diff --git a/deny.toml b/deny.toml index ff831b533bd4..2a928df0fc91 100644 --- a/deny.toml +++ b/deny.toml @@ -74,6 +74,12 @@ ignore = [ #{ id = "RUSTSEC-0000-0000", reason = "you can specify a reason the advisory is ignored" }, #"a-crate-that-is-yanked@0.1.1", # you can also ignore yanked crate versions if you wish #{ crate = "a-crate-that-is-yanked@0.1.1", reason = "you can specify why you are ignoring the yanked crate" }, + + # https://github.com/estk/log4rs/pull/351 + { id = "RUSTSEC-2024-0388", reason = "log4rs PRs are not merged yet" }, + # https://github.com/spacejam/sled/issues/1514 + # https://github.com/notify-rs/notify/pull/652 + { id = "RUSTSEC-2024-0384", reason = "notify, sled are not updated yet" }, ] # If this is true, then cargo deny will use the git executable to fetch advisory database. # If this is false, then it uses a built-in git library.