From 932a28d765b9266953652a2b5e1e585573c08d49 Mon Sep 17 00:00:00 2001
From: TomAFrench <tom@tomfren.ch>
Date: Wed, 13 Sep 2023 15:47:09 +0000
Subject: [PATCH 1/6] chore: add license fields to `Cargo.toml`

---
 Cargo.toml                                   | 1 +
 compiler/fm/Cargo.toml                       | 1 +
 compiler/noirc_driver/Cargo.toml             | 1 +
 compiler/noirc_errors/Cargo.toml             | 1 +
 compiler/noirc_evaluator/Cargo.toml          | 1 +
 compiler/noirc_frontend/Cargo.toml           | 1 +
 compiler/noirc_printable_type/Cargo.toml     | 1 +
 compiler/utils/arena/Cargo.toml              | 1 +
 compiler/utils/iter-extended/Cargo.toml      | 1 +
 compiler/wasm/Cargo.toml                     | 1 +
 tooling/acvm_backend_barretenberg/Cargo.toml | 2 +-
 tooling/lsp/Cargo.toml                       | 1 +
 tooling/nargo/Cargo.toml                     | 1 +
 tooling/nargo_cli/Cargo.toml                 | 1 +
 tooling/nargo_toml/Cargo.toml                | 1 +
 tooling/noirc_abi/Cargo.toml                 | 1 +
 tooling/noirc_abi_wasm/Cargo.toml            | 1 +
 17 files changed, 17 insertions(+), 1 deletion(-)

diff --git a/Cargo.toml b/Cargo.toml
index 5aeb9e1784e..32880bdfd16 100644
--- a/Cargo.toml
+++ b/Cargo.toml
@@ -29,6 +29,7 @@ version = "0.11.1"
 authors = ["The Noir Team <team@noir-lang.org>"]
 edition = "2021"
 rust-version = "1.66"
+license = "MIT OR Apache-2.0"
 
 [workspace.dependencies]
 acvm = "0.26.0"
diff --git a/compiler/fm/Cargo.toml b/compiler/fm/Cargo.toml
index 2fc7eac6d8f..1f6d6dabcb1 100644
--- a/compiler/fm/Cargo.toml
+++ b/compiler/fm/Cargo.toml
@@ -3,6 +3,7 @@ name = "fm"
 version.workspace = true
 authors.workspace = true
 edition.workspace = true
+license.workspace = true
 
 # See more keys and their definitions at https://doc.rust-lang.org/cargo/reference/manifest.html
 
diff --git a/compiler/noirc_driver/Cargo.toml b/compiler/noirc_driver/Cargo.toml
index bd38371f2ad..4b67afb73ff 100644
--- a/compiler/noirc_driver/Cargo.toml
+++ b/compiler/noirc_driver/Cargo.toml
@@ -3,6 +3,7 @@ name = "noirc_driver"
 version.workspace = true
 authors.workspace = true
 edition.workspace = true
+license.workspace = true
 
 # See more keys and their definitions at https://doc.rust-lang.org/cargo/reference/manifest.html
 
diff --git a/compiler/noirc_errors/Cargo.toml b/compiler/noirc_errors/Cargo.toml
index d6183062ff0..0cb6afc73bd 100644
--- a/compiler/noirc_errors/Cargo.toml
+++ b/compiler/noirc_errors/Cargo.toml
@@ -3,6 +3,7 @@ name = "noirc_errors"
 version.workspace = true
 authors.workspace = true
 edition.workspace = true
+license.workspace = true
 
 # See more keys and their definitions at https://doc.rust-lang.org/cargo/reference/manifest.html
 
diff --git a/compiler/noirc_evaluator/Cargo.toml b/compiler/noirc_evaluator/Cargo.toml
index 7e4265b2488..2b207e3d43c 100644
--- a/compiler/noirc_evaluator/Cargo.toml
+++ b/compiler/noirc_evaluator/Cargo.toml
@@ -3,6 +3,7 @@ name = "noirc_evaluator"
 version.workspace = true
 authors.workspace = true
 edition.workspace = true
+license.workspace = true
 
