SUSE-SU-2026:0506-1

This update for cargo-auditable fixes the following issues:

Update to version 0.7.2~0.

Security issues fixed:

• CVE-2026-25727: parsing of user-provided input by the RFC 2822 date parser can lead to stack exhaustion (bsc#1257906).

Other updates and bugfixes:

• Update to version 0.7.2~0:

  • mention cargo-dist in README
  • commit Cargo.lock
  • bump which dev-dependency to 8.0.0
  • bump object to 0.37
  • Upgrade cargo_metadata to 0.23
  • Expand the set of dist platforms in config

• Update to version 0.7.1~0:

  • Out out of unhelpful clippy lint
  • Satisfy clippy
  • Do not assume --crate-name and --out-dir are present in the rustc command, but show warnings if they aren't
  • Run apt-get update before trying to install packages
  • run cargo dist init on dist 0.30
  • Drop allow-dirty from dist config, should no longer be needed
  • Reorder paragraphs in README
  • Note the maintenance transition for the go extraction library
  • Editing pass on the adopters: scanners
  • clarify Docker support
  • Cargo clippy fix
  • Add Wolfi OS and Chainguard to adopters
  • Update mentions around Anchore tooling
  • README and documentation updates for nightly
  • Bump dependency version in rust-audit-info
  • More work on docs
  • Nicer formatting on format revision documentation
  • Bump versions
  • regenerate JSON schema
  • cargo fmt
  • Document format field
  • Make it more clear that RawVersionInfo is private
  • Add format field to the serialized data
  • cargo clippy fix
  • Add special handling for proc macros to treat them as the build dependencies they are
  • Add a test to ensure proc macros are reported as build dependencies
  • Add a test fixture for a crate with a proc macro dependency
  • parse fully qualified package ID specs from SBOMs
  • select first discovered SBOM file
  • cargo sbom integration
  • Get rid of unmaintained wee_alloc in test code to make people's scanners misled by GHSA chill out
  • Don't fail plan workflow due to...