Charlie Marsh 438cfc55c8 Record reviewed exceptions for zstd security advisories (#57255) ...

## What changed

Add four advisory exceptions to `codex-rs/.cargo/audit.toml` and `codex-rs/deny.toml`, documenting the usage constraints and removal criteria:

- `RUSTSEC-2026-0391`: borrowed contexts are not reused across streams; remove after upgrading to `zstd >=0.14.3` on all paths.
- `RUSTSEC-2026-0398`: the affected seekable feature is disabled; remove after upgrading to `zstd-safe >=8.2.0` on all paths.
- `RUSTSEC-2026-0403`: callers use read decoders or initialized output buffers and discard output on error; remove after upgrading to `zstd-safe >=8.2.0` on all paths.
- `RUSTSEC-2026-0410`: the allocator bug affects `wasm32`, while Codex ships native binaries; remove when the lockfile uses `zstd-sys >=2.1.2`.

GitOrigin-RevId: 556e53be961b01191590e2ca4e9f08dd9f017eac

2026-10-26 21:07:09 +00:00

..

audit.toml

Record reviewed exceptions for zstd security advisories (#57255)

2026-10-26 21:07:09 +00:00

config.toml

Add a Windows proxy authentication tunnel helper (#55994)

2026-10-21 21:50:55 +00:00