 # See more keys and their definitions at https://doc.rust-lang.org/cargo/reference/manifest.html
 
diff --git a/compiler/noirc_frontend/Cargo.toml b/compiler/noirc_frontend/Cargo.toml
index 638f8b3e0ed..1cb6e0c5c51 100644
--- a/compiler/noirc_frontend/Cargo.toml
+++ b/compiler/noirc_frontend/Cargo.toml
@@ -3,6 +3,7 @@ name = "noirc_frontend"
 version.workspace = true
 authors.workspace = true
 edition.workspace = true
+license.workspace = true
 
 # See more keys and their definitions at https://doc.rust-lang.org/cargo/reference/manifest.html
 
diff --git a/compiler/noirc_printable_type/Cargo.toml b/compiler/noirc_printable_type/Cargo.toml
index b3de1a63dec..5f2eea92257 100644
--- a/compiler/noirc_printable_type/Cargo.toml
+++ b/compiler/noirc_printable_type/Cargo.toml
@@ -3,6 +3,7 @@ name = "noirc_printable_type"
 version.workspace = true
 authors.workspace = true
 edition.workspace = true
+license.workspace = true
 
 # See more keys and their definitions at https://doc.rust-lang.org/cargo/reference/manifest.html
 
diff --git a/compiler/utils/arena/Cargo.toml b/compiler/utils/arena/Cargo.toml
index 04e46791ce0..e82201a2cf4 100644
--- a/compiler/utils/arena/Cargo.toml
+++ b/compiler/utils/arena/Cargo.toml
@@ -3,6 +3,7 @@ name = "arena"
 version.workspace = true
 authors.workspace = true
 edition.workspace = true
+license.workspace = true
 
 # See more keys and their definitions at https://doc.rust-lang.org/cargo/reference/manifest.html
 
diff --git a/compiler/utils/iter-extended/Cargo.toml b/compiler/utils/iter-extended/Cargo.toml
index b2c7aad20eb..c91e5ea6d77 100644
--- a/compiler/utils/iter-extended/Cargo.toml
+++ b/compiler/utils/iter-extended/Cargo.toml
@@ -3,6 +3,7 @@ name = "iter-extended"
 version.workspace = true
 authors.workspace = true
 edition.workspace = true
+license.workspace = true
 
 # See more keys and their definitions at https://doc.rust-lang.org/cargo/reference/manifest.html
 
diff --git a/compiler/wasm/Cargo.toml b/compiler/wasm/Cargo.toml
index c6126818434..4514a6eaf0d 100644
--- a/compiler/wasm/Cargo.toml
+++ b/compiler/wasm/Cargo.toml
@@ -3,6 +3,7 @@ name = "noir_wasm"
 version.workspace = true
 authors.workspace = true
 edition.workspace = true
+license.workspace = true
 
 # See more keys and their definitions at https://doc.rust-lang.org/cargo/reference/manifest.html
 
diff --git a/tooling/acvm_backend_barretenberg/Cargo.toml b/tooling/acvm_backend_barretenberg/Cargo.toml
index 847b8a224d8..a86fa90b0be 100644
--- a/tooling/acvm_backend_barretenberg/Cargo.toml
+++ b/tooling/acvm_backend_barretenberg/Cargo.toml
@@ -5,7 +5,7 @@ version = "0.11.0"
 authors.workspace = true
 edition.workspace = true
 rust-version = "1.66"
-license = "MIT OR Apache-2.0"
+license.workspace = true
 
 # See more keys and their definitions at https://doc.rust-lang.org/cargo/reference/manifest.html
 
diff --git a/tooling/lsp/Cargo.toml b/tooling/lsp/Cargo.toml
index 00f4f9f9d82..4bce51388d2 100644
--- a/tooling/lsp/Cargo.toml
+++ b/tooling/lsp/Cargo.toml
@@ -4,6 +4,7 @@ description = "Language server for Noir"
 version.workspace = true
 authors.workspace = true
 edition.workspace = true
+license.workspace = true
 
