add dependency updater tool to match deno releases
I believe we should follow deno releases when we are updating dependencies.
This tool will help to keep it up to date.
I did not update dependecies itself due to additional work required to update to the latest deno version(2.2.6) such as:
- add a new arg to
write_utf8_v2fn call -Noneshould be fine - deal with new unsafe op
op_get_ext_import_meta_protointest::check_op_whitelist- idk what to to here
After using the tool first time it will resolve:
- https://github.com/rscarson/rustyscript/issues/332
- https://github.com/denoland/rusty_v8/issues/1700
Very similar to something I built into the rustyscript cli
- Is the rustyscript cli code available anywhere?
- What should we do with PR? Its fine if you have own tool or want to make it a separate repository.
Just fyi, the check_op_whitelist test is to prevent sandbox-breaking vulnerabilties like op_panic
in src/op_whitelist.js you'll find the list. Basically I go to deno or deno_core where the op is defined, review their code to make sure it does not break sandbox, and add it to the list if it is clean
I'd like to integrate this into the rustyscript-cli instead of the main crate!