ciborium 0.1.0

checksums.yaml

@@ -0,0 +1,7 @@
+---
+SHA256:
+  metadata.gz: 134062e0f9eac0198937cb3b75bf5fa10e5d2d164c2115e665d447b44fbf1ecb
+  data.tar.gz: c1a7df490adfd99e368e960543a1334fb7faefda53634669d91f10ae29137d8a
+SHA512:
+  metadata.gz: 408467f3bab40ca8c346807f11df507f5e0c7a038f2891f2bba7a276bff23b40ed380ea04a424c6dd102a62ba4bfbae38520ce4c85328ce1dc018501ac584a3a
+  data.tar.gz: 98a49f65d0d2888e3fa6aa4f5944ab1b6602deeb5d7e79c6f2d298c61161eb9ed9fe0abb50cf292ab5f0bc2f14abce659a5628ea0157cde1d9be6148d2cea281

data/CHANGELOG.md

@@ -0,0 +1,9 @@
+# Changelog
+
+## 0.1.0 (2026-11-11)
+
+- Initial release: a CBOR encoder and decoder backed by a Rust extension, where tags carry meaning only through allowlisted extensions.
+- Built-in extensions for bignums, Time, URI and Regexp.
+- `profile: :ctap2` for the CTAP2 canonical CBOR encoding form that WebAuthn uses.
+- `Ciborium::Compat` and `ciborium/replace`, a stand-in for the cbor gem's interface.
+- RBS signatures under `sig/`.

data/LICENSE.txt

@@ -0,0 +1,21 @@
+The MIT License (MIT)
+
+Copyright (c) 2026 Sorah Fukumori
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in
+all copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN
+THE SOFTWARE.

data/NOTICE.md

@@ -0,0 +1,26 @@
+# Notices
+
+## Compiled into the native extension
+
+| Crate | License |
+|---|---|
+| [ciborium-ll](https://github.com/enarx/ciborium), ciborium-io | Apache-2.0 |
+| [magnus](https://github.com/matsadler/magnus) | MIT |
+| [rb-sys](https://github.com/oxidize-rb/rb-sys) | MIT OR Apache-2.0 |
+| [half](https://github.com/VoidStarKat/half-rs) | MIT OR Apache-2.0 |
+| [cfg-if](https://github.com/rust-lang/cfg-if) | MIT OR Apache-2.0 |
+| [zerocopy](https://github.com/google/zerocopy) | BSD-2-Clause OR Apache-2.0 OR MIT |
+
+The source gem builds these from crates.io. Precompiled gems carry their license texts under
+`licenses/`.
+
+## Test fixtures
+
+`spec/fixtures/webauthn/` holds attestation objects taken from the test suite of
+[webauthn-ruby](https://github.com/cedarcode/webauthn-ruby) (`spec/support/seeds.rb` at v3.5.0),
+which is available under the MIT License.
+
+`spec/upstream/` holds the specs of [cbor-ruby](https://github.com/cabo/cbor-ruby) (the cbor gem,
+`spec/` at commit 89e94f3b059deb58478eab51996f764fcc6ecd82), copied unmodified except for
+`spec_helper.rb`, which is replaced. cbor-ruby is available under the Apache License 2.0, a copy
+of which is in `spec/upstream/LICENSE.txt`.