 # See more keys and their definitions at https://doc.rust-lang.org/cargo/reference/manifest.html
 
diff --git a/tooling/nargo/Cargo.toml b/tooling/nargo/Cargo.toml
index 9783fe5d8ff..c038ab6b1e4 100644
--- a/tooling/nargo/Cargo.toml
+++ b/tooling/nargo/Cargo.toml
@@ -4,6 +4,7 @@ description = "Noir's package manager"
 version.workspace = true
 authors.workspace = true
 edition.workspace = true
+license.workspace = true
 
 # See more keys and their definitions at https://doc.rust-lang.org/cargo/reference/manifest.html
 
diff --git a/tooling/nargo_cli/Cargo.toml b/tooling/nargo_cli/Cargo.toml
index ec15975613b..1d1510e941d 100644
--- a/tooling/nargo_cli/Cargo.toml
+++ b/tooling/nargo_cli/Cargo.toml
@@ -4,6 +4,7 @@ description = "Noir's package manager"
 version.workspace = true
 authors.workspace = true
 edition.workspace = true
+license.workspace = true
 
 # See more keys and their definitions at https://doc.rust-lang.org/cargo/reference/manifest.html
 
diff --git a/tooling/nargo_toml/Cargo.toml b/tooling/nargo_toml/Cargo.toml
index f693403cd06..d3767a0b038 100644
--- a/tooling/nargo_toml/Cargo.toml
+++ b/tooling/nargo_toml/Cargo.toml
@@ -4,6 +4,7 @@ description = "Utilities for working with Nargo.toml files"
 version.workspace = true
 authors.workspace = true
 edition.workspace = true
+license.workspace = true
 
 # See more keys and their definitions at https://doc.rust-lang.org/cargo/reference/manifest.html
 
diff --git a/tooling/noirc_abi/Cargo.toml b/tooling/noirc_abi/Cargo.toml
index fda19e15b29..b7fe1ef8084 100644
--- a/tooling/noirc_abi/Cargo.toml
+++ b/tooling/noirc_abi/Cargo.toml
@@ -3,6 +3,7 @@ name = "noirc_abi"
 version.workspace = true
 authors.workspace = true
 edition.workspace = true
+license.workspace = true
 
 # See more keys and their definitions at https://doc.rust-lang.org/cargo/reference/manifest.html
 
diff --git a/tooling/noirc_abi_wasm/Cargo.toml b/tooling/noirc_abi_wasm/Cargo.toml
index 98996b1dd7b..3383d3f21e8 100644
--- a/tooling/noirc_abi_wasm/Cargo.toml
+++ b/tooling/noirc_abi_wasm/Cargo.toml
@@ -3,6 +3,7 @@ name = "noirc_abi_wasm"
 version.workspace = true
 authors.workspace = true
 edition.workspace = true
+license.workspace = true
 
 # See more keys and their definitions at https://doc.rust-lang.org/cargo/reference/manifest.html
 

From 8a5636e35d870381601fa201b16a30d8c2309cfa Mon Sep 17 00:00:00 2001
From: TomAFrench <tom@tomfren.ch>
Date: Wed, 13 Sep 2023 15:47:20 +0000
Subject: [PATCH 2/6] chore: add `cargo deny` workflow

