mirror of
https://github.com/ruvnet/RuVector.git
synced 2026-08-21 14:44:03 +00:00
ci: acknowledge transitive serde_cbor advisory
This commit is contained in:
parent
2ea37b7195
commit
fa8845f848
1 changed files with 1 additions and 0 deletions
|
|
@ -28,6 +28,7 @@ ignore = [
|
|||
# and revisit when the parent dep migrates.
|
||||
|
||||
"RUSTSEC-2021-0140", # rusttype — transitive via plotters; pure rendering, no untrusted input
|
||||
"RUSTSEC-2021-0127", # serde_cbor — unmaintained transitive dependency of pgrx; no maintained version satisfies pgrx
|
||||
"RUSTSEC-2022-0054", # wee_alloc — transitive via wasm-bindgen-cli internals
|
||||
"RUSTSEC-2024-0370", # proc-macro-error — build-time only (proc-macro), no runtime exposure
|
||||
"RUSTSEC-2024-0380", # pqcrypto-dilithium — replaced by pqcrypto-mldsa, awaiting parent migration
|
||||
|
|
|
|||
Loading…
Add table
Add a link
Reference in a new issue