Skip to content

Commit 2282357

Browse files
committed
rust: suppress cargo audit for RUSTSEC-2026-0097
Per https://rustsec.org/advisories/RUSTSEC-2026-0097, this issue it not applicable unless the "log" and "thread_rng" features of rand are enabled. "log" is not enabled in our dependency chain. Updating to the fixed version of rand requires an MSRV of 1.85. Ticket: OISF#8467
1 parent 8d254f5 commit 2282357

1 file changed

Lines changed: 2 additions & 0 deletions

File tree

.github/workflows/rust-checks.yml

Lines changed: 2 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -89,6 +89,8 @@ jobs:
8989
IGNORES+=(--ignore RUSTSEC-2019-0036)
9090
# time crate update
9191
IGNORES+=(--ignore RUSTSEC-2026-0009)
92+
# rand, vla tls-parser
93+
IGNORES+=(--ignore RUSTSEC-2026-0097)
9294
9395
cargo audit -D warnings "${IGNORES[@]}"
9496

0 commit comments

Comments
 (0)