---
 .github/workflows/deny.yml | 26 ++++++++++
 deny.toml                  | 98 ++++++++++++++++++++++++++++++++++++++
 2 files changed, 124 insertions(+)
 create mode 100644 .github/workflows/deny.yml
 create mode 100644 deny.toml

diff --git a/.github/workflows/deny.yml b/.github/workflows/deny.yml
new file mode 100644
index 00000000000..8ae7d03e076
--- /dev/null
+++ b/.github/workflows/deny.yml
@@ -0,0 +1,26 @@
+name: deny
+
+on:
+  push:
+    branches: [master]
+    paths: [Cargo.lock]
+  pull_request:
+    branches: [master]
+    paths: [Cargo.lock]
+  merge_group:
+
+env:
+  RUSTFLAGS: -D warnings
+  CARGO_TERM_COLOR: always
+
+concurrency: deny-${{ github.head_ref || github.run_id }}
+
+jobs:
+  deny:
+    name: deny
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@v4
+      - uses: EmbarkStudios/cargo-deny-action@v1
+        with:
+          command: check all
\ No newline at end of file
diff --git a/deny.toml b/deny.toml
new file mode 100644
index 00000000000..29d6ae4849b
--- /dev/null
+++ b/deny.toml
@@ -0,0 +1,98 @@
+# This section is considered when running `cargo deny check advisories`
+# More documentation for the advisories section can be found here:
+# https://embarkstudios.github.io/cargo-deny/checks/advisories/cfg.html
+[advisories]
+vulnerability = "deny"
+unmaintained = "warn"
+unsound = "warn"
+yanked = "warn"
+notice = "warn"
+
+# This section is considered when running `cargo deny check bans`.
+# More documentation about the 'bans' section can be found here:
+# https://embarkstudios.github.io/cargo-deny/checks/bans/cfg.html
+[bans]
+# Lint level for when multiple versions of the same crate are detected
+multiple-versions = "warn"
+# Lint level for when a crate version requirement is `*`
+wildcards = "allow"
+highlight = "all"
+# List of crates to deny
+deny = [
+    # Each entry the name of a crate and a version range. If version is
+    # not specified, all versions will be matched.
+    #{ name = "ansi_term", version = "=0.11.0" },
+]
+# Certain crates/versions that will be skipped when doing duplicate detection.
+skip = []
+# Similarly to `skip` allows you to skip certain crates during duplicate
+# detection. Unlike skip, it also includes the entire tree of transitive
+# dependencies starting at the specified crate, up to a certain depth, which is
+# by default infinite
+skip-tree = []
+
+[licenses]
+unlicensed = "deny"
+confidence-threshold = 0.9
+# copyleft = "deny"
+
+# List of explicitly allowed licenses
+# See https://spdx.org/licenses/ for list of possible licenses
+# [possible values: any SPDX 3.7 short identifier (+ optional exception)].
+allow = [
+    "MIT",
+    "Apache-2.0",
+    "Apache-2.0 WITH LLVM-exception",
+    "BSD-2-Clause",
+    "BSD-3-Clause",
+    "ISC",
+    "0BSD",
+    "Unicode-DFS-2016",
+    "Unlicense",
+    "Zlib",
+    # https://github.com/briansmith/ring/issues/902
+    "LicenseRef-ring",
+    # https://github.com/briansmith/webpki/issues/148
+    "LicenseRef-webpki",
+    # https://github.com/rustls/webpki/blob/main/LICENSE ISC Style
+    "LicenseRef-rustls-webpki",
+]
+
+# Allow 1 or more licenses on a per-crate basis, so that particular licenses
+# aren't accepted for every possible crate as with the normal allow list
+exceptions = [
+    # CC0 is a permissive license but somewhat unclear status for source code
+    # so we prefer to not have dependencies using it
+    # https://tldrlegal.com/license/creative-commons-cc0-1.0-universal
+    { allow = ["CC0-1.0"], name = "more-asserts" },
+    { allow = ["MPL-2.0"], name = "sized-chunks" },
+    { allow = ["MPL-2.0"], name = "webpki-roots" },
+
+]
+
+[[licenses.clarify]]
+name = "ring"
+expression = "LicenseRef-ring"
+license-files = [{ path = "LICENSE", hash = 0xbd0eed23 }]
+
+[[licenses.clarify]]
+name = "webpki"
+expression = "LicenseRef-webpki"
+license-files = [{ path = "LICENSE", hash = 0x001c7e6c }]
+
+[[licenses.clarify]]
+name = "rustls-webpki"
+expression = "LicenseRef-rustls-webpki"
+license-files = [{ path = "LICENSE", hash = 0x001c7e6c }]
+
+# This section is considered when running `cargo deny check sources`.
+# More documentation about the 'sources' section can be found here:
+# https://embarkstudios.github.io/cargo-deny/checks/sources/cfg.html
+[sources]
+# Lint level for what to happen when a crate from a crate registry that is not
+# in the allow list is encountered
+unknown-registry = "warn"
+# Lint level for what to happen when a crate from a git repository that is not
+# in the allow list is encountered
+unknown-git = "deny"
+allow-git = []
\ No newline at end of file