data/README.md

@@ -0,0 +1,221 @@
+# Ciborium: CBOR for Ruby without surprises from the input
+
+Ciborium is a [CBOR](https://www.rfc-editor.org/rfc/rfc8949) encoder and decoder for Ruby, backed by a Rust extension built on [ciborium-ll](https://crates.io/crates/ciborium-ll).
+
+It also ships a compatibility layer for the [cbor](https://rubygems.org/gems/cbor) gem. `require "ciborium/replace"` makes `CBOR` refer to Ciborium, so gems written against the cbor gem, such as [webauthn](https://github.com/cedarcode/webauthn-ruby) and [cose](https://github.com/cedarcode/cose-ruby), run on Ciborium unchanged.
+
+## Why
+
+The cbor gem is a fork of msgpack-ruby's C extension with CBOR support added on top, and has not followed the memory-safety fixes msgpack-ruby made since.
+
+Ciborium is a fresh implementation:
+
+- **Memory safety**: parsing and serialization happen in Rust. Nesting is bounded by `max_depth` in both directions, and the decoder needs no recursion.
+- **Strict by default**: tags are not interpreted unless an extension is allowlisted, and invalid UTF-8, malformed simple values, duplicate map keys and trailing bytes all raise.
+- **CTAP2 canonical form**: `profile: :ctap2` validates and produces the encoding WebAuthn requires.
+- **RBS signatures** are shipped in `sig/`.
+
+## Installation
+
+```
+bundle add ciborium
+```
+
+Ciborium requires Ruby 3.3 or later.
+
+| Platform | Precompiled gem |
+|---|---|
+| Linux x86_64 and aarch64, glibc 2.34 or later | `x86_64-linux-gnu`, `aarch64-linux-gnu` |
+| Linux x86_64 and aarch64, musl | `x86_64-linux-musl`, `aarch64-linux-musl` |
+| Linux armv7, glibc 2.31 or later | `arm-linux-gnu` |
+| macOS 11 or later on Apple silicon | `arm64-darwin` |
+| Windows x64 | `x64-mingw-ucrt` |
+
+The precompiled gems carry the extension for Ruby 3.3, 3.4 and 4.0. Anywhere else the source gem builds the extension, which needs a Rust toolchain and libclang (for [rb-sys](https://github.com/oxidize-rb/rb-sys)).
+
+## Usage
+
+```ruby
+require "ciborium"
+
+bytes = Ciborium.encode({"name" => "ciborium", "tags" => [1, 2.5, nil]})
+Ciborium.decode(bytes) #=> {"name" => "ciborium", "tags" => [1, 2.5, nil]}
+
+Ciborium.decode("\xd8\x23\x63a*b".b) #=> #<data Ciborium::Tagged tag=35, value="a*b">
+```
+
+`decode` raises when bytes follow the item. `decode_prefix` returns the item and the number of bytes it took instead, and `decode_sequence` reads an [RFC 8742](https://www.rfc-editor.org/rfc/rfc8742) sequence:
+
+```ruby
+Ciborium.decode_prefix("\x82\x01\x02\xff".b) #=> [[1, 2], 3]
+Ciborium.decode_sequence("\x01\x02".b)        #=> [1, 2]
+```
+
+### Decoding options
+
+```ruby
+Ciborium.decode(bytes,
+  extensions: [],           # allowlisted extensions, see below
+  symbolize_keys: false,    # text map keys as (garbage-collectable) Symbols
+  max_depth: 128,           # nesting limit for arrays, maps and tags
+  duplicate_keys: :error,   # or :last_wins
+  profile: nil,             # or :ctap2
+)
+```
+
+### Encoding
+
+| Ruby | CBOR |
+|---|---|
+| `nil`, `true`, `false` | simple values 22, 21, 20 |
+| `Integer` in `-2**64...2**64` | major type 0 or 1, in the shortest form |
+| `Float` | the narrowest float that keeps the value exactly |
+| `String` in `ASCII-8BIT` | byte string |
+| other `String`, `Symbol` | text string, transcoded to UTF-8 |
+| `Array`, `Hash` | array, map, in insertion order |
+| `Ciborium::Tagged`, `Ciborium::Simple` | tag, simple value |
+| `Ciborium::Encoded` | its bytes as-is, after checking they hold one well-formed item |
+
+Anything else raises `Ciborium::EncodeError`, unless an extension encodes it or a `fallback` returns something to encode in its place:
+
+```ruby
+Ciborium.encode(Date.today, fallback: ->(date) { date.iso8601 })
+```
+
+### Streaming
+
+```ruby
+decoder = Ciborium::Decoder.new(symbolize_keys: true)
+until io.eof?
+  decoder.feed(io.readpartial(4096))
+  decoder.each { |item| handle(item) }  # yields only complete items
+end
+
+encoder = Ciborium::Encoder.new
+encoder.write_array_header(2).write(1).write("two")
+encoder.bytes #=> "\x82\x01ctwo"
+```
+
+`Decoder` also reads headers (`read_array_header`, `read_map_header`), and offers `skip` and `next_nil?`.
+
+### Errors
+
+| Class | Raised when |
+|---|---|
+| `Ciborium::MalformedError` | the input is not well-formed, breaks a strictness rule or the profile, or has trailing bytes |
+| `Ciborium::IncompleteError` | the input ends inside an item |
+| `Ciborium::DepthError` | nesting exceeds `max_depth` |
+| `Ciborium::ExtensionError` | an extension failed to decode a tag; the original error is the `cause` |
+| `Ciborium::UnexpectedTypeError` | a `Decoder` header reader found another type |
+| `Ciborium::EncodeError` | an object cannot be encoded, or an extension or fallback failed |
+
+All of them inherit from `Ciborium::Error`, and the decoding ones also from `Ciborium::DecodeError`.
