSchmid/etherparse/pull/127">JulianSchmid/etherparse#127</a></li> <li>Increment version 0.18.2 by <a href="https://github.com/JulianSchmid"><code>@JulianSchmid</code></a> in <a href="https://redirect.github.com/JulianSchmid/etherparse/pull/128">JulianSchmid/etherparse#128</a></li> </ul> <h2>New Contributors</h2> <ul> <li><a href="https://github.com/xyzzyz"><code>@xyzzyz</code></a> made their first contribution in <a href="https://redirect.github.com/JulianSchmid/etherparse/pull/127">JulianSchmid/etherparse#127</a></li> </ul> <p><strong>Full Changelog</strong>: <a href="https://github.com/JulianSchmid/etherparse/compare/v0.18.1...v0.18.2">https://github.com/JulianSchmid/etherparse/compare/v0.18.1...v0.18.2</a></p> <h2>v0.18.1 Add LaxPacketHeader:: from_linux_sll</h2> <h2>What's Changed</h2> <ul> <li>Add from_linux_sll for LaxPacketHeaders by <a href="https://github.com/shu-kitamura"><code>@shu-kitamura</code></a> in <a href="https://redirect.github.com/JulianSchmid/etherparse/pull/125">JulianSchmid/etherparse#125</a></li> </ul> <h2>New Contributors</h2> <ul> <li><a href="https://github.com/shu-kitamura"><code>@shu-kitamura</code></a> made their first contribution in <a href="https://redirect.github.com/JulianSchmid/etherparse/pull/125">JulianSchmid/etherparse#125</a></li> </ul> <p><strong>Full Changelog</strong>: <a href="https://github.com/JulianSchmid/etherparse/compare/v0.18.0...v0.18.1">https://github.com/JulianSchmid/etherparse/compare/v0.18.0...v0.18.1</a></p> <h2>v0.18.0 MACsec Support & ECN+DSCP Support for IPv6</h2> <h2>What are the major changes?</h2> <ul> <li>Support for MACsec (IEEE 802.1AE)</li> <li>The <code>vlan</code> field in <code>SlicedPacket</code>, <code>LaxSlicedPacket</code>, <code>PacketHeaders</code>, <code>LaxPacketHeaders</code> has been replaced with <code>link_exts</code>.</li> <li><code>Ipv4Ecn</code> & <code>Ipv4Dscp</code> have been replaced by <code>IpEcn</code> & <code>IpDscp</code>.</li> <li><code>Ipv6Header</code> & <code>Ipv6HeaderSlice</code> now supports the reading & setting of <code>IpEcn</code> & <code>IpDscp</code> (thanks to <a href="https://github.com/baxterjo"><code>@baxterjo</code></a>)</li> <li><code>LaxEtherPayloadSlice</code> has been introduced & <code>len_source</code> added to <code>EtherPayloadSlice</code>.</li> <li><code>source_addr()</code> & <code>destination_addr()</code> methods of <code>IpSlice</code>, <code>Ipv4HeaderSlice</code>, <code>Ipv6Header</code>, <code>Ipv6HeaderSlice</code>, <code>LaxIpSlice</code> are now available in non-std mode (thanks to <a href="https://github.com/Dominaezzz"><code>@Dominaezzz</code></a>)</li> <li>Minimum supported Rust version as been configured to 1.83.0 (thanks to <a href="https://github.com/baxterjo"><code>@baxterjo</code></a>)</li> </ul> <h3>What is MACsec (IEEE 802.1AE)?</h3> <p>MACsec is a protocol that allows the signing and/or encryption of packet contents from the link layer downwards. The main difference between MACsec and IPSec is that IPSec is located after the IP header while MACsec is located above the IP header and can also encrypt the contents of the IP header itself while IPSSec does not encrypt the IP header. As such MACsec is usually used to secure local networks, while IPSec is more commonly used for VPNs and alike that leave the local network.