-
-
Notifications
You must be signed in to change notification settings - Fork 0
fix: rustsec-2023-0089 atomic polyfill is unmaintained #130
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
fix: rustsec-2023-0089 atomic polyfill is unmaintained #130
Conversation
- Add GitHub CI monitoring commands (gh run list, gh run view) to quick reference section - Document rustdoc bracket escaping for /proc/[pid]/stat paths - Add .claude.local.md and .claude/*.local.md to gitignore for personal Claude configuration Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>
Add atomic-polyfill unmaintained advisory to deny.toml ignore list. This is a transitive dependency via postcard → heapless, not a security vulnerability. Upstream has merged heapless 0.9 support but no release yet. Tracking: jamesmunns/postcard#223 Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>
Summary by CodeRabbitRelease Notes
✏️ Tip: You can customize this high-level summary in your review settings. WalkthroughAdds local Claude configuration ignore patterns to .gitignore. Updates AGENTS.md documentation with GitHub CI monitoring commands and Rustdoc bracket escaping guidance. Expands deny.toml with RUSTSEC-2023-0089 security advisory ignore entry. Changes
Estimated code review effort🎯 1 (Trivial) | ⏱️ ~5 minutes Poem
🚥 Pre-merge checks | ✅ 3✅ Passed checks (3 passed)
✏️ Tip: You can configure your own custom pre-merge checks in the settings. ✨ Finishing touches🧪 Generate unit tests (beta)
Comment |
Codecov Report✅ All modified and coverable lines are covered by tests. 📢 Thoughts on this report? Let us know! |
This pull request updates the documentation and dependency advisory configuration to improve developer workflow and clarify project standards. The most important changes include adding GitHub CI monitoring commands to the developer guide, clarifying Rust documentation conventions, and updating the security advisory ignore list for dependencies.
Developer workflow improvements:
AGENTS.mddescribing GitHub CI monitoring commands, including how to list recent runs and view logs for failed jobs.Documentation standards:
AGENTS.mdthat brackets in Rustdoc paths (such as/proc/[pid]/stat) should be escaped to avoid broken link warnings.Dependency advisory management:
deny.tomlto ignore theRUSTSEC-2023-0089advisory foratomic-polyfill, explaining that it is only pulled in by an indirect dependency and is not a security vulnerability. Included a TODO to remove the ignore when the dependency is updated.