From 2d32b20e8165d3c88f587cf0550f061d01da9836 Mon Sep 17 00:00:00 2001 From: samialabri Date: Tue, 20 Oct 2026 22:42:24 +0900 Subject: [PATCH] deny: ignore RUSTSEC-2026-0374 (basic-toml unmaintained, build-time via uniffi_bindgen) No known vulnerability and no safe upgrade; only askama_derive 0.12 in uniffi_bindgen 0.28's code generator uses it. Goes away with a uniffi upgrade. Co-Authored-By: Claude Opus 5.5 --- deny.toml | 1 + 1 file changed, 1 insertion(+) diff --git a/deny.toml b/deny.toml index 527e66c..8c03562 100644 --- a/deny.toml +++ b/deny.toml @@ -8,6 +8,7 @@ ignore = [ # which regenerates the Swift/Kotlin bindings (tracked in fuzz/README.md "Dependency policy"). { id = "RUSTSEC-2025-0141", reason = "bincode 1.x via uniffi_macros 0.28 (build-time)" }, { id = "RUSTSEC-2024-0436", reason = "paste via uniffi_core/uniffi_bindgen 0.28 (proc-macro)" }, + { id = "RUSTSEC-2026-0374", reason = "basic-toml (unmaintained, no known vulnerability) via askama_derive 0.12 in uniffi_bindgen 0.28: build-time code generation only" }, ] [licenses]