</p> <h3>Changes needed for MACsec Support</h3> <p>Adding MACsec support required some breaking changes, specifically on how VLAN headers are handled. The MACsec SECTAG is a header that can be present in the same locations as "VLAN" headers. It has no fixed position and can be located before or after VLAN headers or after the Ethernet 2 header without a VLAN header being present at all. This invalidates the assumption <code>etherparse</code> had in previous versions that VLAN headers are always directly located after the Ethernet2 header and that if there are multiple VLAN headers that they are directly located after each other. Now there could be a MACsec header present in between VLAN headers.</p> <p>To support the different combinations of MACSec & VLAN headers the <code>vlan</code> field in <code>SlicedPacket</code>, <code>PacketHeaders</code>, <code>LaxSlicedPacket</code> & <code>LaxPacketHeaders</code> has been replaced with a <code>link_exts</code> field that can contain up to three "link extensions":</p> <!-- raw HTML omitted --> </blockquote> <p>... (truncated)</p> </details> <details> <summary>Commits</summary> <ul> <li><a href="b76f71ac3e"><code>b76f71a</code></a> Update version to 0.19.0 for etherparse</li> <li><a href="9fd5758f78"><code>9fd5758</code></a> Merge pull request <a href="https://redirect.github.com/JulianSchmid/etherparse/issues/130">#130</a> from JulianSchmid/coverage-fixups</li> <li><a href="cd9266d03f"><code>cd9266d</code></a> Add Router & Redirect ICMPv6 messages</li> <li><a href="e50e502898"><code>e50e502</code></a> Renamed neighbour_discovery.rs to neighbor_advertisement_header.rs</li> <li><a href="46b4dfbfcf"><code>46b4dfb</code></a> Further tests for coverage</li> <li><a href="d821f04435"><code>d821f04</code></a> Further tests for coverage</li> <li><a href="454c35c271"><code>454c35c</code></a> Increment version to 0.19.0</li> <li><a href="79b915aa2d"><code>79b915a</code></a> Minor fixups for ICMPv6</li> <li><a href="9e967ba879"><code>9e967ba</code></a> Merge pull request <a href="https://redirect.github.com/JulianSchmid/etherparse/issues/129">#129</a> from thomaseizinger/feat/icmpv6-neighbour-soliciation</li> <li><a href="e59fc8498b"><code>e59fc84</code></a> Add ICMPv6 neighbour solicitation</li> <li>Additional commits viewable in <a href="https://github.com/JulianSchmid/etherparse/compare/v0.17.0...v0.19.0">compare view</a></li> </ul> </details> <br /> [](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) </details> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> Co-authored-by: Thomas Eizinger <thomas@eizinger.io>
264 lines
8.5 KiB
TOML
264 lines
8.5 KiB
TOML
[workspace]
|
|
members = [
|
|
"bin-shared",
|
|
"client-ffi",
|
|
"client-shared",
|
|
"connlib/bufferpool",
|
|
"connlib/dns-over-tcp",
|
|
"connlib/dns-types",
|
|
"connlib/etherparse-ext",
|
|
"connlib/ip-packet",
|
|
"connlib/l3-tcp",
|
|
"connlib/l4-tcp-dns-server",
|
|
"connlib/l4-udp-dns-server",
|
|
"connlib/model",
|
|
"connlib/phoenix-channel",
|
|
"connlib/snownet",
