From a281880f377d72605664e50cf9daf71aea07f76e Mon Sep 17 00:00:00 2001 From: Eric Traut Date: Sat, 21 Feb 2026 14:48:48 -0800 Subject: [PATCH] Ignore syntect unmaintained advisories in cargo-deny --- codex-rs/deny.toml | 2 ++ 1 file changed, 2 insertions(+) diff --git a/codex-rs/deny.toml b/codex-rs/deny.toml index e96e6fbd33..9b684c952a 100644 --- a/codex-rs/deny.toml +++ b/codex-rs/deny.toml @@ -73,6 +73,8 @@ ignore = [ { id = "RUSTSEC-2024-0388", reason = "derivative is unmaintained; pulled in via starlark v0.13.0 used by execpolicy/cli/core; no fixed release yet" }, { id = "RUSTSEC-2025-0057", reason = "fxhash is unmaintained; pulled in via starlark_map/starlark v0.13.0 used by execpolicy/cli/core; no fixed release yet" }, { id = "RUSTSEC-2024-0436", reason = "paste is unmaintained; pulled in via ratatui/rmcp/starlark used by tui/execpolicy; no fixed release yet" }, + { id = "RUSTSEC-2024-0320", reason = "yaml-rust is unmaintained; pulled in via syntect/two-face used by tui syntax highlighting; no safe upgrade is available" }, + { id = "RUSTSEC-2025-0141", reason = "bincode is unmaintained; pulled in via syntect/two-face used by tui syntax highlighting; no safe upgrade is available" }, # TODO(joshka, nornagon): remove this exception when once we update the ratatui fork to a version that uses lru 0.13+. { id = "RUSTSEC-2026-0002", reason = "lru 0.12.5 is pulled in via ratatui fork; cannot upgrade until the fork is updated" }, ]