Bump uniffi from 0.24.3 to 0.31.2

[dependabot]

Bumps uniffi from 0.24.3 to 0.31.2.

Changelog

Sourced from uniffi's changelog.

v0.31.2 (backend crates: v0.31.2) - (2026-06-16)

What's Fixed

• Kotlin: Fixed JNA direct-mapped u8/u16 return values by widening the internal return carrier to Int, which avoids signedness mismatches during checksum validation and other direct-return paths on Android ARM32. (#2897)
• Kotlin: Fix async functions that return an external/RustBuffer type
• Swift: Fixed FfiConverterString silently stripping a leading U+FEFF byte order mark from Rust strings.
• Swift: Prevent strict concurrency warning with callback interface tables

All changes in v0.31.2.

v0.31.1 (backend crates: v0.31.1) - (2026-04-10)

What's Fixed

• Swift: Fixed iOS crash when address sanitizer is enabled #2821
• Swift: Fixed memory link in async code #2854

All changes in v0.31.1.

v0.31.0 (backend crates: v0.31.0) - (2026-01-14)

⚠️ Breaking Changes ⚠️

• The uniffi-bindgen command no longer accepts the --lib-file argument. Instead, pass the library directly without a UDL file.
• Removed the [Swift|Kotlin|Python|Ruby]BindingGenerator types. Use uniffi::generate instead to generate these bindings.

What's Deprecated?

• BindgenCrateConfigSupplier. Use the new BindgenPaths type instead.

What's New?

• Added the uniffi::generate function. This implements the uniffi-bindgen generate command and allows it to be run programmatically.
• The --library argument of uniffi-bindgen is deprecated and no longer has an effect. uniffi-bindgen will now auto-detect when the source path is a library rather than a UDL file.
• All builtin bindings support renaming almost all of the interface (types, args, items, variants, etc) via TOML definitions - see the docs. (#2715)
• Support for methods on records and enums (#2706, #2724, #2739).
• Added the BindgenPaths type, which is the new way to find UDL and TOML data.
• Enum variants can now be renamed with the proc-macro name = "NewVariantName" attribute (#2783)
• It's now possible to build a uniffi-bindgen that doesn't depend on cargo-metadata (#2746)
• MSR is now 1.87, our CI runs against 1.90.

What's Fixed

... (truncated)

Commits

• 05b45b1 chore: Release
• 7a0eb62 chore: Release
• d4d26c6 Adding changelog entries for 0.31.2
• 9b81f26 Fix compile error message to point out missing CARGO_MANIFEST_DIR
• f29bc2d Fix Kotlin JNA unsigned small integer direct returns
• 9a11123 Fix Kotlin async external RustBuffer returns
• 04f196a swift: nonisolated(unsafe) on callback vtablePtr
• cef4501 Swift: preserve leading U+FEFF byte order mark in FfiConverterString
• b4153d4 fix: sort uniffi_traits to ensure deterministic code generation
• ec08cf9 Changelog update for 0.31.1
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

[socket-security]

Review the following changes in direct dependencies. Learn more about Socket for GitHub.

Diff	Package	Supply Chain Security	Vulnerability	Quality	Maintenance	License
	cargo/​uniffi@​0.24.3 ⏵ 0.31.2

View full report

[socket-security]

Warning

Review the following alerts detected in dependencies.

According to your organization's Security Policy, it is recommended to resolve "Warn" alerts. Learn more about Socket for GitHub.