|
|
"connlib/socket-factory",
|
|
"connlib/tun",
|
|
"connlib/tunnel",
|
|
"gateway",
|
|
"gui-client/src-admx-macro",
|
|
"gui-client/src-tauri",
|
|
"headless-client",
|
|
"logging",
|
|
"relay/ebpf-shared",
|
|
"relay/ebpf-turn-router",
|
|
"relay/server",
|
|
"telemetry",
|
|
"tests/fuzz",
|
|
"tests/gui-smoke-test",
|
|
"tests/http-test-server",
|
|
"tools/uniffi-bindgen",
|
|
]
|
|
|
|
resolver = "2"
|
|
|
|
[workspace.package]
|
|
license = "Apache-2.0"
|
|
edition = "2024"
|
|
|
|
[workspace.dependencies]
|
|
admx-macro = { path = "gui-client/src-admx-macro" }
|
|
anyhow = "1.0.99"
|
|
arbitrary = "1.4.2"
|
|
arboard = { version = "3.6.1", default-features = false }
|
|
async-trait = { version = "0.1", default-features = false }
|
|
atomicwrites = "0.4.4"
|
|
axum = { version = "0.8.4", default-features = false }
|
|
aya = { git = "https://github.com/aya-rs/aya" }
|
|
aya-build = { git = "https://github.com/aya-rs/aya" }
|
|
aya-ebpf = { git = "https://github.com/aya-rs/aya" }
|
|
aya-log = { git = "https://github.com/aya-rs/aya" }
|
|
aya-log-ebpf = { git = "https://github.com/aya-rs/aya" }
|
|
backoff = { version = "0.4", features = ["tokio"] }
|
|
base64 = { version = "0.22.1", default-features = false }
|
|
bimap = "0.6"
|
|
bnum = "0.13.0"
|
|
boringtun = { version = "0.6", default-features = false }
|
|
bufferpool = { path = "connlib/bufferpool" }
|
|
bytecodec = "0.5.0"
|
|
bytes = { version = "1.9.0", default-features = false }
|
|
caps = "0.5.5"
|
|
chrono = { version = "0.4", default-features = false, features = ["std", "clock", "oldtime", "serde"] }
|
|
clap = "4.5.47"
|
|
client-shared = { path = "client-shared" }
|
|
connlib-model = { path = "connlib/model" }
|
|
crossbeam-queue = "0.3.12"
|
|
dashmap = "6.1.0"
|
|
derive_more = { version = "2.0.1", default-features = false }
|
|
difference = "2.0.0"
|
|
dirs = "6.0.0"
|
|
divan = "0.1.21"
|
|
dns-lookup = "2.0"
|
|
dns-over-tcp = { path = "connlib/dns-over-tcp" }
|
|
dns-types = { path = "connlib/dns-types" }
|
|
ebpf-shared = { path = "relay/ebpf-shared" }
|
|
either = "1"
|
|
etherparse = { version = "0.19", default-features = false }
|
|
etherparse-ext = { path = "connlib/etherparse-ext" }
|
|
firezone-bin-shared = { path = "bin-shared" }
|
|
firezone-headless-client = { path = "headless-client" }
|
|
firezone-logging = { path = "logging" }
|
|
firezone-relay = { path = "relay/server" }
|
|
firezone-telemetry = { path = "telemetry" }
|
|
firezone-tunnel = { path = "connlib/tunnel" }
|
|
flume = { version = "0.11.1", features = ["async"] }
|
|
futures = { version = "0.3.31" }
|
|
futures-bounded = "0.3.0"
|
|
gat-lending-iterator = "0.1.6"
|
|
glob = "0.3.3"
|
|
hex = "0.4.3"
|
|
hex-display = "0.3.0"
|
|
hex-literal = "1.0.0"
|
|
hickory-resolver = "0.25.2"
|
|
humantime = "2.3"
|
|
ip-packet = { path = "connlib/ip-packet" }
|
|
ip_network = { version = "0.4", default-features = false }
|
|
ip_network_table = { version = "0.2", default-features = false }
|
|
itertools = "0.14"
|
|
jni = "0.21.1"
|
|
keyring = "3.6.3"
|
|
known-folders = "1.3.1"
|
|
l3-tcp = { path = "connlib/l3-tcp" }
|
|
l4-tcp-dns-server = { path = "connlib/l4-tcp-dns-server" }
