From 57a2330ca25b209a12c9da477e7be5e2d7a0e00f Mon Sep 17 00:00:00 2001 From: Thomas Eizinger Date: Wed, 22 Oct 2025 11:55:14 +1100 Subject: [PATCH] chore: fix `cargo deny` errors (#10676) The crates from https://github.com/open-i18n/rust-unic are unmaintained but they are still being pulled in via `tauri`. Unfortunately, we have to wait for an MSRV bump from `tauri` before the update of `urlpattern` can be completed. Until then, we need to ignore these advisories to keep our CI passing. Related: https://github.com/tauri-apps/tauri/pull/14195 --- rust/Cargo.lock | 4 ++-- rust/deny.toml | 7 +++++++ 2 files changed, 9 insertions(+), 2 deletions(-) diff --git a/rust/Cargo.lock b/rust/Cargo.lock index 7de78ec17..3c48f2358 100644 --- a/rust/Cargo.lock +++ b/rust/Cargo.lock @@ -8248,9 +8248,9 @@ dependencies = [ [[package]] name = "tower-http" -version = "0.6.5" +version = "0.6.6" source = "registry+https://github.com/rust-lang/crates.io-index" -checksum = "5cc2d9e086a412a451384326f521c8123a99a466b329941a9403696bff9b0da2" +checksum = "adc82fd73de2a9722ac5da747f12383d2bfdb93591ee6c58486e0097890f05f2" dependencies = [ "bitflags 2.9.1", "bytes", diff --git a/rust/deny.toml b/rust/deny.toml index 2768ddff0..37bacac80 100644 --- a/rust/deny.toml +++ b/rust/deny.toml @@ -93,6 +93,13 @@ ignore = [ "RUSTSEC-2025-0057", # `fxhash` is unmaintained, used by transitive dependencies. See #10297. + # `rust-unic` crates are unmaintained but still pulled in via tauri. + "RUSTSEC-2025-0075", + "RUSTSEC-2025-0080", + "RUSTSEC-2025-0081", + "RUSTSEC-2025-0098", + "RUSTSEC-2025-0100", + #"RUSTSEC-0000-0000", #{ id = "RUSTSEC-0000-0000", reason = "you can specify a reason the advisory is ignored" }, #"a-crate-that-is-yanked@0.1.1", # you can also ignore yanked crate versions if you wish