Skip to content

chore(template): Ignore RUSTSEC-2026-0173 for now #595

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Merged
Techassi merged 2 commits into from
Jun 12, 2026
Merged

chore(template): Ignore RUSTSEC-2026-0173 for now #595

Changes from all commits
Commits
Show all changes
2 commits
Select commit Hold shift + click to select a range
94eae35
chore(template): Ignore RUSTSEC-2026-0173 for now
Techassi Jun 12, 2026
88883d7
chore(template): Add link to upstream issue
Techassi Jun 12, 2026
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
19 changes: 19 additions & 0 deletions template/deny.toml
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -45,6 +45,25 @@ ignore = [
# This version is pulled in transitively via num-bigint-dig -> rsa -> stackable-certs and cannot be
# updated until the upstream rsa crate bumps its rand dependency.
"RUSTSEC-2026-0097",

# https://rustsec.org/advisories/RUSTSEC-2026-0173
# The author of `proc-macro-error2` has [confirmed](https://github.com/GnomedDev/proc-macro-error-2/issues/17#issuecomment-4643215473)
# that the crate is no longer maintained and recommends that users migrate away from it.
#
# There currently is no way for us to negate this advisory, because that crate is not used
# directly by us. We need to wait for new versions of oci-spec and getset. See the following
# issue which tracks moving to a newer getset version: https://github.com/youki-dev/oci-spec-rs/issues/340
#
# proc-macro-error2 v2.0.1
# └── getset v0.1.6
# └── oci-spec v0.9.0
# └── boil v0.2.1
#
# Alternate crates are:
#
# - https://crates.io/crates/manyhow
# - https://github.com/SergioBenitez/proc-macro2-diagnostics
"RUSTSEC-2026-0173",
]

[bans]
Expand Down