iotaledger / iota / 25470955398
63%

DEFAULT BRANCH: develop
Ran
Jobs 1
Files 1212
Run time 2min
Badge
Embed ▾
README BADGES
x

If you need to use a raster PNG badge, change the '.svg' to '.png' in the link

Markdown

Textile

RDoc

HTML

Rst
coverage: 63.076% (-0.09%) from 63.167%
25470955398

push

github

web-flow 
fix: cargo deny (#11353)

## Summary

Brings the workspace back into compliance with `cargo deny` by removing
the AWS SDK's deprecated `rustls` feature, dropping `russh`'s `rsa`
feature in the AWS orchestrator to dodge a broken pre-release crate
chain, bumping `lru`, and cleaning up `deny.toml`.

## Changes

### `deny.toml` cleanup
Removed entries whose underlying dependencies no longer appear in the
graph:
- Dropped the `RUSTSEC-2025-0056` (adler unmaintained) advisory ignore.
- Dropped the `Unicode-DFS-2016` license allowance.
- Dropped the `owo-colors v3.5` `skip-tree` entry.
- Dropped the `github.com/bmwill/openapiv3.git` git source allowance.
- Added `Apache-2.0 WITH LLVM-exception` to the allowed licenses (newly
pulled in by the updated dependency graph).

Silenced the remaining duplicate-version warnings:
- `skip-tree`: `ml-kem` (russh pins old `hybrid-array`); `cynic-parser`
(old `logos`, `logos-codegen`, `logos-derive`).
- `skip`: `prost-build = 0.13.5` (build-only, via `iota-bigtable`'s
`tonic-build`); `toml = 0.7.8` (in-tree usage; deduplication would need
a workspace-wide bump).

### AWS SDK: drop deprecated `rustls` feature
The `rustls` feature on `aws-sdk-*` crates pulls in an outdated `rustls`
that trips cargo deny. Replaced it with an explicit
`aws-smithy-http-client` HTTPS client configured for `rustls-ring`,
wired in via `.http_client(...)` on the AWS config builder.

Workspace dependency updates:
- `aws-sdk-dynamodb`, `aws-sdk-ec2`, `aws-sdk-kms`: `rustls` feature
removed.
- `aws-smithy-http-client = "1.1"` added with `rustls-ring`.

### `iota-aws-orchestrator`: drop russh's `rsa` feature
The default russh feature set pulls in `rsa-0.10.0-rc.12`, which was
written against `pkcs8 = "0.11.0-rc.8"`. Cargo resolves the released
`pkcs8 0.11.0` to satisfy that and `pkcs8::Error::KeyMalformed` changed
shape between rc.8 and the release, breaking compilation.

Trade-off: russh's `rsa` feature gates RSA SSH key parsing (it pulls
`ssh-key/rsa... (continued)

5 of 38 new or added lines in 6 files covered. (13.16%)

2983 existing lines in 83 files now uncovered.

155373 of 246325 relevant lines covered (63.08%)

442096.25 hits per line

Uncovered Changes

Lines Coverage ∆ File
9
37.65
 -0.51% crates/iota/src/keytool.rs
6
0.0
 0.0% crates/iota-aws-orchestrator/src/client/aws.rs
6
0.0
 0.0% crates/iota-data-ingestion/src/progress_store.rs
6
0.0
 0.0% crates/iota-data-ingestion/src/workers/kv_store.rs
6
0.0
 0.0% crates/iota-rest-kv/src/aws.rs