Action	Severity	Alert  (click "▶" to expand/collapse)
Warn		License policy violation: cargo uniffi_bindgen under MPL-2.0 License: MPL-2.0 - The applicable license policy does not permit this license (5) (uniffi_bindgen-0.31.2/src/bindings/kotlin/gen_kotlin/custom.rs) License: MPL-2.0 - The applicable license policy does not permit this license (5) (uniffi_bindgen-0.31.2/src/bindings/python/pipeline/external_types.rs) License: MPL-2.0 - The applicable license policy does not permit this license (5) (uniffi_bindgen-0.31.2/src/bindings/kotlin/gen_kotlin/record.rs) License: MPL-2.0 - The applicable license policy does not permit this license (5) (uniffi_bindgen-0.31.2/src/bindings/python/mod.rs) License: MPL-2.0 - The applicable license policy does not permit this license (5) (uniffi_bindgen-0.31.2/src/interface/record.rs) License: MPL-2.0 - The applicable license policy does not permit this license (5) (uniffi_bindgen-0.31.2/src/interface/mod.rs) License: MPL-2.0 - The applicable license policy does not permit this license (5) (uniffi_bindgen-0.31.2/src/bindings/kotlin/mod.rs) License: MPL-2.0 - The applicable license policy does not permit this license (5) (uniffi_bindgen-0.31.2/src/lib.rs) License: MPL-2.0 - The applicable license policy does not permit this license (5) (uniffi_bindgen-0.31.2/src/bindings/python/filters.rs) License: MPL-2.0 - The applicable license policy does not permit this license (5) (uniffi_bindgen-0.31.2/src/macro_metadata/ci.rs) License: MPL-2.0 - The applicable license policy does not permit this license (5) (uniffi_bindgen-0.31.2/src/bindings/kotlin/test.rs) License: MPL-2.0 - The applicable license policy does not permit this license (5) (uniffi_bindgen-0.31.2/src/bindings/python/pipeline/callback_interfaces.rs) License: MPL-2.0 - The applicable license policy does not permit this license (5) (uniffi_bindgen-0.31.2/src/interface/universe.rs) License: MPL-2.0 - The applicable license policy does not permit this license (5) (uniffi_bindgen-0.31.2/src/pipeline/general/nodes.rs) License: MPL-2.0 - The applicable license policy does not permit this license (5) (uniffi_bindgen-0.31.2/src/bindings/swift/gen_swift/record.rs) License: MPL-2.0 - The applicable license policy does not permit this license (5) (uniffi_bindgen-0.31.2/src/bindings/swift/gen_swift/callback_interface.rs) License: MPL-2.0 - The applicable license policy does not permit this license (5) (uniffi_bindgen-0.31.2/src/pipeline/general/sort.rs) License: MPL-2.0 - The applicable license policy does not permit this license (5) (uniffi_bindgen-0.31.2/src/bindings/swift/gen_swift/primitives.rs) License: MPL-2.0 - The applicable license policy does not permit this license (5) (uniffi_bindgen-0.31.2/src/bindings/kotlin/gen_kotlin/primitives.rs) License: MPL-2.0 - The applicable license policy does not permit this license (5) (uniffi_bindgen-0.31.2/src/interface/callbacks.rs) License: MPL-2.0 - The applicable license policy does not permit this license (5) (uniffi_bindgen-0.31.2/src/bindings/ruby/test.rs) License: MPL-2.0 - The applicable license policy does not permit this license (5) (uniffi_bindgen-0.31.2/src/bindings/python/pipeline/ffi_types.rs) License: MPL-2.0 - The applicable license policy does not permit this license (5) (uniffi_bindgen-0.31.2/src/bindings/kotlin/gen_kotlin/compounds.rs) License: MPL-2.0 - The applicable license policy does not permit this license (5) (uniffi_bindgen-0.31.2/src/pipeline/initial/from_uniffi_meta.rs) License: MPL-2.0 - The applicable license policy does not permit this license (5) (uniffi_bindgen-0.31.2/src/interface/visit_mut.rs) License: MPL-2.0 - The applicable license policy does not permit this license (5) (uniffi_bindgen-0.31.2/src/pipeline/general/objects.rs) License: MPL-2.0 - The applicable license policy does not permit this license (5) (uniffi_bindgen-0.31.2/src/pipeline/general/checksums.rs) License: MPL-2.0 - The applicable license policy does not permit this license (5) (uniffi_bindgen-0.31.2/src/pipeline/mod.rs) License: MPL-2.0 - The applicable license policy does not permit this license (5) (uniffi_bindgen-0.31.2/src/bindings/swift/test.rs) License: MPL-2.0 - The applicable license policy does not permit this license (5) (uniffi_bindgen-0.31.2/src/bindings/ruby/mod.rs) License: MPL-2.0 - The applicable license policy does not permit this license (5) (uniffi_bindgen-0.31.2/src/pipeline/general/callable.rs) License: MPL-2.0 - The applicable license policy does not permit this license (5) (uniffi_bindgen-0.31.2/src/macro_metadata/extract.rs) License: MPL-2.0 - The applicable license policy does not permit this license (5) (uniffi_bindgen-0.31.2/src/bindings/swift/gen_swift/mod.rs) License: MPL-2.0 - The applicable license policy does not permit this license (5) (uniffi_bindgen-0.31.2/src/macro_metadata/mod.rs) License: MPL-2.0 - The applicable license policy does not permit this license (5) (uniffi_bindgen-0.31.2/src/pipeline/general/rust_future.rs) License: MPL-2.0 - The applicable license policy does not permit this license (5) (uniffi_bindgen-0.31.2/src/pipeline/general/ffi_types.rs) License: MPL-2.0 - The applicable license policy does not permit this license (5) (uniffi_bindgen-0.31.2/src/bindings/kotlin/gen_kotlin/mod.rs) License: MPL-2.0 - The applicable license policy does not permit this license (5) (uniffi_bindgen-0.31.2/src/pipeline/initial/mod.rs) License: MPL-2.0 - The applicable license policy does not permit this license (5) (uniffi_bindgen-0.31.2/src/bindings/python/test.rs) License: MPL-2.0 - The applicable license policy does not permit this license (5) (uniffi_bindgen-0.31.2/src/loader.rs) License: MPL-2.0 - The applicable license policy does not permit this license (5) (uniffi_bindgen-0.31.2/src/pipeline/general/uniffi_traits.rs) License: MPL-2.0 - The applicable license policy does not permit this license (5) (uniffi_bindgen-0.31.2/src/bindings/swift/gen_swift/miscellany.rs) License: MPL-2.0 - The applicable license policy does not permit this license (5) (uniffi_bindgen-0.31.2/src/cargo_metadata.rs) License: MPL-2.0 - The applicable license policy does not permit this license (5) (uniffi_bindgen-0.31.2/src/interface/object.rs) License: MPL-2.0 - The applicable license policy does not permit this license (5) (uniffi_bindgen-0.31.2/src/bindings/kotlin/gen_kotlin/enum_.rs) License: MPL-2.0 - The applicable license policy does not permit this license (5) (uniffi_bindgen-0.31.2/src/bindings/python/pipeline/interfaces.rs) License: MPL-2.0 - The applicable license policy does not permit this license (5) (uniffi_bindgen-0.31.2/src/bindings/swift/mod.rs) License: MPL-2.0 - The applicable license policy does not permit this license (5) (uniffi_bindgen-0.31.2/src/pipeline/general/ffi_functions.rs) License: MPL-2.0 - The applicable license policy does not permit this license (5) (uniffi_bindgen-0.31.2/src/interface/ffi.rs) License: MPL-2.0 - The applicable license policy does not permit this license (5) (uniffi_bindgen-0.31.2/Cargo.toml) License: MPL-2.0 - The applicable license policy does not permit this license (5) (uniffi_bindgen-0.31.2/src/pipeline/general/enums.rs) License: MPL-2.0 - The applicable license policy does not permit this license (5) (uniffi_bindgen-0.31.2/src/bindings/kotlin/gen_kotlin/miscellany.rs) License: MPL-2.0 - The applicable license policy does not permit this license (5) (uniffi_bindgen-0.31.2/src/pipeline/general/records.rs) License: MPL-2.0 - The applicable license policy does not permit this license (5) (uniffi_bindgen-0.31.2/src/pipeline/initial/nodes.rs) License: MPL-2.0 - The applicable license policy does not permit this license (5) (uniffi_bindgen-0.31.2/src/bindings/kotlin/gen_kotlin/object.rs) License: MPL-2.0 - The applicable license policy does not permit this license (5) (uniffi_bindgen-0.31.2/src/pipeline/general/callback_interfaces.rs) License: MPL-2.0 - The applicable license policy does not permit this license (5) (uniffi_bindgen-0.31.2/src/bindings/swift/gen_swift/object.rs) License: MPL-2.0 - The applicable license policy does not permit this license (5) (uniffi_bindgen-0.31.2/src/bindings/python/pipeline/types.rs) License: MPL-2.0 - The applicable license policy does not permit this license (5) (uniffi_bindgen-0.31.2/src/bindings/python/pipeline/config.rs) License: MPL-2.0 - The applicable license policy does not permit this license (5) (uniffi_bindgen-0.31.2/src/bindings/python/pipeline/modules.rs) License: MPL-2.0 - The applicable license policy does not permit this license (5) (uniffi_bindgen-0.31.2/src/pipeline/general/default.rs) License: MPL-2.0 - The applicable license policy does not permit this license (5) (uniffi_bindgen-0.31.2/src/pipeline/general/self_types.rs) License: MPL-2.0 - The applicable license policy does not permit this license (5) (uniffi_bindgen-0.31.2/src/bindings/python/pipeline/mod.rs) License: MPL-2.0 - The applicable license policy does not permit this license (5) (uniffi_bindgen-0.31.2/src/pipeline/general/modules.rs) License: MPL-2.0 - The applicable license policy does not permit this license (5) (uniffi_bindgen-0.31.2/src/bindgen_paths.rs) License: MPL-2.0 - The applicable license policy does not permit this license (5) (uniffi_bindgen-0.31.2/src/bindings/ruby/gen_ruby/mod.rs) License: MPL-2.0 - The applicable license policy does not permit this license (5) (uniffi_bindgen-0.31.2/src/bindings/python/pipeline/error.rs) License: MPL-2.0 - The applicable license policy does not permit this license (5) (uniffi_bindgen-0.31.2/src/scaffolding/mod.rs) License: MPL-2.0 - The applicable license policy does not permit this license (5) (uniffi_bindgen-0.31.2/src/pipeline/general/rename.rs) License: MPL-2.0 - The applicable license policy does not permit this license (5) (uniffi_bindgen-0.31.2/src/bindings/swift/gen_swift/custom.rs) License: MPL-2.0 - The applicable license policy does not permit this license (5) (uniffi_bindgen-0.31.2/src/pipeline/general/ffi_async_data.rs) License: MPL-2.0 - The applicable license policy does not permit this license (5) (uniffi_bindgen-0.31.2/src/bindings/swift/gen_swift/compounds.rs) License: MPL-2.0 - The applicable license policy does not permit this license (5) (uniffi_bindgen-0.31.2/src/pipeline/general/type_nodes.rs) License: MPL-2.0 - The applicable license policy does not permit this license (5) (uniffi_bindgen-0.31.2/src/library_mode.rs) License: MPL-2.0 - The applicable license policy does not permit this license (5) (uniffi_bindgen-0.31.2/src/bindings/python/pipeline/names.rs) License: MPL-2.0 - The applicable license policy does not permit this license (5) (uniffi_bindgen-0.31.2/src/bindings/mod.rs) License: MPL-2.0 - The applicable license policy does not permit this license (5) (uniffi_bindgen-0.31.2/src/bindings/python/pipeline/default.rs) License: MPL-2.0 - The applicable license policy does not permit this license (5) (uniffi_bindgen-0.31.2/src/bindings/kotlin/gen_kotlin/variant.rs) License: MPL-2.0 - The applicable license policy does not permit this license (5) (uniffi_bindgen-0.31.2/src/bindings/swift/gen_swift/enum_.rs) License: MPL-2.0 - The applicable license policy does not permit this license (5) (uniffi_bindgen-0.31.2/src/bindings/kotlin/gen_kotlin/callback_interface.rs) License: MPL-2.0 - The applicable license policy does not permit this license (5) (uniffi_bindgen-0.31.2/src/pipeline/general/rust_buffer.rs) License: MPL-2.0 - The applicable license policy does not permit this license (5) (uniffi_bindgen-0.31.2/src/bindings/python/pipeline/nodes.rs) License: MPL-2.0 - The applicable license policy does not permit this license (5) (uniffi_bindgen-0.31.2/src/pipeline/general/type_definitions_from_api.rs) License: MPL-2.0 - The applicable license policy does not permit this license (5) (uniffi_bindgen-0.31.2/src/pipeline/general/mod.rs) License: MPL-2.0 - The applicable license policy does not permit this license (5) (uniffi_bindgen-0.31.2/src/interface/rename.rs) License: MPL-2.0 - The applicable license policy does not permit this license (5) (uniffi_bindgen-0.31.2/src/interface/enum_.rs) License: MPL-2.0 - The applicable license policy does not permit this license (5) (uniffi_bindgen-0.31.2/src/interface/function.rs) From: ? → cargo/uniffi@0.31.2 → cargo/uniffi_bindgen@0.31.2 ℹ Read more on: This package | This alert | What is a license policy violation? Next steps: Take a moment to review the security alert above. Review the linked package source code to understand the potential risk. Ensure the package is not malicious before proceeding. If you're unsure how to proceed, reach out to your security team or ask the Socket team for help at support@socket.dev. Suggestion: Find a package that does not violate your license policy or adjust your policy to allow this package's license. Mark the package as acceptable risk. To ignore this alert only in this pull request, reply with the comment @SocketSecurity ignore cargo/uniffi_bindgen@0.31.2. You can also ignore all packages with @SocketSecurity ignore-all. To ignore an alert for all future pull requests, use Socket's Dashboard to change the triage state of this alert.
