Bump uniffi from 0.24.3 to 0.31.1

[dependabot]

Bumps uniffi from 0.24.3 to 0.31.1.

Changelog

Sourced from uniffi's changelog.

v0.31.1 (backend crates: v0.31.1) - (2026-04-10)

What's Fixed

• Swift: Fixed iOS crash when address sanitizer is enabled #2821
• Swift: Fixed memory link in async code #2854

All changes in v0.31.1.

v0.31.0 (backend crates: v0.31.0) - (2026-01-14)

⚠️ Breaking Changes ⚠️

• The uniffi-bindgen command no longer accepts the --lib-file argument. Instead, pass the library directly without a UDL file.
• Removed the [Swift|Kotlin|Python|Ruby]BindingGenerator types. Use uniffi::generate instead to generate these bindings.

What's Deprecated?

• BindgenCrateConfigSupplier. Use the new BindgenPaths type instead.

What's New?

• Added the uniffi::generate function. This implements the uniffi-bindgen generate command and allows it to be run programmatically.
• The --library argument of uniffi-bindgen is deprecated and no longer has an effect. uniffi-bindgen will now auto-detect when the source path is a library rather than a UDL file.
• All builtin bindings support renaming almost all of the interface (types, args, items, variants, etc) via TOML definitions - see the docs. (#2715)
• Support for methods on records and enums (#2706, #2724, #2739).
• Added the BindgenPaths type, which is the new way to find UDL and TOML data.
• Enum variants can now be renamed with the proc-macro name = "NewVariantName" attribute (#2783)
• It's now possible to build a uniffi-bindgen that doesn't depend on cargo-metadata (#2746)
• MSR is now 1.87, our CI runs against 1.90.

What's Fixed

• Kotlin: Rust enums with nested payload types are generated using the inner type’s fully qualified name, avoiding naming conflicts and allowing payloads to reuse the variant name (#2698).
• Kotlin: Enums and errors now support exporting trait methods (Display, Debug, Eq, Hash, Ord) via toString(), equals(), hashCode(), and compareTo() implementations. Flat enums only support exporting Display. (#2700).
• Kotlin: Initialization functions now have a stable ordering (#2718)
• Prevented a potential segfault when completing foreign futures (#2733)
• Swift: exporting Eq, Cmp etc would generate invalid code if the Rust name had unusual captialization (#2707).
• Fix an issue when an impl block has only async constructors (#2778)
• Fix issues parsing some #[doc(...)] attributes in exported blocks (#2777)
• Fix extracting metadata from multi-arch binary files (#2750)

... (truncated)

Commits

• ec08cf9 Changelog update for 0.31.1
• bf3350f chore: Release
• 8b3b75c chore: Release
• 75104e4 Refactor rust_future_free to use Handle::into_arc instead of `Handle::int...
• 105a6cc fix vtable
• 1c3bb28 Fix list in async-overview.md
• 08301a7 Update CHANGELOG links to point to v0.27 documentation
• d729f29 Fix broken ext_types_wrapped links in CHANGELOG.md
• afe8f3f Fix broken documentation links in current docs
• 309762f chore: Release
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

[socket-security]

Review the following changes in direct dependencies. Learn more about Socket for GitHub.

Diff	Package	Supply Chain Security	Vulnerability	Quality	Maintenance	License
	cargo/​uniffi@​0.24.3 ⏵ 0.31.1

View full report

[socket-security]

Warning

Review the following alerts detected in dependencies.

According to your organization's Security Policy, it is recommended to resolve "Warn" alerts. Learn more about Socket for GitHub.

