雷电芽衣
b0e252c871
unsafe-libyaml comes through serde_yaml 0.9, its final release. zvariant, zbus_names and zvariant_derive were folded into zbus 6, but dark-light, even at 3.0, still needs zbus 5. cargo deny check advisories passes.
56 lines
2.3 KiB
TOML
56 lines
2.3 KiB
TOML
# cargo-deny configuration. CI gate: `cargo deny check advisories` must be
|
|
# error-free (PRD §7-2).
|
|
|
|
[advisories]
|
|
version = 2
|
|
yanked = "deny"
|
|
ignore = [
|
|
# quick-xml 0.39 (two advisories): pinned by wayland-scanner 0.31.10
|
|
# (latest), a build-time proc-macro parsing vendored Wayland protocol
|
|
# XML — no attacker-controlled input reaches it.
|
|
{ id = "RUSTSEC-2026-0194", reason = "build-time parse of vendored XML via wayland-scanner" },
|
|
{ id = "RUSTSEC-2026-0206", reason = "build-time parse of vendored XML via wayland-scanner" },
|
|
# Unmaintained transitive dependencies with no upstream fix available.
|
|
{ id = "RUSTSEC-2025-0052", reason = "async-std via dark-light 2 (latest); theme detection" },
|
|
{ id = "RUSTSEC-2025-0012", reason = "backoff via async-openai (latest)" },
|
|
{ id = "RUSTSEC-2024-0384", reason = "instant via backoff via async-openai (latest)" },
|
|
{ id = "RUSTSEC-2025-0141", reason = "bincode 1 via syntect (latest); local cache format" },
|
|
{ id = "RUSTSEC-2024-0436", reason = "paste via ratatui 0.29 (workspace-pinned TUI stack)" },
|
|
{ id = "RUSTSEC-2025-0057", reason = "fxhash via bm25 (latest); local search scoring" },
|
|
{ id = "RUSTSEC-2026-0192", reason = "rustybuzz via pdf_oxide/resvg (latest); local rendering" },
|
|
{ id = "RUSTSEC-2026-0195", reason = "ttf-parser via fontdb/resvg (latest); local font parsing" },
|
|
{ id = "RUSTSEC-2024-0320", reason = "yaml-rust via syntect (latest); parses bundled syntax defs" },
|
|
{ id = "RUSTSEC-2024-0449", reason = "unsafe-libyaml via serde_yaml 0.9 (final release)" },
|
|
# zbus 6 absorbed these crates; dark-light 3 (latest) still needs zbus 5.
|
|
{ id = "RUSTSEC-2026-0370", reason = "zvariant via zbus 5" },
|
|
{ id = "RUSTSEC-2026-0371", reason = "zbus_names via zbus 5" },
|
|
{ id = "RUSTSEC-2026-0372", reason = "zvariant_derive via zbus 5" },
|
|
]
|
|
|
|
[licenses]
|
|
version = 2
|
|
allow = [
|
|
"Apache-2.0",
|
|
"Apache-2.0 WITH LLVM-exception",
|
|
"BSD-2-Clause",
|
|
"BSD-3-Clause",
|
|
"BSL-1.0",
|
|
"CC0-1.0",
|
|
"CDLA-Permissive-2.0",
|
|
"ISC",
|
|
"MIT",
|
|
"MIT-0",
|
|
"MPL-2.0",
|
|
"OpenSSL",
|
|
"Unicode-3.0",
|
|
"Zlib",
|
|
]
|
|
|
|
[bans]
|
|
multiple-versions = "allow"
|
|
|
|
[sources]
|
|
unknown-registry = "deny"
|
|
unknown-git = "deny"
|
|
allow-git = ["https://github.com/helix-editor/nucleo"]
|