Bug 1829741 - wildcard audit for rust_cascade r=jschanck,supply-chain-reviewers,bholley

Differential Revision: https://phabricator.services.mozilla.com/D176345

UltraBlame original commit: 4946636cacf73f0c749e54d3ad86763b389c05cd

Author: marco-c

supply-chain/audits.toml

@@ -115,6 +115,14 @@ start = "2022-08-04"
 end = "2024-03-09"
 notes = "This code contains two cryptographic back ends.  No unsafe code is contained if the Rust `hpke` crate is used (the `rust-hpke` feature).  Using NSS (the `nss` feature) involves extensive use of bindings to the native code provided by NSS.  This interface uses wrappers that attempt to add safety to a fundamentally very dangerous library, but those wrappers have only been validated for use following the needs of this crate."
 
+[[wildcard-audits.rust_cascade]]
+who = "Dana Keeler <[email protected]>"
+criteria = "safe-to-deploy"
+user-id = 57462
+start = "2019-11-15"
+end = "2024-04-24"
+notes = "Written and maintained by the security engineering team at Mozilla."
+
 [[wildcard-audits.webdriver]]
 who = "Henrik Skupin <[email protected]>"
 criteria = "safe-to-deploy"

supply-chain/config.toml

@@ -923,10 +923,6 @@ criteria = "safe-to-deploy"
 version = "0.10.3"
 criteria = "safe-to-deploy"
 
-[[exemptions.rust_cascade]]
-version = "1.4.0"
-criteria = "safe-to-deploy"
-
 [[exemptions.rust_decimal]]
 version = "1.24.0"
 criteria = "safe-to-deploy"

supply-chain/imports.lock

@@ -64,6 +64,13 @@ user-id = 128763
 user-login = "martinthomson"
 user-name = "Martin Thomson"
 
+[[publisher.rust_cascade]]
+version = "1.5.0"
+when = "2023-04-05"
+user-id = 57462
+user-login = "mozkeeler"
+user-name = "Dana Keeler"
+
 [[audits.bytecode-alliance.audits.arbitrary]]
 who = "Nick Fitzgerald <[email protected]>"
 criteria = "safe-to-deploy"