Action	Severity	Alert  (click "▶" to expand/collapse)
Warn		License policy violation: cargo uniffi_bindgen under MPL-2.0 License: MPL-2.0 - The applicable license policy does not permit this license (5) (uniffi_bindgen-0.31.1/src/bindings/python/pipeline/interfaces.rs) License: MPL-2.0 - The applicable license policy does not permit this license (5) (uniffi_bindgen-0.31.1/src/bindings/python/pipeline/modules.rs) License: MPL-2.0 - The applicable license policy does not permit this license (5) (uniffi_bindgen-0.31.1/src/interface/object.rs) License: MPL-2.0 - The applicable license policy does not permit this license (5) (uniffi_bindgen-0.31.1/src/bindings/kotlin/gen_kotlin/enum_.rs) License: MPL-2.0 - The applicable license policy does not permit this license (5) (uniffi_bindgen-0.31.1/src/pipeline/general/objects.rs) License: MPL-2.0 - The applicable license policy does not permit this license (5) (uniffi_bindgen-0.31.1/src/bindings/python/pipeline/nodes.rs) License: MPL-2.0 - The applicable license policy does not permit this license (5) (uniffi_bindgen-0.31.1/src/bindings/python/pipeline/types.rs) License: MPL-2.0 - The applicable license policy does not permit this license (5) (uniffi_bindgen-0.31.1/src/pipeline/general/callable.rs) License: MPL-2.0 - The applicable license policy does not permit this license (5) (uniffi_bindgen-0.31.1/src/bindings/swift/gen_swift/mod.rs) License: MPL-2.0 - The applicable license policy does not permit this license (5) (uniffi_bindgen-0.31.1/src/pipeline/general/rust_future.rs) License: MPL-2.0 - The applicable license policy does not permit this license (5) (uniffi_bindgen-0.31.1/src/bindings/kotlin/gen_kotlin/variant.rs) License: MPL-2.0 - The applicable license policy does not permit this license (5) (uniffi_bindgen-0.31.1/src/pipeline/general/ffi_async_data.rs) License: MPL-2.0 - The applicable license policy does not permit this license (5) (uniffi_bindgen-0.31.1/src/scaffolding/mod.rs) License: MPL-2.0 - The applicable license policy does not permit this license (5) (uniffi_bindgen-0.31.1/src/interface/record.rs) License: MPL-2.0 - The applicable license policy does not permit this license (5) (uniffi_bindgen-0.31.1/src/pipeline/general/modules.rs) License: MPL-2.0 - The applicable license policy does not permit this license (5) (uniffi_bindgen-0.31.1/src/macro_metadata/extract.rs) License: MPL-2.0 - The applicable license policy does not permit this license (5) (uniffi_bindgen-0.31.1/src/pipeline/general/rename.rs) License: MPL-2.0 - The applicable license policy does not permit this license (5) (uniffi_bindgen-0.31.1/src/pipeline/general/ffi_types.rs) License: MPL-2.0 - The applicable license policy does not permit this license (5) (uniffi_bindgen-0.31.1/src/pipeline/general/rust_buffer.rs) License: MPL-2.0 - The applicable license policy does not permit this license (5) (uniffi_bindgen-0.31.1/src/pipeline/general/checksums.rs) License: MPL-2.0 - The applicable license policy does not permit this license (5) (uniffi_bindgen-0.31.1/src/lib.rs) License: MPL-2.0 - The applicable license policy does not permit this license (5) (uniffi_bindgen-0.31.1/src/pipeline/general/type_nodes.rs) License: MPL-2.0 - The applicable license policy does not permit this license (5) (uniffi_bindgen-0.31.1/src/bindings/python/pipeline/mod.rs) License: MPL-2.0 - The applicable license policy does not permit this license (5) (uniffi_bindgen-0.31.1/src/pipeline/initial/from_uniffi_meta.rs) License: MPL-2.0 - The applicable license policy does not permit this license (5) (uniffi_bindgen-0.31.1/src/bindings/python/pipeline/names.rs) License: MPL-2.0 - The applicable license policy does not permit this license (5) (uniffi_bindgen-0.31.1/src/bindings/python/pipeline/config.rs) License: MPL-2.0 - The applicable license policy does not permit this license (5) (uniffi_bindgen-0.31.1/src/interface/callbacks.rs) License: MPL-2.0 - The applicable license policy does not permit this license (5) (uniffi_bindgen-0.31.1/src/interface/function.rs) License: MPL-2.0 - The applicable license policy does not permit this license (5) (uniffi_bindgen-0.31.1/src/bindings/python/mod.rs) License: MPL-2.0 - The applicable license policy does not permit this license (5) (uniffi_bindgen-0.31.1/src/pipeline/general/self_types.rs) License: MPL-2.0 - The applicable license policy does not permit this license (5) (uniffi_bindgen-0.31.1/src/interface/enum_.rs) License: MPL-2.0 - The applicable license policy does not permit this license (5) (uniffi_bindgen-0.31.1/src/bindings/python/pipeline/error.rs) License: MPL-2.0 - The applicable license policy does not permit this license (5) (uniffi_bindgen-0.31.1/src/pipeline/general/sort.rs) License: MPL-2.0 - The applicable license policy does not permit this license (5) (uniffi_bindgen-0.31.1/src/bindings/kotlin/gen_kotlin/primitives.rs) License: MPL-2.0 - The applicable license policy does not permit this license (5) (uniffi_bindgen-0.31.1/src/cargo_metadata.rs) License: MPL-2.0 - The applicable license policy does not permit this license (5) (uniffi_bindgen-0.31.1/src/interface/universe.rs) License: MPL-2.0 - The applicable license policy does not permit this license (5) (uniffi_bindgen-0.31.1/src/bindings/python/pipeline/callback_interfaces.rs) License: MPL-2.0 - The applicable license policy does not permit this license (5) (uniffi_bindgen-0.31.1/src/pipeline/general/default.rs) License: MPL-2.0 - The applicable license policy does not permit this license (5) (uniffi_bindgen-0.31.1/src/macro_metadata/mod.rs) License: MPL-2.0 - The applicable license policy does not permit this license (5) (uniffi_bindgen-0.31.1/src/bindgen_paths.rs) License: MPL-2.0 - The applicable license policy does not permit this license (5) (uniffi_bindgen-0.31.1/src/pipeline/general/records.rs) License: MPL-2.0 - The applicable license policy does not permit this license (5) (uniffi_bindgen-0.31.1/src/bindings/mod.rs) License: MPL-2.0 - The applicable license policy does not permit this license (5) (uniffi_bindgen-0.31.1/src/interface/visit_mut.rs) License: MPL-2.0 - The applicable license policy does not permit this license (5) (uniffi_bindgen-0.31.1/src/interface/ffi.rs) License: MPL-2.0 - The applicable license policy does not permit this license (5) (uniffi_bindgen-0.31.1/src/bindings/swift/gen_swift/callback_interface.rs) License: MPL-2.0 - The applicable license policy does not permit this license (5) (uniffi_bindgen-0.31.1/src/pipeline/general/type_definitions_from_api.rs) License: MPL-2.0 - The applicable license policy does not permit this license (5) (uniffi_bindgen-0.31.1/src/bindings/swift/gen_swift/enum_.rs) License: MPL-2.0 - The applicable license policy does not permit this license (5) (uniffi_bindgen-0.31.1/src/bindings/kotlin/gen_kotlin/object.rs) License: MPL-2.0 - The applicable license policy does not permit this license (5) (uniffi_bindgen-0.31.1/src/bindings/python/pipeline/ffi_types.rs) License: MPL-2.0 - The applicable license policy does not permit this license (5) (uniffi_bindgen-0.31.1/src/pipeline/general/nodes.rs) License: MPL-2.0 - The applicable license policy does not permit this license (5) (uniffi_bindgen-0.31.1/src/bindings/kotlin/mod.rs) License: MPL-2.0 - The applicable license policy does not permit this license (5) (uniffi_bindgen-0.31.1/src/bindings/kotlin/gen_kotlin/record.rs) License: MPL-2.0 - The applicable license policy does not permit this license (5) (uniffi_bindgen-0.31.1/src/bindings/python/pipeline/default.rs) License: MPL-2.0 - The applicable license policy does not permit this license (5) (uniffi_bindgen-0.31.1/src/bindings/kotlin/gen_kotlin/compounds.rs) License: MPL-2.0 - The applicable license policy does not permit this license (5) (uniffi_bindgen-0.31.1/src/interface/mod.rs) License: MPL-2.0 - The applicable license policy does not permit this license (5) (uniffi_bindgen-0.31.1/src/macro_metadata/ci.rs) License: MPL-2.0 - The applicable license policy does not permit this license (5) (uniffi_bindgen-0.31.1/src/bindings/swift/gen_swift/primitives.rs) License: MPL-2.0 - The applicable license policy does not permit this license (5) (uniffi_bindgen-0.31.1/src/bindings/python/filters.rs) License: MPL-2.0 - The applicable license policy does not permit this license (5) (uniffi_bindgen-0.31.1/src/bindings/kotlin/test.rs) License: MPL-2.0 - The applicable license policy does not permit this license (5) (uniffi_bindgen-0.31.1/src/loader.rs) License: MPL-2.0 - The applicable license policy does not permit this license (5) (uniffi_bindgen-0.31.1/src/pipeline/initial/nodes.rs) License: MPL-2.0 - The applicable license policy does not permit this license (5) (uniffi_bindgen-0.31.1/src/pipeline/mod.rs) License: MPL-2.0 - The applicable license policy does not permit this license (5) (uniffi_bindgen-0.31.1/src/bindings/swift/gen_swift/compounds.rs) License: MPL-2.0 - The applicable license policy does not permit this license (5) (uniffi_bindgen-0.31.1/src/pipeline/general/ffi_functions.rs) License: MPL-2.0 - The applicable license policy does not permit this license (5) (uniffi_bindgen-0.31.1/src/bindings/swift/gen_swift/object.rs) License: MPL-2.0 - The applicable license policy does not permit this license (5) (uniffi_bindgen-0.31.1/src/pipeline/initial/mod.rs) License: MPL-2.0 - The applicable license policy does not permit this license (5) (uniffi_bindgen-0.31.1/src/library_mode.rs) License: MPL-2.0 - The applicable license policy does not permit this license (5) (uniffi_bindgen-0.31.1/src/bindings/swift/gen_swift/miscellany.rs) License: MPL-2.0 - The applicable license policy does not permit this license (5) (uniffi_bindgen-0.31.1/src/bindings/kotlin/gen_kotlin/miscellany.rs) License: MPL-2.0 - The applicable license policy does not permit this license (5) (uniffi_bindgen-0.31.1/src/bindings/kotlin/gen_kotlin/custom.rs) License: MPL-2.0 - The applicable license policy does not permit this license (5) (uniffi_bindgen-0.31.1/src/pipeline/general/callback_interfaces.rs) License: MPL-2.0 - The applicable license policy does not permit this license (5) (uniffi_bindgen-0.31.1/Cargo.toml) License: MPL-2.0 - The applicable license policy does not permit this license (5) (uniffi_bindgen-0.31.1/src/bindings/python/test.rs) License: MPL-2.0 - The applicable license policy does not permit this license (5) (uniffi_bindgen-0.31.1/src/pipeline/general/enums.rs) License: MPL-2.0 - The applicable license policy does not permit this license (5) (uniffi_bindgen-0.31.1/src/bindings/swift/mod.rs) License: MPL-2.0 - The applicable license policy does not permit this license (5) (uniffi_bindgen-0.31.1/src/bindings/kotlin/gen_kotlin/mod.rs) License: MPL-2.0 - The applicable license policy does not permit this license (5) (uniffi_bindgen-0.31.1/src/bindings/swift/gen_swift/record.rs) License: MPL-2.0 - The applicable license policy does not permit this license (5) (uniffi_bindgen-0.31.1/src/pipeline/general/uniffi_traits.rs) License: MPL-2.0 - The applicable license policy does not permit this license (5) (uniffi_bindgen-0.31.1/src/bindings/ruby/gen_ruby/mod.rs) License: MPL-2.0 - The applicable license policy does not permit this license (5) (uniffi_bindgen-0.31.1/src/pipeline/general/mod.rs) License: MPL-2.0 - The applicable license policy does not permit this license (5) (uniffi_bindgen-0.31.1/src/interface/rename.rs) License: MPL-2.0 - The applicable license policy does not permit this license (5) (uniffi_bindgen-0.31.1/src/bindings/swift/test.rs) License: MPL-2.0 - The applicable license policy does not permit this license (5) (uniffi_bindgen-0.31.1/src/bindings/ruby/mod.rs) License: MPL-2.0 - The applicable license policy does not permit this license (5) (uniffi_bindgen-0.31.1/src/bindings/ruby/test.rs) License: MPL-2.0 - The applicable license policy does not permit this license (5) (uniffi_bindgen-0.31.1/src/bindings/kotlin/gen_kotlin/callback_interface.rs) License: MPL-2.0 - The applicable license policy does not permit this license (5) (uniffi_bindgen-0.31.1/src/bindings/python/pipeline/external_types.rs) License: MPL-2.0 - The applicable license policy does not permit this license (5) (uniffi_bindgen-0.31.1/src/bindings/swift/gen_swift/custom.rs) From: ? → cargo/uniffi@0.31.1 → cargo/uniffi_bindgen@0.31.1 ℹ Read more on: This package | This alert | What is a license policy violation? Next steps: Take a moment to review the security alert above. Review the linked package source code to understand the potential risk. Ensure the package is not malicious before proceeding. If you're unsure how to proceed, reach out to your security team or ask the Socket team for help at support@socket.dev. Suggestion: Find a package that does not violate your license policy or adjust your policy to allow this package's license. Mark the package as acceptable risk. To ignore this alert only in this pull request, reply with the comment @SocketSecurity ignore cargo/uniffi_bindgen@0.31.1. You can also ignore all packages with @SocketSecurity ignore-all. To ignore an alert for all future pull requests, use Socket's Dashboard to change the triage state of this alert.
