swastik-oai d2f7632472 Ignore Hickory DNSSEC advisories while DNSSEC is disabled (#61156) ...

## Why

The Hickory 0.25.2 dependencies used by `codex-network-proxy` through `rama-dns` and `rama-tcp` have five DNSSEC-only advisories. DNSSEC is disabled even with all workspace features enabled.

## What changed

Add matching exceptions to `codex-rs/.cargo/audit.toml` and `codex-rs/deny.toml` for `RUSTSEC-2026-0504`, `RUSTSEC-2026-0505`, `RUSTSEC-2026-0511`, `RUSTSEC-2026-0512`, and `RUSTSEC-2026-0514`.

Document that the exceptions must be reassessed before enabling DNSSEC and removed when the Rust/Rama upgrade brings Hickory to version 0.26.2 or later.

GitOrigin-RevId: 506585d84746076f68ec9a0033603533c52f0f7b

2026-11-12 17:31:24 +00:00

..

audit.toml

Ignore Hickory DNSSEC advisories while DNSSEC is disabled (#61156)

2026-11-12 17:31:24 +00:00

config.toml

Reduce jemalloc arena count for Linux musl builds (#58399)

2026-10-30 18:02:30 +00:00