Warn		License policy violation: cargo uniffi_build under MPL-2.0 License: MPL-2.0 - The applicable license policy does not permit this license (5) (uniffi_build-0.31.2/src/lib.rs) License: MPL-2.0 - The applicable license policy does not permit this license (5) (uniffi_build-0.31.2/Cargo.toml) From: ? → cargo/uniffi@0.31.2 → cargo/uniffi_build@0.31.2 ℹ Read more on: This package | This alert | What is a license policy violation? Next steps: Take a moment to review the security alert above. Review the linked package source code to understand the potential risk. Ensure the package is not malicious before proceeding. If you're unsure how to proceed, reach out to your security team or ask the Socket team for help at support@socket.dev. Suggestion: Find a package that does not violate your license policy or adjust your policy to allow this package's license. Mark the package as acceptable risk. To ignore this alert only in this pull request, reply with the comment @SocketSecurity ignore cargo/uniffi_build@0.31.2. You can also ignore all packages with @SocketSecurity ignore-all. To ignore an alert for all future pull requests, use Socket's Dashboard to change the triage state of this alert.
Warn		License policy violation: cargo uniffi_core under MPL-2.0 License: MPL-2.0 - The applicable license policy does not permit this license (5) (uniffi_core-0.31.2/src/ffi_converter_traits.rs) License: MPL-2.0 - The applicable license policy does not permit this license (5) (uniffi_core-0.31.2/src/ffi/foreignfuture.rs) License: MPL-2.0 - The applicable license policy does not permit this license (5) (uniffi_core-0.31.2/src/ffi/rustfuture/mod.rs) License: MPL-2.0 - The applicable license policy does not permit this license (5) (uniffi_core-0.31.2/src/lib.rs) License: MPL-2.0 - The applicable license policy does not permit this license (5) (uniffi_core-0.31.2/src/ffi_converter_impls.rs) License: MPL-2.0 - The applicable license policy does not permit this license (5) (uniffi_core-0.31.2/src/ffi/rustfuture/scheduler.rs) License: MPL-2.0 - The applicable license policy does not permit this license (5) (uniffi_core-0.31.2/src/ffi/callbackinterface.rs) License: MPL-2.0 - The applicable license policy does not permit this license (5) (uniffi_core-0.31.2/Cargo.toml) License: MPL-2.0 - The applicable license policy does not permit this license (5) (uniffi_core-0.31.2/src/ffi/ffiserialize.rs) License: MPL-2.0 - The applicable license policy does not permit this license (5) (uniffi_core-0.31.2/src/ffi/ffidefault.rs) License: MPL-2.0 - The applicable license policy does not permit this license (5) (uniffi_core-0.31.2/src/ffi/rustcalls.rs) License: MPL-2.0 - The applicable license policy does not permit this license (5) (uniffi_core-0.31.2/src/ffi/foreigncallbacks.rs) License: MPL-2.0 - The applicable license policy does not permit this license (5) (uniffi_core-0.31.2/src/oneshot.rs) License: MPL-2.0 - The applicable license policy does not permit this license (5) (uniffi_core-0.31.2/src/ffi/rustbuffer.rs) License: MPL-2.0 - The applicable license policy does not permit this license (5) (uniffi_core-0.31.2/src/ffi/foreignbytes.rs) License: MPL-2.0 - The applicable license policy does not permit this license (5) (uniffi_core-0.31.2/src/ffi/handle.rs) License: MPL-2.0 - The applicable license policy does not permit this license (5) (uniffi_core-0.31.2/src/metadata.rs) License: MPL-2.0 - The applicable license policy does not permit this license (5) (uniffi_core-0.31.2/src/ffi/mod.rs) License: MPL-2.0 - The applicable license policy does not permit this license (5) (uniffi_core-0.31.2/src/ffi/rustfuture/future.rs) From: ? → cargo/uniffi@0.31.2 → cargo/uniffi_core@0.31.2 ℹ Read more on: This package | This alert | What is a license policy violation? Next steps: Take a moment to review the security alert above. Review the linked package source code to understand the potential risk. Ensure the package is not malicious before proceeding. If you're unsure how to proceed, reach out to your security team or ask the Socket team for help at support@socket.dev. Suggestion: Find a package that does not violate your license policy or adjust your policy to allow this package's license. Mark the package as acceptable risk. To ignore this alert only in this pull request, reply with the comment @SocketSecurity ignore cargo/uniffi_core@0.31.2. You can also ignore all packages with @SocketSecurity ignore-all. To ignore an alert for all future pull requests, use Socket's Dashboard to change the triage state of this alert.