From d578ea4ebb95346450af50d1483def53653a2c4a Mon Sep 17 00:00:00 2001
From: TomAFrench <tom@tomfren.ch>
Date: Wed, 13 Sep 2023 15:52:32 +0000
Subject: [PATCH 3/6] chore: remove usage of deprecated `tempdir` crate

---
 Cargo.lock                             | 84 ++++----------------------
 tooling/nargo_cli/Cargo.toml           |  2 +-
 tooling/nargo_cli/src/cli/fs/inputs.rs |  4 +-
 tooling/nargo_cli/tests/execute.rs     |  1 -
 4 files changed, 14 insertions(+), 77 deletions(-)

diff --git a/Cargo.lock b/Cargo.lock
index 0486220f416..f01d4552590 100644
--- a/Cargo.lock
+++ b/Cargo.lock
@@ -335,7 +335,7 @@ source = "registry+https://github.com/rust-lang/crates.io-index"
 checksum = "94893f1e0c6eeab764ade8dc4c0db24caf4fe7cbbaafc0eba0a9030f447b5185"
 dependencies = [
  "num-traits",
- "rand 0.8.5",
+ "rand",
 ]
 
 [[package]]
@@ -1047,7 +1047,7 @@ source = "registry+https://github.com/rust-lang/crates.io-index"
 checksum = "ef2b4b23cddf68b89b8f8069890e8c270d54e2d5fe1b143820234805e4cb17ef"
 dependencies = [
  "generic-array",
- "rand_core 0.6.4",
+ "rand_core",
  "subtle",
  "zeroize",
 ]
@@ -1266,7 +1266,7 @@ dependencies = [
  "generic-array",
  "group",
  "pkcs8",
- "rand_core 0.6.4",
+ "rand_core",
  "sec1",
  "subtle",
  "zeroize",
@@ -1386,7 +1386,7 @@ version = "0.12.1"
 source = "registry+https://github.com/rust-lang/crates.io-index"
 checksum = "d013fc25338cc558c5c2cfbad646908fb23591e2404481826742b651c9af7160"
 dependencies = [
- "rand_core 0.6.4",
+ "rand_core",
  "subtle",
 ]
 
@@ -1461,12 +1461,6 @@ dependencies = [
  "percent-encoding",
 ]
 
-[[package]]
-name = "fuchsia-cprng"
-version = "0.1.1"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "a06f77d526c1a601b7c4cdd98f54b5eaabffc14d5f2f0296febdc7f357c6d3ba"
-
 [[package]]
 name = "funty"
 version = "2.0.0"
@@ -1652,7 +1646,7 @@ source = "registry+https://github.com/rust-lang/crates.io-index"
 checksum = "5dfbfb3a6cfbd390d5c9564ab283a0349b9b9fcd46a706c1eb10e0db70bfbac7"
 dependencies = [
  "ff",
- "rand_core 0.6.4",
+ "rand_core",
  "subtle",
 ]
 