Coverage Regressions

Lines Coverage ∆ File
536
41.2
 0.3% crates/iota-package-resolver/src/lib.rs
282
81.9
 -0.23% crates/iota-types/src/transaction.rs
262
60.06
 -0.18% crates/iota-json-rpc-types/src/iota_transaction.rs
237
69.54
 -0.04% crates/iota/src/client_commands.rs
235
43.79
 1.54% crates/iota-types/src/iota_sdk_types_conversions.rs
229
0.0
 0.0% crates/iota-core/src/generate_format.rs
109
80.37
 -0.31% crates/iota-core/src/authority_server.rs
92
78.62
 -1.46% crates/iota-types/src/object.rs
79
93.55
 0.18% iota-execution/latest/iota-adapter/src/programmable_transactions/execution.rs
60
92.37
 -0.01% iota-execution/latest/iota-adapter/src/programmable_transactions/context.rs
51
0.0
 0.0% crates/iota-graphql-rpc/src/types/dynamic_field.rs
51
82.48
 0.0% crates/iota-types/src/messages_consensus.rs
40
32.19
 0.68% crates/iota-graphql-rpc/src/types/move_type.rs
40
78.79
 0.04% iota-execution/latest/iota-move-natives/src/object_runtime/object_store.rs
38
89.42
 5.24% crates/iota-types/src/base_types.rs
36
89.71
 0.1% iota-execution/latest/iota-move-natives/src/object_runtime/mod.rs
34
0.0
 0.0% crates/iota-replay/src/displays/transaction_displays.rs
31
83.92
 -1.04% crates/iota-types/src/auth_context/fields_v1.rs
28
91.92
 0.0% crates/iota-core/src/consensus_handler.rs
27
0.0
 0.0% crates/iota-open-rpc/src/examples.rs
24
73.71
 -4.64% crates/iota-grpc-client/src/api/ledger/checkpoints.rs
23
0.0
 0.0% crates/iota-benchmark/src/workloads/abstract_account/payload.rs
22
0.0
 0.0% crates/iota-graphql-rpc/src/types/transaction_block_kind/programmable.rs
22
83.84
 0.0% crates/iota-transactional-test-runner/src/test_adapter.rs
21
91.66
 0.01% crates/iota-core/src/authority/authority_per_epoch_store.rs
21
60.19
 0.0% crates/iota/src/signing.rs
18
93.45
 -0.04% crates/iota-transactional-test-runner/src/programmable_transaction_test_parser/parser.rs
18
75.29
 1.88% crates/iota-types/src/iota_serde.rs
17
89.31
 0.77% crates/iota-types/src/move_authenticator.rs
15
69.57
 -0.04% crates/iota-core/src/grpc_indexes.rs
15
76.63
 -0.19% crates/test-cluster/src/lib.rs
14
97.08
 0.01% crates/iota-genesis-builder/src/stardust/migration/executor.rs
14
91.16
 -0.28% crates/iota-protocol-config/src/lib.rs
13
0.0
 0.0% crates/iota-replay/src/fuzz_mutations/shuffle_command_inputs.rs
13
80.0
 0.83% crates/iota-single-node-benchmark/src/mock_storage.rs
13
93.78
 -0.01% iota-execution/latest/iota-move-natives/src/test_scenario.rs
12
83.01
 -3.85% crates/iota-grpc-types/src/proto/generated/iota.grpc.v1.ledger_service.accessors.rs
11
65.15
 -16.67% crates/iota-stardust-types/src/block/output/token_scheme/simple.rs
10
81.82
 -15.15% crates/iota-grpc-client/src/api/execution/execute.rs
10
37.68
 -14.49% crates/iota-types/src/messages_grpc.rs
8
0.0
 0.0% crates/iota-analytics-indexer/src/handlers/df_handler.rs
8
72.22
 -11.11% crates/iota-config/src/transaction_deny_config.rs
8
15.49
 -11.27% crates/iota-grpc-types/src/proto/iota/grpc/v1/transaction_execution_service.rs
8
93.48
 -0.55% crates/starfish/core/src/transactions_synchronizer.rs
8
93.42
 0.56% iota-execution/latest/iota-move-natives/src/dynamic_field.rs
7
71.47
 -2.02% crates/iota-transaction-builder/src/utils.rs
7
77.31
 -0.19% iota-execution/latest/iota-move-natives/src/config.rs
6
78.92
 -1.47% crates/iota-core/src/storage.rs
5
45.54
 -4.95% crates/iota-json-rpc-types/src/object_changes.rs
5
77.37
 1.09% crates/iota-sdk/src/wallet_context.rs
5
91.56
 0.0% crates/iota-types/src/lib.rs
5
94.87
 0.02% crates/iota-types/src/programmable_transaction_builder.rs
5
65.47
 -1.05% crates/iota-types/src/storage/shared_in_memory_store.rs
4
60.0
 -3.48% crates/iota-grpc-types/src/proto/generated/iota.grpc.v1.state_service.accessors.rs
4
94.05
 -0.21% crates/iota-json-rpc/src/balance_changes.rs
4
53.69
 0.71% crates/iota-json-rpc-types/src/iota_object.rs
4
53.24
 0.0% crates/iota-sdk/src/apis/read.rs
4
54.62
 -3.08% crates/iota-stardust-types/src/block/output/basic.rs
4
60.84
 -2.41% crates/iota-stardust-types/src/block/output/nft.rs
4
85.64
 0.0% crates/iota-transaction-builder/src/lib.rs
3
81.75
 -0.75% crates/iota-config/src/genesis.rs
3
97.69
 0.05% crates/iota-core/src/transaction_input_loader.rs
3
49.56
 -2.65% crates/iota-genesis-builder/src/stardust/types/snapshot.rs
3
13.56
 0.0% crates/iota-grpc-client/src/api/mod.rs
3
65.45
 -1.36% crates/iota-json-rpc/src/authority_state.rs
3
19.61
 -5.88% crates/iota-stardust-types/src/block/address/mod.rs
3
20.9
 -1.69% crates/iota-stardust-types/src/block/output/mod.rs
3
66.67
 -33.33% crates/iota-types/src/clock.rs
3
97.96
 -2.04% crates/iota-types/src/mock_checkpoint_builder.rs
3
80.37
 -0.93% crates/iota-types/src/multisig.rs
2
99.61
 0.03% crates/iota-core/src/authority/shared_object_version_manager.rs
2
78.69
 -3.28% crates/iota-core/src/traffic_controller/nodefw_test_server.rs
2
91.98
 -0.84% crates/iota-http/src/lib.rs
2
66.67
 -4.17% crates/iota-network-stack/src/anemo_ext.rs
1
86.11
 0.0% crates/iota-cluster-test/src/test_case/native_transfer_test.rs
1
33.75
 -1.13% crates/iota-indexer/src/models/objects.rs
1
89.03
 0.0% crates/iota-network/src/discovery/mod.rs
1
37.65
 -0.51% crates/iota/src/keytool.rs
1
90.58
 -0.66% crates/iota-transaction-checks/src/deny.rs
1
90.43
 -0.4% crates/iota-types/src/auth_context/mod.rs
1
93.94
 -0.07% crates/starfish/core/src/authority_node.rs
1
80.0
 -0.31% crates/starfish/core/src/core_thread.rs
1
96.42
 -0.03% crates/starfish/core/src/dag_state.rs
Jobs
ID Job ID Ran Files Coverage
1 nextest+simtest - 25470955398.1 1212
63.08
 GitHub Action Run
Source Files on build 25470955398