mirror of
https://github.com/astral-sh/uv
synced 2026-01-22 14:00:11 -05:00
This PR redacts credentials in displayed URLs. It mostly relies on a `redacted_url` function (and where possible `IndexUrl::redacted`). This is a quick way to prevent leaked credentials but it's prone to programmer error when adding new trace statements. A better follow-on would use a `RedactedUrl` type with the appropriate `Display` implementation. This would allow us to still extract credentials from the URL while displaying it securely. On the plus side, the sites where the `redacted_url` function are used serve as easy signposts for where to use the new type in a future PR. Closes #1714.
38 lines
992 B
TOML
38 lines
992 B
TOML
[package]
|
|
name = "uv-git"
|
|
version = "0.0.1"
|
|
edition = { workspace = true }
|
|
rust-version = { workspace = true }
|
|
homepage = { workspace = true }
|
|
documentation = { workspace = true }
|
|
repository = { workspace = true }
|
|
authors = { workspace = true }
|
|
license = { workspace = true }
|
|
|
|
[lib]
|
|
doctest = false
|
|
|
|
[lints]
|
|
workspace = true
|
|
|
|
[dependencies]
|
|
uv-auth = { workspace = true }
|
|
uv-cache-key = { workspace = true }
|
|
uv-fs = { workspace = true, features = ["tokio"] }
|
|
uv-git-types = { workspace = true }
|
|
uv-redacted = { workspace = true }
|
|
uv-static = { workspace = true }
|
|
uv-version = { workspace = true }
|
|
|
|
anyhow = { workspace = true }
|
|
cargo-util = { workspace = true }
|
|
dashmap = { workspace = true }
|
|
fs-err = { workspace = true, features = ["tokio"] }
|
|
reqwest = { workspace = true, features = ["blocking"] }
|
|
reqwest-middleware = { workspace = true }
|
|
thiserror = { workspace = true }
|
|
tokio = { workspace = true }
|
|
tracing = { workspace = true }
|
|
url = { workspace = true }
|
|
which = { workspace = true }
|