@@ -1882,7 +1876,7 @@ source = "registry+https://github.com/rust-lang/crates.io-index"
 checksum = "d0acd33ff0285af998aaf9b57342af478078f53492322fafc47450e09397e0e9"
 dependencies = [
  "bitmaps",
- "rand_core 0.6.4",
+ "rand_core",
  "rand_xoshiro",
  "sized-chunks",
  "typenum",
@@ -2220,7 +2214,7 @@ dependencies = [
  "rustc_version",
  "serde",
  "serde_json",
- "tempdir",
+ "tempfile",
  "termcolor",
  "test-binary",
  "thiserror",
@@ -2752,19 +2746,6 @@ version = "0.7.0"
 source = "registry+https://github.com/rust-lang/crates.io-index"
 checksum = "dc33ff2d4973d518d823d61aa239014831e521c75da58e3df4840d3f47749d09"
 
-[[package]]
-name = "rand"
-version = "0.4.6"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "552840b97013b1a26992c11eac34bdd778e464601a4c2054b5f0bff7c6761293"
-dependencies = [
- "fuchsia-cprng",
- "libc",
- "rand_core 0.3.1",
- "rdrand",
- "winapi",
-]
-
 [[package]]
 name = "rand"
 version = "0.8.5"
@@ -2772,7 +2753,7 @@ source = "registry+https://github.com/rust-lang/crates.io-index"
 checksum = "34af8d1a0e25924bc5b7c43c079c942339d8f0a8b57c39049bef581b46327404"
 dependencies = [
  "rand_chacha",
- "rand_core 0.6.4",
+ "rand_core",
 ]
 
 [[package]]
@@ -2782,24 +2763,9 @@ source = "registry+https://github.com/rust-lang/crates.io-index"
 checksum = "e6c10a63a0fa32252be49d21e7709d4d4baf8d231c2dbce1eaa8141b9b127d88"
 dependencies = [
  "ppv-lite86",
- "rand_core 0.6.4",
+ "rand_core",
 ]
 
-[[package]]
-name = "rand_core"
-version = "0.3.1"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "7a6fdeb83b075e8266dcc8762c22776f6877a63111121f5f8c7411e5be7eed4b"
-dependencies = [
- "rand_core 0.4.2",
-]
-
-[[package]]
-name = "rand_core"
-version = "0.4.2"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "9c33a3c44ca05fa6f1807d8e6743f3824e8509beca625669633be0acbdf509dc"
-
 [[package]]
 name = "rand_core"
 version = "0.6.4"
@@ -2815,7 +2781,7 @@ version = "0.6.0"
 source = "registry+https://github.com/rust-lang/crates.io-index"
 checksum = "6f97cdb2a36ed4183de61b2f824cc45c9f1037f28afe0a322e9fff4c108b5aaa"
 dependencies = [
- "rand_core 0.6.4",
+ "rand_core",
 ]
 
 [[package]]
@@ -2840,15 +2806,6 @@ dependencies = [
  "num_cpus",
 ]
 
-[[package]]
-name = "rdrand"
-version = "0.4.0"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "678054eb77286b51581ba43620cc911abf02758c91f93f479767aed0f90458b2"
-dependencies = [
- "rand_core 0.3.1",
-]
-
 [[package]]
 name = "redox_syscall"
 version = "0.2.16"
@@ -2931,15 +2888,6 @@ dependencies = [
  "winapi",
 ]
 
-[[package]]
-name = "remove_dir_all"
-version = "0.5.3"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "3acd125665422973a33ac9d3dd2df85edad0f4ae9b00dafb1a05e43a9f5ef8e7"
-dependencies = [
- "winapi",
-]
-
 [[package]]
 name = "rend"
 version = "0.4.0"
@@ -3441,7 +3389,7 @@ source = "registry+https://github.com/rust-lang/crates.io-index"
 checksum = "74233d3b3b2f6d4b006dc19dee745e73e2a6bfb6f93607cd3b02bd5b00797d7c"
 dependencies = [
  "digest",
- "rand_core 0.6.4",
+ "rand_core",
 ]
 