Warn		License policy violation: cargo uniffi_internal_macros under MPL-2.0 License: MPL-2.0 - The applicable license policy does not permit this license (5) (uniffi_internal_macros-0.31.2/src/ir/ast.rs) License: MPL-2.0 - The applicable license policy does not permit this license (5) (uniffi_internal_macros-0.31.2/src/lib.rs) License: MPL-2.0 - The applicable license policy does not permit this license (5) (uniffi_internal_macros-0.31.2/src/ir/parse.rs) License: MPL-2.0 - The applicable license policy does not permit this license (5) (uniffi_internal_macros-0.31.2/src/checksum.rs) License: MPL-2.0 - The applicable license policy does not permit this license (5) (uniffi_internal_macros-0.31.2/Cargo.toml) License: MPL-2.0 - The applicable license policy does not permit this license (5) (uniffi_internal_macros-0.31.2/src/ir/render.rs) License: MPL-2.0 - The applicable license policy does not permit this license (5) (uniffi_internal_macros-0.31.2/src/ir/mod.rs) From: ? → cargo/uniffi@0.31.2 → cargo/uniffi_internal_macros@0.31.2 ℹ Read more on: This package | This alert | What is a license policy violation? Next steps: Take a moment to review the security alert above. Review the linked package source code to understand the potential risk. Ensure the package is not malicious before proceeding. If you're unsure how to proceed, reach out to your security team or ask the Socket team for help at support@socket.dev. Suggestion: Find a package that does not violate your license policy or adjust your policy to allow this package's license. Mark the package as acceptable risk. To ignore this alert only in this pull request, reply with the comment @SocketSecurity ignore cargo/uniffi_internal_macros@0.31.2. You can also ignore all packages with @SocketSecurity ignore-all. To ignore an alert for all future pull requests, use Socket's Dashboard to change the triage state of this alert.
Warn		License policy violation: cargo uniffi_macros under MPL-2.0 License: MPL-2.0 - The applicable license policy does not permit this license (5) (uniffi_macros-0.31.2/src/custom.rs) License: MPL-2.0 - The applicable license policy does not permit this license (5) (uniffi_macros-0.31.2/src/export/trait_interface.rs) License: MPL-2.0 - The applicable license policy does not permit this license (5) (uniffi_macros-0.31.2/src/setup_scaffolding.rs) License: MPL-2.0 - The applicable license policy does not permit this license (5) (uniffi_macros-0.31.2/src/default.rs) License: MPL-2.0 - The applicable license policy does not permit this license (5) (uniffi_macros-0.31.2/src/export.rs) License: MPL-2.0 - The applicable license policy does not permit this license (5) (uniffi_macros-0.31.2/src/export/item.rs) License: MPL-2.0 - The applicable license policy does not permit this license (5) (uniffi_macros-0.31.2/src/lib.rs) License: MPL-2.0 - The applicable license policy does not permit this license (5) (uniffi_macros-0.31.2/src/ffiops.rs) License: MPL-2.0 - The applicable license policy does not permit this license (5) (uniffi_macros-0.31.2/src/derive.rs) License: MPL-2.0 - The applicable license policy does not permit this license (5) (uniffi_macros-0.31.2/src/test.rs) License: MPL-2.0 - The applicable license policy does not permit this license (5) (uniffi_macros-0.31.2/src/remote.rs) License: MPL-2.0 - The applicable license policy does not permit this license (5) (uniffi_macros-0.31.2/src/export/callback_interface.rs) License: MPL-2.0 - The applicable license policy does not permit this license (5) (uniffi_macros-0.31.2/src/fnsig.rs) License: MPL-2.0 - The applicable license policy does not permit this license (5) (uniffi_macros-0.31.2/src/util.rs) License: MPL-2.0 - The applicable license policy does not permit this license (5) (uniffi_macros-0.31.2/Cargo.toml) License: MPL-2.0 - The applicable license policy does not permit this license (5) (uniffi_macros-0.31.2/src/export/scaffolding.rs) License: MPL-2.0 - The applicable license policy does not permit this license (5) (uniffi_macros-0.31.2/src/export/utrait.rs) From: ? → cargo/uniffi@0.31.2 → cargo/uniffi_macros@0.31.2 ℹ Read more on: This package | This alert | What is a license policy violation? Next steps: Take a moment to review the security alert above. Review the linked package source code to understand the potential risk. Ensure the package is not malicious before proceeding. If you're unsure how to proceed, reach out to your security team or ask the Socket team for help at support@socket.dev. Suggestion: Find a package that does not violate your license policy or adjust your policy to allow this package's license. Mark the package as acceptable risk. To ignore this alert only in this pull request, reply with the comment @SocketSecurity ignore cargo/uniffi_macros@0.31.2. You can also ignore all packages with @SocketSecurity ignore-all. To ignore an alert for all future pull requests, use Socket's Dashboard to change the triage state of this alert.
Warn		License policy violation: cargo uniffi_meta under MPL-2.0 License: MPL-2.0 - The applicable license policy does not permit this license (5) (uniffi_meta-0.31.2/src/lib.rs) License: MPL-2.0 - The applicable license policy does not permit this license (5) (uniffi_meta-0.31.2/src/group.rs) License: MPL-2.0 - The applicable license policy does not permit this license (5) (uniffi_meta-0.31.2/src/types.rs) License: MPL-2.0 - The applicable license policy does not permit this license (5) (uniffi_meta-0.31.2/src/reader.rs) License: MPL-2.0 - The applicable license policy does not permit this license (5) (uniffi_meta-0.31.2/Cargo.toml) License: MPL-2.0 - The applicable license policy does not permit this license (5) (uniffi_meta-0.31.2/src/metadata.rs) License: MPL-2.0 - The applicable license policy does not permit this license (5) (uniffi_meta-0.31.2/src/ffi_names.rs) From: ? → cargo/uniffi@0.31.2 → cargo/uniffi_meta@0.31.2 ℹ Read more on: This package | This alert | What is a license policy violation? Next steps: Take a moment to review the security alert above. Review the linked package source code to understand the potential risk. Ensure the package is not malicious before proceeding. If you're unsure how to proceed, reach out to your security team or ask the Socket team for help at support@socket.dev. Suggestion: Find a package that does not violate your license policy or adjust your policy to allow this package's license. Mark the package as acceptable risk. To ignore this alert only in this pull request, reply with the comment @SocketSecurity ignore cargo/uniffi_meta@0.31.2. You can also ignore all packages with @SocketSecurity ignore-all. To ignore an alert for all future pull requests, use Socket's Dashboard to change the triage state of this alert.
Warn		License policy violation: cargo uniffi_pipeline under MPL-2.0 License: MPL-2.0 - The applicable license policy does not permit this license (5) (uniffi_pipeline-0.31.2/src/value.rs) License: MPL-2.0 - The applicable license policy does not permit this license (5) (uniffi_pipeline-0.31.2/Cargo.toml) License: MPL-2.0 - The applicable license policy does not permit this license (5) (uniffi_pipeline-0.31.2/src/node.rs) License: MPL-2.0 - The applicable license policy does not permit this license (5) (uniffi_pipeline-0.31.2/src/pipeline.rs) License: MPL-2.0 - The applicable license policy does not permit this license (5) (uniffi_pipeline-0.31.2/src/lib.rs) From: ? → cargo/uniffi@0.31.2 → cargo/uniffi_pipeline@0.31.2 ℹ Read more on: This package | This alert | What is a license policy violation? Next steps: Take a moment to review the security alert above. Review the linked package source code to understand the potential risk. Ensure the package is not malicious before proceeding. If you're unsure how to proceed, reach out to your security team or ask the Socket team for help at support@socket.dev. Suggestion: Find a package that does not violate your license policy or adjust your policy to allow this package's license. Mark the package as acceptable risk. To ignore this alert only in this pull request, reply with the comment @SocketSecurity ignore cargo/uniffi_pipeline@0.31.2. You can also ignore all packages with @SocketSecurity ignore-all. To ignore an alert for all future pull requests, use Socket's Dashboard to change the triage state of this alert.
