Skip to content

Conversation

@dependabot
Copy link

@dependabot dependabot bot commented on behalf of github Mar 8, 2024

Bumps goblin from 0.6.1 to 0.8.0.

Changelog

Sourced from goblin's changelog.

[0.8.0] - 2023-12-31 - Happy New Years!

Breaking

msrv: bumped to 1.63.0 since scroll bumped as well pe: new field added to parse options: m4b/goblin#377 pe: attribute certs now non-exhaustive: m4b/goblin#378 goblin: hint and object enum is now non-exhaustive pe: write support introduced some breaking changes, e.g., data directories array adds a tuple of usize and data directory, DosHeader has all the fields filled out, Header struct has a dos_stub field added, symbols and strings fields is made optional in Coff struct, see: m4b/goblin#361

Fixed

elf: fix documentation, thanks @​crzysdrs: m4b/goblin#374 pe: attribute certificates non-exhaustive, thanks @​RaitoBezarius: m4b/goblin#378 pe: fix authenticode parsing, thanks @​baloo: m4b/goblin#383

Added

strtab: len method added to return number of bytes of the strtab pe: absolutely epic pe write support PR, thanks @​RaitoBezarius and @​Baloo: m4b/goblin#361 pe: add coff object file support, thanks @​vadimcn, m4b/goblin#379 pe: allow toggling parsing of attribute certs, thanks @​suttonbradley: m4b/goblin#377 mach: add new mach-o constants, thanks @​keith: m4b/goblin#372

[0.7.1] - 2023-6-11

MSRV bump from log

[0.7.0] - 2023-6-11

Breaking

mach: Implement LC_NOTE, (breakage=load commands are marked non-exhaustive), thanks @​messense: m4b/goblin#342

Fixed

elf: fix is_lib detection, thanks @​m-hilgendorf: m4b/goblin#366 pe: fix out of bounds access while parsing AttributeCertificate, thanks @​anfedotoff: m4b/goblin#368

Added

pe: support basic certificates enumeration, thanks @​RaitoBezarius: m4b/goblin#354 pe: fix certificate tables parsing, thanks @​baloo: m4b/goblin#359 pe: add pe authenticode support, thanks @​baloo: m4b/goblin#362 mach: implement LC_FILESET_ENTRY, thanks @​mmaekr: m4b/goblin#369 build: add afl fuzzing support, thanks @​anfedotoff: m4b/goblin#351

Commits
  • 1b30473 build: release 0.8.0, MSRV=1.63, update changelog, add 3 new contributors
  • 8b4b1b4 pe: make sure authenticode is identical before/after signature (#383)
  • 67469bf lib: Hint and Object are now non-exhaustive
  • 6d664c0 pe: write support for PE binaries (#361)
  • 03eb434 pe: Add ParseOptions field to toggle parsing Attribute Certificates for PEs...
  • 5bddac6 pe: Attribute certificate revisions are non-exhaustive (#378)
  • 1c36668 pe: add COFF object file support (#379)
  • 83ce901 elf: Fix documentation row (#374)
  • 17a5c7c mach: Add new Mach-O constants (#372)
  • f66ef0e build: bump version to 0.7.1 due to msrv log failure, bumping our msrv to 1.6...
  • Additional commits viewable in compare view

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

Bumps [goblin](https://github.com/m4b/goblin) from 0.6.1 to 0.8.0.
- [Changelog](https://github.com/m4b/goblin/blob/master/CHANGELOG.md)
- [Commits](m4b/goblin@0.6.1...0.8.0)

---
updated-dependencies:
- dependency-name: goblin
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <[email protected]>
@dependabot dependabot bot added the dependencies Pull requests that update a dependency file label Mar 8, 2024
@dependabot @github
Copy link
Author

dependabot bot commented on behalf of github Mar 8, 2024

OK, I won't notify you again about this release, but will get in touch when a new version is available. If you'd rather skip all updates until the next major or minor version, let me know by commenting @dependabot ignore this major version or @dependabot ignore this minor version. You can also ignore all major, minor, or patch releases for a dependency by adding an ignore condition with the desired update_types to your config file.

If you change your mind, just re-open this PR and I'll resolve any conflicts on it.

@andreisilviudragnea andreisilviudragnea deleted the dependabot/cargo/evm_loader/develop/goblin-0.8.0 branch March 8, 2024 10:18
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file

Projects

None yet

Development

Successfully merging this pull request may close these issues.

4 participants