+
+## Extensions
+
+An extension gives a tag meaning in both directions. Pass the built-in ones by name:
+
+```ruby
+Ciborium.decode(bytes, extensions: [:bignum, :time])
+Ciborium.encode(Time.now, extensions: [:time])
+```
+
+| Name | Tags | Ruby |
+|---|---|---|
+| `:bignum` | 2, 3 | `Integer` outside `-2**64...2**64` |
+| `:time` | 0, 1 | `Time`. It encodes as tag 1, using an Integer for whole seconds and a Float otherwise |
+| `:uri` | 32 | `URI::Generic` |
+| `:regexp` | 35 | `Regexp` without flags. `Ciborium::Extensions::Regexp.new(timeout: 0.1)` sets a match timeout |
+
+An extension builds Ruby objects from the input, so allowlist only those you trust the input with.
+
+Any object that responds to `tags`, `classes`, `decode(tag, value)` and `encode(object)` is an extension too:
+
+```ruby
+class PointExtension
+  def tags = [40_000]
+  def classes = [Point]
+  def decode(_tag, (x, y)) = Point.new(x, y)
+  def encode(point) = Ciborium::Tagged.new(40_000, [point.x, point.y])
+end
+
+Ciborium.decode(bytes, extensions: [PointExtension.new])
+```
+
+## WebAuthn and the CTAP2 profile
+
+WebAuthn encodes everything in the CTAP2 canonical CBOR encoding form ([CTAP 2.2 section 8](https://fidoalliance.org/specs/fido-v2.2-ps-20250714/fido-client-to-authenticator-protocol-v2.2-ps-20250714.html#ctap2-canonical-cbor-encoding-form)). That form uses no tags at all, so WebAuthn data needs no extension. With `profile: :ctap2`, decoding rejects anything outside that form: tags, indefinite lengths, arguments longer than needed, and map keys that are out of order or duplicated. Encoding sorts map keys into canonical order and refuses tags.
+
+```ruby
+attestation = Ciborium.decode(attestation_object, profile: :ctap2)
+
+# The credential public key in authenticator data is followed by extension data.
+cose_key, length = Ciborium.decode_prefix(credential_public_key_and_rest, profile: :ctap2)
+```
+
+## Replacing the cbor gem
+
+`Ciborium::Compat` implements the cbor gem's interface on top of Ciborium:
+
+- `CBOR.encode`, `CBOR.decode` and their `pack`, `dump`, `unpack` and `load` aliases
+- `Packer`, `Unpacker` and `Buffer`
+- `Tagged`, `Simple`, its error classes, and `to_cbor`
+
+`ciborium/replace` installs it as `CBOR` and marks the cbor gem as loaded, so a later `require "cbor"` does nothing. Keep whatever depends on the cbor gem in the Gemfile, and add ciborium without letting Bundler require it:
+
+```ruby
+# Gemfile
+gem "webauthn"
+gem "ciborium", require: false
+```
+
+Then require `ciborium/replace` after Bundler sets up the load path, and before anything requires `cbor`. In a Rails app, that is between these two lines of `config/application.rb`:
+
+```ruby
+# config/application.rb
+require_relative "boot"
+require "rails/all"
+
+require "ciborium/replace"
+Bundler.require(*Rails.groups)
+```
+
+Outside Rails, put it after `require "bundler/setup"` and before `Bundler.require` or the first `require "webauthn"`. If the cbor gem was loaded first anyway, `ciborium/replace` warns and replaces `CBOR` regardless.
+
+Because callers of the cbor gem cannot pass options, Compat takes its extensions from one process-wide setting. Nothing is allowlisted by default, so big Integers (tags 2 and 3) decode to `Tagged` until `:bignum` is allowlisted:
+
+```ruby
+Ciborium::Compat.extensions = [:bignum, :time]
+```
+
+The specs of webauthn-ruby and cose-ruby run against Compat in CI with this default, so neither needs any tag extension. The cbor gem's own specs run too, both with no extensions and with every built-in one allowlisted.
+
+### Behaviour of Compat
+
+Compat follows Ciborium's rules rather than reproducing the cbor gem exactly:
+
+- Tags decode to `Tagged` unless allowlisted in `Compat.extensions`, and Integers outside `-2**64...2**64` encode only with `:bignum` allowlisted.
+- Input that is not well-formed or breaks Ciborium's strictness rules raises `MalformedFormatError`, as does an extension failure, with the original error as the `cause`.
+- Encoding raises `EncodeError` on invalid UTF-8, and on a `Regexp` with flags.
+- `Time` encodes subseconds as a Float.
+- `Tagged` and `Simple` are immutable `Data`.
+- `Unpacker#buffer` holds input that has not yet reached the decoder.
+
+## Development
+
+```
+mise install
+bin/setup
+bundle exec rake compile spec spec:upstream steep
+hk check --all
+```
+
+The Rust extension lives in `ext/ciborium`. Signatures are written inline with rbs-inline and generated into `sig/generated` by `rake rbs`. That directory is committed, and CI checks it is current.
+
+## Contributing
+
+Bug reports and pull requests are welcome on GitHub at https://github.com/sorah/ciborium-ruby.
+
+## License
+
+MIT License, see [LICENSE.txt](./LICENSE.txt). Third-party code compiled into the extension, and test fixtures taken from other projects, are listed in [NOTICE.md](./NOTICE.md).