Warn		License policy violation: cargo uniffi_udl under MPL-2.0 License: MPL-2.0 - The applicable license policy does not permit this license (5) (uniffi_udl-0.31.2/src/collectors.rs) License: MPL-2.0 - The applicable license policy does not permit this license (5) (uniffi_udl-0.31.2/src/converters/mod.rs) License: MPL-2.0 - The applicable license policy does not permit this license (5) (uniffi_udl-0.31.2/src/converters/callables.rs) License: MPL-2.0 - The applicable license policy does not permit this license (5) (uniffi_udl-0.31.2/Cargo.toml) License: MPL-2.0 - The applicable license policy does not permit this license (5) (uniffi_udl-0.31.2/src/attributes.rs) License: MPL-2.0 - The applicable license policy does not permit this license (5) (uniffi_udl-0.31.2/src/literal.rs) License: MPL-2.0 - The applicable license policy does not permit this license (5) (uniffi_udl-0.31.2/src/converters/enum_.rs) License: MPL-2.0 - The applicable license policy does not permit this license (5) (uniffi_udl-0.31.2/src/converters/interface.rs) License: MPL-2.0 - The applicable license policy does not permit this license (5) (uniffi_udl-0.31.2/src/resolver.rs) License: MPL-2.0 - The applicable license policy does not permit this license (5) (uniffi_udl-0.31.2/src/lib.rs) License: MPL-2.0 - The applicable license policy does not permit this license (5) (uniffi_udl-0.31.2/src/finder.rs) From: ? → cargo/uniffi@0.31.2 → cargo/uniffi_udl@0.31.2 ℹ Read more on: This package | This alert | What is a license policy violation? Next steps: Take a moment to review the security alert above. Review the linked package source code to understand the potential risk. Ensure the package is not malicious before proceeding. If you're unsure how to proceed, reach out to your security team or ask the Socket team for help at support@socket.dev. Suggestion: Find a package that does not violate your license policy or adjust your policy to allow this package's license. Mark the package as acceptable risk. To ignore this alert only in this pull request, reply with the comment @SocketSecurity ignore cargo/uniffi_udl@0.31.2. You can also ignore all packages with @SocketSecurity ignore-all. To ignore an alert for all future pull requests, use Socket's Dashboard to change the triage state of this alert.
Warn		License policy violation: cargo uniffi under MPL-2.0 License: MPL-2.0 - The applicable license policy does not permit this license (5) (uniffi-0.31.2/src/cli/uniffi_bindgen.rs) License: MPL-2.0 - The applicable license policy does not permit this license (5) (uniffi-0.31.2/uniffi-bindgen.rs) License: MPL-2.0 - The applicable license policy does not permit this license (5) (uniffi-0.31.2/src/cli/mod.rs) License: MPL-2.0 - The applicable license policy does not permit this license (5) (uniffi-0.31.2/src/cli/swift.rs) License: MPL-2.0 - The applicable license policy does not permit this license (5) (uniffi-0.31.2/src/lib.rs) License: MPL-2.0 - The applicable license policy does not permit this license (5) (uniffi-0.31.2/Cargo.toml) License: MPL-2.0 - The applicable license policy does not permit this license (5) (uniffi-0.31.2/uniffi-bindgen-swift.rs) From: Cargo.lock → cargo/uniffi@0.31.2 ℹ Read more on: This package | This alert | What is a license policy violation? Next steps: Take a moment to review the security alert above. Review the linked package source code to understand the potential risk. Ensure the package is not malicious before proceeding. If you're unsure how to proceed, reach out to your security team or ask the Socket team for help at support@socket.dev. Suggestion: Find a package that does not violate your license policy or adjust your policy to allow this package's license. Mark the package as acceptable risk. To ignore this alert only in this pull request, reply with the comment @SocketSecurity ignore cargo/uniffi@0.31.2. You can also ignore all packages with @SocketSecurity ignore-all. To ignore an alert for all future pull requests, use Socket's Dashboard to change the triage state of this alert.

View full report