From 4129bf03eecc79b4e68a4c1170da3385fd08a3e1 Mon Sep 17 00:00:00 2001 From: David Runge <dvzrv@archlinux.org> Date: Wed, 5 Mar 2025 11:25:52 +0100 Subject: [PATCH] chore(cargo-deny): Remove RUSTSEC-2025-0007 from ignore The ring crate is now maintained by the maintainers of rustls. Signed-off-by: David Runge <dvzrv@archlinux.org> --- deny.toml | 5 ----- 1 file changed, 5 deletions(-) diff --git a/deny.toml b/deny.toml index d6591f43..d2073a29 100644 --- a/deny.toml +++ b/deny.toml @@ -4,11 +4,6 @@ yanked = "deny" ignore = [ "RUSTSEC-2023-0071", # side-channel attacks are not relevant for our use-case (only used in tests) "RUSTSEC-2023-0050", # nethsm-sdk-rs uses unmaintained multipart until something else becomes available: https://github.com/Nitrokey/nethsm-sdk-rs/issues/29 - # The ring crate is unmaintained. - # Via nethsm-sdk-rs->ureq->ring we currently have to rely on it. - # Ureq is working on adapting its use of rustls: https://github.com/algesten/ureq/issues/1013 - # A new nethsm-sdk-rs needs releasing (support for ureq>3 already present in default branch). - "RUSTSEC-2025-0007", ] [bans] -- GitLab