 [[package]]
@@ -3642,16 +3590,6 @@ version = "0.12.10"
 source = "registry+https://github.com/rust-lang/crates.io-index"
 checksum = "1d2faeef5759ab89935255b1a4cd98e0baf99d1085e37d36599c625dac49ae8e"
 
-[[package]]
-name = "tempdir"
-version = "0.3.7"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "15f2b5fb00ccdf689e0149d1b1b3c03fead81c2b37735d812fa8bddbbf41b6d8"
-dependencies = [
- "rand 0.4.6",
- "remove_dir_all",
-]
-
 [[package]]
 name = "tempfile"
 version = "3.6.0"
diff --git a/tooling/nargo_cli/Cargo.toml b/tooling/nargo_cli/Cargo.toml
index 1d1510e941d..0b85c66b6fa 100644
--- a/tooling/nargo_cli/Cargo.toml
+++ b/tooling/nargo_cli/Cargo.toml
@@ -56,7 +56,7 @@ acvm-backend-barretenberg = { path = "../acvm_backend_barretenberg" }
 tokio-util = { version = "0.7.8", features = ["compat"] }
 
 [dev-dependencies]
-tempdir = "0.3.7"
+tempfile = "3.6.0"
 dirs.workspace = true
 assert_cmd = "2.0.8"
 assert_fs = "1.0.10"
diff --git a/tooling/nargo_cli/src/cli/fs/inputs.rs b/tooling/nargo_cli/src/cli/fs/inputs.rs
index fd2afdefa12..f3f0baf10f4 100644
--- a/tooling/nargo_cli/src/cli/fs/inputs.rs
+++ b/tooling/nargo_cli/src/cli/fs/inputs.rs
@@ -75,13 +75,13 @@ mod tests {
         input_parser::{Format, InputValue},
         Abi, AbiParameter, AbiType, AbiVisibility,
     };
-    use tempdir::TempDir;
+    use tempfile::TempDir;
 
     use super::{read_inputs_from_file, write_inputs_to_file};
 
     #[test]
     fn write_and_read_recovers_inputs_and_return_value() {
-        let input_dir = TempDir::new("input_dir").unwrap().into_path();
+        let input_dir = TempDir::new().unwrap().into_path();
 
         // We purposefully test a simple ABI here as we're focussing on `fs`.
         // Tests for serializing complex types should exist in `noirc_abi`.
diff --git a/tooling/nargo_cli/tests/execute.rs b/tooling/nargo_cli/tests/execute.rs
index e098f370832..9e02951573d 100644
--- a/tooling/nargo_cli/tests/execute.rs
+++ b/tooling/nargo_cli/tests/execute.rs
@@ -4,7 +4,6 @@ mod tests {
     // Some of these imports are consumed by the injected tests
     use assert_cmd::prelude::*;
     use predicates::prelude::*;
-    use tempdir::TempDir;
 
     use std::collections::BTreeMap;
     use std::fs;

From e73ef98a1394a432d833c32d0ce530e01175e03b Mon Sep 17 00:00:00 2001
From: TomAFrench <tom@tomfren.ch>
Date: Wed, 13 Sep 2023 15:54:17 +0000
Subject: [PATCH 4/6] chore: update to patch vulnerability in `webpki`

---
 Cargo.lock | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/Cargo.lock b/Cargo.lock
index f01d4552590..fc4b28da1de 100644
--- a/Cargo.lock
+++ b/Cargo.lock
@@ -4351,9 +4351,9 @@ dependencies = [
 
 [[package]]
 name = "webpki"
-version = "0.22.0"
+version = "0.22.1"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "f095d78192e208183081cc07bc5515ef55216397af48b873e5edcd72637fa1bd"
+checksum = "f0e74f82d49d545ad128049b7e88f6576df2da6b02e9ce565c6f533be576957e"
 dependencies = [
  "ring",
  "untrusted",

