attune-system/attune
2
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

no more cargo advisories ignored

Browse Source
This commit is contained in:
David Culbreth
2026-03-05 15:48:35 -06:00
parent 9af3192d1d
commit 4b0000c116
10 changed files with 244 additions and 844 deletions
Download Patch File Download Diff File Expand all files Collapse all files

12
deny.toml
View File

@@ -4,17 +4,7 @@ all-features = true
[advisories]
version = 2
yanked = "deny"
# Note: RUSTSEC-2023-0071 (rsa via sqlx-mysql) is in Cargo.lock but unreachable —
# sqlx-macros-core unconditionally resolves sqlx-mysql; we only use postgres.
# cargo deny's graph analysis correctly identifies it as unreachable, so no
# ignore entry is needed here. If cargo audit is ever re-added, it will need
# --ignore RUSTSEC-2023-0071 since it scans the lockfile without graph analysis.
ignore = [
# rustls-pemfile v2.x - unmaintained
# Transitive dependency via lapin → amq-protocol-tcp → tcp-stream.
# No alternative available until lapin updates its TLS stack.
{ id = "RUSTSEC-2025-0134", reason = "transitive via lapin TLS stack; no alternative" },
]
ignore = []
[licenses]
version = 2