data/Rakefile

@@ -0,0 +1,46 @@
+# frozen_string_literal: true
+
+require "bundler/gem_tasks"
+require "rspec/core/rake_task"
+require "rake/extensiontask"
+
+GEMSPEC = Bundler.load_gemspec("ciborium.gemspec")
+
+# No gemspec: precompiled gems are assembled by rakelib/native.rake.
+Rake::ExtensionTask.new("ciborium_native") do |ext|
+  ext.ext_dir = "ext/ciborium"
+  ext.lib_dir = "lib/ciborium"
+  ext.source_pattern = "{Cargo.toml,Cargo.lock,build.rs,src/**/*.rs}"
+  # Platforms without a native CI runner are cross-compiled inside rb-sys-dock
+  # images (see .github/workflows/native.yml).
+  ext.cross_compile = true
+  ext.cross_platform = %w[x86_64-linux-musl aarch64-linux-musl arm-linux-gnueabihf]
+end
+
+RSpec::Core::RakeTask.new(:spec)
+task spec: :compile
+
+namespace :spec do
+  desc "Run the cbor gem's specs against Ciborium::Compat, with default and with all extensions"
+  task upstream: :compile do
+    ["default", "all"].each do |mode|
+      sh(
+        {"CIBORIUM_UPSTREAM_EXTENSIONS" => mode}, "rspec", "--options", "spec/upstream/.rspec", "-I", "spec/upstream",
+        "--default-path", "spec/upstream", "spec/upstream"
+      )
+    end
+  end
+end
+
+desc "Regenerate inline RBS signatures under sig/generated"
+task :rbs do
+  sh "rbs-inline --output=sig/generated lib"
+  sh "rbs -r time -r uri -I sig/generated -I sig/manual -I sig-stub validate"
+end
+
+desc "Type check lib against the RBS signatures"
+task steep: :rbs do
+  sh "steep check"
+end
+
+task default: [:spec, "spec:upstream", :steep]

