Bug 1839961 - Update cargo-vet to 8c8b6d7a5237544c613de616a031586587f…

…49a42. r=nika,supply-chain-reviewers

Differential Revision: https://phabricator.services.mozilla.com/D181809

supply-chain/config.toml

@@ -2,7 +2,7 @@
 # cargo-vet config file
 
 [cargo-vet]
-version = "0.7"
+version = "0.8"
 
 [imports.bytecode-alliance]
 url = "https://raw.githubusercontent.com/bytecodealliance/wasmtime/main/supply-chain/audits.toml"
@@ -421,10 +421,6 @@ criteria = "safe-to-run"
 version = "0.3.3"
 criteria = "safe-to-run"
 
-[[exemptions.futures]]
-version = "0.3.21"
-criteria = "safe-to-deploy"
-
 [[exemptions.futures-macro]]
 version = "0.3.21"
 criteria = "safe-to-deploy"

supply-chain/imports.lock

@@ -887,6 +887,16 @@ that the RNG here is not cryptographically secure.
 """
 aggregated-from = "https://chromium.googlesource.com/chromiumos/third_party/rust_crates/+/refs/heads/main/cargo-vet/audits.toml?format=TEXT"
 
+[[audits.google.audits.futures]]
+who = "George Burgess IV <[email protected]>"
+criteria = "safe-to-deploy"
+version = "0.3.28"
+notes = """
+`futures` has no logic other than tests - it simply `pub use`s things from
+other crates.
+"""
+aggregated-from = "https://chromium.googlesource.com/chromiumos/third_party/rust_crates/+/refs/heads/main/cargo-vet/audits.toml?format=TEXT"
+
 [[audits.google.audits.glob]]
 who = "George Burgess IV <[email protected]>"
 criteria = "safe-to-deploy"

taskcluster/ci/fetch/toolchains.yml

@@ -597,7 +597,7 @@ cargo-vet:
     fetch:
         type: git
         repo: https://github.com/mozilla/cargo-vet
-        revision: ea2899fc73e65a3c683313ed117cf3d2f9b285ab
+        revision: 8c8b6d7a5237544c613de616a031586587f49a42
 
 symbol-scrapers:
     description: Linux distribution symbol scraper source