Warn		License policy violation: cargo uniffi_build under MPL-2.0 License: MPL-2.0 - The applicable license policy does not permit this license (5) (uniffi_build-0.31.1/Cargo.toml) License: MPL-2.0 - The applicable license policy does not permit this license (5) (uniffi_build-0.31.1/src/lib.rs) From: ? → cargo/uniffi@0.31.1 → cargo/uniffi_build@0.31.1 ℹ Read more on: This package | This alert | What is a license policy violation? Next steps: Take a moment to review the security alert above. Review the linked package source code to understand the potential risk. Ensure the package is not malicious before proceeding. If you're unsure how to proceed, reach out to your security team or ask the Socket team for help at support@socket.dev. Suggestion: Find a package that does not violate your license policy or adjust your policy to allow this package's license. Mark the package as acceptable risk. To ignore this alert only in this pull request, reply with the comment @SocketSecurity ignore cargo/uniffi_build@0.31.1. You can also ignore all packages with @SocketSecurity ignore-all. To ignore an alert for all future pull requests, use Socket's Dashboard to change the triage state of this alert.
Warn		License policy violation: cargo uniffi_core under MPL-2.0 License: MPL-2.0 - The applicable license policy does not permit this license (5) (uniffi_core-0.31.1/src/ffi/rustfuture/mod.rs) License: MPL-2.0 - The applicable license policy does not permit this license (5) (uniffi_core-0.31.1/src/ffi/ffidefault.rs) License: MPL-2.0 - The applicable license policy does not permit this license (5) (uniffi_core-0.31.1/src/ffi/foreignbytes.rs) License: MPL-2.0 - The applicable license policy does not permit this license (5) (uniffi_core-0.31.1/src/ffi/rustfuture/scheduler.rs) License: MPL-2.0 - The applicable license policy does not permit this license (5) (uniffi_core-0.31.1/src/ffi_converter_traits.rs) License: MPL-2.0 - The applicable license policy does not permit this license (5) (uniffi_core-0.31.1/src/ffi/rustfuture/future.rs) License: MPL-2.0 - The applicable license policy does not permit this license (5) (uniffi_core-0.31.1/src/ffi/callbackinterface.rs) License: MPL-2.0 - The applicable license policy does not permit this license (5) (uniffi_core-0.31.1/src/ffi/foreignfuture.rs) License: MPL-2.0 - The applicable license policy does not permit this license (5) (uniffi_core-0.31.1/src/ffi/rustbuffer.rs) License: MPL-2.0 - The applicable license policy does not permit this license (5) (uniffi_core-0.31.1/src/oneshot.rs) License: MPL-2.0 - The applicable license policy does not permit this license (5) (uniffi_core-0.31.1/src/ffi/handle.rs) License: MPL-2.0 - The applicable license policy does not permit this license (5) (uniffi_core-0.31.1/src/ffi/rustcalls.rs) License: MPL-2.0 - The applicable license policy does not permit this license (5) (uniffi_core-0.31.1/src/ffi_converter_impls.rs) License: MPL-2.0 - The applicable license policy does not permit this license (5) (uniffi_core-0.31.1/src/ffi/foreigncallbacks.rs) License: MPL-2.0 - The applicable license policy does not permit this license (5) (uniffi_core-0.31.1/src/ffi/ffiserialize.rs) License: MPL-2.0 - The applicable license policy does not permit this license (5) (uniffi_core-0.31.1/src/ffi/mod.rs) License: MPL-2.0 - The applicable license policy does not permit this license (5) (uniffi_core-0.31.1/src/lib.rs) License: MPL-2.0 - The applicable license policy does not permit this license (5) (uniffi_core-0.31.1/Cargo.toml) License: MPL-2.0 - The applicable license policy does not permit this license (5) (uniffi_core-0.31.1/src/metadata.rs) From: ? → cargo/uniffi@0.31.1 → cargo/uniffi_core@0.31.1 ℹ Read more on: This package | This alert | What is a license policy violation? Next steps: Take a moment to review the security alert above. Review the linked package source code to understand the potential risk. Ensure the package is not malicious before proceeding. If you're unsure how to proceed, reach out to your security team or ask the Socket team for help at support@socket.dev. Suggestion: Find a package that does not violate your license policy or adjust your policy to allow this package's license. Mark the package as acceptable risk. To ignore this alert only in this pull request, reply with the comment @SocketSecurity ignore cargo/uniffi_core@0.31.1. You can also ignore all packages with @SocketSecurity ignore-all. To ignore an alert for all future pull requests, use Socket's Dashboard to change the triage state of this alert.
