From 3c651272f17151280307364cf062a8b84987db3a Mon Sep 17 00:00:00 2001 From: Claude Date: Mon, 27 Apr 2026 06:23:13 +0000 Subject: [PATCH] ci(audit): ignore unmaintained transitive advisories - RUSTSEC-2024-0436 paste (via leptos+iroh) - RUSTSEC-2024-0370 proc-macro-error (via iroh-blobs->genawaiter) - RUSTSEC-2023-0089 atomic-polyfill (via iroh->postcard->heapless) All transitive, no direct fix. Track via #316/#317/#318. Refs #316 Refs #317 Refs #318 --- .github/workflows/ci.yml | 5 ++++- 1 file changed, 4 insertions(+), 1 deletion(-) diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml index bc950447..01e0f6a2 100644 --- a/.github/workflows/ci.yml +++ b/.github/workflows/ci.yml @@ -164,4 +164,7 @@ jobs: --ignore RUSTSEC-2026-0099 `# rustls-webpki URI-constraint (#223)` \ --ignore RUSTSEC-2026-0104 `# rustls-webpki CRL panic (#223)` \ --ignore RUSTSEC-2026-0097 `# rand unsoundness (#246)` \ - --ignore RUSTSEC-2025-0141 `# bincode 1.x unmaintained (#247)` + --ignore RUSTSEC-2025-0141 `# bincode 1.x unmaintained (#247)` \ + --ignore RUSTSEC-2024-0436 `# paste unmaintained, via leptos+iroh (#316)` \ + --ignore RUSTSEC-2024-0370 `# proc-macro-error unmaintained, via iroh-blobs->genawaiter (#317)` \ + --ignore RUSTSEC-2023-0089 `# atomic-polyfill unmaintained, via iroh->postcard->heapless (#318)`