Skip to content

Commit 0f912ab

Browse files
committed
fix: ignore ring 0.16.x advisories in deny.toml (transitive dep from KMS)
1 parent dc09b6d commit 0f912ab

1 file changed

Lines changed: 2 additions & 0 deletions

File tree

deny.toml

Lines changed: 2 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -75,6 +75,8 @@ ignore = [
7575
# { id = "RUSTSEC-0000-0000", reason = "you can specify a reason the advisory is ignored" },
7676
# "a-crate-that-is-yanked@0.1.1", # you can also ignore yanked crate versions if you wish
7777
# { crate = "a-crate-that-is-yanked@0.1.1", reason = "you can specify why you are ignoring the yanked crate" },
78+
{ id = "RUSTSEC-2025-0009", reason = "ring 0.16.x transitive dep from KMS git dependency, cannot upgrade" },
79+
{ id = "RUSTSEC-2025-0010", reason = "ring 0.16.x unmaintained, transitive dep from KMS git dependency, cannot upgrade" },
7880
]
7981
# If this is true, then cargo deny will use the git executable to fetch advisory database.
8082
# If this is false, then it uses a built-in git library.

0 commit comments

Comments
 (0)