Skip to content

Commit 71badac

Browse files
committed
fix: update advisory reasons for RUSTSEC-2023-0091 and RUSTSEC-2024-0438 for accuracy
1 parent c88aa53 commit 71badac

File tree

1 file changed

+2
-2
lines changed

1 file changed

+2
-2
lines changed

deny.toml

Lines changed: 2 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -73,8 +73,8 @@ ignore = [
7373
{ id = "RUSTSEC-2024-0370", reason = "proc-macro-error is used by a few dependencies, and while unmaintained, is not currently an issue." },
7474
{ id = "RUSTSEC-2024-0384", reason = "This is an inner dependency that would get updated when libp2p v0.51.4 and wasm-timer v0.2.5 are updated to a newer version"},
7575
{ id = "RUSTSEC-2024-0436", reason = "Unmaintained sub-dependency: paste, pending updates to dependencies."},
76-
{ id = "RUSTSEC-2023-0091", reason = "This is an inner dependency of polkadot."},
77-
{ id = "RUSTSEC-2024-0438", reason = "This is an inner dependency of polkadot."}
76+
{ id = "RUSTSEC-2023-0091", reason = "This applies to wasmtime versions 10.0.0-12.0.1, not a concern for the version used here."},
77+
{ id = "RUSTSEC-2024-0438", reason = "Only applies to version <= 24.0.1-26.0.0 for Windows."}
7878
]
7979
# If this is true, then cargo deny will use the git executable to fetch advisory database.
8080
# If this is false, then it uses a built-in git library.

0 commit comments

Comments
 (0)