Release request commit created with Cranko.

+++ cranko-rc-info-v1
[[projects]]
qnames = ["tectonic_geturl", "cargo"]
bump_spec = "minor bump"

[[projects]]
qnames = ["tectonic_docmodel", "cargo"]
bump_spec = "micro bump"

[[projects]]
qnames = ["tectonic_bridge_graphite2", "cargo"]
bump_spec = "micro bump"

[[projects]]
qnames = ["tectonic_bridge_core", "cargo"]
bump_spec = "minor bump"

[[projects]]
qnames = ["tectonic_pdf_io", "cargo"]
bump_spec = "micro bump"

+++

Author: cranko

CHANGELOG.md

@@ -117,7 +117,7 @@ tokio = "0.1.22"
 
 [package.metadata.vcpkg]
 git = "https://github.com/microsoft/vcpkg"
-rev = "5a10163c44526b5d42a67480ce7a692a36948761"
+rev = "997cd412fa4dff71bec6c99dea95f0b9a3c2c240"
 
 [package.metadata.vcpkg.target]
 x86_64-apple-darwin = { install = ["freetype","harfbuzz[icu,graphite2]"] }

Cargo.lock

@@ -1,8 +1,44 @@
-# See elsewhere for changelog
+# rc: minor bump
 
-This project’s release notes are curated from the Git history of its main
-branch. You can find them by looking at [the version of this file on the
-`release` branch][branch] or the [GitHub release history][gh-releases].
+- Add `SecuritySettings::allow_extra_search_paths()` (#814, @ralismark).
 
-[branch]: https://github.com/tectonic-typesetting/tectonic/blob/release/crates/bridge_core/CHANGELOG.md
-[gh-releases]: https://github.com/tectonic-typesetting/tectonic/releases
+
+# tectonic_bridge_core 0.2.2 (2021-06-17)
+
+- Switch from running [cbindgen] at build time to having the developer run it
+  manually. This really ought to fix the crate builds on docs.rs ([#788]), and
+  should speed builds too.
+
+[cbindgen]: https://github.com/eqrion/cbindgen
+[#788]: https://github.com/tectonic-typesetting/tectonic/issues/788
+
+
+# tectonic_bridge_core 0.2.1 (2021-06-17)
+
+- Attempt to fix crate builds on docs.rs — see [#788]. This works around an
+  issue in Tectonic’s usage of [cbindgen] by configuring Cargo to operate in
+  offline mode when building on docs.rs, which builds crates with network access
+  turned off.
+
+[#788]: https://github.com/tectonic-typesetting/tectonic/issues/788
+[cbindgen]: https://github.com/eqrion/cbindgen
+
+
+# tectonic_bridge_core 0.2.0 (2021-06-15)
+
+- Add a security infrastructure that gives a systematic way to control whether
+  features that can be abused by untrusted inputs, like shell-escape, are
+  enabled. The default is to disable all such features. Callers can request to
+  allow their use, but we use a centralized approach that ensures that such
+  requests will always be denied if the environment variable
+  `$TECTONIC_UNTRUSTED_MODE` is set to a nonempty value (@pkgw, #787).
+- Add a C API allowing us to expose the filesystem paths for just-opened
+  inputs. This is needed for correct SyncTeX support (@hullanson, @pkgw, #762).
+
+
+# tectonic_bridge_core 0.1.0 (2021-06-03)
+
+This is the first release of the "core" bridge crate. It provides a baseline of
+APIs for C/C++ code to interact with an underlying "driver" implemented in Rust.
+Those APIs mainly revolve around basic I/O and diagnostics, although we do have
+a specialized "system request" to implement the TeX shell-escape feature.

Cargo.toml

@@ -764,6 +764,11 @@ impl SecuritySettings {
     pub fn allow_shell_escape(&self) -> bool {
         !self.disable_insecures
     }
+
+    /// Query whether we're allowed to specify extra paths to read files from.
+    pub fn allow_extra_search_paths(&self) -> bool {
+        !self.disable_insecures
+    }
 }
 
 impl Default for SecuritySettings {

crates/bridge_core/CHANGELOG.md

@@ -1,8 +1,21 @@
-# See elsewhere for changelog
+# rc: micro bump
 
-This project’s release notes are curated from the Git history of its main
-branch. You can find them by looking at [the version of this file on the
-`release` branch][branch] or the [GitHub release history][gh-releases].
+- Fix the build script for Rust >=1.55 (#820, @pkgw)
 
-[branch]: https://github.com/tectonic-typesetting/tectonic/blob/release/crates/bridge_graphite2/CHANGELOG.md
-[gh-releases]: https://github.com/tectonic-typesetting/tectonic/releases
+
+# tectonic_bridge_graphite2 0.2.0 (2021-06-03)
+
+- Fix up handling of how C/C++ header file paths are exported to dependent
+  crates. This is a breaking change: we've moved from a single include directory
+  to a list of them.
+- Some improvements to the documentation
+
+# tectonic_bridge_graphite2 0.1.1 (2021-01-16)
+
+- Export information about the `GRAPHITE2_STATIC` C preprocessor define that is
+  sometimes needed.
+
+# tectonic_bridge_graphite2 0.1.0 (2021-01-04)
+
+A new crate to encapsulate the location and use of the `graphite2` library used
+by Tectonic.

crates/bridge_core/src/lib.rs

@@ -45,7 +45,10 @@ fn main() {
     // indicate it with a specialized variable.
 
     let target = env::var("TARGET").unwrap();
-    let rustflags = env::var("RUSTFLAGS").unwrap_or_default();
+
+    let rustflags = env::var("CARGO_ENCODED_RUSTFLAGS")
+        .unwrap_or_else(|_| env::var("RUSTFLAGS").unwrap_or_default());
+
     let define_static_flag = if target.contains("-msvc") && rustflags.contains("+crt-static") {
         "1"
     } else {

crates/bridge_graphite2/CHANGELOG.md

@@ -386,7 +386,7 @@ impl<CB: CacheBackend> CachingBundle<CB> {
                     let digest = if digest == "-" {
                         continue;
                     } else {
-                        match DigestData::from_str(&digest) {
+                        match DigestData::from_str(digest) {
                             Ok(d) => d,
                             Err(e) => {
                                 tt_warning!(status, "ignoring bad digest data \"{}\" for \"{}\" in \"{}\"",
@@ -480,7 +480,7 @@ impl<CB: CacheBackend> CachingBundle<CB> {
         // fresh pull.
         if let Some(info) = self.index.get(digest::DIGEST_NAME) {
             if let Ok(Some((backend, digest))) =
-                CB::open_with_quick_check(&self.resolved_url, &info, status)
+                CB::open_with_quick_check(&self.resolved_url, info, status)
             {
                 if self.cached_digest == digest {
                     // We managed to pull some data that match the digest. We

crates/bridge_graphite2/build.rs

@@ -112,7 +112,7 @@ impl CacheBackend for IndexedTarBackend {
             reader: DefaultBackend::default().open_range_reader(resolved_url),
         };
 
-        if let Ok(d) = cache_backend.get_file(digest::DIGEST_NAME, &digest_file_info, status) {
+        if let Ok(d) = cache_backend.get_file(digest::DIGEST_NAME, digest_file_info, status) {
             if let Ok(d) = String::from_utf8(d) {
                 if let Ok(d) = DigestData::from_str(&d) {
                     return Ok(Some((cache_backend, d)));