data/ext/ciborium/Cargo.lock

@@ -0,0 +1,339 @@
+# This file is automatically @generated by Cargo.
+# It is not intended for manual editing.
+version = 4
+
+[[package]]
+name = "aho-corasick"
+version = "1.1.5"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "c982642fa9e8606056828ee9a8505737230110bb1099153c79efe865c59d12ba"
+dependencies = [
+ "memchr",
+]
+
+[[package]]
+name = "bindgen"
+version = "0.72.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "993776b509cfb49c750f11b8f07a46fa23e0a1386ffc01fb1e7d343efc387895"
+dependencies = [
+ "bitflags",
+ "cexpr",
+ "clang-sys",
+ "itertools",
+ "proc-macro2",
+ "quote",
+ "regex",
+ "rustc-hash",
+ "shlex",
+ "syn",
+]
+
+[[package]]
+name = "bitflags"
+version = "2.13.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "3ded4057c258ba199e2d26386d3af3780957ecaee6c4ef4041c6b4b8b97c0b06"
+
+[[package]]
+name = "cexpr"
+version = "0.6.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "6fac387a98bb7c37292057cffc56d62ecb629900026402633ae9160df93a8766"
+dependencies = [
+ "nom",
+]
+
+[[package]]
+name = "cfg-if"
+version = "1.0.5"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "4e7648175b45a9a48536d676f68d918270699102aa8dab5496df06904c914600"
+
+[[package]]
+name = "ciborium-io"
+version = "0.2.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "05afea1e0a06c9be33d539b876f1ce3692f4afea2cb41f740e7743225ed1c757"
+
+[[package]]
+name = "ciborium-ll"
+version = "0.2.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "57663b653d948a338bfb3eeba9bb2fd5fcfaecb9e199e87e1eda4d9e8b240fd9"
+dependencies = [
+ "ciborium-io",
+ "half",
+]
+
+[[package]]
+name = "ciborium_native"
+version = "0.1.0"
+dependencies = [
+ "ciborium-io",
+ "ciborium-ll",
+ "half",
+ "magnus",
+ "rb-sys",
+ "rb-sys-env",
+]
+
+[[package]]
+name = "clang-sys"
+version = "1.9.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "157a8ba7b480713b56f4c09fd13fc3e0a22a5dfab8097ba61cbc5feef950788a"
+dependencies = [
+ "glob",
+ "libc",
+ "libloading",
+]
+
+[[package]]
+name = "crunchy"
+version = "0.2.4"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "460fbee9c2c2f33933d720630a6a0bac33ba7053db5344fac858d4b8952d77d5"
+
+[[package]]
+name = "either"
+version = "1.19.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "0e9c71c2167ca323c882b99918929403426e2373ea17242ff5653e0d5e1058be"
+
+[[package]]
+name = "glob"
+version = "0.3.4"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "e4eba85ea1d0a966a983acd07deee566e67395d2d96b6fb39e62b5a833f1eb0b"
+
+[[package]]
+name = "half"
+version = "2.7.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "6ea2d84b969582b4b1864a92dc5d27cd2b77b622a8d79306834f1be5ba20d84b"
+dependencies = [
+ "cfg-if",
+ "crunchy",
+ "zerocopy",
+]
+
+[[package]]
+name = "itertools"
+version = "0.13.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "413ee7dfc52ee1a4949ceeb7dbc8a33f2d6c088194d9f922fb8318faf1f01186"
+dependencies = [
+ "either",
+]
+
+[[package]]
+name = "lazy_static"
+version = "1.5.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "20870f649af7073d53e38067b2a84312175d56ea15217e1b15bc83506ec50afb"
+
+[[package]]
+name = "libc"
+version = "0.2.191"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "65cd87c9a6d60536580b316ad985726104730a5151c99845f2490428ef91240a"
+
+[[package]]
+name = "libloading"
+version = "0.8.9"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "d7c4b02199fee7c5d21a5ae7d8cfa79a6ef5bb2fc834d6e9058e89c825efdc55"
+dependencies = [
+ "cfg-if",
+ "windows-link",
+]
+
+[[package]]
+name = "magnus"
+version = "0.9.3"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "40ef424404d166cbb71c8b8d19c9c589c748c4547c1afa1928c5504299f6c713"
+dependencies = [
+ "magnus-macros",
+ "rb-sys",
+ "rb-sys-env",
+ "seq-macro",
+]
+
+[[package]]
+name = "magnus-macros"
+version = "0.9.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "9dafde2eeb66f090e0f326112323eb8324b12cb32b5d1210e541d3df6b0ce77e"
+dependencies = [
+ "proc-macro2",
+ "quote",
+ "syn",
+]
+
+[[package]]
+name = "memchr"
