chore(supply-chain): fix cargo vet on main (fmt + zip 9.0.4 exemption)

Merged
BN
8d ago
+5-5

Supply chain audit has been failing on main (e.g. run on 301d823d, step cargo vet).

Two causes, reproduced locally with cargo vet --locked on 6be5967e:

  1. [[exemptions.listenfd]] was out of alphabetical order, so the store was 'not correctly formatted' (cargo vet fmt). Introduced by e06c58ef (socket activation deps, [skip ci], so it never ran CI).
  2. Behind that, zip 9.0.4 had no audit/exemption: the existing exemption still named 8.6.0.

Fix: cargo vet fmt, and move the zip exemption to 9.0.4 (safe-to-deploy, same convention as the existing batch exemptions #571/#583/#613).

Verified: cargo vet --locked -> Vetting Succeeded. Note this is an exemption, not an audit of zip 9.x.

Devin Review

Summary by cubic

Fixes cargo vet failing on main so the supply-chain audit passes again.

  • Reorders the listenfd exemption into alphabetical order to satisfy cargo vet fmt.
  • Bumps the zip exemption from 8.6.0 to 9.0.4; this is an exemption, not a new audit of zip 9.x.