swastik-oai 02ca1e0d99 Ignore RUSTSEC-2026-0418 for the Windows-only libz-sys dependency (#58110) ...

## Why

`libz-sys` 1.1.29 is pulled in through `curl-sys`/`curl` in `codex-http-client` only on Windows, where it skips the affected probe. The lockfile also pins `cc` to 1.2.55, below 1.6.0.

## What changed

Add `RUSTSEC-2026-0418` to the `cargo-audit` and `cargo-deny` ignore lists with the rationale. Remove the exception when `libz-sys` reaches 1.1.31 or later, and reassess if it is used on Unix with `cc` 1.6.0 or later.

GitOrigin-RevId: 0e2ffb4686d9c77dfd7f1312aef6a093a803f832

2026-10-29 15:55:50 +00:00

..

audit.toml

Ignore RUSTSEC-2026-0418 for the Windows-only libz-sys dependency (#58110)

2026-10-29 15:55:50 +00:00

config.toml

Add a Windows proxy authentication tunnel helper (#55994)

2026-10-21 21:50:55 +00:00