chore: Cargo deny entries for quick-xml, serde_yaml and lru (#3091)

This commit is contained in:
gusto 2026-07-06 13:41:58 +03:00 committed by GitHub
parent 04f7704248
commit 0c9e008ce8
No known key found for this signature in database
GPG Key ID: B5690EEEBB952194
2 changed files with 4 additions and 2 deletions

View File

@ -15,6 +15,8 @@ ignore = [
{ id = "RUSTSEC-2026-0118", reason = "`hickory-proto` can enter an unbounded DNSSEC NSEC3 validation loop and exhaust memory; pulled in through libp2p." },
{ id = "RUSTSEC-2026-0119", reason = "`hickory-proto` DNS message compression can cause CPU exhaustion during encoding; pulled in through libp2p." },
{ id = "RUSTSEC-2026-0173", reason = "`proc-macro-error2` is unmaintained." },
{ id = "RUSTSEC-2026-0194", reason = "`quick-xml` is used by pprof and will not parse untrusted XML." },
{ id = "RUSTSEC-2026-0195", reason = "`quick-xml` is used by cucumber and will not parse untrusted XML." },
]
unused-ignored-advisory = "deny"
yanked = "deny"

4
Cargo.lock generated
View File

@ -121,9 +121,9 @@ dependencies = [
[[package]]
name = "anyhow"
version = "1.0.102"
version = "1.0.103"
source = "registry+https://github.com/rust-lang/crates.io-index"
checksum = "7f202df86484c868dbad7eaa557ef785d5c66295e41b460ef922eca0723b842c"
checksum = "2a4385e2e34eb35d6b3efe798b9eb88096925d87726c0798709bf56d9ed84af3"
[[package]]
name = "approx"