Merge pull request #518 from chewing/issue517

chore: bump version to 0.8.0-rc.3

CMakeLists.txt

@@ -1,7 +1,7 @@
 cmake_minimum_required(VERSION 3.24.0)
 project(libchewing LANGUAGES C)
 
-set(CMAKE_PROJECT_VERSION 0.8.0-rc.2)
+set(CMAKE_PROJECT_VERSION 0.8.0-rc.3)
 set(LIBCHEWING_VERSION ${CMAKE_PROJECT_VERSION})
 set(PACKAGE_VERSION ${CMAKE_PROJECT_VERSION})
 set(LIBCHEWING_BINARY_VERSION 1.0.0)

Cargo.toml

@@ -3,7 +3,7 @@ name = "chewing"
 description = "The Chewing (酷音) intelligent Zhuyin input method."
 documentation = "https://docs.rs/chewing"
 license = "LGPL-2.1-or-later"
-version = "0.8.0-beta.2"
+version = "0.8.0-beta.3"
 rust-version = "1.70"
 edition = "2021"
 

capi/Cargo.toml

@@ -2,15 +2,15 @@
 name = "chewing_capi"
 description = "The Chewing (酷音) intelligent Zhuyin input method."
 license = "LGPL-2.1-or-later"
-version = "0.8.0-beta.2"
+version = "0.8.0-beta.3"
 rust-version = "1.70"
 edition = "2021"
 
 [lib]
 crate-type = ["rlib", "staticlib"]
 
 [dependencies]
-chewing = { version = "0.8.0-beta.2", path = ".." }
+chewing = { version = "0.8.0-beta.3", path = ".." }
 env_logger = { version = ">= 0.10.2", default-features = false }
 log = { workspace = true }
 

doc/chewing-cli.1

@@ -1,6 +1,6 @@
 .ie \n(.g .ds Aq \(aq
 .el .ds Aq '
-.TH chewing-cli 1  "chewing-cli 0.8.0-beta.2" 
+.TH chewing-cli 1  "chewing-cli 0.8.0-beta.3" 
 .SH NAME
 chewing\-cli \- Tools of the Chewing (酷音) intelligent Zhuyin input method.
 .SH SYNOPSIS
@@ -25,4 +25,4 @@ Display information about the dictionary
 chewing\-cli\-dump(1)
 Dump the dictionary entries into tsi.src formatted stream
 .SH VERSION
-v0.8.0\-beta.2
+v0.8.0\-beta.3

fuzzer/Cargo.toml

@@ -6,7 +6,7 @@ edition = "2021"
 # See more keys and their definitions at https://doc.rust-lang.org/cargo/reference/manifest.html
 
 [dependencies]
-chewing = { version = "0.8.0-beta.2", path = ".." }
-chewing_capi = { version = "0.8.0-beta.2", path = "../capi" }
+chewing = { version = "0.8.0-beta.3", path = ".." }
+chewing_capi = { version = "0.8.0-beta.3", path = "../capi" }
 log = "0.4.21"
 env_logger = { version = ">= 0.10.2", default-features = false }

tests/testhelper/Cargo.toml

@@ -7,7 +7,7 @@ edition = "2021"
 crate-type = ["cdylib"]
 
 [dependencies]
-chewing = { version = "0.8.0-beta.2", path = "../.." }
+chewing = { version = "0.8.0-beta.3", path = "../.." }
 
 [features]
 sqlite = ["chewing/sqlite"]

tools/Cargo.toml

@@ -2,12 +2,12 @@
 name = "chewing-cli"
 description = "Tools of the Chewing (酷音) intelligent Zhuyin input method."
 license = "LGPL-2.1-or-later"
-version = "0.8.0-beta.2"
+version = "0.8.0-beta.3"
 edition = "2021"
 
 [dependencies]
 anyhow = "1.0.0"
-chewing = { version = "0.8.0-beta.2", path = "..", features = ["sqlite"] }
+chewing = { version = "0.8.0-beta.3", path = "..", features = ["sqlite"] }
 clap = { version = ">= 4.4.18", features = ["derive"] }
 clap_mangen = { version = "0.2.20", optional = true }
 

vet/config.toml

@@ -92,11 +92,3 @@ criteria = "safe-to-deploy"
 [[exemptions.wasi]]
 version = "0.11.0+wasi-snapshot-preview1"
 criteria = "safe-to-deploy"
-
-[[exemptions.zerocopy]]
-version = "0.7.32"
-criteria = "safe-to-deploy"
-
-[[exemptions.zerocopy-derive]]
-version = "0.7.32"
-criteria = "safe-to-deploy"

vet/imports.lock

@@ -1,6 +1,14 @@
 
 # cargo-vet imports lock
 
+[[unpublished.chewing]]
+version = "0.8.0-beta.3"
+audited_as = "0.8.0-beta.2"
+
+[[unpublished.chewing-cli]]
+version = "0.8.0-beta.3"
+audited_as = "0.8.0-beta.2"
+
 [[publisher.anstream]]
 version = "0.6.13"
 when = "2024-02-27"
@@ -473,3 +481,23 @@ criteria = "safe-to-deploy"
 delta = "0.4.18 -> 0.4.20"
 notes = "Only cfg attribute and internal macro changes and module refactorings"
 aggregated-from = "https://raw.githubusercontent.com/mozilla/glean/main/supply-chain/audits.toml"
+
+[[audits.mozilla.audits.zerocopy]]
+who = "Alex Franchuk <afranchuk@mozilla.com>"
+criteria = "safe-to-deploy"
+version = "0.7.32"
+notes = """
+This crate is `no_std` so doesn't use any side-effectful std functions. It
+contains quite a lot of `unsafe` code, however. I verified portions of this. It
+also has a large, thorough test suite. The project claims to run tests with
+Miri to have stronger soundness checks, and also claims to use formal
+verification tools to prove correctness.
+"""
+aggregated-from = "https://hg.mozilla.org/mozilla-central/raw-file/tip/supply-chain/audits.toml"
+
+[[audits.mozilla.audits.zerocopy-derive]]
+who = "Alex Franchuk <afranchuk@mozilla.com>"
+criteria = "safe-to-deploy"
+version = "0.7.32"
+notes = "Clean, safe macros for zerocopy."
+aggregated-from = "https://hg.mozilla.org/mozilla-central/raw-file/tip/supply-chain/audits.toml"