deny: ignore RUSTSEC-2026-0374 (basic-toml unmaintained, build-time via uniffi_bindgen)

No known vulnerability and no safe upgrade; only askama_derive 0.12 in uniffi_bindgen 0.28's code generator uses it. Goes away with a uniffi upgrade. Co-Authored-By: Claude Opus 5.5 <[email protected]>
2026-10-20 22:42:24 +09:00
parent 86c21f3bff
commit 27294e338c
1 changed files with 1 additions and 0 deletions
@@ -8,6 +8,7 @@ ignore = [
  # without upgrading upstream: uniffi 0.28 (through kv-ffi) and gtk-rs glib-macros 0.18 (Tauri on Linux).
  { id = "RUSTSEC-2025-0141", reason = "bincode 1.x via uniffi_macros 0.28 (build-time)" },
  { id = "RUSTSEC-2024-0436", reason = "paste via uniffi 0.28 (proc-macro)" },
+  { id = "RUSTSEC-2026-0374", reason = "basic-toml (unmaintained, no known vulnerability) via askama_derive 0.12 in uniffi_bindgen 0.28: build-time code generation only" },
  { id = "RUSTSEC-2024-0370", reason = "proc-macro-error via glib-macros 0.18 / Tauri gtk stack (proc-macro)" },
  # zbus 5 sub-crates folded into zbus 6 (no vulnerability). Linux only: keyring's Secret Service store
  # (device key) still uses zbus 5; revisit when secret-service moves to zbus 6.