jerry/buzz
1
0
Fork 0
mirror of https://github.com/block/buzz.git synced 2026-11-04 00:12:02 +00:00
Code Issues Packages Projects Releases Wiki Activity

Document scoped unsafe-libyaml maintenance advisory exception

Browse Source 
Signed-off-by: Tom Brow <tomb@block.xyz>
This commit is contained in:
Tom Brow
2026-10-12 13:57:45 -07:00
parent 50928f3c5a
commit fd32a67a6f
1 changed files with 5 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files

5
deny.toml
View File

@@ -1,5 +1,10 @@
[advisories]
ignore = [
# unsafe-libyaml is unmaintained, with no patched release. Both our YAML
# parsers and kube-client 2.x require serde_yaml 0.9. Replacing only direct
# uses cannot remove it. Keep this maintenance-only exception scoped to
# this advisory; remove when serde_yaml and kube-client migrate off it.
{ id = "RUSTSEC-2024-0449", reason = "unmaintained dependency of serde_yaml and kube-client; no patched release; parser migration required" },
# instant 0.1.13 — unmaintained crate. Transitive dep: nostr → instant.
# Will be resolved when nostr crate updates its dependencies.
{ id = "RUSTSEC-2024-0384", reason = "transitive dep via nostr; no upstream fix available" },