|
|
l4-udp-dns-server = { path = "connlib/l4-udp-dns-server" }
|
|
libc = "0.2.175"
|
|
libfuzzer-sys = "0.4"
|
|
log = "0.4"
|
|
lru = "0.12.5"
|
|
mio = "1.0.4"
|
|
moka = "0.12.11"
|
|
native-dialog = "0.7.0"
|
|
netlink-packet-core = "0.7"
|
|
netlink-packet-route = "0.24"
|
|
network-types = "0.0.8"
|
|
nix = "0.30.1"
|
|
nu-ansi-term = "0.50"
|
|
num_cpus = "1.17.0"
|
|
once_cell = "1.21.3"
|
|
opentelemetry = "0.30.0"
|
|
opentelemetry-otlp = "0.30.0"
|
|
opentelemetry-stdout = "0.30.0"
|
|
opentelemetry_sdk = "0.30.0"
|
|
os_info = { version = "3", default-features = false }
|
|
output_vt100 = "0.1"
|
|
parking_lot = "0.12.4"
|
|
phoenix-channel = { path = "connlib/phoenix-channel" }
|
|
png = "0.17.16"
|
|
proc-macro2 = "1.0"
|
|
proptest = "1.7.0"
|
|
proptest-state-machine = "0.4.0"
|
|
quinn-udp = { version = "0.5.12", features = ["fast-apple-datapath"] }
|
|
quote = "1.0"
|
|
rand = "0.8.5"
|
|
rand_core = "0.6.4"
|
|
rangemap = "1.6.0"
|
|
reqwest = { version = "0.12.23", default-features = false }
|
|
resolv-conf = "0.7.5"
|
|
ringbuffer = "0.16.0"
|
|
roxmltree = "0.20"
|
|
rtnetlink = { version = "0.17.0", default-features = false, features = ["tokio_socket"] }
|
|
rustls = { version = "0.23.31", default-features = false, features = ["ring"] }
|
|
sadness-generator = "0.6.0"
|
|
sd-notify = "0.4.5" # This is a pure Rust re-implementation, so it isn't vulnerable to CVE-2024-3094
|
|
secrecy = "0.8"
|
|
semver = "1.0.27"
|
|
sentry = { version = "0.41.0", default-features = false }
|
|
sentry-tracing = "0.41.0"
|
|
serde = "1.0.219"
|
|
serde_json = "1.0.145"
|
|
serde_variant = "0.1.3"
|
|
serde_with = "3.14.0"
|
|
sha2 = "0.10.9"
|
|
smallvec = "1.15.1"
|
|
smbios-lib = "0.9.2"
|
|
smoltcp = { version = "0.12", default-features = false }
|
|
snownet = { path = "connlib/snownet" }
|
|
socket-factory = { path = "connlib/socket-factory" }
|
|
socket2 = { version = "0.6" }
|
|
specta = "=2.0.0-rc.22"
|
|
specta-typescript = "0.0.9"
|
|
static_assertions = "1.1.0"
|
|
str0m = { version = "0.9.0", default-features = false, features = ["sha1"] }
|
|
strum = { version = "0.27.2", features = ["derive"] }
|
|
stun_codec = "0.4.0"
|
|
subprocess = "0.2.9"
|
|
subtle = "2.5.0"
|
|
supports-color = "3.0.2"
|
|
swift-bridge = "0.1.57"
|
|
swift-bridge-build = "0.1.57"
|
|
syn = "2.0"
|
|
tauri = "2.8.4"
|
|
tauri-build = "2.4.0"
|
|
tauri-plugin-dialog = "2.4.0"
|
|
tauri-plugin-notification = "2.3.1"
|
|
tauri-plugin-opener = "2.5.0"
|
|
tauri-plugin-shell = "2.3.1"
|
|
tauri-runtime = "2.7.1"
|
|
tauri-specta = { version = "=2.0.0-rc.21", features = ["derive", "typescript"] }
|
|
tauri-utils = "2.2.0"
|
|
tempfile = "3.23.0"
|
|
test-case = "3.3.1"
|
|
test-strategy = "0.4.3"
|
|
thiserror = "2.0.16"
|
|
time = "0.3.43"
|
|
tokio = "1.47"
|
|
tokio-stream = "0.1.17"
|
|
tokio-tungstenite = "0.27.0"
|
|
tokio-util = "0.7.16"
|
|
tracing = { version = "0.1.40" }
|
|
tracing-appender = "0.2.3"
|
|
tracing-core = "0.1.34"
|
|
tracing-journald = "0.3.1"
|
|
tracing-log = "0.2.0"
|
|
tracing-macros = { git = "https://github.com/tokio-rs/tracing", branch = "v0.1.x" } # Contains `dbg!` but for `tracing`.