+version = "2.8.3"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "cf8baf1c55e62ffcace7a9f06f4bd9cd3f0c4beb022d3b367256b91b87513d98"
+
+[[package]]
+name = "minimal-lexical"
+version = "0.2.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "68354c5c6bd36d73ff3feceb05efa59b6acb7626617f4962be322a825e61f79a"
+
+[[package]]
+name = "nom"
+version = "7.1.3"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "d273983c5a657a70a3e8f2a01329822f3b8c8172b73826411a55751e404a0a4a"
+dependencies = [
+ "memchr",
+ "minimal-lexical",
+]
+
+[[package]]
+name = "proc-macro2"
+version = "1.0.107"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "985e7ec9bb745e6ce6535b544d84d6cd6f7ad8bd711c398938ae983b91a766d9"
+dependencies = [
+ "unicode-ident",
+]
+
+[[package]]
+name = "quote"
+version = "1.0.47"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "1fbf4db142a473a8d80c26bbf18454ed458bf8d26c8219c331daecfdbd079001"
+dependencies = [
+ "proc-macro2",
+]
+
+[[package]]
+name = "rb-sys"
+version = "0.9.130"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "02faf625bb10ba893e3ae620f19c9fb1b5f8fcae0fe4eb86bb3f2230fad75edb"
+dependencies = [
+ "rb-sys-build",
+]
+
+[[package]]
+name = "rb-sys-build"
+version = "0.9.130"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "05be6f9c86fe5482808162826f6c047d093b3670582296c770de1d94f8066694"
+dependencies = [
+ "bindgen",
+ "lazy_static",
+ "proc-macro2",
+ "quote",
+ "regex",
+ "shell-words",
+ "syn",
+]
+
+[[package]]
+name = "rb-sys-env"
+version = "0.2.3"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "cca7ad6a7e21e72151d56fe2495a259b5670e204c3adac41ee7ef676ea08117a"
+
+[[package]]
+name = "regex"
+version = "1.13.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "f020237b6c8eed93db2e2cb53c00c60a8e1bc73da7d073199a1180401450218d"
+dependencies = [
+ "aho-corasick",
+ "memchr",
+ "regex-automata",
+ "regex-syntax",
+]
+
+[[package]]
+name = "regex-automata"
+version = "0.4.18"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "ad8553b9b26413251cbf30e620595c7a41b3887f03da04579c0e6b0d6a06b4b2"
+dependencies = [
+ "aho-corasick",
+ "memchr",
+ "regex-syntax",
+]
+
+[[package]]
+name = "regex-syntax"
+version = "0.8.11"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "d6f6ff9a378485b298a5286656da665ba74413d36db0979633275d2e708145d4"
+
+[[package]]
+name = "rustc-hash"
+version = "2.1.3"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "6b1e7f9a428571be2dc5bc0505c13fb6bf936822b894ec87abf8a08a4e51742d"
+
+[[package]]
+name = "seq-macro"
+version = "0.3.6"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "1bc711410fbe7399f390ca1c3b60ad0f53f80e95c5eb935e52268a0e2cd49acc"
+
+[[package]]
+name = "shell-words"
+version = "1.1.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "dc6fe69c597f9c37bfeeeeeb33da3530379845f10be461a66d16d03eca2ded77"
+
+[[package]]
+name = "shlex"
+version = "1.3.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "0fda2ff0d084019ba4d7c6f371c95d8fd75ce3524c3cb8fb653a3023f6323e64"
+
+[[package]]
+name = "syn"
+version = "2.0.119"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "872831b642d1a07999a962a351ed35b955ea2cfc8f3862091e2a240a84f17297"
+dependencies = [
+ "proc-macro2",
+ "quote",
+ "unicode-ident",
+]
+
+[[package]]
+name = "unicode-ident"
+version = "1.0.27"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "a2c754d6c33795a1c324727428e5a7dedb5b06195f9890bdbcba760d3e246563"
+
+[[package]]
+name = "windows-link"
+version = "0.2.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "f0805222e57f7521d6a62e36fa9163bc891acd422f971defe97d64e70d0a4fe5"
+
+[[package]]
+name = "zerocopy"
+version = "0.8.63"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "e5fe1f8f1b06191a00962174c61aa5005e0bb391a6d80d07e24d115c01a92ed8"
+dependencies = [
+ "zerocopy-derive",
+]
+
+[[package]]
+name = "zerocopy-derive"
+version = "0.8.63"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "863ad3ac83293fb4d740aedbfdc9240dd8d1a50c1099acd76ce80ce7c7230c7f"
+dependencies = [
+ "proc-macro2",
+ "quote",
+ "syn",
+]