From 9214573c9b0ad320bd454e50d86dcd9766e772d4 Mon Sep 17 00:00:00 2001 From: Maxim Levkov Date: Mon, 15 Dec 2025 19:49:10 -0800 Subject: [PATCH] fix(deps): ignore unmaintained paste advisory (RUSTSEC-2024-0436) The paste crate is unmaintained but is a transitive dependency from: iggy -> iggy_common -> compio-io -> paste This is outside our control - upstream (iggy/compio) needs to migrate to pastey or an alternative. Adding to ignore list with justification. Closes #10 --- deny.toml | 4 ++++ 1 file changed, 4 insertions(+) diff --git a/deny.toml b/deny.toml index 1bc6ccc..98bccd1 100644 --- a/deny.toml +++ b/deny.toml @@ -90,6 +90,10 @@ ignore = [ # rustls-pemfile is unmaintained, but comes from testcontainers -> bollard (dev-dependency only) # Upstream needs to migrate to rustls-pki-types "RUSTSEC-2025-0134", + + # paste is unmaintained, but comes from iggy -> iggy_common -> compio-io + # Upstream (iggy/compio) needs to migrate to pastey or alternative + "RUSTSEC-2024-0436", ] # =============================================================================