[Bug 284145] security/cargo-audit: fails with "Unrecognized value 'nuttx' for target_os"

https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=284145

            Bug ID: 284145
           Summary: security/cargo-audit: fails with "Unrecognized value
                    'nuttx' for target_os"
           Product: Ports & Packages
           Version: Latest
          Hardware: Any
                OS: Any
            Status: New
          Severity: Affects Only Me
          Priority: ---
         Component: Individual Port(s)
          Assignee: mikael@FreeBSD.org
          Reporter: asomers@FreeBSD.org
             Flags: maintainer-feedback?(mikael@FreeBSD.org)
          Assignee: mikael@FreeBSD.org

cargo-audit version 0.21.0_1,1 began to fail within the last day or so with the
below error message.

> cargo-audit audit
    Fetching advisory database from
`https://github.com/RustSec/advisory-db.git`
error: error loading advisory database: parse error: error parsing
/home/somers/.cargo/advisory-db/crates/gix-worktree-state/RUSTSEC-2025-0001.md:
parse error: TOML parse error at line 13, column 6
   |
13 | os = [
   |      ^
Unrecognized value 'nuttx' for target_os

ENVIRONMENT
===========
FreeBSD amd64, both 15.0-CURRENT and 14.2-RELEASE, both in an environment with
a rustup toolchain installed and in an environment without.

STEPS TO REPRODUCE
==================
$ pkg install cargo-audit
$ cd /path/to/literally/anywhere
$ cargo-audit audit

ANALYSIS
========
The cargo-audit tool downloads a file provided by the RustSec team and updated
on a regular basis.  It's the parsing of this file that is failing.  One
possible solution would be for the RustSec team to rollback whatever recent
change they made (adding nuttx?).  Another, I believe, would be for FreeBSD to
rebuild the cargo-audit package to use the nightly toolchain.  I'll take the
discussion upstream at https://github.com/rustsec/rustsec/ .

-- 
You are receiving this mail because:
You are the assignee for the bug.