From 98452dc262937922a97e3f996fa24ca0c30e09a7 Mon Sep 17 00:00:00 2001
From: TomAFrench <tom@tomfren.ch>
Date: Wed, 13 Sep 2023 15:56:27 +0000
Subject: [PATCH 5/6] chore: update `chrono` to fix vulnerabilty in `time`

---
 Cargo.lock | 30 ++++++------------------------
 1 file changed, 6 insertions(+), 24 deletions(-)

diff --git a/Cargo.lock b/Cargo.lock
index fc4b28da1de..d01c9d43317 100644
--- a/Cargo.lock
+++ b/Cargo.lock
@@ -641,18 +641,17 @@ checksum = "baf1de4339761588bc0619e3cbc0120ee582ebb74b53b4efbf79117bd2da40fd"
 
 [[package]]
 name = "chrono"
-version = "0.4.26"
+version = "0.4.30"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "ec837a71355b28f6556dbd569b37b3f363091c0bd4b2e735674521b4c5fd9bc5"
+checksum = "defd4e7873dbddba6c7c91e199c7fcb946abc4a6a4ac3195400bcfb01b5de877"
 dependencies = [
  "android-tzdata",
  "iana-time-zone",
  "js-sys",
  "num-traits",
  "serde",
- "time 0.1.45",
  "wasm-bindgen",
- "winapi",
+ "windows-targets",
 ]
 
 [[package]]
@@ -1581,7 +1580,7 @@ dependencies = [
  "cfg-if",
  "js-sys",
  "libc",
- "wasi 0.11.0+wasi-snapshot-preview1",
+ "wasi",
  "wasm-bindgen",
 ]
 
@@ -2151,7 +2150,7 @@ source = "registry+https://github.com/rust-lang/crates.io-index"
 checksum = "927a765cd3fc26206e66b296465fa9d3e5ab003e651c1b3c060e7956d96b19d2"
 dependencies = [
  "libc",
- "wasi 0.11.0+wasi-snapshot-preview1",
+ "wasi",
  "windows-sys 0.48.0",
 ]
 
@@ -3328,7 +3327,7 @@ dependencies = [
  "serde",
  "serde_json",
  "serde_with_macros",
- "time 0.3.25",
+ "time",
 ]
 
 [[package]]
@@ -3673,17 +3672,6 @@ dependencies = [
  "once_cell",
 ]
 
-[[package]]
-name = "time"
-version = "0.1.45"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "1b797afad3f312d1c66a56d11d0316f916356d11bd158fbc6ca6389ff6bf805a"
-dependencies = [
- "libc",
- "wasi 0.10.0+wasi-snapshot-preview1",
- "winapi",
-]
-
 [[package]]
 name = "time"
 version = "0.3.25"
@@ -4028,12 +4016,6 @@ dependencies = [
  "try-lock",
 ]
 
-[[package]]
-name = "wasi"
-version = "0.10.0+wasi-snapshot-preview1"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "1a143597ca7c7793eff794def352d41792a93c481eb1042423ff7ff72ba2c31f"
-
 [[package]]
 name = "wasi"
 version = "0.11.0+wasi-snapshot-preview1"

From 86388e4cddb9369a64622e52da30ecd099eee58a Mon Sep 17 00:00:00 2001
From: TomAFrench <tom@tomfren.ch>
Date: Wed, 13 Sep 2023 15:56:48 +0000
Subject: [PATCH 6/6] chore: allow usage of `jfecher/chumsky`

---
 deny.toml | 4 +++-
 1 file changed, 3 insertions(+), 1 deletion(-)

diff --git a/deny.toml b/deny.toml
index 29d6ae4849b..8d6d609bff8 100644
--- a/deny.toml
+++ b/deny.toml
@@ -95,4 +95,6 @@ unknown-registry = "warn"
 # Lint level for what to happen when a crate from a git repository that is not
 # in the allow list is encountered
 unknown-git = "deny"
-allow-git = []
\ No newline at end of file
+allow-git = [
+    "https://github.com/jfecher/chumsky"
+]
\ No newline at end of file