From 4ea6db993cca31452086f3e524804a6555deac1a Mon Sep 17 00:00:00 2001 From: satyakwok <119509589+satyakwok@users.noreply.github.com> Date: Mon, 8 Jun 2026 06:45:05 +0200 Subject: [PATCH] chore(deny): ignore RUSTSEC-2026-0173 (proc-macro-error2 unmaintained) Maintenance-status advisory only (no vulnerability) on a transitive dep from the alloy macro ecosystem. Matches the existing unmaintained-transitive ignores (paste, rustls-pemfile). Unblocks the cargo-deny CI gate. --- deny.toml | 4 ++++ 1 file changed, 4 insertions(+) diff --git a/deny.toml b/deny.toml index 32519f2..8fa9fc3 100644 --- a/deny.toml +++ b/deny.toml @@ -52,6 +52,10 @@ ignore = [ # restructures sqlx-macros-core to not list inactive backends. Audit # 2026-05-13. "RUSTSEC-2023-0071", + # `proc-macro-error2` is unmaintained (author archived the repo); pulled + # transitively by macro/derive crates in the alloy ecosystem. Maintenance- + # status advisory only — no vulnerability. Remove when the dep tree drops it. + "RUSTSEC-2026-0173", ] [sources]