Skip to content

Commit 381ab45

Browse files
naseschwarzNaseschwarz
and
Naseschwarz
authored
Ignore RUSTSEC-2024-0436 (#2562)
cargo deny reports: ``` ID: RUSTSEC-2024-0436 Advisory: https://rustsec.org/advisories/RUSTSEC-2024-0436 The creator of the crate `paste` has stated in the [`README.md`](https://github.com/dtolnay/paste/blob/master/README.md) that this project is not longer maintained as well as archived the repository Announcement: https://github.com/dtolnay/paste Solution: No safe upgrade is available! paste v1.0.15 └── ratatui v0.29.0 ├── gitui v0.27.0 └── tui-textarea v0.7.0 └── gitui v0.27.0 (*) ``` In #2554 the decision was made to ignore this advisory, as ratatui already has removed paste in ratatui/ratatui#1713 and we are just waiting for an upstream release. Co-authored-by: Naseschwarz <[email protected]>
1 parent 22aae37 commit 381ab45

File tree

1 file changed

+9
-3
lines changed

1 file changed

+9
-3
lines changed

deny.toml

+9-3
Original file line numberDiff line numberDiff line change
@@ -13,9 +13,15 @@ allow = [
1313

1414
[advisories]
1515
version = 2
16-
# No fix for RSA, and this is a dependency from ssh_key crate to handle rsa ssh key.
17-
# https://rustsec.org/advisories/RUSTSEC-2023-0071
18-
ignore = ["RUSTSEC-2023-0071"]
16+
ignore = [
17+
# No fix for RSA, and this is a dependency from ssh_key crate to handle rsa ssh key.
18+
# https://rustsec.org/advisories/RUSTSEC-2023-0071
19+
"RUSTSEC-2023-0071",
20+
# Crate paste is unmaintained. The dependency is already removed in
21+
# ratatui:master. Until a new release is available, ignore this in
22+
# order to pass CI. (https://github.com/gitui-org/gitui/issues/2554)
23+
{ id = "RUSTSEC-2024-0436", reason = "The paste dependency is already removed from ratatui." }
24+
]
1925

2026
[bans]
2127
multiple-versions = "deny"

0 commit comments

Comments
 (0)