Warn		License policy violation: cargo uniffi_internal_macros under MPL-2.0 License: MPL-2.0 - The applicable license policy does not permit this license (5) (uniffi_internal_macros-0.31.1/src/lib.rs) License: MPL-2.0 - The applicable license policy does not permit this license (5) (uniffi_internal_macros-0.31.1/src/ir/render.rs) License: MPL-2.0 - The applicable license policy does not permit this license (5) (uniffi_internal_macros-0.31.1/src/ir/mod.rs) License: MPL-2.0 - The applicable license policy does not permit this license (5) (uniffi_internal_macros-0.31.1/src/ir/parse.rs) License: MPL-2.0 - The applicable license policy does not permit this license (5) (uniffi_internal_macros-0.31.1/src/checksum.rs) License: MPL-2.0 - The applicable license policy does not permit this license (5) (uniffi_internal_macros-0.31.1/Cargo.toml) License: MPL-2.0 - The applicable license policy does not permit this license (5) (uniffi_internal_macros-0.31.1/src/ir/ast.rs) From: ? → cargo/uniffi@0.31.1 → cargo/uniffi_internal_macros@0.31.1 ℹ Read more on: This package | This alert | What is a license policy violation? Next steps: Take a moment to review the security alert above. Review the linked package source code to understand the potential risk. Ensure the package is not malicious before proceeding. If you're unsure how to proceed, reach out to your security team or ask the Socket team for help at support@socket.dev. Suggestion: Find a package that does not violate your license policy or adjust your policy to allow this package's license. Mark the package as acceptable risk. To ignore this alert only in this pull request, reply with the comment @SocketSecurity ignore cargo/uniffi_internal_macros@0.31.1. You can also ignore all packages with @SocketSecurity ignore-all. To ignore an alert for all future pull requests, use Socket's Dashboard to change the triage state of this alert.
Warn		License policy violation: cargo uniffi_macros under MPL-2.0 License: MPL-2.0 - The applicable license policy does not permit this license (5) (uniffi_macros-0.31.1/src/export/trait_interface.rs) License: MPL-2.0 - The applicable license policy does not permit this license (5) (uniffi_macros-0.31.1/src/util.rs) License: MPL-2.0 - The applicable license policy does not permit this license (5) (uniffi_macros-0.31.1/src/export/callback_interface.rs) License: MPL-2.0 - The applicable license policy does not permit this license (5) (uniffi_macros-0.31.1/src/export/utrait.rs) License: MPL-2.0 - The applicable license policy does not permit this license (5) (uniffi_macros-0.31.1/src/setup_scaffolding.rs) License: MPL-2.0 - The applicable license policy does not permit this license (5) (uniffi_macros-0.31.1/src/fnsig.rs) License: MPL-2.0 - The applicable license policy does not permit this license (5) (uniffi_macros-0.31.1/src/default.rs) License: MPL-2.0 - The applicable license policy does not permit this license (5) (uniffi_macros-0.31.1/src/export/item.rs) License: MPL-2.0 - The applicable license policy does not permit this license (5) (uniffi_macros-0.31.1/src/lib.rs) License: MPL-2.0 - The applicable license policy does not permit this license (5) (uniffi_macros-0.31.1/src/custom.rs) License: MPL-2.0 - The applicable license policy does not permit this license (5) (uniffi_macros-0.31.1/src/export/scaffolding.rs) License: MPL-2.0 - The applicable license policy does not permit this license (5) (uniffi_macros-0.31.1/Cargo.toml) License: MPL-2.0 - The applicable license policy does not permit this license (5) (uniffi_macros-0.31.1/src/remote.rs) License: MPL-2.0 - The applicable license policy does not permit this license (5) (uniffi_macros-0.31.1/src/derive.rs) License: MPL-2.0 - The applicable license policy does not permit this license (5) (uniffi_macros-0.31.1/src/test.rs) License: MPL-2.0 - The applicable license policy does not permit this license (5) (uniffi_macros-0.31.1/src/ffiops.rs) License: MPL-2.0 - The applicable license policy does not permit this license (5) (uniffi_macros-0.31.1/src/export.rs) From: ? → cargo/uniffi@0.31.1 → cargo/uniffi_macros@0.31.1 ℹ Read more on: This package | This alert | What is a license policy violation? Next steps: Take a moment to review the security alert above. Review the linked package source code to understand the potential risk. Ensure the package is not malicious before proceeding. If you're unsure how to proceed, reach out to your security team or ask the Socket team for help at support@socket.dev. Suggestion: Find a package that does not violate your license policy or adjust your policy to allow this package's license. Mark the package as acceptable risk. To ignore this alert only in this pull request, reply with the comment @SocketSecurity ignore cargo/uniffi_macros@0.31.1. You can also ignore all packages with @SocketSecurity ignore-all. To ignore an alert for all future pull requests, use Socket's Dashboard to change the triage state of this alert.
Warn		License policy violation: cargo uniffi_meta under MPL-2.0 License: MPL-2.0 - The applicable license policy does not permit this license (5) (uniffi_meta-0.31.1/src/group.rs) License: MPL-2.0 - The applicable license policy does not permit this license (5) (uniffi_meta-0.31.1/Cargo.toml) License: MPL-2.0 - The applicable license policy does not permit this license (5) (uniffi_meta-0.31.1/src/lib.rs) License: MPL-2.0 - The applicable license policy does not permit this license (5) (uniffi_meta-0.31.1/src/types.rs) License: MPL-2.0 - The applicable license policy does not permit this license (5) (uniffi_meta-0.31.1/src/metadata.rs) License: MPL-2.0 - The applicable license policy does not permit this license (5) (uniffi_meta-0.31.1/src/ffi_names.rs) License: MPL-2.0 - The applicable license policy does not permit this license (5) (uniffi_meta-0.31.1/src/reader.rs) From: ? → cargo/uniffi@0.31.1 → cargo/uniffi_meta@0.31.1 ℹ Read more on: This package | This alert | What is a license policy violation? Next steps: Take a moment to review the security alert above. Review the linked package source code to understand the potential risk. Ensure the package is not malicious before proceeding. If you're unsure how to proceed, reach out to your security team or ask the Socket team for help at support@socket.dev. Suggestion: Find a package that does not violate your license policy or adjust your policy to allow this package's license. Mark the package as acceptable risk. To ignore this alert only in this pull request, reply with the comment @SocketSecurity ignore cargo/uniffi_meta@0.31.1. You can also ignore all packages with @SocketSecurity ignore-all. To ignore an alert for all future pull requests, use Socket's Dashboard to change the triage state of this alert.
Warn		License policy violation: cargo uniffi_pipeline under MPL-2.0 License: MPL-2.0 - The applicable license policy does not permit this license (5) (uniffi_pipeline-0.31.1/src/value.rs) License: MPL-2.0 - The applicable license policy does not permit this license (5) (uniffi_pipeline-0.31.1/src/pipeline.rs) License: MPL-2.0 - The applicable license policy does not permit this license (5) (uniffi_pipeline-0.31.1/src/node.rs) License: MPL-2.0 - The applicable license policy does not permit this license (5) (uniffi_pipeline-0.31.1/src/lib.rs) License: MPL-2.0 - The applicable license policy does not permit this license (5) (uniffi_pipeline-0.31.1/Cargo.toml) From: ? → cargo/uniffi@0.31.1 → cargo/uniffi_pipeline@0.31.1 ℹ Read more on: This package | This alert | What is a license policy violation? Next steps: Take a moment to review the security alert above. Review the linked package source code to understand the potential risk. Ensure the package is not malicious before proceeding. If you're unsure how to proceed, reach out to your security team or ask the Socket team for help at support@socket.dev. Suggestion: Find a package that does not violate your license policy or adjust your policy to allow this package's license. Mark the package as acceptable risk. To ignore this alert only in this pull request, reply with the comment @SocketSecurity ignore cargo/uniffi_pipeline@0.31.1. You can also ignore all packages with @SocketSecurity ignore-all. To ignore an alert for all future pull requests, use Socket's Dashboard to change the triage state of this alert.