|
|
tracing-opentelemetry = "0.31.0"
|
|
tracing-stackdriver = "0.12.0"
|
|
tracing-subscriber = { version = "0.3.20", features = ["parking_lot"] }
|
|
trackable = "1.3.0"
|
|
tun = { path = "connlib/tun" }
|
|
uniffi = "0.29.4"
|
|
url = "2.5.2"
|
|
uuid = "1.18.1"
|
|
which = "4.4.2"
|
|
windows = "0.61.3"
|
|
windows-core = "0.61.1"
|
|
windows-implement = "0.60.0"
|
|
windows-service = "0.8.0"
|
|
winreg = "0.52.0"
|
|
zbus = "5.11.0"
|
|
zip = { version = "5", default-features = false }
|
|
|
|
[workspace.lints.clippy]
|
|
dbg_macro = "warn"
|
|
print_stdout = "warn"
|
|
print_stderr = "warn"
|
|
unnecessary_wraps = "warn"
|
|
unused_async = "warn"
|
|
wildcard_enum_match_arm = "warn" # Ensures we match on all combinations of `Poll`, preventing erroneous suspensions.
|
|
redundant_else = "warn"
|
|
redundant_clone = "warn"
|
|
unwrap_in_result = "warn"
|
|
unwrap_used = "warn"
|
|
too_many_arguments = "allow" # Don't care.
|
|
|
|
[workspace.lints.rustdoc]
|
|
private-intra-doc-links = "allow" # We don't publish any of our docs but want to catch dead links.
|
|
|
|
[patch.crates-io]
|
|
boringtun = { git = "https://github.com/firezone/boringtun", branch = "master" }
|
|
ip_network = { git = "https://github.com/JakubOnderka/ip_network", branch = "master" } # Waiting for release.
|
|
ip_network_table = { git = "https://github.com/edmonds/ip_network_table", branch = "some-useful-traits" } # For `Debug` and `Clone`
|
|
tracing-stackdriver = { git = "https://github.com/thomaseizinger/tracing-stackdriver", branch = "bump-otel-0.30" } # Waiting for release.
|
|
softbuffer = { git = "https://github.com/rust-windowing/softbuffer" } # Waiting for release.
|
|
str0m = { git = "https://github.com/algesten/str0m", branch = "main" }
|
|
moka = { git = "https://github.com/moka-rs/moka", branch = "main" } # Waiting for release.
|
|
quinn-udp = { git = "https://github.com/quinn-rs/quinn", branch = "main" } # Waiting for release.
|
|
mio = { git = "https://github.com/firezone/mio", branch = "fix/panic-invalid-state" }
|
|
|
|
# Enforce `tracing-macros` to have released `tracing` version.
|
|
[patch.'https://github.com/tokio-rs/tracing']
|
|
tracing = "0.1.41"
|
|
|
|
[profile.release]
|
|
# Full link-time optimization. Reduces binaries by up to 3x on some platforms.
|
|
lto = "fat"
|
|
|
|
# Increases the compiler's ability to produce smaller, optimized code
|
|
# at the expense of compilation time
|
|
codegen-units = 1
|
|
|
|
[profile.release.package.firezone-gui-client]
|
|
debug = "full"
|
|
split-debuginfo = "packed"
|
|
|
|
[profile.release.package.ebpf-turn-router]
|
|
debug = 2
|
|
|
|
# Override build settings just for the GUI client, so we get a pdb/dwp
|
|
# Cargo ignores profile settings if they're not in the workspace's Cargo.toml
|
|
[profile.dev.package.firezone-gui-client]
|
|
debug = "full"
|
|
split-debuginfo = "packed"
|