kestrove/kestrove-desktop
2
0
Fork 0
Code Issues Pull Requests Actions 3 Packages Projects Releases 1 Wiki Activity

src-tauri: follow kv-ffi to uniffi 0.32.2; drop the bincode and paste deny ignores
ci / build (ubuntu-22.04) (push) Canceled after 0s
Details
ci / build (windows-2025) (push) Canceled after 0s
Details
ci / deny (push) Canceled after 0s
Details

Browse Source 
uniffi 0.32 drops bincode (RUSTSEC-2025-0141) and paste (RUSTSEC-2024-0436).
The basic-toml ignore (RUSTSEC-2026-0374) stays: askama_derive 0.16 in
uniffi_bindgen 0.32 still depends on it. No source changes needed.

Co-Authored-By: Claude Opus 5.5 <[email protected]>
This commit is contained in:
sami
2026-10-20 23:25:22 +09:00
co-authored by Claude Opus 5.5
parent 27294e338c
commit cf61f385d3
2 changed files with 101 additions and 192 deletions
Download Patch File Download Diff File Expand all files Collapse all files
src-tauri/deny.toml
+3 -4
View File
@@ -5,10 +5,9 @@ version = 2
yanked = "deny"
ignore = [
# Unmaintained notices (no known vulnerability) for build-time proc-macro crates we can't replace
# without upgrading upstream: uniffi 0.28 (through kv-ffi) and gtk-rs glib-macros 0.18 (Tauri on Linux).
{ id = "RUSTSEC-2025-0141", reason = "bincode 1.x via uniffi_macros 0.28 (build-time)" },
{ id = "RUSTSEC-2024-0436", reason = "paste via uniffi 0.28 (proc-macro)" },
{ id = "RUSTSEC-2026-0374", reason = "basic-toml (unmaintained, no known vulnerability) via askama_derive 0.12 in uniffi_bindgen 0.28: build-time code generation only" },
# without upgrading upstream: uniffi_bindgen 0.32 (through kv-ffi) and gtk-rs glib-macros 0.18 (Tauri on Linux).
# uniffi 0.32 dropped bincode and paste, but its askama_derive 0.16 still pulls in basic-toml.
{ id = "RUSTSEC-2026-0374", reason = "basic-toml (unmaintained, no known vulnerability) via askama_derive 0.16 in uniffi_bindgen 0.32: build-time code generation only" },
{ id = "RUSTSEC-2024-0370", reason = "proc-macro-error via glib-macros 0.18 / Tauri gtk stack (proc-macro)" },
# zbus 5 sub-crates folded into zbus 6 (no vulnerability). Linux only: keyring's Secret Service store
# (device key) still uses zbus 5; revisit when secret-service moves to zbus 6.