deny: ignore RUSTSEC-2026-0374 (basic-toml unmaintained, build-time via uniffi_bindgen)
No known vulnerability and no safe upgrade; only askama_derive 0.12 in uniffi_bindgen 0.28's code generator uses it. Goes away with a uniffi upgrade. Co-Authored-By: Claude Opus 5.5 <[email protected]>
This commit is contained in:
@@ -8,6 +8,7 @@ ignore = [
|
|||||||
# which regenerates the Swift/Kotlin bindings (tracked in fuzz/README.md "Dependency policy").
|
# which regenerates the Swift/Kotlin bindings (tracked in fuzz/README.md "Dependency policy").
|
||||||
{ id = "RUSTSEC-2025-0141", reason = "bincode 1.x via uniffi_macros 0.28 (build-time)" },
|
{ id = "RUSTSEC-2025-0141", reason = "bincode 1.x via uniffi_macros 0.28 (build-time)" },
|
||||||
{ id = "RUSTSEC-2024-0436", reason = "paste via uniffi_core/uniffi_bindgen 0.28 (proc-macro)" },
|
{ id = "RUSTSEC-2024-0436", reason = "paste via uniffi_core/uniffi_bindgen 0.28 (proc-macro)" },
|
||||||
|
{ id = "RUSTSEC-2026-0374", reason = "basic-toml (unmaintained, no known vulnerability) via askama_derive 0.12 in uniffi_bindgen 0.28: build-time code generation only" },
|
||||||
]
|
]
|
||||||
|
|
||||||
[licenses]
|
[licenses]
|
||||||
|
|||||||
Reference in New Issue
Block a user