diff --git a/codex-rs/core/src/mcp_tool_exposure_test.rs b/codex-rs/core/src/mcp_tool_exposure_test.rs
index c62f8bdd57..70ab86cd95 100644
--- a/codex-rs/core/src/mcp_tool_exposure_test.rs
+++ b/codex-rs/core/src/mcp_tool_exposure_test.rs
@@ -45,7 +45,13 @@ fn make_mcp_tool(
     connector_id: Option<&str>,
     connector_name: Option<&str>,
 ) -> ToolInfo {
-    make_mcp_tool_with_meta(server_name, tool_name, connector_id, connector_name, None)
+    make_mcp_tool_with_meta(
+        server_name,
+        tool_name,
+        connector_id,
+        connector_name,
+        /*meta*/ None,
+    )
 }
 
 fn make_mcp_tool_with_meta(
diff --git a/codex-rs/deny.toml b/codex-rs/deny.toml
index bed4a4f2fa..b153ba80a8 100644
--- a/codex-rs/deny.toml
+++ b/codex-rs/deny.toml
@@ -78,7 +78,6 @@ ignore = [
     # TODO(fcoury): remove this exception when syntect drops yaml-rust and bincode, or updates to versions that have fixed the vulnerabilities.
     { id = "RUSTSEC-2024-0320", reason = "yaml-rust is unmaintained; pulled in via syntect v5.3.0 used by codex-tui for syntax highlighting; no fixed release yet" },
     { id = "RUSTSEC-2025-0141", reason = "bincode is unmaintained; pulled in via syntect v5.3.0 used by codex-tui for syntax highlighting; no fixed release yet" },
-    { id = "RUSTSEC-2026-0097", reason = "rand 0.8.5 is pulled in via age v0.11.2/codex-secrets and zbus v4.4.0/keyring; no compatible rand 0.8 fixed release, remove when transitive dependencies move to rand >=0.9.3" },
 ]
 # If this is true, then cargo deny will use the git executable to fetch advisory database.
 # If this is false, then it uses a built-in git library.