ZacharyZhang-NY/Kigi-CLI
1
0 Fork 0
Code Issues Pull Requests Actions Packages Projects Releases 2 Wiki Activity

chore(deny): accept the unmaintained crates that have no fix

Browse Source 
unsafe-libyaml comes through serde_yaml 0.9, its final release. zvariant,
zbus_names and zvariant_derive were folded into zbus 6, but dark-light,
even at 3.0, still needs zbus 5. cargo deny check advisories passes.
This commit is contained in:
雷电芽衣 committed 2026-10-31 02:30:23 -04:00
1 parent dc0cff220b
commit b0e252c871
1 file changed
+5
Download Patch File Download Diff File Expand all files Collapse all files
deny.toml
+5
View File
@@ -20,6 +20,11 @@ ignore = [
{ id = "RUSTSEC-2026-0192", reason = "rustybuzz via pdf_oxide/resvg (latest); local rendering" },
{ id = "RUSTSEC-2026-0195", reason = "ttf-parser via fontdb/resvg (latest); local font parsing" },
{ id = "RUSTSEC-2024-0320", reason = "yaml-rust via syntect (latest); parses bundled syntax defs" },
{ id = "RUSTSEC-2024-0449", reason = "unsafe-libyaml via serde_yaml 0.9 (final release)" },
# zbus 6 absorbed these crates; dark-light 3 (latest) still needs zbus 5.
{ id = "RUSTSEC-2026-0370", reason = "zvariant via zbus 5" },
{ id = "RUSTSEC-2026-0371", reason = "zbus_names via zbus 5" },
{ id = "RUSTSEC-2026-0372", reason = "zvariant_derive via zbus 5" },
]
[licenses]