Warn		License policy violation: cargo uniffi_udl under MPL-2.0 License: MPL-2.0 - The applicable license policy does not permit this license (5) (uniffi_udl-0.31.1/src/converters/callables.rs) License: MPL-2.0 - The applicable license policy does not permit this license (5) (uniffi_udl-0.31.1/src/converters/enum_.rs) License: MPL-2.0 - The applicable license policy does not permit this license (5) (uniffi_udl-0.31.1/src/literal.rs) License: MPL-2.0 - The applicable license policy does not permit this license (5) (uniffi_udl-0.31.1/src/lib.rs) License: MPL-2.0 - The applicable license policy does not permit this license (5) (uniffi_udl-0.31.1/src/converters/mod.rs) License: MPL-2.0 - The applicable license policy does not permit this license (5) (uniffi_udl-0.31.1/Cargo.toml) License: MPL-2.0 - The applicable license policy does not permit this license (5) (uniffi_udl-0.31.1/src/converters/interface.rs) License: MPL-2.0 - The applicable license policy does not permit this license (5) (uniffi_udl-0.31.1/src/attributes.rs) License: MPL-2.0 - The applicable license policy does not permit this license (5) (uniffi_udl-0.31.1/src/collectors.rs) License: MPL-2.0 - The applicable license policy does not permit this license (5) (uniffi_udl-0.31.1/src/finder.rs) License: MPL-2.0 - The applicable license policy does not permit this license (5) (uniffi_udl-0.31.1/src/resolver.rs) From: ? → cargo/uniffi@0.31.1 → cargo/uniffi_udl@0.31.1 ℹ Read more on: This package | This alert | What is a license policy violation? Next steps: Take a moment to review the security alert above. Review the linked package source code to understand the potential risk. Ensure the package is not malicious before proceeding. If you're unsure how to proceed, reach out to your security team or ask the Socket team for help at support@socket.dev. Suggestion: Find a package that does not violate your license policy or adjust your policy to allow this package's license. Mark the package as acceptable risk. To ignore this alert only in this pull request, reply with the comment @SocketSecurity ignore cargo/uniffi_udl@0.31.1. You can also ignore all packages with @SocketSecurity ignore-all. To ignore an alert for all future pull requests, use Socket's Dashboard to change the triage state of this alert.
Warn		License policy violation: cargo uniffi under MPL-2.0 License: MPL-2.0 - The applicable license policy does not permit this license (5) (uniffi-0.31.1/src/lib.rs) License: MPL-2.0 - The applicable license policy does not permit this license (5) (uniffi-0.31.1/src/cli/mod.rs) License: MPL-2.0 - The applicable license policy does not permit this license (5) (uniffi-0.31.1/src/cli/swift.rs) License: MPL-2.0 - The applicable license policy does not permit this license (5) (uniffi-0.31.1/src/cli/uniffi_bindgen.rs) License: MPL-2.0 - The applicable license policy does not permit this license (5) (uniffi-0.31.1/uniffi-bindgen-swift.rs) License: MPL-2.0 - The applicable license policy does not permit this license (5) (uniffi-0.31.1/Cargo.toml) License: MPL-2.0 - The applicable license policy does not permit this license (5) (uniffi-0.31.1/uniffi-bindgen.rs) From: Cargo.lock → cargo/uniffi@0.31.1 ℹ Read more on: This package | This alert | What is a license policy violation? Next steps: Take a moment to review the security alert above. Review the linked package source code to understand the potential risk. Ensure the package is not malicious before proceeding. If you're unsure how to proceed, reach out to your security team or ask the Socket team for help at support@socket.dev. Suggestion: Find a package that does not violate your license policy or adjust your policy to allow this package's license. Mark the package as acceptable risk. To ignore this alert only in this pull request, reply with the comment @SocketSecurity ignore cargo/uniffi@0.31.1. You can also ignore all packages with @SocketSecurity ignore-all. To ignore an alert for all future pull requests, use Socket's Dashboard to change the triage state of this alert.

View full report

[dependabot]

Superseded by #180.