From 55125df530d433b4242bec38662cdaa7e290e6a4 Mon Sep 17 00:00:00 2001 From: zonyitoo Date: Sun, 17 Nov 2024 12:04:30 +0800 Subject: [PATCH] chore: ignore RUSTSEC-2024-0388, RUSTSEC-2024-0384 temporary --- deny.toml | 6 ++++++ 1 file changed, 6 insertions(+) diff --git a/deny.toml b/deny.toml index ff831b533bd4..2a928df0fc91 100644 --- a/deny.toml +++ b/deny.toml @@ -74,6 +74,12 @@ ignore = [ #{ id = "RUSTSEC-0000-0000", reason = "you can specify a reason the advisory is ignored" }, #"a-crate-that-is-yanked@0.1.1", # you can also ignore yanked crate versions if you wish #{ crate = "a-crate-that-is-yanked@0.1.1", reason = "you can specify why you are ignoring the yanked crate" }, + + # https://github.com/estk/log4rs/pull/351 + { id = "RUSTSEC-2024-0388", reason = "log4rs PRs are not merged yet" }, + # https://github.com/spacejam/sled/issues/1514 + # https://github.com/notify-rs/notify/pull/652 + { id = "RUSTSEC-2024-0384", reason = "notify, sled are not updated yet" }, ] # If this is true, then cargo deny will use the git executable to fetch advisory database. # If this is false, then it uses a built-in git library.